This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tO3QCfXzWSm-hljpChuR5UAjRbg.roa File: tO3QCfXzWSm-hljpChuR5UAjRbg.roa (raw, json) Hash identifier: 6zpqS3zmEn1fpvb5REWlziaSSEVNKBXr+RVfeh7yaM0= Subject key identifier: B4:ED:D0:09:F5:F3:59:29:BE:86:58:E9:0A:1B:91:E5:40:23:45:B8 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A327764F5B16CD633882E67D0C9A76 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tO3QCfXzWSm-hljpChuR5UAjRbg.roa Signing time: Thu 01 Jan 2026 08:18:36 +0000 ROA not before: Thu 01 Jan 2026 08:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200590 IP address blocks: 87.121.124.0/24 maxlen: 24 87.121.125.0/24 maxlen: 24 94.156.105.0/24 maxlen: 24 185.222.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:27:76:4f:5b:16:cd:63:38:82:e6:7d:0c:9a:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4edd009f5f35929be8658e90a1b91e5402345b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f5:c3:4d:7f:db:75:a6:bb:89:f7:9c:02:9c: a2:7b:fe:84:24:d9:42:57:63:78:5a:89:c5:f2:e6: 47:82:b8:98:88:48:ea:b1:0a:b6:03:63:b8:a0:e1: 5e:8e:47:28:19:9c:d8:81:1b:a1:0a:72:f4:26:a1: 43:0d:67:44:34:c4:0a:08:5e:ca:12:e0:80:78:12: 0d:1f:21:ca:b1:a2:60:e5:29:74:e8:f2:5b:db:1f: e8:8f:e0:42:62:9f:a5:75:57:af:79:a3:48:b8:bd: 32:d5:d7:ee:49:08:bf:64:56:21:61:e5:38:f2:92: 3e:23:70:80:57:e6:25:b8:5c:23:2b:53:39:3b:df: 88:b2:10:18:78:31:76:ea:ed:77:48:03:20:5d:37: 4b:d4:de:b6:a9:9c:ff:5f:c5:66:fa:73:b7:a1:c7: 60:8c:2a:29:cd:19:23:c3:ea:a6:10:7f:9c:7a:8a: 4e:93:f2:b6:ce:45:bc:63:8c:c2:0b:a8:d0:62:73: 12:fb:d1:92:9c:11:8e:e7:c0:5c:a6:12:92:1a:49: f0:5e:48:fa:de:42:04:d9:a0:cc:96:9d:67:ed:88: 46:5e:c3:74:03:50:1f:85:ae:0f:ef:c2:ce:86:5f: 74:02:c2:95:be:9f:ca:2f:e8:5e:77:8b:8c:86:ba: 5d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:ED:D0:09:F5:F3:59:29:BE:86:58:E9:0A:1B:91:E5:40:23:45:B8 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tO3QCfXzWSm-hljpChuR5UAjRbg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.121.124.0/23 94.156.105.0/24 185.222.162.0/24 Signature Algorithm: sha256WithRSAEncryption a7:67:42:87:ba:a0:05:12:72:e2:5d:43:09:17:ea:10:3f:57: 5e:4f:e8:09:87:9c:5b:7d:e5:73:d4:4e:10:31:2f:ef:e3:86: 2c:fb:33:f4:af:94:15:d8:8d:9b:34:28:ae:99:aa:87:39:3e: d7:d9:4a:be:fe:98:d8:72:55:ac:2f:d7:35:a5:e5:f3:0c:3b: 57:8d:b5:d7:0a:0c:01:9d:65:35:06:5e:ea:d8:02:85:d8:1e: 7c:95:03:f5:7a:9d:82:18:e4:cd:74:e6:2c:66:d5:d4:17:5a: 0a:54:ca:8e:75:1e:a9:0a:ea:21:5b:5a:e1:7e:e9:51:fe:91: c1:6e:15:0f:1f:05:a5:04:5b:6f:6d:85:33:1c:79:54:82:ad: 17:07:13:1e:72:9a:8a:e5:f5:7f:b5:84:c0:e4:5b:5a:f7:b3: d6:1d:f9:d3:36:5d:02:38:56:8e:f5:39:0c:fb:98:de:5b:47: 8e:5a:6c:5c:ad:c4:9b:11:05:23:20:23:5c:66:3c:f0:ad:06: 46:ec:53:fc:5c:75:0b:c2:46:08:24:09:88:d7:9d:9a:29:88: c7:31:ee:74:86:69:28:00:d9:6c:31:de:3d:3f:a8:7b:5b:02: ff:25:5e:6e:51:c1:4d:6c:cc:91:fd:63:21:95:66:1c:b3:ae: 52:4c:3f:cd -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4oyd2T1sWzWM4guZ9DJp2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGVkZDAwOWY1ZjM1OTI5YmU4NjU4ZTkwYTFiOTFlNTQwMjM0NWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/XDTX/bdaa7ifecApyie/6EJNlC V2N4WonF8uZHgriYiEjqsQq2A2O4oOFejkcoGZzYgRuhCnL0JqFDDWdENMQKCF7K EuCAeBINHyHKsaJg5Sl06PJb2x/oj+BCYp+ldVeveaNIuL0y1dfuSQi/ZFYhYeU4 8pI+I3CAV+YluFwjK1M5O9+IshAYeDF26u13SAMgXTdL1N62qZz/X8Vm+nO3ocdg jCopzRkjw+qmEH+ceopOk/K2zkW8Y4zCC6jQYnMS+9GSnBGO58BcphKSGknwXkj6 3kIE2aDMlp1n7YhGXsN0A1Afha4P78LOhl90AsKVvp/KL+hed4uMhrpdWQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLTt0An181kpvoZY6QobkeVAI0W4MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvdE8zUUNmWHpXU20taGxqcENodVI1VUFqUmJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBV3l8AwQA XpxpAwQAud6iMA0GCSqGSIb3DQEBCwUAA4IBAQCnZ0KHuqAFEnLiXUMJF+oQP1de T+gJh5xbfeVz1E4QMS/v44Ys+zP0r5QV2I2bNCiumaqHOT7X2Uq+/pjYclWsL9c1 peXzDDtXjbXXCgwBnWU1Bl7q2AKF2B58lQP1ep2CGOTNdOYsZtXUF1oKVMqOdR6p CuohW1rhfulR/pHBbhUPHwWlBFtvbYUzHHlUgq0XBxMecpqK5fV/tYTA5Fta97PW HfnTNl0COFaO9TkM+5jeW0eOWmxcrcSbEQUjICNcZjzwrQZG7FP8XHULwkYIJAmI 152aKYjHMe50hmkoANlsMd49P6h7WwL/JV5uUcFNbMyR/WMhlWYcs65STD/N -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:57 2026 by rpki-client