This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vO2ZG8yfiEhYdGOm5a2DiAJTU-A.roa File: vO2ZG8yfiEhYdGOm5a2DiAJTU-A.roa (raw, json) Hash identifier: k+IE2/GtvTA4PXmhKgr7bbEGdAsvCID6oBEL1ciaXtE= Subject key identifier: BC:ED:99:1B:CC:9F:88:48:58:74:63:A6:E5:AD:83:88:02:53:53:E0 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A32A351A4F012B472516D7D0D7DD2A Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vO2ZG8yfiEhYdGOm5a2DiAJTU-A.roa Signing time: Thu 01 Jan 2026 08:18:37 +0000 ROA not before: Thu 01 Jan 2026 08:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202160 IP address blocks: 87.120.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2a:35:1a:4f:01:2b:47:25:16:d7:d0:d7:dd:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bced991bcc9f8848587463a6e5ad8388025353e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ba:d4:7b:25:c2:28:ee:c2:80:bf:5e:fc:91: 62:4e:ba:6d:ba:eb:88:81:00:28:2c:0a:66:8d:88: 62:bc:c9:2f:7d:d3:1f:4d:6e:2b:cd:39:0d:33:b0: a8:8d:9c:c3:a4:4d:b7:b1:9e:0b:de:57:87:0a:8d: a9:f0:13:e8:5a:9e:27:cc:67:32:ab:64:8c:c2:84: a7:6d:c8:ad:37:d4:88:ec:1b:cf:8f:2b:e4:2a:d5: cc:b5:7a:11:52:3f:fd:36:df:6a:03:4f:10:b2:ff: 82:48:e6:b8:5e:bb:65:29:96:fa:86:f0:33:65:a4: 79:ae:cb:b4:43:eb:ff:8d:5d:93:71:ed:d0:9b:b3: 2b:e8:4e:52:f7:0f:68:60:cd:c8:8a:e1:fe:c7:ed: 15:63:3b:c7:f2:96:80:d9:b6:06:8e:93:00:c1:2c: 44:ce:60:61:64:af:d8:24:b6:56:c7:e4:d4:9b:83: d9:7c:ec:3e:82:34:3e:4a:3b:cb:a0:5b:9e:33:45: d9:da:30:04:af:33:66:ca:b1:96:cf:f6:5c:3d:2d: ee:1b:57:6d:28:db:b8:8b:57:7e:e1:4f:5c:76:88: d0:99:8f:e8:0c:13:5f:21:85:51:44:ee:69:67:05: ab:9d:12:2e:d8:80:08:46:77:fb:dd:6c:df:e9:f6: 2d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:ED:99:1B:CC:9F:88:48:58:74:63:A6:E5:AD:83:88:02:53:53:E0 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vO2ZG8yfiEhYdGOm5a2DiAJTU-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.142.0/24 Signature Algorithm: sha256WithRSAEncryption 17:33:39:f2:64:08:b4:23:4a:32:40:ad:c8:bb:13:93:73:6f: 0d:13:e4:8d:ed:70:1b:4e:2a:33:2f:04:2c:08:5b:fe:3a:81: 5c:44:00:bb:18:15:1a:62:15:87:a3:64:08:00:1e:f2:91:f2: a3:31:7b:d3:35:ce:e1:87:59:4e:36:03:c7:56:24:6c:59:11: 39:63:5d:85:8e:7a:ed:e3:c5:39:f6:d8:53:95:4e:17:ef:a0: 93:65:9a:15:6e:09:ac:05:08:b4:fb:9d:69:50:31:bf:eb:a7: 2e:70:ee:0a:64:a4:56:30:cb:d4:dd:cc:2e:30:68:4a:27:23: 69:b0:3c:14:73:0f:88:68:c5:d4:85:9b:c8:80:da:d5:fa:c7: 7e:6d:16:fc:c8:40:b7:99:34:58:61:0f:53:92:9d:eb:11:95: c4:a3:76:aa:95:fc:13:e6:83:b2:ac:c7:9e:9f:10:ec:91:24: d4:1b:38:40:53:54:f8:c9:02:9f:b1:ae:94:84:e6:1d:7d:58: 41:80:cf:9c:28:a9:ba:f8:c9:23:36:42:9f:40:8d:70:36:78: 6a:85:85:4f:23:4c:30:c3:d6:e4:71:41:ed:ad:a6:f7:d6:9b: 8a:b0:61:08:f7:10:f4:35:e3:33:09:97:41:bb:4e:dc:f7:c6: 6d:8a:a9:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oyo1Gk8BK0clFtfQ190qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2VkOTkxYmNjOWY4ODQ4NTg3NDYzYTZlNWFkODM4ODAyNTM1M2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLrUeyXCKO7CgL9e/JFiTrptuuuI gQAoLApmjYhivMkvfdMfTW4rzTkNM7CojZzDpE23sZ4L3leHCo2p8BPoWp4nzGcy q2SMwoSnbcitN9SI7BvPjyvkKtXMtXoRUj/9Nt9qA08Qsv+CSOa4XrtlKZb6hvAz ZaR5rsu0Q+v/jV2Tce3Qm7Mr6E5S9w9oYM3IiuH+x+0VYzvH8paA2bYGjpMAwSxE zmBhZK/YJLZWx+TUm4PZfOw+gjQ+SjvLoFueM0XZ2jAErzNmyrGWz/ZcPS3uG1dt KNu4i1d+4U9cdojQmY/oDBNfIYVRRO5pZwWrnRIu2IAIRnf73Wzf6fYtTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLztmRvMn4hIWHRjpuWtg4gCU1PgMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvdk8yWkc4eWZpRWhZZEdPbTVhMkRpQUpUVS1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3iOMA0G CSqGSIb3DQEBCwUAA4IBAQAXMznyZAi0I0oyQK3IuxOTc28NE+SN7XAbTiozLwQs CFv+OoFcRAC7GBUaYhWHo2QIAB7ykfKjMXvTNc7hh1lONgPHViRsWRE5Y12Fjnrt 48U59thTlU4X76CTZZoVbgmsBQi0+51pUDG/66cucO4KZKRWMMvU3cwuMGhKJyNp sDwUcw+IaMXUhZvIgNrV+sd+bRb8yEC3mTRYYQ9Tkp3rEZXEo3aqlfwT5oOyrMee nxDskSTUGzhAU1T4yQKfsa6UhOYdfVhBgM+cKKm6+MkjNkKfQI1wNnhqhYVPI0ww w9bkcUHtrab31puKsGEI9xD0NeMzCZdBu07c98ZtiqnT -----END CERTIFICATE-----Generated at Fri Jan 2 12:03:09 2026 by rpki-client