This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qqNNielvK-wdTSDyGrwdY3kN0mM.roa File: qqNNielvK-wdTSDyGrwdY3kN0mM.roa (raw, json) Hash identifier: tK3l8YBllzU3HikbAhmLAbNGegYdtQeCD3gFSCiEnAA= Subject key identifier: AA:A3:4D:89:E9:6F:2B:EC:1D:4D:20:F2:1A:BC:1D:63:79:0D:D2:63 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A359E9215674D0E6065E587DC147E6 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qqNNielvK-wdTSDyGrwdY3kN0mM.roa Signing time: Thu 01 Jan 2026 08:18:49 +0000 ROA not before: Thu 01 Jan 2026 08:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 263065 IP address blocks: 87.120.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:59:e9:21:56:74:d0:e6:06:5e:58:7d:c1:47:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aaa34d89e96f2bec1d4d20f21abc1d63790dd263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4e:8a:0d:32:eb:9b:ab:92:32:5d:11:b1:96: b6:4b:c7:73:e2:1b:b2:7b:96:30:5d:4d:81:f4:3e: 2e:de:5a:40:03:4e:2e:80:40:6b:3d:63:82:ec:ec: 6e:78:cc:e4:23:1f:2b:78:3a:dc:05:16:86:46:e9: f0:87:ef:a6:a4:2a:3d:2d:1f:e6:f3:1a:8b:2e:b1: 23:41:96:25:2d:40:ca:50:d9:ca:1c:71:9c:69:b7: 4b:f5:8f:06:49:35:d4:a3:75:66:cd:ef:08:94:6e: f3:80:79:b6:d2:fc:b2:48:db:b4:4d:c4:6b:d0:0d: f6:eb:ac:f9:56:a0:f4:7f:cf:e2:62:ae:28:33:07: 2c:f2:85:43:c1:c7:e9:d0:50:28:44:ba:8b:39:bd: dc:41:da:1c:aa:09:06:ea:88:72:66:e6:78:ca:20: 95:a6:39:46:02:18:a8:2d:f6:7d:46:ee:58:67:36: ca:89:32:d0:e3:46:86:77:d5:0c:e3:f2:f8:fc:53: 1b:ee:d2:76:27:a8:d4:ae:62:d5:6a:0f:a2:6b:9a: 49:39:dd:e8:83:4b:69:18:26:db:98:6c:55:c7:1b: 8b:7f:05:a2:16:4c:28:27:d6:0f:4a:2b:67:bb:a7: a1:51:43:ac:1b:2b:fd:0d:33:ae:5e:91:8b:b3:eb: d9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A3:4D:89:E9:6F:2B:EC:1D:4D:20:F2:1A:BC:1D:63:79:0D:D2:63 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qqNNielvK-wdTSDyGrwdY3kN0mM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.130.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:e7:12:8c:7b:fa:84:ec:24:db:36:2d:05:ac:93:70:75:bd: b1:34:bf:b8:8b:4f:48:eb:19:82:0b:46:fd:79:36:66:0b:b2: d3:71:78:a6:ea:68:98:70:d2:4d:08:25:0e:88:81:ce:46:e2: 3c:28:df:c7:1e:ea:2f:33:16:09:f8:2b:c8:90:85:f6:46:bc: d5:6b:c5:47:be:f7:83:b3:86:45:61:d7:26:45:c9:21:59:03: ae:b6:5d:e7:f4:a0:89:99:00:6e:ae:64:c4:91:73:44:1c:4b: d1:09:48:9f:53:5c:f9:cd:f2:43:2d:cb:f7:75:0b:49:38:8d: ee:7a:15:d8:3d:15:98:fe:68:c8:a5:73:f5:4d:43:37:36:cf: 14:13:6f:3a:89:2b:b4:53:a9:1a:39:9b:dc:e3:3a:5b:49:7f: be:f3:fb:e9:c4:b8:10:2d:7a:42:79:07:43:3a:5e:26:bb:d4: 6e:29:83:5e:61:2d:a5:a7:6c:75:8f:cf:ba:d6:3b:cc:4c:d3: fa:4b:ea:9b:93:04:67:5e:d2:14:60:9e:9b:16:b0:d5:dd:00: ef:af:79:36:7d:84:5d:d1:c7:8e:41:0c:11:77:1c:41:5d:21: 33:49:77:80:99:af:69:bd:25:e0:12:f0:67:79:ba:60:0d:db: a0:cf:91:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o1npIVZ00OYGXlh9wUfmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWEzNGQ4OWU5NmYyYmVjMWQ0ZDIwZjIxYWJjMWQ2Mzc5MGRkMjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU6KDTLrm6uSMl0RsZa2S8dz4huy e5YwXU2B9D4u3lpAA04ugEBrPWOC7OxueMzkIx8reDrcBRaGRunwh++mpCo9LR/m 8xqLLrEjQZYlLUDKUNnKHHGcabdL9Y8GSTXUo3Vmze8IlG7zgHm20vyySNu0TcRr 0A3266z5VqD0f8/iYq4oMwcs8oVDwcfp0FAoRLqLOb3cQdocqgkG6ohyZuZ4yiCV pjlGAhioLfZ9Ru5YZzbKiTLQ40aGd9UM4/L4/FMb7tJ2J6jUrmLVag+ia5pJOd3o g0tpGCbbmGxVxxuLfwWiFkwoJ9YPSitnu6ehUUOsGyv9DTOuXpGLs+vZkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKqjTYnpbyvsHU0g8hq8HWN5DdJjMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvcXFOTmllbHZLLXdkVFNEeUdyd2RZM2tOMG1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3iCMA0G CSqGSIb3DQEBCwUAA4IBAQBd5xKMe/qE7CTbNi0FrJNwdb2xNL+4i09I6xmCC0b9 eTZmC7LTcXim6miYcNJNCCUOiIHORuI8KN/HHuovMxYJ+CvIkIX2RrzVa8VHvveD s4ZFYdcmRckhWQOutl3n9KCJmQBurmTEkXNEHEvRCUifU1z5zfJDLcv3dQtJOI3u ehXYPRWY/mjIpXP1TUM3Ns8UE286iSu0U6kaOZvc4zpbSX++8/vpxLgQLXpCeQdD Ol4mu9RuKYNeYS2lp2x1j8+61jvMTNP6S+qbkwRnXtIUYJ6bFrDV3QDvr3k2fYRd 0ceOQQwRdxxBXSEzSXeAma9pvSXgEvBnebpgDdugz5H4 -----END CERTIFICATE-----Generated at Fri Jan 2 12:09:37 2026 by rpki-client