This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/87E4xEnMZKLQ9-adCMFtqO3gxKc.roa File: 87E4xEnMZKLQ9-adCMFtqO3gxKc.roa (raw, json) Hash identifier: 1s6eBRJk43stGn8sUQskaNANXR+WBZp4/9zkxTmF/w8= Subject key identifier: F3:B1:38:C4:49:CC:64:A2:D0:F7:E6:9D:08:C1:6D:A8:ED:E0:C4:A7 Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019B797F32A9FAA657FD9832B63D494B952F Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/87E4xEnMZKLQ9-adCMFtqO3gxKc.roa Signing time: Thu 01 Jan 2026 12:18:57 +0000 ROA not before: Thu 01 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152586 IP address blocks: 185.121.26.0/24 maxlen: 24 185.121.27.0/24 maxlen: 24 185.187.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:32:a9:fa:a6:57:fd:98:32:b6:3d:49:4b:95:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Jan 1 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3b138c449cc64a2d0f7e69d08c16da8ede0c4a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c0:90:9e:db:e1:95:5d:2a:c7:4a:88:60:81: a4:78:b0:2a:33:3a:27:2e:36:df:3e:29:9e:bf:ea: ab:98:aa:91:b6:87:5a:30:1a:c3:95:a0:95:99:32: 19:4e:30:19:53:de:ed:46:b7:be:9f:3a:e5:d8:ef: 62:1a:9e:76:51:99:b3:4b:8c:32:a9:54:b6:c1:97: cd:3a:a0:f4:39:a3:fd:c5:6b:4c:41:c9:27:3e:89: 14:45:bf:54:28:10:5d:ab:64:2d:c8:1e:2b:fc:42: e9:37:fc:61:c0:1c:30:08:82:cd:f7:c5:82:d2:f1: 3e:f0:af:ed:19:42:f7:e5:a0:0a:0c:f6:a1:9a:86: 0d:a3:5f:39:68:e6:ba:a7:d4:7a:e6:3f:85:e7:db: ee:ef:e8:b3:cb:60:78:32:0e:39:3a:ae:d4:c1:41: 16:1f:b2:a5:05:22:fd:81:0b:01:57:9a:2b:81:ee: d5:b1:c7:2d:0d:92:a9:91:93:b5:b9:8e:b6:86:33: 72:5b:ef:67:02:9f:f3:1a:c3:b6:27:e2:e6:53:58: fc:34:ab:a7:36:e7:03:01:8e:ee:8b:8c:4a:65:b9: fe:4e:61:64:97:09:8e:84:82:00:33:95:53:e9:7d: f5:84:10:89:2b:c9:2a:29:69:00:09:9b:9f:2e:62: 1a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B1:38:C4:49:CC:64:A2:D0:F7:E6:9D:08:C1:6D:A8:ED:E0:C4:A7 X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/87E4xEnMZKLQ9-adCMFtqO3gxKc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.26.0/23 185.187.155.0/24 Signature Algorithm: sha256WithRSAEncryption 36:b9:de:1f:16:70:f0:f5:7c:df:de:bc:be:60:cf:ef:77:02: d0:ee:d0:c1:94:97:1a:0b:e5:da:e6:90:89:8f:3b:e8:c8:0a: a8:71:75:8a:53:98:81:7f:af:35:7d:77:ae:fe:82:17:63:ed: d3:59:55:58:c8:84:c5:56:be:53:2a:da:1c:30:74:32:a5:14: 27:09:c5:6b:61:04:d0:f6:c8:0b:7b:d4:60:f8:25:e6:ad:70: 69:ca:0c:23:f1:da:7b:80:14:b4:87:42:01:2e:71:29:70:6f: df:67:8d:1a:47:cf:67:35:05:ac:1b:12:b7:a4:7b:90:bf:8a: 30:75:82:d6:36:cd:3b:da:9a:10:c9:1d:0f:39:c2:c4:85:8a: 7a:57:4c:a1:57:07:95:0d:e5:3a:bc:d1:e7:7e:e7:e1:26:94: 37:8f:e8:c8:6e:fe:75:fb:06:a5:a8:6f:a7:1b:4d:78:b4:c3: 17:6d:8e:de:b6:45:45:6b:4e:5c:2b:0e:45:00:e9:f4:34:df: 04:ae:bc:d1:51:27:4c:ff:e5:a2:cf:27:3d:10:6a:57:69:a2: 6a:bf:0c:0f:aa:ec:a0:e6:7c:29:b3:33:14:d9:b6:7f:81:a4: f1:43:cb:37:4d:c7:26:06:6a:dc:cd:18:c5:0b:2c:5c:b3:24: d8:d7:b8:fd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fzKp+qZX/Zgytj1JS5UvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjYwMTAxMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2IxMzhjNDQ5Y2M2NGEyZDBmN2U2OWQwOGMxNmRhOGVkZTBjNGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcCQntvhlV0qx0qIYIGkeLAqMzon LjbfPimev+qrmKqRtodaMBrDlaCVmTIZTjAZU97tRre+nzrl2O9iGp52UZmzS4wy qVS2wZfNOqD0OaP9xWtMQcknPokURb9UKBBdq2QtyB4r/ELpN/xhwBwwCILN98WC 0vE+8K/tGUL35aAKDPahmoYNo185aOa6p9R65j+F59vu7+izy2B4Mg45Oq7UwUEW H7KlBSL9gQsBV5orge7VscctDZKpkZO1uY62hjNyW+9nAp/zGsO2J+LmU1j8NKun NucDAY7ui4xKZbn+TmFklwmOhIIAM5VT6X31hBCJK8kqKWkACZufLmIaLwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPOxOMRJzGSi0PfmnQjBbajt4MSnMB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvODdFNHhFbk1aS0xROS1hZENNRnRxTzNneEtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuXkaAwQA ububMA0GCSqGSIb3DQEBCwUAA4IBAQA2ud4fFnDw9Xzf3ry+YM/vdwLQ7tDBlJca C+Xa5pCJjzvoyAqocXWKU5iBf681fXeu/oIXY+3TWVVYyITFVr5TKtocMHQypRQn CcVrYQTQ9sgLe9Rg+CXmrXBpygwj8dp7gBS0h0IBLnEpcG/fZ40aR89nNQWsGxK3 pHuQv4owdYLWNs072poQyR0POcLEhYp6V0yhVweVDeU6vNHnfufhJpQ3j+jIbv51 +walqG+nG014tMMXbY7etkVFa05cKw5FAOn0NN8ErrzRUSdM/+Wizyc9EGpXaaJq vwwPquyg5nwpszMU2bZ/gaTxQ8s3TccmBmrczRjFCyxcsyTY17j9 -----END CERTIFICATE-----Generated at Mon Jan 19 17:33:00 2026 by rpki-client