This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/v74Y7KYpwYz05heVg0aduS2kY0Q.roa File: v74Y7KYpwYz05heVg0aduS2kY0Q.roa (raw, json) Hash identifier: YauqSiqIffDHfwB5032OJhqMsKx1df43pAV+9FuSN1c= Subject key identifier: BF:BE:18:EC:A6:29:C1:8C:F4:E6:17:95:83:46:9D:B9:2D:A4:63:44 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2F19B042AC9F1F62F0F5A91C68599 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/v74Y7KYpwYz05heVg0aduS2kY0Q.roa Signing time: Thu 01 Jan 2026 08:18:23 +0000 ROA not before: Thu 01 Jan 2026 08:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34577 IP address blocks: 87.120.0.0/22 maxlen: 32 87.120.12.0/24 maxlen: 32 87.120.14.0/23 maxlen: 32 87.120.44.0/23 maxlen: 32 87.120.45.119/32 maxlen: 32 87.120.178.0/23 maxlen: 32 87.120.180.0/22 maxlen: 32 87.120.184.0/23 maxlen: 32 87.120.190.0/24 maxlen: 32 87.121.48.0/22 maxlen: 32 93.123.40.0/22 maxlen: 32 93.123.40.0/24 maxlen: 32 93.123.41.0/24 maxlen: 32 93.123.42.0/24 maxlen: 32 93.123.43.0/24 maxlen: 32 93.123.44.0/24 maxlen: 32 93.123.66.0/24 maxlen: 32 93.123.67.0/24 maxlen: 32 93.123.96.0/22 maxlen: 32 94.156.123.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f1:9b:04:2a:c9:f1:f6:2f:0f:5a:91:c6:85:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfbe18eca629c18cf4e6179583469db92da46344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5e:e4:3e:db:82:13:c7:f7:26:e6:12:b5:71: ef:86:b8:fe:8c:a1:53:af:7b:f6:ee:34:f2:8f:06: 8f:36:4a:a2:89:22:c0:63:7b:2b:21:94:d4:76:6f: d4:ff:5a:26:be:62:90:a1:73:2d:7d:96:44:54:c1: d4:cb:12:a4:e1:f4:5c:e7:a3:40:18:47:55:bd:88: de:f0:57:2d:cc:2a:6a:9b:86:ce:36:ba:ce:ba:7f: 1e:0f:a6:d9:36:d6:1d:65:aa:a6:5d:bc:f0:01:05: 57:b0:ef:80:40:59:a0:08:ee:f5:74:2d:c2:cb:8f: 16:a4:9c:f3:99:7b:36:04:3c:a9:0f:fe:43:b6:30: 51:32:e5:bd:59:26:1d:28:41:b0:af:00:12:12:cb: a4:53:e6:68:67:71:08:92:d3:fd:68:53:79:6b:b2: 2a:5f:a8:3d:68:9f:a9:78:86:79:8b:53:a4:0d:3f: 4c:8a:b4:b0:9b:ca:ea:f0:53:ba:a5:42:8a:6f:d4: a1:1c:a5:83:2f:b3:f3:12:2b:d9:ea:37:df:a3:fc: 2b:34:fa:b1:4f:3b:40:72:5e:0b:ba:2e:1c:4b:d9: 5b:31:71:3e:f9:fa:c8:b4:f1:5a:93:69:85:2d:8d: a7:7c:b9:5c:db:4a:03:98:f2:1c:59:1d:40:3e:de: fd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BE:18:EC:A6:29:C1:8C:F4:E6:17:95:83:46:9D:B9:2D:A4:63:44 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/v74Y7KYpwYz05heVg0aduS2kY0Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.0.0/22 87.120.12.0/24 87.120.14.0/23 87.120.44.0/23 87.120.178.0-87.120.185.255 87.120.190.0/24 87.121.48.0/22 93.123.40.0-93.123.44.255 93.123.66.0/23 93.123.96.0/22 94.156.123.