This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/w7oLN8xFxlrlkVFvEn5x_BAtvw0.roa File: w7oLN8xFxlrlkVFvEn5x_BAtvw0.roa (raw, json) Hash identifier: aHP9vBNbM5gad4PG6kz0p04K4C9wQaodBbI+RySW2mw= Subject key identifier: C3:BA:0B:37:CC:45:C6:5A:E5:91:51:6F:12:7E:71:FC:10:2D:BF:0D Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2EA1CDAEFDAE6F46F8EDFD824D805 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/w7oLN8xFxlrlkVFvEn5x_BAtvw0.roa Signing time: Thu 01 Jan 2026 08:18:21 +0000 ROA not before: Thu 01 Jan 2026 08:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29030 IP address blocks: 31.13.200.0/21 maxlen: 21 31.13.242.0/23 maxlen: 23 87.121.65.0/24 maxlen: 24 94.156.20.0/22 maxlen: 22 94.156.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ea:1c:da:ef:da:e6:f4:6f:8e:df:d8:24:d8:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3ba0b37cc45c65ae591516f127e71fc102dbf0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:24:3d:d2:bc:92:1f:bf:7b:59:b1:3b:18:ca: 71:dc:fe:77:d1:44:f1:ce:d3:f5:fc:35:ce:8d:a2: 93:0b:53:fb:28:0d:ec:db:93:0f:e2:07:b0:dc:be: 54:a1:e1:54:22:b5:eb:38:e6:4f:ae:6b:ef:5c:c1: eb:7b:b0:75:21:c9:df:72:a2:07:7b:04:c1:38:fa: 9c:35:1a:d6:f0:57:51:6a:8e:1b:74:fe:2c:c7:65: c3:2f:c6:25:8d:ed:88:6d:9d:57:f3:6b:bd:ba:fc: 72:c8:8d:15:d3:a1:12:68:98:0f:d0:d6:87:c8:6f: 17:f1:a8:d5:a8:22:ac:98:ba:f0:d8:97:a8:6f:6d: 04:c8:2b:76:0e:d5:3d:d4:f9:60:a2:c5:c1:c2:1d: 32:b2:fb:44:79:d9:4d:d2:86:ed:32:61:37:28:78: 4c:15:61:39:72:b8:9b:58:96:68:b3:6f:2c:e9:5d: 4c:85:fd:a3:02:a1:bc:3a:e6:50:7b:9f:32:93:42: 70:6e:77:4a:9b:ed:ad:7d:55:e1:a8:0c:88:60:e2: 9f:03:c9:13:67:4f:96:28:97:55:b2:f1:e2:4e:6a: 49:ec:8c:af:4e:a1:63:92:d8:90:87:ab:b1:10:c0: d7:17:4b:16:0e:15:6b:3c:f0:11:cc:40:be:58:e1: f0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BA:0B:37:CC:45:C6:5A:E5:91:51:6F:12:7E:71:FC:10:2D:BF:0D X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/w7oLN8xFxlrlkVFvEn5x_BAtvw0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.13.200.0/21 31.13.242.0/23 87.121.65.0/24 94.156.20.0/22 94.156.244.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:b7:a0:1f:22:0b:d1:62:40:3c:06:e8:df:52:93:ee:8c:1c: 00:55:8e:bd:75:4b:14:d4:a7:f8:15:e7:0e:d0:35:f5:70:37: 1d:d3:55:3f:f0:91:2e:4e:28:9b:1e:47:fc:c2:41:c0:e1:68: 5c:84:cc:fd:e4:ea:48:2a:31:5c:d6:68:a0:9e:76:5d:43:19: 47:d7:6e:9b:cf:e4:e8:d7:a3:21:84:b2:5c:0f:13:ee:d4:d6: fe:cf:8b:24:87:2f:53:84:3f:88:5b:14:95:52:55:01:86:ee: f2:37:54:f8:7a:a4:be:93:b9:a6:7d:c7:05:77:3f:2a:fa:5c: 30:55:fb:99:f0:d5:b7:0a:45:c6:24:07:3b:a5:3b:58:18:e6: 43:30:82:37:58:85:92:42:cc:b5:4f:d4:63:11:fe:ab:42:84: ae:f4:3e:24:90:de:28:6c:f6:0b:e8:9a:a5:39:6e:15:8f:ce: a1:a0:11:67:87:97:79:ff:50:bf:65:c1:05:7b:02:77:aa:16: 40:a2:69:4c:87:c2:4c:3b:61:db:36:64:ea:c1:58:c8:cd:ae: 5f:49:03:fe:d1:ae:fc:87:69:15:f4:20:54:b0:b7:b7:b2:44: 03:14:67:61:cf:e9:e4:2b:fa:b1:51:97:16:42:0d:08:5b:c1: 56:4f:05:a2 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt4ouoc2u/a5vRvjt/YJNgFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2JhMGIzN2NjNDVjNjVhZTU5MTUxNmYxMjdlNzFmYzEwMmRiZjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCQ90rySH797WbE7GMpx3P530UTx ztP1/DXOjaKTC1P7KA3s25MP4gew3L5UoeFUIrXrOOZPrmvvXMHre7B1IcnfcqIH ewTBOPqcNRrW8FdRao4bdP4sx2XDL8Ylje2IbZ1X82u9uvxyyI0V06ESaJgP0NaH yG8X8ajVqCKsmLrw2Jeob20EyCt2DtU91PlgosXBwh0ysvtEedlN0obtMmE3KHhM FWE5cribWJZos28s6V1Mhf2jAqG8OuZQe58yk0JwbndKm+2tfVXhqAyIYOKfA8kT Z0+WKJdVsvHiTmpJ7IyvTqFjktiQh6uxEMDXF0sWDhVrPPARzEC+WOHwxQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFMO6CzfMRcZa5ZFRbxJ+cfwQLb8NMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvdzdvTE44eEZ4bHJsa1ZGdkVuNXhfQkF0dncwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDHw3IAwQB Hw3yAwQAV3lBAwQCXpwUAwQAXpz0MA0GCSqGSIb3DQEBCwUAA4IBAQBat6AfIgvR YkA8BujfUpPujBwAVY69dUsU1Kf4FecO0DX1cDcd01U/8JEuTiibHkf8wkHA4Whc hMz95OpIKjFc1mignnZdQxlH126bz+To16MhhLJcDxPu1Nb+z4skhy9ThD+IWxSV UlUBhu7yN1T4eqS+k7mmfccFdz8q+lwwVfuZ8NW3CkXGJAc7pTtYGOZDMII3WIWS Qsy1T9RjEf6rQoSu9D4kkN4obPYL6JqlOW4Vj86hoBFnh5d5/1C/ZcEFewJ3qhZA omlMh8JMO2HbNmTqwVjIza5fSQP+0a78h2kV9CBUsLe3skQDFGdhz+nkK/qxUZcW Qg0IW8FWTwWi -----END CERTIFICATE-----Generated at Fri Jan 2 12:05:21 2026 by rpki-client