This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xH8JR_7KFG8EeTYtjkgaXVbd8V4.roa File: xH8JR_7KFG8EeTYtjkgaXVbd8V4.roa (raw, json) Hash identifier: CMqnQK7Pj3fyh025pYLyg/1/Mt1vRZ7dbsApiIeyQ6I= Subject key identifier: C4:7F:09:47:FE:CA:14:6F:04:79:36:2D:8E:48:1A:5D:56:DD:F1:5E Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A3315DE13210F9EBA5972CF3259A2A Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xH8JR_7KFG8EeTYtjkgaXVbd8V4.roa Signing time: Thu 01 Jan 2026 08:18:39 +0000 ROA not before: Thu 01 Jan 2026 08:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205175 IP address blocks: 31.13.212.0/24 maxlen: 24 45.81.36.0/24 maxlen: 32 45.91.194.0/24 maxlen: 32 45.91.195.0/24 maxlen: 32 87.121.220.0/24 maxlen: 24 2a00:1728:31::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:31:5d:e1:32:10:f9:eb:a5:97:2c:f3:25:9a:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c47f0947feca146f0479362d8e481a5d56ddf15e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:53:4f:21:1c:ae:40:e9:60:92:b2:5e:d7:e8: e6:2d:ac:45:29:65:76:ab:6e:ee:5f:81:e2:89:08: bc:38:4e:ad:4d:4b:cb:63:f6:56:df:fb:7a:f4:60: a2:70:77:13:77:ee:9d:ab:d2:46:14:f5:42:41:19: bc:96:df:01:99:17:2c:3c:6a:f8:6e:c2:3a:d0:1e: 1f:e5:23:91:59:6a:9c:58:0f:97:92:30:d4:62:fd: 91:1b:a3:f9:4e:eb:55:fc:cb:f0:30:21:60:fd:75: 9a:ff:ce:cf:18:85:cd:ea:1f:a5:25:94:ba:03:78: fb:0e:37:c8:59:3c:3a:9f:e8:bf:52:13:38:11:ac: d7:fb:fe:e8:8a:32:94:3c:7b:1a:77:a2:d9:ce:8a: 14:72:14:5e:a0:43:6c:85:9a:f3:3d:45:86:63:95: 09:a2:94:4e:bf:c8:20:b7:98:25:85:72:95:40:5d: f2:4b:ed:5d:1e:23:cb:13:2f:cc:c1:10:6a:20:9d: d5:c4:10:b4:17:7f:40:d4:d8:01:99:06:69:01:8a: 11:92:f1:c1:c0:12:43:5c:1d:6d:21:a2:98:7c:2c: bd:c2:49:d0:cd:9d:cd:0d:b7:8b:9f:9e:dc:fd:2d: 38:d4:47:9e:65:2c:e6:63:ca:f5:ef:52:e9:ca:04: dd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7F:09:47:FE:CA:14:6F:04:79:36:2D:8E:48:1A:5D:56:DD:F1:5E X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xH8JR_7KFG8EeTYtjkgaXVbd8V4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.13.212.0/24 45.81.36.0/24 45.91.194.0/23 87.121.220.0/24 IPv6: 2a00:1728:31::/48 Signature Algorithm: sha256WithRSAEncryption 35:67:26:91:8b:fc:ce:6f:97:21:47:86:e2:e8:0f:98:38:aa: eb:ea:92:99:d3:d7:b6:b4:e9:3c:eb:74:bc:46:c2:5a:e4:53: f5:6b:cb:ff:7a:b1:f1:84:2b:20:48:fc:2e:7f:50:af:68:98: 1e:c5:8f:3c:2b:3a:0f:61:8b:03:3d:1e:d7:49:1c:c6:45:37: 7f:fc:5b:a9:20:b0:f3:bf:98:df:ce:cd:d7:2b:33:c0:24:34: 99:ee:c4:d6:28:9c:4d:ae:79:bd:06:1e:d1:b3:46:ee:a5:ea: f3:b6:fa:51:ad:87:fa:17:33:78:ba:ab:81:db:33:89:28:e6: 3a:09:0b:e7:94:65:2a:38:ad:bf:64:0c:13:f4:d7:8d:14:c7: 19:7f:7b:b1:19:95:98:12:ef:58:77:51:24:33:fa:36:48:b3: 8d:b9:51:ca:3f:70:81:3c:a4:58:56:e3:6b:05:18:c0:6a:d5: 67:89:9f:e1:29:cb:64:c0:2d:27:b5:f9:ed:38:f1:f3:a4:ae: e9:63:d0:b7:5b:99:5e:e7:25:23:48:38:e8:51:cb:4b:9e:10: 77:14:72:63:ee:67:c3:1b:79:e3:9c:80:67:a8:6a:70:33:4c: c2:21:6c:43:ab:08:71:37:03:5c:c6:ef:dc:6e:bc:3e:77:43: 48:4b:d6:87 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt4ozFd4TIQ+eullyzzJZoqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDdmMDk0N2ZlY2ExNDZmMDQ3OTM2MmQ4ZTQ4MWE1ZDU2ZGRmMTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVNPIRyuQOlgkrJe1+jmLaxFKWV2 q27uX4HiiQi8OE6tTUvLY/ZW3/t69GCicHcTd+6dq9JGFPVCQRm8lt8BmRcsPGr4 bsI60B4f5SORWWqcWA+XkjDUYv2RG6P5TutV/MvwMCFg/XWa/87PGIXN6h+lJZS6 A3j7DjfIWTw6n+i/UhM4EazX+/7oijKUPHsad6LZzooUchReoENshZrzPUWGY5UJ opROv8ggt5glhXKVQF3yS+1dHiPLEy/MwRBqIJ3VxBC0F39A1NgBmQZpAYoRkvHB wBJDXB1tIaKYfCy9wknQzZ3NDbeLn57c/S041EeeZSzmY8r171LpygTdsQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFMR/CUf+yhRvBHk2LY5IGl1W3fFeMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEveEg4SlJfN0tGRzhFZVRZdGprZ2FYVmJkOFY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQAHw3UAwQA LVEkAwQBLVvCAwQAV3ncMA8EAgACMAkDBwAqABcoADEwDQYJKoZIhvcNAQELBQAD ggEBADVnJpGL/M5vlyFHhuLoD5g4quvqkpnT17a06TzrdLxGwlrkU/Vry/96sfGE KyBI/C5/UK9omB7FjzwrOg9hiwM9HtdJHMZFN3/8W6kgsPO/mN/OzdcrM8AkNJnu xNYonE2ueb0GHtGzRu6l6vO2+lGth/oXM3i6q4HbM4ko5joJC+eUZSo4rb9kDBP0 140Uxxl/e7EZlZgS71h3USQz+jZIs425Uco/cIE8pFhW42sFGMBq1WeJn+Epy2TA LSe1+e048fOkrulj0LdbmV7nJSNIOOhRy0ueEHcUcmPuZ8MbeeOcgGeoanAzTMIh bEOrCHE3A1zG79xuvD53Q0hL1oc= -----END CERTIFICATE-----Generated at Fri Jan 2 12:04:27 2026 by rpki-client