This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/MD2PWTqpDDGEMux-2kxi3Hd8PQM.roa File: MD2PWTqpDDGEMux-2kxi3Hd8PQM.roa (raw, json) Hash identifier: Pu3fjnw+yegdjONecUUu8p5b5PIQ+jy3LKoUoEMvgbg= Subject key identifier: 30:3D:8F:59:3A:A9:0C:31:84:32:EC:7E:DA:4C:62:DC:77:7C:3D:03 Certificate issuer: /CN=14fb7c3336acd4189d3fac639a280d9b0020f298 Certificate serial: 019B7A5AFBC9396ECCF85F6A94EB3D23ABBB Authority key identifier: 14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/MD2PWTqpDDGEMux-2kxi3Hd8PQM.roa Signing time: Thu 01 Jan 2026 16:19:01 +0000 ROA not before: Thu 01 Jan 2026 16:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200944 IP address blocks: 185.90.116.0/22 maxlen: 22 185.90.116.0/24 maxlen: 24 185.90.117.0/24 maxlen: 24 185.90.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.crl rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:fb:c9:39:6e:cc:f8:5f:6a:94:eb:3d:23:ab:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14fb7c3336acd4189d3fac639a280d9b0020f298 Validity Not Before: Jan 1 16:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=303d8f593aa90c318432ec7eda4c62dc777c3d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:47:96:28:3a:59:cd:da:32:39:64:a5:b9:f6: fc:0e:b5:c6:26:ae:ff:9a:b7:8c:09:53:0d:df:32: ca:a2:f0:ee:5d:a4:bd:5a:6d:eb:6f:7e:3f:c0:8f: 60:3e:d2:dd:85:c8:64:ed:d7:e7:f0:5b:17:bc:e2: 16:c4:a2:39:20:d1:74:a2:4e:7a:7b:ec:9d:5f:d4: d8:e7:42:14:fa:91:0c:9e:7f:d6:c5:0a:14:9f:5f: f1:4b:17:33:46:f0:bf:26:ac:24:08:bb:da:52:3a: 69:0c:a9:08:56:63:d4:50:b2:a4:9d:36:07:87:d9: 2a:06:96:56:c7:b3:54:f3:bc:70:f8:3c:3d:a6:57: e7:2a:b2:6b:92:8f:c8:15:b1:b4:f9:86:f3:b4:50: 7d:05:e7:3c:d2:b1:62:42:ca:01:14:b2:b4:39:aa: 88:14:4f:6e:1d:71:62:17:78:d9:48:d4:6b:fd:5f: 35:61:56:6c:e7:35:15:61:77:47:10:17:0d:4b:2b: 04:6e:11:29:ce:87:51:bf:c0:d2:62:cc:85:ed:28: 1b:0a:c0:3f:70:8a:03:24:47:60:b0:50:fe:73:28: b1:38:5d:87:61:f5:b8:58:f1:64:fe:6a:70:bc:f7: eb:f8:8b:4a:2b:d8:bb:09:6f:66:6a:59:e2:c1:91: a5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3D:8F:59:3A:A9:0C:31:84:32:EC:7E:DA:4C:62:DC:77:7C:3D:03 X509v3 Authority Key Identifier: keyid:14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/MD2PWTqpDDGEMux-2kxi3Hd8PQM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.90.116.