This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ESo1Hsugv5kbdZOkVl6Fy7ymuNk.roa File: ESo1Hsugv5kbdZOkVl6Fy7ymuNk.roa (raw, json) Hash identifier: 4O9teCiSi+cetTXzsf/WYoMvmR1uuu9F4WQcOk2dcsk= Subject key identifier: 11:2A:35:1E:CB:A0:BF:99:1B:75:93:A4:56:5E:85:CB:BC:A6:B8:D9 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B305318FBBFF67FAA68B49FB68A6D69F1 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ESo1Hsugv5kbdZOkVl6Fy7ymuNk.roa Signing time: Thu 18 Dec 2025 07:18:30 +0000 ROA not before: Thu 18 Dec 2025 07:18:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 87.120.68.0/23 maxlen: 24 93.123.74.0/23 maxlen: 24 185.252.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:53:18:fb:bf:f6:7f:aa:68:b4:9f:b6:8a:6d:69:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Dec 18 07:18:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=112a351ecba0bf991b7593a4565e85cbbca6b8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9a:75:d1:2d:4d:d2:90:ee:6d:03:b1:bc:8d: d6:30:ae:94:75:10:ef:3a:e7:91:e7:e9:ca:d8:65: e5:27:81:42:60:6f:1f:2b:d3:60:4c:ba:d3:77:c4: e6:f5:4e:15:df:f9:2a:77:53:f2:f2:71:3a:86:d3: 1d:ac:e9:03:79:e5:1d:58:fa:50:47:ee:28:2a:cf: e3:5f:34:63:15:82:c8:90:83:f9:e5:5f:b3:3a:c7: 34:62:30:dd:47:85:85:b4:f6:62:90:67:c1:33:a1: 2b:67:63:27:50:44:c2:cf:67:fc:b8:ac:77:f3:f9: d8:75:61:23:6e:1a:2e:75:8c:b1:3a:fc:8d:5c:13: 15:48:c7:60:b1:af:01:6d:1b:de:e0:32:7d:17:8a: 31:56:b3:47:f9:80:88:ad:54:87:6d:73:c0:37:1f: bf:fb:47:c3:96:bc:ed:a7:20:2a:03:68:fd:71:15: 22:e4:87:bf:72:a3:39:1c:25:4b:ad:0a:5a:e2:02: 8a:75:6f:ec:5f:89:7b:03:c8:58:1a:10:3d:37:d7: 18:8e:f9:5f:a2:9e:ff:fe:b6:4c:08:76:ac:05:85: e2:42:68:0e:88:fb:d9:26:89:c5:1f:1c:57:c7:6b: 01:56:72:09:a7:21:7d:25:0b:ee:e8:6f:1a:dc:ef: dd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:2A:35:1E:CB:A0:BF:99:1B:75:93:A4:56:5E:85:CB:BC:A6:B8:D9 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ESo1Hsugv5kbdZOkVl6Fy7ymuNk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.68.0/23 93.123.74.0/23 185.252.160.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:49:6b:b8:63:5c:57:38:2b:86:5f:a6:23:ed:08:84:07:bd: d9:b6:a2:50:32:29:18:99:e3:67:5a:5c:5b:15:5c:3b:5b:b7: 3d:22:93:df:30:62:91:21:72:37:e6:6b:f7:96:d7:f5:d5:3c: c9:62:54:97:3b:9d:d8:65:e3:22:44:1e:1f:1d:bf:16:ec:a1: cc:d2:d9:c7:55:42:18:c4:db:83:f9:b1:0b:67:c8:7d:4e:2d: c9:74:a1:15:21:69:ec:c1:60:02:9c:70:d2:06:8b:72:d5:61: 0d:8e:4b:47:da:56:1b:72:87:6a:93:31:7e:c8:ee:ac:ac:2f: c1:ce:19:f2:02:3c:99:df:be:a5:20:c9:01:94:5e:a6:c5:07: ee:9a:97:87:8b:b1:f2:f5:86:74:ff:8b:4f:e0:c7:21:bb:dc: 33:43:49:56:0f:54:d7:53:ac:e6:b2:37:b5:20:f7:8d:34:cd: f8:f2:f8:40:e3:6c:a0:d6:3d:46:80:d1:67:d8:47:b5:2e:2d: f7:6b:91:72:50:41:c7:a0:71:65:31:c6:e9:40:e9:7e:f1:55: 16:c6:95:9e:27:2b:81:bd:40:95:43:39:47:62:5e:f0:8f:3a: db:88:b7:ec:53:c6:0e:50:1b:a2:12:c8:b1:ab:c3:b9:18:c4: 76:81:23:63 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZswUxj7v/Z/qmi0n7aKbWnxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUxMjE4MDcxODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTJhMzUxZWNiYTBiZjk5MWI3NTkzYTQ1NjVlODVjYmJjYTZiOGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZp10S1N0pDubQOxvI3WMK6UdRDv OueR5+nK2GXlJ4FCYG8fK9NgTLrTd8Tm9U4V3/kqd1Py8nE6htMdrOkDeeUdWPpQ R+4oKs/jXzRjFYLIkIP55V+zOsc0YjDdR4WFtPZikGfBM6ErZ2MnUETCz2f8uKx3 8/nYdWEjbhoudYyxOvyNXBMVSMdgsa8BbRve4DJ9F4oxVrNH+YCIrVSHbXPANx+/ +0fDlrztpyAqA2j9cRUi5Ie/cqM5HCVLrQpa4gKKdW/sX4l7A8hYGhA9N9cYjvlf op7//rZMCHasBYXiQmgOiPvZJonFHxxXx2sBVnIJpyF9JQvu6G8a3O/dQQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBEqNR7LoL+ZG3WTpFZehcu8prjZMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvRVNvMUhzdWd2NWtiZFpPa1ZsNkZ5N3ltdU5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBV3hEAwQB XXtKAwQBufygMA0GCSqGSIb3DQEBCwUAA4IBAQCLSWu4Y1xXOCuGX6Yj7QiEB73Z tqJQMikYmeNnWlxbFVw7W7c9IpPfMGKRIXI35mv3ltf11TzJYlSXO53YZeMiRB4f Hb8W7KHM0tnHVUIYxNuD+bELZ8h9Ti3JdKEVIWnswWACnHDSBoty1WENjktH2lYb codqkzF+yO6srC/BzhnyAjyZ376lIMkBlF6mxQfumpeHi7Hy9YZ0/4tP4Mchu9wz Q0lWD1TXU6zmsje1IPeNNM348vhA42yg1j1GgNFn2Ee1Li33a5FyUEHHoHFlMcbp QOl+8VUWxpWeJyuBvUCVQzlHYl7wjzrbiLfsU8YOUBuiEsixq8O5GMR2gSNj -----END CERTIFICATE-----Generated at Sat Dec 20 05:59:49 2025 by rpki-client