This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/V50bPPxe9__9PdVaWrp4pIj1_3U.roa File: V50bPPxe9__9PdVaWrp4pIj1_3U.roa (raw, json) Hash identifier: IVLdcVsUqYG9MQEXxQ1iKoQ3JRljtxzT2Wh5hJYRUuU= Subject key identifier: 57:9D:1B:3C:FC:5E:F7:FF:FD:3D:D5:5A:5A:BA:78:A4:88:F5:FF:75 Certificate issuer: /CN=14fb7c3336acd4189d3fac639a280d9b0020f298 Certificate serial: 019B7A5AFB03824CA4C2759B3DC0D6A5D61A Authority key identifier: 14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/V50bPPxe9__9PdVaWrp4pIj1_3U.roa Signing time: Thu 01 Jan 2026 16:19:01 +0000 ROA not before: Thu 01 Jan 2026 16:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 185.90.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.crl rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:fb:03:82:4c:a4:c2:75:9b:3d:c0:d6:a5:d6:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14fb7c3336acd4189d3fac639a280d9b0020f298 Validity Not Before: Jan 1 16:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=579d1b3cfc5ef7fffd3dd55a5aba78a488f5ff75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c6:91:2f:06:54:bb:8b:7b:81:40:24:82:f8: bf:4d:a9:d2:08:20:ce:5a:5b:b0:b1:67:c5:a9:8d: 0a:46:8c:cf:fb:fc:cc:1a:df:7c:01:d5:d9:d9:de: d1:1d:fa:b9:0d:7a:2d:0b:14:82:e5:ce:78:b6:e9: 9e:e8:89:87:96:e6:2a:47:4c:17:5b:5f:e9:7c:b4: cb:c8:65:e8:73:ad:57:ac:90:ab:b9:53:5a:ed:04: 10:d0:b6:40:49:3d:e3:b6:e0:64:04:a1:25:a0:d3: f2:a6:71:65:9f:79:a5:38:23:fa:2d:4f:cc:5f:f9: 64:05:16:7b:67:6a:2b:d1:51:bb:aa:a5:83:e5:a9: 24:c8:33:a8:2a:ec:ac:11:9f:8f:0d:12:6d:da:61: e7:39:ae:85:15:a3:c5:cb:61:00:52:3f:d1:e2:f2: e6:13:f6:92:5d:1c:63:40:eb:c9:90:d2:02:1e:35: 66:bb:0c:31:01:9e:3b:1b:35:9e:56:e5:e2:12:0e: b2:6e:38:d2:d3:77:48:22:00:81:2e:d8:53:85:02: 99:ba:7d:f0:66:09:6a:db:5c:c7:71:32:9e:61:8e: 9f:9b:ca:9a:7c:28:b3:c0:81:3c:f5:b6:df:58:65: 6d:9c:82:19:6e:03:0e:80:39:3e:ea:35:09:73:45: d5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:9D:1B:3C:FC:5E:F7:FF:FD:3D:D5:5A:5A:BA:78:A4:88:F5:FF:75 X509v3 Authority Key Identifier: keyid:14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/V50bPPxe9__9PdVaWrp4pIj1_3U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.90.119.0/24 Signature Algorithm: sha256WithRSAEncryption 06:5f:75:bd:79:47:3a:18:e5:e5:0d:26:b7:1d:28:b0:3f:8f: be:1b:c1:c7:86:c4:a9:05:14:23:30:7a:8d:4a:37:3b:24:74: d9:4f:b8:d3:d6:98:70:45:9b:24:07:3c:5b:87:75:35:61:64: 37:a5:41:12:6e:2d:c3:af:02:20:ff:66:9a:f3:32:6e:98:35: a2:48:d9:f7:28:38:95:26:7d:af:b7:ed:0d:41:b9:3d:99:ed: d8:46:49:e2:a7:1b:72:16:ef:c2:32:07:b5:d1:0c:3d:22:e6: 56:22:a0:58:41:c4:e4:91:bf:4f:a6:4d:cf:55:42:60:40:80: c5:be:a7:f0:ba:10:ed:12:ab:1e:db:62:7d:cc:ac:f2:87:3d: 54:80:c8:a9:d7:16:f2:fe:22:ba:13:33:32:9c:cd:f7:1b:33: 8b:dd:cb:35:c9:f4:5a:cb:c8:bd:d9:19:9a:9b:4c:d2:1c:6f: 34:23:bf:29:1e:0f:63:ce:1e:ca:c4:68:cc:f3:73:9f:55:2f: dc:60:a7:61:1d:27:08:56:0b:19:e6:17:be:ce:76:d5:f0:24: d6:d5:9d:57:06:c0:d2:51:03:88:01:4f:99:92:cb:4f:e1:48: 36:8a:33:0e:8b:b9:7a:13:37:2c:1b:c1:06:39:8e:ac:0f:41: 5a:47:2b:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WvsDgkykwnWbPcDWpdYaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZmI3YzMzMzZhY2Q0MTg5ZDNmYWM2MzlhMjgwZDliMDAy MGYyOTgwHhcNMjYwMTAxMTYxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzlkMWIzY2ZjNWVmN2ZmZmQzZGQ1NWE1YWJhNzhhNDg4ZjVmZjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4saRLwZUu4t7gUAkgvi/TanSCCDO WluwsWfFqY0KRozP+/zMGt98AdXZ2d7RHfq5DXotCxSC5c54tume6ImHluYqR0wX W1/pfLTLyGXoc61XrJCruVNa7QQQ0LZAST3jtuBkBKEloNPypnFln3mlOCP6LU/M X/lkBRZ7Z2or0VG7qqWD5akkyDOoKuysEZ+PDRJt2mHnOa6FFaPFy2EAUj/R4vLm E/aSXRxjQOvJkNICHjVmuwwxAZ47GzWeVuXiEg6ybjjS03dIIgCBLthThQKZun3w Zglq21zHcTKeYY6fm8qafCizwIE89bbfWGVtnIIZbgMOgDk+6jUJc0XV6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFedGzz8Xvf//T3VWlq6eKSI9f91MB8GA1UdIwQY MBaAFBT7fDM2rNQYnT+sY5ooDZsAIPKYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlB0OE16YXMxQmlkUDZ4am1pZ05td0FnOHBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi82NGRmOGUtNGIwNC00MjIzLTg0Njct OTkzOWRmMWQwZDA5LzEvVjUwYlBQeGU5X185UGRWYVdycDRwSWoxXzNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi82NGRmOGUtNGIwNC00MjIzLTg0NjctOTkzOWRmMWQwZDA5 LzEvRlB0OE16YXMxQmlkUDZ4am1pZ05td0FnOHBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVp3MA0G CSqGSIb3DQEBCwUAA4IBAQAGX3W9eUc6GOXlDSa3HSiwP4++G8HHhsSpBRQjMHqN Sjc7JHTZT7jT1phwRZskBzxbh3U1YWQ3pUESbi3DrwIg/2aa8zJumDWiSNn3KDiV Jn2vt+0NQbk9me3YRknipxtyFu/CMge10Qw9IuZWIqBYQcTkkb9Ppk3PVUJgQIDF vqfwuhDtEqse22J9zKzyhz1UgMip1xby/iK6EzMynM33GzOL3cs1yfRay8i92Rma m0zSHG80I78pHg9jzh7KxGjM83OfVS/cYKdhHScIVgsZ5he+znbV8CTW1Z1XBsDS UQOIAU+ZkstP4Ug2ijMOi7l6EzcsG8EGOY6sD0FaRyvk -----END CERTIFICATE-----Generated at Fri Jan 9 17:04:39 2026 by rpki-client