This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tOnLHVwHp2eXyGqEGTsi431u990.roa File: tOnLHVwHp2eXyGqEGTsi431u990.roa (raw, json) Hash identifier: KqirtVlCSpGLo5mUThT4YsIbo12+I0LLsnK5WITMoeE= Subject key identifier: B4:E9:CB:1D:5C:07:A7:67:97:C8:6A:84:19:3B:22:E3:7D:6E:F7:DD Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A3211B4EC4C3B622E498815C6B3849 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tOnLHVwHp2eXyGqEGTsi431u990.roa Signing time: Thu 01 Jan 2026 08:18:35 +0000 ROA not before: Thu 01 Jan 2026 08:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199239 IP address blocks: 185.226.173.0/24 maxlen: 24 185.226.175.0/24 maxlen: 24 193.35.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:21:1b:4e:c4:c3:b6:22:e4:98:81:5c:6b:38:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4e9cb1d5c07a76797c86a84193b22e37d6ef7dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:75:9a:8e:0e:e1:5a:6e:a9:57:8c:fd:c6:ad: 58:70:bd:09:ac:f4:13:f8:63:57:37:66:de:1b:ea: 46:27:41:cd:1b:b3:40:de:ac:b3:cb:99:13:01:16: 2e:57:5c:e9:ef:ea:d2:e0:6b:5f:c3:dc:87:44:38: 16:98:3c:56:5b:d8:48:32:0c:fb:18:78:9e:9b:a3: 1a:0a:3e:17:a4:6b:6e:23:09:c1:6c:cd:dd:b2:73: 09:0b:11:e4:64:ff:74:34:99:f8:4d:31:68:dc:00: 21:be:8f:60:f0:f6:05:0b:74:14:9d:38:47:b2:ca: c5:b9:87:7b:4d:c0:5c:8b:2c:b2:6f:c7:d7:94:ee: 76:6c:2a:0b:60:26:e6:a5:c7:c7:7e:98:f6:62:72: bd:e6:b3:ef:1c:19:f3:b4:78:c1:9a:a5:80:4e:ea: 2a:93:1e:f3:14:fb:65:44:07:b1:62:59:38:da:bf: 13:3a:8c:dd:c9:8b:3b:2e:c0:d6:09:7c:35:75:39: 32:25:56:6f:88:9a:c9:ca:59:45:fc:f1:cd:e8:32: 40:5e:b5:8b:bb:2b:74:8a:9a:06:7d:a8:22:53:b5: 06:7e:dc:34:90:ef:92:b6:48:2c:cd:73:6f:59:39: 81:52:90:58:d1:50:e7:01:79:5b:16:de:12:4d:1b: 3c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E9:CB:1D:5C:07:A7:67:97:C8:6A:84:19:3B:22:E3:7D:6E:F7:DD X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tOnLHVwHp2eXyGqEGTsi431u990.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.226.173.0/24 185.226.175.0/24 193.35.18.0/24 Signature Algorithm: sha256WithRSAEncryption 52:c8:f9:6f:a9:82:28:88:2b:e1:0b:33:22:6b:b7:18:45:f7: e6:16:8e:60:a1:a7:53:4e:77:ea:ea:2a:ed:21:0e:c3:8a:b7: c0:47:53:ab:79:79:66:65:ae:cd:3a:b0:68:f6:7b:02:bf:8f: ad:df:5c:67:8b:b7:91:bf:59:18:2a:08:65:52:24:00:fb:c3: 4d:dc:a7:a6:bc:5d:36:c4:d7:d4:51:ff:6e:a2:ef:5a:ee:02: 61:5f:d3:fa:2f:3a:c0:cf:bd:a5:68:aa:7e:4e:12:81:69:bb: 52:ea:9e:ff:53:23:69:f8:91:b8:bb:c1:03:56:b5:44:73:25: 52:9d:d3:cb:70:aa:13:da:bc:b4:5a:6b:16:2c:90:33:47:cb: 4f:c7:81:ac:b3:d7:10:c8:70:3a:0c:00:0a:38:fc:31:45:df: f1:78:52:2b:9f:4c:0c:53:e3:7a:77:cf:dc:28:3e:dc:45:4c: b6:23:6b:13:6a:12:52:05:ae:26:70:e5:ba:4e:6f:3a:57:b0: 9e:51:16:39:c6:c9:72:ea:f8:da:e2:82:09:3e:70:27:1b:c8: b4:22:95:28:16:2c:b7:81:15:ec:8f:20:dd:40:e9:bb:fd:de: 38:71:70:e8:f8:39:b7:be:82:6a:a8:35:99:66:4f:5a:e3:6c: 8c:dc:c6:c3 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4oyEbTsTDtiLkmIFcazhJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGU5Y2IxZDVjMDdhNzY3OTdjODZhODQxOTNiMjJlMzdkNmVmN2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3Wajg7hWm6pV4z9xq1YcL0JrPQT +GNXN2beG+pGJ0HNG7NA3qyzy5kTARYuV1zp7+rS4Gtfw9yHRDgWmDxWW9hIMgz7 GHiem6MaCj4XpGtuIwnBbM3dsnMJCxHkZP90NJn4TTFo3AAhvo9g8PYFC3QUnThH ssrFuYd7TcBciyyyb8fXlO52bCoLYCbmpcfHfpj2YnK95rPvHBnztHjBmqWATuoq kx7zFPtlRAexYlk42r8TOozdyYs7LsDWCXw1dTkyJVZviJrJyllF/PHN6DJAXrWL uyt0ipoGfagiU7UGftw0kO+StkgszXNvWTmBUpBY0VDnAXlbFt4STRs8EwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLTpyx1cB6dnl8hqhBk7IuN9bvfdMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvdE9uTEhWd0hwMmVYeUdxRUdUc2k0MzF1OTkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAueKtAwQA ueKvAwQAwSMSMA0GCSqGSIb3DQEBCwUAA4IBAQBSyPlvqYIoiCvhCzMia7cYRffm Fo5goadTTnfq6irtIQ7DirfAR1OreXlmZa7NOrBo9nsCv4+t31xni7eRv1kYKghl UiQA+8NN3KemvF02xNfUUf9uou9a7gJhX9P6LzrAz72laKp+ThKBabtS6p7/UyNp +JG4u8EDVrVEcyVSndPLcKoT2ry0WmsWLJAzR8tPx4Gss9cQyHA6DAAKOPwxRd/x eFIrn0wMU+N6d8/cKD7cRUy2I2sTahJSBa4mcOW6Tm86V7CeURY5xsly6vja4oIJ PnAnG8i0IpUoFiy3gRXsjyDdQOm7/d44cXDo+Dm3voJqqDWZZk9a42yM3MbD -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:50 2026 by rpki-client