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:26:cd:37:bc:78:6e:54:e9:fb:da:bd:2c:85:a1:8f:94:f1: 09:0f:0c:29:52:55:6e:d9:32:b9:af:65:3d:70:f6:32:c8:40: 6e:e9:01:69:03:df:fe:d9:d9:65:09:1a:72:48:06:60:a8:94: b9:43:04:c2:48:71:4b:d6:4a:3a:3f:f7:a8:14:1d:49:16:c2: 77:87:fd:fa:6d:e7:83:cf:8d:5b:c9:71:94:dd:33:a3:c1:ce: 31:12:85:e0:8b:01:c2:bc:4e:0c:29:9b:87:84:a5:eb:55:19: 05:8c:8e:2b:a3:d9:58:ce:5c:d1:d6:69:0f:fc:db:99:28:3a: e6:89:ac:19:7b:69:15:4c:c5:70:f1:5f:f6:6f:fc:cb:e3:47: 13:61:f5:b4:63:a4:69:df:c5:0e:9b:2d:ef:cd:64:57:b1:60: 60:d2:f5:85:03:1f:4c:a8:fe:c5:62:4b:b2:a3:60:8d:e5:da: 72:a8:f8:31:db:a9:81:f4:ee:83:81:2e:6b:44:98:48:22:4c: 2f:72:ec:bd:1d:7c:dd:5e:fb:94:36:bb:aa:62:b4:07:c2:50: 31:de:65:21:7e:f1:e9:11:cb:08:24:52:ac:65:f0:c5:6f:1b: 0d:b0:1f:ba:60:81:74:8e:a7:73:8c:31:69:b5:a7:a9:3d:d9: 58:59:29:08 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgISAZt4ovGbBCrJ8fYvD1qRxoWZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmJlMThlY2E2MjljMThjZjRlNjE3OTU4MzQ2OWRiOTJkYTQ2MzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz17kPtuCE8f3JuYStXHvhrj+jKFT r3v27jTyjwaPNkqiiSLAY3srIZTUdm/U/1omvmKQoXMtfZZEVMHUyxKk4fRc56NA GEdVvYje8FctzCpqm4bONrrOun8eD6bZNtYdZaqmXbzwAQVXsO+AQFmgCO71dC3C y48WpJzzmXs2BDypD/5DtjBRMuW9WSYdKEGwrwASEsukU+ZoZ3EIktP9aFN5a7Iq X6g9aJ+peIZ5i1OkDT9MirSwm8rq8FO6pUKKb9ShHKWDL7PzEivZ6jffo/wrNPqx TztAcl4Lui4cS9lbMXE++frItPFak2mFLY2nfLlc20oDmPIcWR1APt79swIDAQAB o4ICVTCCAlEwHQYDVR0OBBYEFL++GOymKcGM9OYXlYNGnbktpGNEMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvdjc0WTdLWXB3WXowNWhlVmcwYWR1UzJrWTBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSAwQCV3gAAwQA V3gMAwQBV3gOAwQBV3gsMAwDBAFXeLIDBAFXeLgDBABXeL4DBAJXeTAwDAMEA117 KAMEAF17LAMEAV17QgMEAl17YAMEAF6cezANBgkqhkiG9w0BAQsFAAOCAQEAHybN N7x4blTp+9q9LIWhj5TxCQ8MKVJVbtkyua9lPXD2MshAbukBaQPf/tnZZQkackgG YKiUuUMEwkhxS9ZKOj/3qBQdSRbCd4f9+m3ng8+NW8lxlN0zo8HOMRKF4IsBwrxO DCmbh4Sl61UZBYyOK6PZWM5c0dZpD/zbmSg65omsGXtpFUzFcPFf9m/8y+NHE2H1 tGOkad/FDpst781kV7FgYNL1hQMfTKj+xWJLsqNgjeXacqj4MdupgfTug4Eua0SY SCJML3LsvR183V77lDa7qmK0B8JQMd5lIX7x6RHLCCRSrGXwxW8bDbAfumCBdI6n c4wxabWnqT3ZWFkpCA== -----END CERTIFICATE-----Generated at Fri Jan 2 12:08:24 2026 by rpki-client