This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/URwUlX1aGUQjALJuv2b7NQZnlQY.roa File: URwUlX1aGUQjALJuv2b7NQZnlQY.roa (raw, json) Hash identifier: tfOWykptTnti4HmolEIB0RYCOL60/EO4faOftMz4e/U= Subject key identifier: 51:1C:14:95:7D:5A:19:44:23:00:B2:6E:BF:66:FB:35:06:67:95:06 Certificate issuer: /CN=68d2c25d0534a4027c695562a8ce4f001cd5396f Certificate serial: 019B7F13671B7D29F34D81785006B84A8B29 Authority key identifier: 68:D2:C2:5D:05:34:A4:02:7C:69:55:62:A8:CE:4F:00:1C:D5:39:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNLCXQU0pAJ8aVViqM5PABzVOW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/URwUlX1aGUQjALJuv2b7NQZnlQY.roa Signing time: Fri 02 Jan 2026 14:18:56 +0000 ROA not before: Fri 02 Jan 2026 14:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41015 IP address blocks: 185.90.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.mft rsync://rpki.ripe.net/repository/DEFAULT/aNLCXQU0pAJ8aVViqM5PABzVOW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:67:1b:7d:29:f3:4d:81:78:50:06:b8:4a:8b:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68d2c25d0534a4027c695562a8ce4f001cd5396f Validity Not Before: Jan 2 14:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=511c14957d5a19442300b26ebf66fb3506679506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7c:0e:6d:62:6c:af:5e:64:ff:12:f5:ad:ff: 6f:e4:14:67:70:e4:f0:7c:ea:7e:ed:aa:cf:46:df: fa:60:24:d1:b2:e2:8b:27:f3:1f:5b:c5:55:32:91: 0e:61:35:3c:ab:79:47:7d:e4:02:33:19:92:78:be: fd:3b:01:23:92:4f:7d:3c:d6:e8:4c:d4:83:84:2d: 97:1e:4f:6f:a7:a5:65:b9:68:33:53:09:a1:fa:01: e0:8d:79:5a:44:db:28:28:5a:be:b5:be:4d:f1:d0: 74:59:e5:59:44:ea:30:0d:0c:f5:76:73:fe:e9:57: 3d:e9:1b:d3:d7:20:32:f2:33:d7:b2:3e:48:8c:23: ad:be:bf:ba:89:19:e3:5a:78:3d:3f:d7:f9:ee:2c: c6:ad:93:0a:34:d6:10:2b:05:af:74:2a:c2:bf:25: 44:e1:81:20:97:5d:16:ce:1b:e8:2e:28:27:50:47: a3:8e:29:5a:f6:c2:66:a6:58:b7:85:8c:b2:2c:5a: a6:2c:3a:b3:1a:9b:7d:24:3a:b2:22:bc:3e:8a:2d: 08:df:8c:d0:5b:73:08:e2:ad:37:e3:f2:42:07:36: bf:37:df:38:c8:83:9d:77:f0:03:d9:64:2f:94:81: 79:40:5f:83:2b:58:96:3c:1a:07:c2:eb:66:da:8f: 9f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:1C:14:95:7D:5A:19:44:23:00:B2:6E:BF:66:FB:35:06:67:95:06 X509v3 Authority Key Identifier: keyid:68:D2:C2:5D:05:34:A4:02:7C:69:55:62:A8:CE:4F:00:1C:D5:39:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNLCXQU0pAJ8aVViqM5PABzVOW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/URwUlX1aGUQjALJuv2b7NQZnlQY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.90.84.