This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/RCrEVHPQO5ZNEyF8KAmfbYplEFM.roa File: RCrEVHPQO5ZNEyF8KAmfbYplEFM.roa (raw, json) Hash identifier: hi87IK6C5zmMGdTPjH6NsPzFrsGUyr24qNPoi0fsEN4= Subject key identifier: 44:2A:C4:54:73:D0:3B:96:4D:13:21:7C:28:09:9F:6D:8A:65:10:53 Certificate issuer: /CN=8fc2eda547887a5b4503d90592ea505658da6e7a Certificate serial: 019B7758C1785DC114ED6CE0F7A7702E23DD Authority key identifier: 8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/RCrEVHPQO5ZNEyF8KAmfbYplEFM.roa Signing time: Thu 01 Jan 2026 02:17:43 +0000 ROA not before: Thu 01 Jan 2026 02:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50061 IP address blocks: 91.151.24.0/21 maxlen: 24 195.234.12.0/23 maxlen: 24 212.90.104.0/22 maxlen: 24 2a01:6bc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c1:78:5d:c1:14:ed:6c:e0:f7:a7:70:2e:23:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc2eda547887a5b4503d90592ea505658da6e7a Validity Not Before: Jan 1 02:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=442ac45473d03b964d13217c28099f6d8a651053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:22:6c:4c:cb:af:01:3f:64:12:1e:82:bd:96: f4:98:a3:df:90:3d:8c:37:7f:06:8d:3c:2d:ef:f5: 64:2f:33:43:dd:58:10:d3:5d:e3:4d:c3:ef:47:62: 6a:f7:74:72:c7:16:f3:4d:b7:b0:df:41:08:e5:f0: b7:5f:1d:85:73:55:03:9f:2f:37:32:fa:72:67:5b: 0a:ca:7e:fc:aa:7e:1a:f7:09:6c:d3:91:64:37:da: 17:7c:a7:3a:46:9b:82:5a:47:6e:5c:91:6d:1b:fb: f8:f8:6c:d5:83:94:a4:a5:94:4a:ff:c0:9e:18:da: b4:fa:57:74:16:6e:da:0f:7e:51:54:76:8e:6b:bd: 5f:c5:fc:9f:f4:9f:22:05:93:69:f2:58:c6:aa:c0: 08:62:db:67:e8:6a:f3:f9:fe:cb:ca:01:dd:d9:e2: ad:ea:6a:56:66:c5:3d:67:a1:19:31:d0:5a:40:ee: 7e:b6:b5:23:87:92:9d:3a:4b:42:b0:ca:8d:20:bf: 59:0d:43:22:af:29:b4:8b:65:9e:e4:44:96:21:b6: 89:05:68:a2:63:d2:85:d0:28:cc:17:a2:33:af:0d: 8f:d5:cb:f6:f6:c5:6d:f4:b1:7d:a0:d3:8d:90:10: ff:3d:be:96:8e:00:7e:c9:fd:6c:05:8e:4c:c6:36: c7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2A:C4:54:73:D0:3B:96:4D:13:21:7C:28:09:9F:6D:8A:65:10:53 X509v3 Authority Key Identifier: keyid:8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/RCrEVHPQO5ZNEyF8KAmfbYplEFM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.151.24.0/21 195.234.12.0/23 212.90.104.0/22 IPv6: 2a01:6bc0::/32 Signature Algorithm: sha256WithRSAEncryption b5:78:06:78:f3:67:93:9c:17:95:d3:50:a9:0a:ea:1e:65:a7: df:7c:8e:f8:10:1a:2c:a8:2a:77:a2:da:fa:f8:4a:f0:cc:c4: 