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:9a:fc:10:7b:15:14:e6:05:13:44:81:32:51:80:06:bc:d6: 4e:42:0e:24:f7:8a:0f:a2:93:c0:b6:fd:b2:ac:ae:84:33:c8: b4:b8:03:0d:8b:57:f1:99:93:bb:3d:f4:17:1e:2c:f5:33:50: 35:d5:b0:bc:31:e0:8f:d6:2f:d3:a1:42:73:19:79:7c:f3:5c: 24:d5:aa:4a:e8:50:97:4a:8d:70:48:c4:c2:e8:c8:2d:2c:42: ce:df:ae:90:82:b3:30:cd:f3:cd:c1:b8:fb:be:a4:b2:09:b0: bb:ab:04:80:58:40:0c:24:d6:67:fa:30:59:3f:e3:24:68:67: 4c:b5:eb:b0:7f:80:5d:68:08:f7:a3:b1:e4:fc:1c:bf:09:15: 79:52:49:ec:24:b9:a3:81:1d:4f:48:72:83:48:38:63:9d:fb: ee:25:3e:a4:d1:fd:e2:03:d5:79:d1:4f:9d:26:9d:57:33:a1: c5:53:79:ad:d7:14:9e:d4:51:1b:11:5f:bd:3a:4e:95:8e:76: 36:f8:08:1a:02:8f:54:d9:e9:e4:e1:31:9b:2a:94:49:22:7f: a3:64:81:b5:e7:1c:31:1c:77:98:de:c0:ae:7d:e4:cd:b0:27: 09:05:35:4c:3c:df:cf:b3:40:98:c1:19:ef:6b:ab:a1:86:d4: 3b:ea:ff:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WvvJOW7M+F9qlOs9I6u7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZmI3YzMzMzZhY2Q0MTg5ZDNmYWM2MzlhMjgwZDliMDAy MGYyOTgwHhcNMjYwMTAxMTYxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDNkOGY1OTNhYTkwYzMxODQzMmVjN2VkYTRjNjJkYzc3N2MzZDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEeWKDpZzdoyOWSlufb8DrXGJq7/ mreMCVMN3zLKovDuXaS9Wm3rb34/wI9gPtLdhchk7dfn8FsXvOIWxKI5INF0ok56 e+ydX9TY50IU+pEMnn/WxQoUn1/xSxczRvC/JqwkCLvaUjppDKkIVmPUULKknTYH h9kqBpZWx7NU87xw+Dw9plfnKrJrko/IFbG0+YbztFB9Bec80rFiQsoBFLK0OaqI FE9uHXFiF3jZSNRr/V81YVZs5zUVYXdHEBcNSysEbhEpzodRv8DSYsyF7SgbCsA/ cIoDJEdgsFD+cyixOF2HYfW4WPFk/mpwvPfr+ItKK9i7CW9malniwZGllwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDA9j1k6qQwxhDLsftpMYtx3fD0DMB8GA1UdIwQY MBaAFBT7fDM2rNQYnT+sY5ooDZsAIPKYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlB0OE16YXMxQmlkUDZ4am1pZ05td0FnOHBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi82NGRmOGUtNGIwNC00MjIzLTg0Njct OTkzOWRmMWQwZDA5LzEvTUQyUFdUcXBEREdFTXV4LTJreGkzSGQ4UFFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi82NGRmOGUtNGIwNC00MjIzLTg0NjctOTkzOWRmMWQwZDA5 LzEvRlB0OE16YXMxQmlkUDZ4am1pZ05td0FnOHBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVp0MA0G CSqGSIb3DQEBCwUAA4IBAQA/mvwQexUU5gUTRIEyUYAGvNZOQg4k94oPopPAtv2y rK6EM8i0uAMNi1fxmZO7PfQXHiz1M1A11bC8MeCP1i/ToUJzGXl881wk1apK6FCX So1wSMTC6MgtLELO366QgrMwzfPNwbj7vqSyCbC7qwSAWEAMJNZn+jBZP+MkaGdM teuwf4BdaAj3o7Hk/By/CRV5UknsJLmjgR1PSHKDSDhjnfvuJT6k0f3iA9V50U+d Jp1XM6HFU3mt1xSe1FEbEV+9Ok6VjnY2+AgaAo9U2enk4TGbKpRJIn+jZIG15xwx HHeY3sCufeTNsCcJBTVMPN/Ps0CYwRnva6uhhtQ76v+8 -----END CERTIFICATE-----Generated at Sat Jan 10 22:34:38 2026 by rpki-client