This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/90VeTsjn9B8sRwyT-Zs2ngGAxnQ.roa File: 90VeTsjn9B8sRwyT-Zs2ngGAxnQ.roa (raw, json) Hash identifier: HsHpJVPkGZx/a9q98DQO2hXkEEporhKmeaG3iVC95GY= Subject key identifier: F7:45:5E:4E:C8:E7:F4:1F:2C:47:0C:93:F9:9B:36:9E:01:80:C6:74 Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Certificate serial: 019B7F80BF8191506007886935C2EB380D8D Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/90VeTsjn9B8sRwyT-Zs2ngGAxnQ.roa Signing time: Fri 02 Jan 2026 16:18:22 +0000 ROA not before: Fri 02 Jan 2026 16:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 37.128.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:bf:81:91:50:60:07:88:69:35:c2:eb:38:0d:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Validity Not Before: Jan 2 16:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7455e4ec8e7f41f2c470c93f99b369e0180c674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ce:d5:d8:46:90:5c:da:9c:e8:ca:75:62:df: 96:56:c4:c2:d9:ed:cd:0e:9f:b8:b0:3d:c9:cc:df: f4:95:b0:14:9c:87:e1:22:4f:cc:58:a5:c8:0f:6f: dd:09:a3:19:50:58:fc:68:a7:b4:d7:7b:cc:96:6b: 3e:dc:80:18:94:78:08:5a:1d:26:83:e0:eb:18:6c: 19:91:1b:d3:9c:cd:a4:ea:49:05:01:f2:a3:d0:62: a2:47:ae:2b:c6:0a:45:12:56:ba:53:17:a6:eb:23: c0:ae:ec:0d:91:18:e5:4c:40:c2:b0:9d:79:75:a6: c1:0a:7c:94:ed:4b:59:db:0d:48:26:b3:4e:07:fb: e1:fe:13:09:20:98:c4:6c:81:29:19:4a:ee:0d:37: ae:3a:80:fd:bf:5c:bd:04:f7:a6:45:44:08:79:e3: df:77:de:13:65:d9:fc:65:b1:08:f1:c6:8c:06:30: 72:32:26:ab:3a:8d:5e:a9:ca:aa:2c:d6:8e:e2:cc: 1f:29:db:7f:c2:cf:cc:76:48:82:ee:44:c5:28:5e: 17:3d:68:00:b1:2c:a1:8a:77:58:86:69:f7:ef:47: b3:d9:0d:3f:a9:cb:90:63:fa:e2:e4:f0:18:a0:e4: 80:ca:7c:74:90:ee:9d:50:0e:ac:6a:37:4b:3b:24: 9b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:45:5E:4E:C8:E7:F4:1F:2C:47:0C:93:F9:9B:36:9E:01:80:C6:74 X509v3 Authority Key Identifier: keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/90VeTsjn9B8sRwyT-Zs2ngGAxnQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.128.240.0/20 Signature Algorithm: sha256WithRSAEncryption 2b:65:c8:ce:3b:ec:65:b0:95:1c:ac:ac:59:e6:b9:d0:3d:6b: 50:aa:d9:c1:07:93:56:67:b0:77:f1:dd:1a:bc:bd:f5:e4:e8: 28:fc:f4:e6:49:97:b6:6a:2e:97:21:12:1e:78:dc:4a:ed:31: 8b:97:d8:67:43:7f:e5:8a:f6:31:02:54:56:cf:fd:25:1d:60: 83:61:52:38:cd:24:67:4d:e2:3b:3d:a5:73:c1:36:20:45:48: e7:25:2c:4a:37:a2:cc:0d:36:e1:c3:33:e2:f4:78:58:4d:f8: 41:3d:94:79:b6:65:dd:34:39:2a:06:68:7b:f1:39:f1:df:ab: c0:98:47:46:7a:78:47:cd:87:98:ee:9c:3a:a3:b9:08:68:e9: d8:3d:03:f0:7b:f3:62:c4:b9:92:53:4b:e6:f8:89:f3:58:ed: 1b:27:7e:5e:c8:50:2a:8d:48:52:cc:b4:ea:26:2b:b2:80:b6: 51:92:07:3f:23:d1:95:83:ee:c6:c5:50:1b:08:fe:70:6e:90: ea:cf:06:a8:81:1d:4e:b0:80:3c:c9:03:2d:17:b9:de:16:8e: 05:c2:9d:54:38:a0:f5:6b:34:6f:26:6c:2c:4d:4f:cb:7b:7e: 67:68:79:6a:61:5c:d9:75:50:c7:12:71:5e:73:95:89:f0:9a: 3c:f7:5e:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gL+BkVBgB4hpNcLrOA2NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl ZWNkYjYwHhcNMjYwMTAyMTYxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzQ1NWU0ZWM4ZTdmNDFmMmM0NzBjOTNmOTliMzY5ZTAxODBjNjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt87V2EaQXNqc6Mp1Yt+WVsTC2e3N Dp+4sD3JzN/0lbAUnIfhIk/MWKXID2/dCaMZUFj8aKe013vMlms+3IAYlHgIWh0m g+DrGGwZkRvTnM2k6kkFAfKj0GKiR64rxgpFEla6Uxem6yPAruwNkRjlTEDCsJ15 dabBCnyU7UtZ2w1IJrNOB/vh/hMJIJjEbIEpGUruDTeuOoD9v1y9BPemRUQIeePf d94TZdn8ZbEI8caMBjByMiarOo1eqcqqLNaO4swfKdt/ws/MdkiC7kTFKF4XPWgA sSyhindYhmn370ez2Q0/qcuQY/ri5PAYoOSAynx0kO6dUA6sajdLOySbHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPdFXk7I5/QfLEcMk/mbNp4BgMZ0MB8GA1UdIwQY MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt NjY0NTc3MjRjMmQzLzEvOTBWZVRzam45QjhzUnd5VC1aczJuZ0dBeG5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEJYDwMA0G CSqGSIb3DQEBCwUAA4IBAQArZcjOO+xlsJUcrKxZ5rnQPWtQqtnBB5NWZ7B38d0a vL315Ogo/PTmSZe2ai6XIRIeeNxK7TGLl9hnQ3/livYxAlRWz/0lHWCDYVI4zSRn TeI7PaVzwTYgRUjnJSxKN6LMDTbhwzPi9HhYTfhBPZR5tmXdNDkqBmh78Tnx36vA mEdGenhHzYeY7pw6o7kIaOnYPQPwe/NixLmSU0vm+InzWO0bJ35eyFAqjUhSzLTq JiuygLZRkgc/I9GVg+7GxVAbCP5wbpDqzwaogR1OsIA8yQMtF7neFo4Fwp1UOKD1 azRvJmwsTU/Le35naHlqYVzZdVDHEnFec5WJ8Jo8916A -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:50 2026 by rpki-client