This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PkpTcBiq3Cwx60L0q-npYsyzNOI.roa File: PkpTcBiq3Cwx60L0q-npYsyzNOI.roa (raw, json) Hash identifier: uQjcZFkgUm2N+wRXYceSTJFE54tMNvMOiTDYb/UKfds= Subject key identifier: 3E:4A:53:70:18:AA:DC:2C:31:EB:42:F4:AB:E9:E9:62:CC:B3:34:E2 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B6A47F1F316F8263C87CB7111D9368E9E Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PkpTcBiq3Cwx60L0q-npYsyzNOI.roa Signing time: Mon 29 Dec 2025 13:24:18 +0000 ROA not before: Mon 29 Dec 2025 13:24:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209693 IP address blocks: 45.88.88.0/24 maxlen: 24 83.219.97.0/24 maxlen: 24 87.121.86.0/24 maxlen: 24 87.121.221.0/24 maxlen: 24 176.125.254.0/24 maxlen: 24 185.252.177.0/24 maxlen: 24 194.48.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 05:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:47:f1:f3:16:f8:26:3c:87:cb:71:11:d9:36:8e:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Dec 29 13:24:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3e4a537018aadc2c31eb42f4abe9e962ccb334e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:dd:da:81:ad:2c:d9:ef:ee:ef:82:fa:60:9e: 6f:33:ef:43:89:01:29:b3:03:f8:b6:3c:42:a9:4b: a2:db:70:db:e8:8d:90:1d:b3:ab:8d:01:a6:a2:0d: 2a:a9:94:e9:8a:45:b2:00:c1:fa:22:37:97:60:f8: 68:84:59:28:00:96:ee:56:1f:0f:ca:12:4e:ac:c0: e0:21:d1:48:b4:95:0b:9e:1e:ff:34:ff:ab:c7:d1: fb:7c:7e:c5:f8:d1:98:10:5f:7c:86:21:1c:22:ae: b1:d8:c7:32:67:75:01:49:a7:a9:a4:1f:87:00:8c: 24:1e:f0:17:99:16:32:35:18:b0:9f:f7:cc:70:9e: 50:f0:13:ea:92:85:18:e4:ae:41:5f:38:fa:38:6b: 4d:8a:71:a5:6c:b4:9a:99:fe:1d:98:6b:6e:33:dd: 44:b4:ca:89:73:bc:d5:42:52:e5:18:ce:9f:f9:e8: d6:dd:b0:98:ec:5f:a7:2c:5c:b9:85:a1:17:5c:6e: 57:87:1a:f5:b2:c7:f6:7e:bf:85:41:6c:de:af:55: 65:a7:b6:96:30:e5:10:04:e0:0e:49:3e:d0:5b:ae: 51:1f:ad:c6:84:75:6b:9c:03:70:a8:84:8e:b6:25: 65:64:00:5c:3f:49:0f:cc:47:e5:6a:71:90:f8:f6: f2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4A:53:70:18:AA:DC:2C:31:EB:42:F4:AB:E9:E9:62:CC:B3:34:E2 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PkpTcBiq3Cwx60L0q-npYsyzNOI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.88.0/24 83.219.97.0/24 87.121.86.0/24 87.121.221.0/24 176.125.254.0/24 185.252.177.0/24 194.48.250.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:39:eb:d7:fe:c2:7d:6e:99:40:14:84:0f:70:bc:79:98:e8: 5b:ab:50:2a:4b:6b:87:54:71:7b:4e:26:8e:46:75:ce:c5:22: a9:c5:5f:23:03:3b:90:14:07:99:3f:2a:b3:c9:ec:a7:a2:24: ad:21:e5:e7:16:3b:2f:e3:54:26:07:c1:1f:85:8f:ac:3f:08: fd:ba:05:91:ff:b0:bd:a6:c5:f3:44:0f:fb:9f:97:46:5b:ca: 9d:63:26:31:3d:30:11:78:3a:d7:59:1d:ce:8c:ac:3d:06:6e: 04:11:75:af:76:ef:66:43:ec:85:1a:86:6f:1a:f9:ca:ed:b0: bf:60:d0:37:d6:19:ed:aa:a0:74:ea:22:e4:a1:09:64:c1:e6: 4c:bb:2c:35:58:36:0d:1a:cf:31:e5:c8:9c:3f:d8:d4:de:d5: 29:15:a7:f0:92:cc:ed:19:49:03:20:ce:04:0c:e5:7d:9a:11: 9b:c8:0e:63:bd:c5:5f:92:cb:5f:7a:e0:32:f4:bb:d6:6c:d9: 01:e1:f3:84:92:f8:f6:28:c8:35:5c:7b:04:42:00:13:27:89: 78:a0:ec:f4:6a:5b:5b:8b:dc:12:c2:f1:7d:ee:1a:fa:2e:5d: a3:7d:45:a5:f6:81:5d:59:f8:02:b4:f6:e7:e7:93:dc:79:77: b0:ec:be:0e -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZtqR/HzFvgmPIfLcRHZNo6eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUxMjI5MTMyNDE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTRhNTM3MDE4YWFkYzJjMzFlYjQyZjRhYmU5ZTk2MmNjYjMzNGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn93aga0s2e/u74L6YJ5vM+9DiQEp swP4tjxCqUui23Db6I2QHbOrjQGmog0qqZTpikWyAMH6IjeXYPhohFkoAJbuVh8P yhJOrMDgIdFItJULnh7/NP+rx9H7fH7F+NGYEF98hiEcIq6x2McyZ3UBSaeppB+H AIwkHvAXmRYyNRiwn/fMcJ5Q8BPqkoUY5K5BXzj6OGtNinGlbLSamf4dmGtuM91E tMqJc7zVQlLlGM6f+ejW3bCY7F+nLFy5haEXXG5Xhxr1ssf2fr+FQWzer1Vlp7aW MOUQBOAOST7QW65RH63GhHVrnANwqISOtiVlZABcP0kPzEflanGQ+Pby7wIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFD5KU3AYqtwsMetC9Kvp6WLMszTiMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvUGtwVGNCaXEzQ3d4NjBMMHEtbnBZc3l6Tk9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALVhYAwQA U9thAwQAV3lWAwQAV3ndAwQAsH3+AwQAufyxAwQAwjD6MA0GCSqGSIb3DQEBCwUA A4IBAQBeOevX/sJ9bplAFIQPcLx5mOhbq1AqS2uHVHF7TiaORnXOxSKpxV8jAzuQ FAeZPyqzyeynoiStIeXnFjsv41QmB8EfhY+sPwj9ugWR/7C9psXzRA/7n5dGW8qd YyYxPTAReDrXWR3OjKw9Bm4EEXWvdu9mQ+yFGoZvGvnK7bC/YNA31hntqqB06iLk oQlkweZMuyw1WDYNGs8x5cicP9jU3tUpFafwksztGUkDIM4EDOV9mhGbyA5jvcVf kstfeuAy9LvWbNkB4fOEkvj2KMg1XHsEQgATJ4l4oOz0altbi9wSwvF97hr6Ll2j fUWl9oFdWfgCtPbn55PceXew7L4O -----END CERTIFICATE-----Generated at Wed Dec 31 10:25:28 2025 by rpki-client