69:68:c1:9b:07:67:be:b1:6f:74:99:b6:5a:3a:c1:8d:84:0f: 34:7c:83:85:d6:04:e7:a3:4e:ab:2c:29:51:4b:50:f9:51:71: a1:26:ff:ef:99:75:6c:c8:cd:9c:16:63:c7:10:6f:74:b3:7d: 94:9f:c0:bb:f9:7a:07:f2:e1:92:4d:de:b7:ea:20:84:7d:86: 03:55:69:6d:cc:ba:ea:20:b6:9e:26:67:f7:25:21:23:2d:80: 9d:34:0c:df:8e:1c:5f:a3:06:85:f7:4a:6c:a4:d8:29:fe:a1: 17:d9:4e:43:7a:6a:a1:2e:62:c2:a6:83:e6:e5:61:23:73:28: 46:d6:e9:de:54:5d:22:be:f2:41:72:65:80:de:71:b3:72:99: 9d:f9:13:95:2f:d1:6f:b3:73:e5:ad:b6:1f:03:7f:d6:bf:c0: 17:56:e0:55:41:fd:39:c7:5e:08:78:04:1c:a8:98:2f:0b:31: 0f:04:f3:2f:fe:2c:9c:09:ce:be:fb:92:5d:89:4b:b8:ad:68: 61:bb:70:9a:68:3f:7f:f1:9a:4b:5d:61:9b:a4:d1:30:ab:01: bd:2a:73:77 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt3WMF4XcEU7Wzg96dwLiPdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYzJlZGE1NDc4ODdhNWI0NTAzZDkwNTkyZWE1MDU2NThk YTZlN2EwHhcNMjYwMTAxMDIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDJhYzQ1NDczZDAzYjk2NGQxMzIxN2MyODA5OWY2ZDhhNjUxMDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiJsTMuvAT9kEh6CvZb0mKPfkD2M N38GjTwt7/VkLzND3VgQ013jTcPvR2Jq93RyxxbzTbew30EI5fC3Xx2Fc1UDny83 MvpyZ1sKyn78qn4a9wls05FkN9oXfKc6RpuCWkduXJFtG/v4+GzVg5SkpZRK/8Ce GNq0+ld0Fm7aD35RVHaOa71fxfyf9J8iBZNp8ljGqsAIYttn6Grz+f7LygHd2eKt 6mpWZsU9Z6EZMdBaQO5+trUjh5KdOktCsMqNIL9ZDUMirym0i2We5ESWIbaJBWii Y9KF0CjMF6Izrw2P1cv29sVt9LF9oNONkBD/Pb6WjgB+yf1sBY5MxjbHVQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFEQqxFRz0DuWTRMhfCgJn22KZRBTMB8GA1UdIwQY MBaAFI/C7aVHiHpbRQPZBZLqUFZY2m56MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajhMdHBVZUllbHRGQTlrRmt1cFFWbGphYm5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85MGYxODAtMWY3Ni00NmZjLWE3MjEt MTY4MTM3MGQ5YzEwLzEvUkNyRVZIUFFPNVpORXlGOEtBbWZiWXBsRUZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85MGYxODAtMWY3Ni00NmZjLWE3MjEtMTY4MTM3MGQ5YzEw LzEvajhMdHBVZUllbHRGQTlrRmt1cFFWbGphYm5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDW5cYAwQB w+oMAwQC1FpoMA0EAgACMAcDBQAqAWvAMA0GCSqGSIb3DQEBCwUAA4IBAQC1eAZ4 82eTnBeV01CpCuoeZafffI74EBosqCp3otr6+ErwzMRpaMGbB2e+sW90mbZaOsGN hA80fIOF1gTno06rLClRS1D5UXGhJv/vmXVsyM2cFmPHEG90s32Un8C7+XoH8uGS Td636iCEfYYDVWltzLrqILaeJmf3JSEjLYCdNAzfjhxfowaF90pspNgp/qEX2U5D emqhLmLCpoPm5WEjcyhG1uneVF0ivvJBcmWA3nGzcpmd+ROVL9Fvs3PlrbYfA3/W v8AXVuBVQf05x14IeAQcqJgvCzEPBPMv/iycCc6++5JdiUu4rWhhu3CaaD9/8ZpL XWGbpNEwqwG9KnN3 -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:27 2026 by rpki-client