This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uAxRSXNqXgxVgyw0NZuatRNvRlQ.roa File: uAxRSXNqXgxVgyw0NZuatRNvRlQ.roa (raw, json) Hash identifier: th3yAbLx9qiNt88u5uoJqr8RGHfDYgfwBAXT/a8k3/A= Subject key identifier: B8:0C:51:49:73:6A:5E:0C:55:83:2C:34:35:9B:9A:B5:13:6F:46:54 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A307B45BC3662F4ED986A273A16A0D Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uAxRSXNqXgxVgyw0NZuatRNvRlQ.roa Signing time: Thu 01 Jan 2026 08:18:28 +0000 ROA not before: Thu 01 Jan 2026 08:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51925 IP address blocks: 87.120.11.0/24 maxlen: 24 87.121.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:07:b4:5b:c3:66:2f:4e:d9:86:a2:73:a1:6a:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b80c5149736a5e0c55832c34359b9ab5136f4654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e9:18:a0:11:c0:ed:de:d7:d2:13:05:eb:a2: 9e:b2:0e:cd:3d:cf:2f:b6:93:a5:5c:c9:1f:fd:0d: 55:44:10:28:d8:e1:6c:b9:b4:2d:06:e8:40:6b:63: 41:85:92:9f:d1:be:b9:3d:68:0c:2a:d1:c9:90:95: a0:5e:a6:e5:47:36:d7:0e:fc:77:ff:a9:00:d5:61: 6b:60:e7:d4:4b:c9:5b:d9:8d:5b:5d:87:3e:f6:06: b4:ea:bf:51:62:2a:e1:4b:e3:68:f0:35:5f:b1:54: 15:e6:7f:9a:52:b6:e8:b5:de:ce:90:45:db:5d:3a: 3b:33:17:af:88:4e:2e:8c:94:56:78:38:02:65:f1: 2c:f0:28:dd:2f:6b:59:7a:c3:cf:55:73:c2:3e:93: 2f:a3:66:51:d1:4d:1e:1d:9a:0f:b4:bf:81:e9:d1: e0:c5:20:1d:6d:60:87:e8:44:fe:48:da:9f:d6:cb: 2d:8b:bc:3a:c6:8f:c9:1b:3c:de:6e:ad:2b:e6:51: 7f:97:1a:b2:28:96:ac:93:4e:e1:69:1e:94:ea:57: 89:05:4e:97:13:ff:59:92:30:2f:1d:98:70:1a:24: ec:f5:87:37:4a:25:83:e3:45:53:a5:f8:07:1c:34: d9:d7:bc:af:ce:c3:c6:d5:af:10:0a:71:16:be:71: 9a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:0C:51:49:73:6A:5E:0C:55:83:2C:34:35:9B:9A:B5:13:6F:46:54 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uAxRSXNqXgxVgyw0NZuatRNvRlQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.11.0/24 87.121.126.0/24 Signature Algorithm: sha256WithRSAEncryption b1:9b:5e:51:16:2b:b8:30:4a:38:a6:ec:23:59:2f:58:fc:0c: c5:73:43:d1:8a:88:2a:4f:a5:0e:ce:51:35:1f:ed:0c:dc:d0: 26:ce:3b:83:4f:0f:16:32:f9:cb:0d:ad:b8:1e:09:ed:26:6e: 15:63:df:99:6b:68:3d:50:97:41:82:6e:eb:14:c1:ae:71:ff: b5:de:40:31:16:4f:06:d1:91:6e:d0:50:e6:7b:45:26:8c:76: b5:96:14:92:78:13:60:51:e5:b9:a6:25:44:2d:de:2d:c5:bb: 90:cb:dc:f6:e1:bf:f5:44:0f:5c:0a:99:99:ad:c3:4a:a7:69: ce:e4:86:77:b3:bd:39:4c:25:05:2f:fc:bb:08:17:4c:3a:04: d1:57:c1:64:e5:ed:98:de:57:4d:aa:7a:70:64:1f:eb:a2:89: db:58:d7:b3:cc:6b:eb:cc:73:e7:0a:80:cc:bc:bd:ad:14:e4: 10:43:21:dd:75:76:7e:22:f4:38:4c:61:bf:8d:86:44:2d:92: 2d:20:0e:cf:fd:a1:27:d8:60:e8:1c:a1:60:e5:89:e2:93:01: 11:25:13:bc:83:96:9d:ac:05:ff:b0:5b:6b:38:14:a0:cd:15: bc:3d:ad:87:4a:8a:ad:4f:52:b5:9d:8c:f6:c1:0a:9b:68:e9: 4b:df:78:a0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4owe0W8NmL07ZhqJzoWoNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODBjNTE0OTczNmE1ZTBjNTU4MzJjMzQzNTliOWFiNTEzNmY0NjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnukYoBHA7d7X0hMF66Kesg7NPc8v tpOlXMkf/Q1VRBAo2OFsubQtBuhAa2NBhZKf0b65PWgMKtHJkJWgXqblRzbXDvx3 /6kA1WFrYOfUS8lb2Y1bXYc+9ga06r9RYirhS+No8DVfsVQV5n+aUrbotd7OkEXb XTo7MxeviE4ujJRWeDgCZfEs8CjdL2tZesPPVXPCPpMvo2ZR0U0eHZoPtL+B6dHg xSAdbWCH6ET+SNqf1ssti7w6xo/JGzzebq0r5lF/lxqyKJask07haR6U6leJBU6X E/9ZkjAvHZhwGiTs9Yc3SiWD40VTpfgHHDTZ17yvzsPG1a8QCnEWvnGa/wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLgMUUlzal4MVYMsNDWbmrUTb0ZUMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvdUF4UlNYTnFYZ3hWZ3l3ME5adWF0Uk52UmxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV3gLAwQA V3l+MA0GCSqGSIb3DQEBCwUAA4IBAQCxm15RFiu4MEo4puwjWS9Y/AzFc0PRiogq T6UOzlE1H+0M3NAmzjuDTw8WMvnLDa24HgntJm4VY9+Za2g9UJdBgm7rFMGucf+1 3kAxFk8G0ZFu0FDme0UmjHa1lhSSeBNgUeW5piVELd4txbuQy9z24b/1RA9cCpmZ rcNKp2nO5IZ3s705TCUFL/y7CBdMOgTRV8Fk5e2Y3ldNqnpwZB/roonbWNezzGvr zHPnCoDMvL2tFOQQQyHddXZ+IvQ4TGG/jYZELZItIA7P/aEn2GDoHKFg5YnikwER JRO8g5adrAX/sFtrOBSgzRW8Pa2HSoqtT1K1nYz2wQqbaOlL33ig -----END CERTIFICATE-----Generated at Fri Jan 2 12:09:43 2026 by rpki-client