This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/Tv6SVFm1dqSZBNkOQRefsTpNMZY.roa File: Tv6SVFm1dqSZBNkOQRefsTpNMZY.roa (raw, json) Hash identifier: +Lydi0u3DmQC51EDG4oe1+EHym7x1Ea0qYfFm6X8wzQ= Subject key identifier: 4E:FE:92:54:59:B5:76:A4:99:04:D9:0E:41:17:9F:B1:3A:4D:31:96 Certificate issuer: /CN=ac7be92dbfe3856156406fa725e15df5988e5c10 Certificate serial: 019B7CEE1F6F90F55D9198B1E4F25F7BBEB5 Authority key identifier: AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/Tv6SVFm1dqSZBNkOQRefsTpNMZY.roa Signing time: Fri 02 Jan 2026 04:18:58 +0000 ROA not before: Fri 02 Jan 2026 04:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60999 IP address blocks: 185.90.168.0/22 maxlen: 22 185.90.168.0/24 maxlen: 24 185.90.169.0/24 maxlen: 24 185.90.170.0/24 maxlen: 24 185.90.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:1f:6f:90:f5:5d:91:98:b1:e4:f2:5f:7b:be:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7be92dbfe3856156406fa725e15df5988e5c10 Validity Not Before: Jan 2 04:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4efe925459b576a49904d90e41179fb13a4d3196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3e:d5:08:a0:38:9e:50:8b:49:e0:5a:4d:c7: a6:35:de:90:64:6f:e6:da:14:7b:a6:83:c2:ea:f5: 54:f6:81:0c:81:68:a9:be:b3:8e:e0:dc:02:0c:af: ec:bf:42:a8:8f:75:79:f7:b3:b1:37:dc:3c:e5:8f: 5b:11:91:98:fd:a2:72:17:45:c8:16:46:28:62:c4: 6f:03:ac:b0:a6:4e:73:ed:88:eb:0d:bd:ed:5f:fd: 25:50:5a:87:dc:ec:61:34:82:b0:77:56:b4:14:27: 34:6b:41:86:ef:79:ad:6f:aa:25:87:d1:e7:04:c2: aa:f7:06:1b:e0:cd:26:05:3a:de:00:50:80:1f:e3: 58:2e:f7:32:0d:b1:04:b6:06:35:5e:47:2c:62:c3: 11:3b:bb:70:a4:56:6d:04:4d:72:96:5b:37:d0:a8: 22:37:cb:b3:2e:3f:95:7c:ef:27:31:15:c2:64:df: 0d:86:e1:38:6e:49:12:78:22:0a:2d:e8:66:49:f1: f7:07:38:ec:c7:b3:5d:13:89:c5:9a:ca:d9:2c:52: a7:e5:7b:cf:2b:ab:5a:80:39:24:34:5a:a5:69:12: e9:40:c7:a1:03:36:6a:7b:f7:ea:3a:24:86:62:8f: 4d:9c:c9:45:33:1b:0e:9d:14:03:19:c3:c6:cd:74: 9d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:FE:92:54:59:B5:76:A4:99:04:D9:0E:41:17:9F:B1:3A:4D:31:96 X509v3 Authority Key Identifier: keyid:AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/Tv6SVFm1dqSZBNkOQRefsTpNMZY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.90.168.0/22 Signature Algorithm: sha256WithRSAEncryption a2:02:e2:63:85:62:dc:d4:e4:b9:d3:8f:67:f2:3d:4f:df:fb: c9:50:31:67:96:70:a0:9e:0a:25:53:47:74:42:ef:a5:30:a9: