This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xvLvag-m4xb9V-YptMQJdgcq_Zs.roa File: xvLvag-m4xb9V-YptMQJdgcq_Zs.roa (raw, json) Hash identifier: OG428/27Kux21quizSHHt/ac4Tdq0KX1nrK7TtqZ9/I= Subject key identifier: C6:F2:EF:6A:0F:A6:E3:16:FD:57:E6:29:B4:C4:09:76:07:2A:FD:9B Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A30D8DF2BA093BE5A708C4530CE3B3 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xvLvag-m4xb9V-YptMQJdgcq_Zs.roa Signing time: Thu 01 Jan 2026 08:18:30 +0000 ROA not before: Thu 01 Jan 2026 08:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58061 IP address blocks: 87.121.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:0d:8d:f2:ba:09:3b:e5:a7:08:c4:53:0c:e3:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6f2ef6a0fa6e316fd57e629b4c40976072afd9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ed:2c:8e:01:be:60:86:c0:11:cb:e5:9c:74: 3b:33:0d:50:da:81:93:b6:9d:78:2b:8e:e9:f1:f8: 66:f7:fc:59:52:ae:60:a4:c9:d0:6c:b0:1a:fc:6e: 1b:1e:ca:d0:4e:e4:95:b7:99:6d:8c:23:99:15:c2: 66:3f:21:24:30:34:17:21:35:ba:03:9b:28:59:6c: 60:13:28:02:6c:c9:cb:bd:3b:c2:4f:80:a8:5c:15: 74:9c:ca:62:af:1c:43:22:5c:17:ee:d5:62:a8:76: b8:63:4f:36:96:85:5c:37:32:35:78:a1:aa:b7:b7: 14:0c:be:6d:cf:2f:d1:2a:ad:6a:6e:ff:5d:a1:c3: 14:ae:bb:4a:ae:b9:09:8d:8d:e2:83:31:07:29:00: 9b:09:31:3f:8a:08:81:f6:8d:e8:2d:05:a6:29:e1: ff:18:31:bd:4a:1b:70:e4:1e:0e:17:f3:9e:79:c4: 4b:9e:21:5d:05:47:fc:4c:a0:55:24:bb:f0:53:65: 16:fa:87:6f:c9:24:9d:59:01:0d:a8:9d:82:fa:53: ea:35:1b:15:65:41:c3:6c:d0:7f:55:5d:17:a6:d4: e6:15:f6:a2:1b:c7:8c:4b:a5:26:4c:0f:2e:27:df: 6b:4c:78:94:91:10:98:2a:42:e1:2a:4d:38:cc:8a: 71:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F2:EF:6A:0F:A6:E3:16:FD:57:E6:29:B4:C4:09:76:07:2A:FD:9B X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xvLvag-m4xb9V-YptMQJdgcq_Zs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.121.163.0/24 Signature Algorithm: sha256WithRSAEncryption 41:de:3e:e1:e4:ac:25:98:8f:77:7c:ef:75:a5:fc:b6:c6:4d: 31:21:b9:17:ac:fa:2c:cb:f2:4e:eb:cd:15:c9:62:7c:79:97: d3:30:c6:55:f1:80:b9:bf:5c:67:0c:2e:39:66:76:3c:6e:f9: 42:33:31:4f:86:67:53:a2:e3:66:55:82:14:0f:47:c5:93:13: ee:eb:f3:ec:c4:6d:f2:27:44:2e:4a:c2:3c:23:89:6c:9b:c5: 5b:12:dc:b8:05:30:5a:9d:ce:8d:01:71:49:4c:6b:86:1b:4c: c8:16:0a:41:4e:46:19:42:a6:27:14:c0:6f:d8:9a:b4:19:56: dc:06:a4:56:4e:51:4f:cf:f9:c9:01:9d:fd:15:3c:c6:11:ac: 78:81:6c:9b:f7:4d:a5:53:8d:75:a6:37:4b:97:87:89:9f:4c: 47:a4:e1:49:b7:99:66:6c:8c:32:ea:ee:e4:2f:0d:2d:1d:a5: 72:b2:e8:24:0a:92:5f:24:b4:97:68:46:e0:77:da:79:bd:b0: f9:c8:73:e8:bc:b0:03:36:03:a4:e1:57:0d:be:25:2f:65:3a: 83:3f:25:9e:db:15:8b:4f:17:51:25:d6:a6:b9:55:73:d7:90: 4a:8e:ad:df:3d:b2:1f:21:f1:e6:86:e5:5f:39:05:a9:50:d0: db:59:6f:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ow2N8roJO+WnCMRTDOOzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmYyZWY2YTBmYTZlMzE2ZmQ1N2U2MjliNGM0MDk3NjA3MmFmZDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+0sjgG+YIbAEcvlnHQ7Mw1Q2oGT tp14K47p8fhm9/xZUq5gpMnQbLAa/G4bHsrQTuSVt5ltjCOZFcJmPyEkMDQXITW6 A5soWWxgEygCbMnLvTvCT4CoXBV0nMpirxxDIlwX7tViqHa4Y082loVcNzI1eKGq t7cUDL5tzy/RKq1qbv9docMUrrtKrrkJjY3igzEHKQCbCTE/igiB9o3oLQWmKeH/ GDG9Shtw5B4OF/OeecRLniFdBUf8TKBVJLvwU2UW+odvySSdWQENqJ2C+lPqNRsV ZUHDbNB/VV0XptTmFfaiG8eMS6UmTA8uJ99rTHiUkRCYKkLhKk04zIpxIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMby72oPpuMW/VfmKbTECXYHKv2bMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEveHZMdmFnLW00eGI5Vi1ZcHRNUUpkZ2NxX1pzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3mjMA0G CSqGSIb3DQEBCwUAA4IBAQBB3j7h5KwlmI93fO91pfy2xk0xIbkXrPosy/JO680V yWJ8eZfTMMZV8YC5v1xnDC45ZnY8bvlCMzFPhmdTouNmVYIUD0fFkxPu6/PsxG3y J0QuSsI8I4lsm8VbEty4BTBanc6NAXFJTGuGG0zIFgpBTkYZQqYnFMBv2Jq0GVbc BqRWTlFPz/nJAZ39FTzGEax4gWyb902lU411pjdLl4eJn0xHpOFJt5lmbIwy6u7k Lw0tHaVysugkCpJfJLSXaEbgd9p5vbD5yHPovLADNgOk4VcNviUvZTqDPyWe2xWL TxdRJdamuVVz15BKjq3fPbIfIfHmhuVfOQWpUNDbWW/0 -----END CERTIFICATE-----Generated at Fri Jan 2 12:09:00 2026 by rpki-client