This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vNuwisqMaxgm1rH71NChiMwyFs8.roa File: vNuwisqMaxgm1rH71NChiMwyFs8.roa (raw, json) Hash identifier: ZJLE5yS0QX5TCzZutLE6dB1HwqMwGQqp5JQBwxpfhBY= Subject key identifier: BC:DB:B0:8A:CA:8C:6B:18:26:D6:B1:FB:D4:D0:A1:88:CC:32:16:CF Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2E7D8761B521D1ACD3938D455E592 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vNuwisqMaxgm1rH71NChiMwyFs8.roa Signing time: Thu 01 Jan 2026 08:18:20 +0000 ROA not before: Thu 01 Jan 2026 08:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24875 IP address blocks: 87.121.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:e7:d8:76:1b:52:1d:1a:cd:39:38:d4:55:e5:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bcdbb08aca8c6b1826d6b1fbd4d0a188cc3216cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:25:6a:18:3f:ef:d2:09:62:b3:e6:af:c2:d3: e9:11:d0:45:f2:5d:b3:56:75:22:f0:4f:70:90:69: e5:40:f5:8a:1f:20:03:02:5e:32:89:01:bd:a2:98: be:8d:82:79:ad:6c:b1:5d:8c:46:bf:4f:f3:54:72: 84:05:3e:e3:b1:ef:d2:40:93:f9:ca:c5:ca:52:14: 25:cc:8f:a4:df:dc:f3:fb:0e:d4:55:09:d8:35:1e: 6a:72:59:a1:26:6b:46:e4:0b:2d:f6:61:98:ef:e9: 4a:e1:8f:86:29:49:a1:1d:5e:a3:9c:43:d4:0a:0e: 3e:d1:04:34:78:87:2c:a0:be:6a:43:80:8e:d1:d7: 4b:38:c4:a0:65:72:cd:04:21:56:21:2b:99:40:1e: 7a:62:a1:c7:94:d6:fe:31:f0:04:50:33:35:a3:c9: 7f:fb:22:b4:31:2a:51:5e:c8:22:31:61:44:b9:16: a8:30:d5:d8:2c:ed:23:a0:0b:03:52:f3:4a:fd:56: 5d:b1:13:64:d4:d8:b4:4d:ca:c5:29:bd:2e:a6:ef: da:3a:67:85:25:05:9f:2d:54:53:03:e5:c5:60:f2: dd:0e:42:2f:bc:e3:8a:27:f9:b1:69:18:67:89:4e: d6:4d:7a:4b:95:47:38:e7:66:44:ec:48:7e:b3:6e: 2c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DB:B0:8A:CA:8C:6B:18:26:D6:B1:FB:D4:D0:A1:88:CC:32:16:CF X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vNuwisqMaxgm1rH71NChiMwyFs8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.121.220.0/24 Signature Algorithm: sha256WithRSAEncryption 25:2f:98:11:b1:d0:50:6d:3b:0b:8c:8f:4d:16:c4:a9:83:ab: e5:24:16:1b:0f:49:5d:1f:19:b6:e3:7e:11:4a:c9:9d:cc:54: 2a:e0:3a:39:76:c8:35:6f:cc:a6:da:85:7b:97:bf:b2:a6:0c: 61:42:a1:33:31:f4:b5:e9:b5:a0:86:40:bf:03:42:55:48:e8: f9:c1:17:9c:bf:a9:5e:76:ed:f0:13:1d:59:55:d2:47:db:83: ec:13:9f:6a:71:b8:19:c1:25:1c:92:82:1e:53:d8:a2:a2:f6: ac:ec:bb:7a:96:3e:58:5f:d5:77:44:6f:eb:a5:07:de:0d:3b: 50:c0:9c:9a:fa:fe:d7:88:a6:c8:f7:60:32:fb:b3:75:20:18: 65:83:50:6b:3d:c2:67:e5:54:90:4a:88:c5:f1:0b:f7:de:77: 83:e5:24:41:bc:ae:a3:91:5c:77:b5:af:bd:18:3e:c9:a0:d2: b8:0a:d7:7a:0e:c5:5f:41:e5:59:00:d7:7c:05:8a:2a:3e:e8: e1:04:49:42:20:e3:24:e8:d3:c4:f4:1b:9f:8c:3a:c8:c0:7c: 2e:94:3c:8a:61:7d:79:79:fb:6b:04:6f:33:0f:44:05:f1:aa: d1:5e:5d:48:fd:1b:15:51:96:6f:6c:bb:68:5c:14:f4:da:84: ef:16:f3:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oufYdhtSHRrNOTjUVeWSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2RiYjA4YWNhOGM2YjE4MjZkNmIxZmJkNGQwYTE4OGNjMzIxNmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiVqGD/v0glis+avwtPpEdBF8l2z VnUi8E9wkGnlQPWKHyADAl4yiQG9opi+jYJ5rWyxXYxGv0/zVHKEBT7jse/SQJP5 ysXKUhQlzI+k39zz+w7UVQnYNR5qclmhJmtG5Ast9mGY7+lK4Y+GKUmhHV6jnEPU Cg4+0QQ0eIcsoL5qQ4CO0ddLOMSgZXLNBCFWISuZQB56YqHHlNb+MfAEUDM1o8l/ +yK0MSpRXsgiMWFEuRaoMNXYLO0joAsDUvNK/VZdsRNk1Ni0TcrFKb0upu/aOmeF JQWfLVRTA+XFYPLdDkIvvOOKJ/mxaRhniU7WTXpLlUc452ZE7Eh+s24sXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLzbsIrKjGsYJtax+9TQoYjMMhbPMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvdk51d2lzcU1heGdtMXJINzFOQ2hpTXd5RnM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3ncMA0G CSqGSIb3DQEBCwUAA4IBAQAlL5gRsdBQbTsLjI9NFsSpg6vlJBYbD0ldHxm2434R SsmdzFQq4Do5dsg1b8ym2oV7l7+ypgxhQqEzMfS16bWghkC/A0JVSOj5wRecv6le du3wEx1ZVdJH24PsE59qcbgZwSUckoIeU9iiovas7Lt6lj5YX9V3RG/rpQfeDTtQ wJya+v7XiKbI92Ay+7N1IBhlg1BrPcJn5VSQSojF8Qv33neD5SRBvK6jkVx3ta+9 GD7JoNK4Ctd6DsVfQeVZANd8BYoqPujhBElCIOMk6NPE9BufjDrIwHwulDyKYX15 eftrBG8zD0QF8arRXl1I/RsVUZZvbLtoXBT02oTvFvM5 -----END CERTIFICATE-----Generated at Fri Jan 2 12:05:20 2026 by rpki-client