e5:a7:0d:c0:f7:e0:d7:b7:fa:00:4b:18:7a:07:be:a3:12:3b: 46:35:b8:84:29:49:18:b6:1d:f0:3a:19:de:af:d6:25:06:95: 48:66:49:1e:fa:e7:6f:07:cf:96:6d:ea:d9:8c:26:9b:2c:f6: 26:28:33:94:dd:86:50:d2:b4:c4:eb:53:40:42:f7:4d:24:08: af:a3:41:de:a9:5a:8a:9b:3f:74:26:f9:2c:13:e0:c9:f8:17: 32:ed:c6:f3:28:c5:47:ba:fa:6c:a2:f5:a8:98:fb:2f:35:9f: 2d:8c:a4:6d:02:a8:8a:fb:05:04:f2:32:41:46:ad:be:be:42: 5d:d8:ac:c3:eb:fd:fe:d3:ee:04:06:b3:a3:19:46:b9:9d:a6: 4d:ac:72:a3:93:a9:e0:97:ad:31:50:df:de:67:a2:9b:26:5d: 9e:a0:3f:cf:fd:b7:eb:dd:27:8a:25:5a:08:fb:69:b6:67:a1: 11:d5:6c:83:b1:f3:5b:75:ea:80:6c:61:e8:91:27:06:f0:18: 36:f3:c7:d0:8f:3b:de:9c:e5:fb:76:d2:07:a7:fc:c0:09:87: 80:de:99:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87h9vkPVdkZix5PJfe761MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjN2JlOTJkYmZlMzg1NjE1NjQwNmZhNzI1ZTE1ZGY1OTg4 ZTVjMTAwHhcNMjYwMTAyMDQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWZlOTI1NDU5YjU3NmE0OTkwNGQ5MGU0MTE3OWZiMTNhNGQzMTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzz7VCKA4nlCLSeBaTcemNd6QZG/m 2hR7poPC6vVU9oEMgWipvrOO4NwCDK/sv0Koj3V597OxN9w85Y9bEZGY/aJyF0XI FkYoYsRvA6ywpk5z7YjrDb3tX/0lUFqH3OxhNIKwd1a0FCc0a0GG73mtb6olh9Hn BMKq9wYb4M0mBTreAFCAH+NYLvcyDbEEtgY1XkcsYsMRO7twpFZtBE1ylls30Kgi N8uzLj+VfO8nMRXCZN8NhuE4bkkSeCIKLehmSfH3Bzjsx7NdE4nFmsrZLFKn5XvP K6tagDkkNFqlaRLpQMehAzZqe/fqOiSGYo9NnMlFMxsOnRQDGcPGzXSdIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE7+klRZtXakmQTZDkEXn7E6TTGWMB8GA1UdIwQY MBaAFKx76S2/44VhVkBvpyXhXfWYjlwQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckh2cExiX2poV0ZXUUctbkplRmQ5WmlPWEJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8wZmFlMmYtMjY5MS00YzdlLWEwMTgt OTlkNzI1MmY1YmUwLzEvVHY2U1ZGbTFkcVNaQk5rT1FSZWZzVHBOTVpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8wZmFlMmYtMjY5MS00YzdlLWEwMTgtOTlkNzI1MmY1YmUw LzEvckh2cExiX2poV0ZXUUctbkplRmQ5WmlPWEJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVqoMA0G CSqGSIb3DQEBCwUAA4IBAQCiAuJjhWLc1OS5049n8j1P3/vJUDFnlnCgngolU0d0 Qu+lMKnlpw3A9+DXt/oASxh6B76jEjtGNbiEKUkYth3wOhner9YlBpVIZkke+udv B8+WberZjCabLPYmKDOU3YZQ0rTE61NAQvdNJAivo0HeqVqKmz90JvksE+DJ+Bcy 7cbzKMVHuvpsovWomPsvNZ8tjKRtAqiK+wUE8jJBRq2+vkJd2KzD6/3+0+4EBrOj GUa5naZNrHKjk6ngl60xUN/eZ6KbJl2eoD/P/bfr3SeKJVoI+2m2Z6ER1WyDsfNb deqAbGHokScG8Bg288fQjzvenOX7dtIHp/zACYeA3pkb -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:01 2026 by rpki-client