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:ad:84:e1:fe:7b:6d:23:8e:7f:11:f7:27:6e:c2:d8:36:83: d7:db:b4:85:7a:9e:f0:7c:e6:51:ea:8e:34:ec:06:5d:15:f3: 20:35:82:7f:90:91:7c:b0:da:f7:50:7d:d2:b5:c7:66:f3:1d: 59:48:89:1e:47:2b:ae:ad:f7:a2:35:d3:b0:3e:dd:29:5e:2c: 64:4a:03:f9:7d:69:03:e3:57:8b:8f:b6:aa:23:1e:26:b2:51: f0:ac:9e:70:91:bb:63:fb:de:9b:7d:7e:ac:2a:8e:e6:ae:70: 10:af:57:3e:65:e0:8d:ed:9e:94:7d:9c:2a:5d:f0:fa:d3:e3: 3c:89:28:1c:79:e8:db:5b:80:f9:4e:ed:de:da:ee:c4:0d:e4: 49:d3:33:2d:9e:84:94:a8:c3:d5:f0:61:ee:92:c3:31:f4:45: 58:6b:67:47:0b:24:75:ad:5f:f5:9f:f8:7f:4a:07:66:97:3c: 35:a3:4d:fd:75:e0:8a:06:ff:f7:74:45:9b:7d:98:20:c9:b9: f1:d3:57:39:2f:16:c6:00:12:df:42:be:4b:51:01:0d:ad:d1: a7:ea:27:26:91:1d:c1:a9:e5:01:5e:e6:63:fb:f5:a3:d7:b3: ff:dd:04:1e:7d:36:52:3f:12:cc:fc:29:c7:0f:d8:aa:47:02: 2d:b5:bd:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E2cbfSnzTYF4UAa4SospMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZDJjMjVkMDUzNGE0MDI3YzY5NTU2MmE4Y2U0ZjAwMWNk NTM5NmYwHhcNMjYwMTAyMTQxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTFjMTQ5NTdkNWExOTQ0MjMwMGIyNmViZjY2ZmIzNTA2Njc5NTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3wObWJsr15k/xL1rf9v5BRncOTw fOp+7arPRt/6YCTRsuKLJ/MfW8VVMpEOYTU8q3lHfeQCMxmSeL79OwEjkk99PNbo TNSDhC2XHk9vp6VluWgzUwmh+gHgjXlaRNsoKFq+tb5N8dB0WeVZROowDQz1dnP+ 6Vc96RvT1yAy8jPXsj5IjCOtvr+6iRnjWng9P9f57izGrZMKNNYQKwWvdCrCvyVE 4YEgl10WzhvoLignUEejjila9sJmpli3hYyyLFqmLDqzGpt9JDqyIrw+ii0I34zQ W3MI4q034/JCBza/N984yIOdd/AD2WQvlIF5QF+DK1iWPBoHwutm2o+fSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFEcFJV9WhlEIwCybr9m+zUGZ5UGMB8GA1UdIwQY MBaAFGjSwl0FNKQCfGlVYqjOTwAc1TlvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU5MQ1hRVTBwQUo4YVZWaXFNNVBBQnpWT1c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9hZDk3NTYtODRkMS00YWI5LTk2ZTEt MTQ3OTdlYWM1MjJlLzEvVVJ3VWxYMWFHVVFqQUxKdXYyYjdOUVpubFFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9hZDk3NTYtODRkMS00YWI5LTk2ZTEtMTQ3OTdlYWM1MjJl LzEvYU5MQ1hRVTBwQUo4YVZWaXFNNVBBQnpWT1c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVpUMA0G CSqGSIb3DQEBCwUAA4IBAQCNrYTh/nttI45/EfcnbsLYNoPX27SFep7wfOZR6o40 7AZdFfMgNYJ/kJF8sNr3UH3Stcdm8x1ZSIkeRyuurfeiNdOwPt0pXixkSgP5fWkD 41eLj7aqIx4mslHwrJ5wkbtj+96bfX6sKo7mrnAQr1c+ZeCN7Z6UfZwqXfD60+M8 iSgceejbW4D5Tu3e2u7EDeRJ0zMtnoSUqMPV8GHuksMx9EVYa2dHCyR1rV/1n/h/ Sgdmlzw1o039deCKBv/3dEWbfZggybnx01c5LxbGABLfQr5LUQENrdGn6icmkR3B qeUBXuZj+/Wj17P/3QQefTZSPxLM/CnHD9iqRwIttb2i -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:34 2026 by rpki-client