This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/90vvtkrkAMGYzz8QxxavAe6DrCY.roa File: 90vvtkrkAMGYzz8QxxavAe6DrCY.roa (raw, json) Hash identifier: TG20gZKtR2MxO/jwaweSu/ZIE48KIk206vldUHECSqQ= Subject key identifier: F7:4B:EF:B6:4A:E4:00:C1:98:CF:3F:10:C7:16:AF:01:EE:83:AC:26 Certificate issuer: /CN=20105484f187f2087d120cad971d682db3159965 Certificate serial: 019B7CED6F1EB9EC9BE3F2242F74E9A13FF0 Authority key identifier: 20:10:54:84:F1:87:F2:08:7D:12:0C:AD:97:1D:68:2D:B3:15:99:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBBUhPGH8gh9Egytlx1oLbMVmWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/90vvtkrkAMGYzz8QxxavAe6DrCY.roa Signing time: Fri 02 Jan 2026 04:18:13 +0000 ROA not before: Fri 02 Jan 2026 04:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200372 IP address blocks: 2001:67c:b40::/48 maxlen: 48 2a14:8b80::/32 maxlen: 48 2a14:8b81::/32 maxlen: 48 2a14:8b82::/32 maxlen: 48 2a14:8b83::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.crl rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft rsync://rpki.ripe.net/repository/DEFAULT/IBBUhPGH8gh9Egytlx1oLbMVmWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:6f:1e:b9:ec:9b:e3:f2:24:2f:74:e9:a1:3f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20105484f187f2087d120cad971d682db3159965 Validity Not Before: Jan 2 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f74befb64ae400c198cf3f10c716af01ee83ac26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a8:38:40:cc:fb:52:d4:bf:ec:fb:d4:9f:10: a0:40:59:c0:cc:c4:17:90:ec:db:eb:32:48:b5:0b: 6f:af:c3:19:c4:8a:f7:34:81:90:8d:bd:66:f7:61: d7:27:95:ce:33:2d:89:74:80:92:67:63:19:7b:24: 13:9a:e9:ec:4d:88:92:dc:d1:1d:41:95:01:30:42: e7:d5:56:43:df:b9:1b:92:48:41:15:ca:e1:5f:3c: e4:9a:a9:bc:a2:2d:8e:99:1a:27:e7:34:15:35:13: 98:4c:07:2c:01:c3:bf:d4:0a:7f:40:c2:b4:cd:92: ce:bc:80:dc:e0:24:21:6c:9a:40:3d:eb:c9:ef:b9: af:c6:6b:29:03:fd:40:97:ef:74:10:17:48:f3:d6: 97:f7:52:fe:70:81:58:71:ff:66:81:20:22:7a:a6: a4:13:8b:0d:85:a9:28:fa:d1:22:94:c5:9f:15:bd: e4:5c:b9:b5:c1:43:03:4f:de:5e:11:6b:d3:dd:db: a4:c6:c0:7c:a5:09:da:05:bf:5f:85:9e:be:5f:e3: fd:cd:9b:17:aa:8f:f6:7e:8f:b1:e9:0d:4c:55:57: f9:7f:d5:f9:3d:b0:f7:b0:c3:bc:e1:10:07:61:ba: c7:2d:c9:55:2a:ee:35:99:c1:56:a7:6c:ee:11:09: 7d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:4B:EF:B6:4A:E4:00:C1:98:CF:3F:10:C7:16:AF:01:EE:83:AC:26 X509v3 Authority Key Identifier: keyid:20:10:54:84:F1:87:F2:08:7D:12:0C:AD:97:1D:68:2D:B3:15:99:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBBUhPGH8gh9Egytlx1oLbMVmWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/90vvtkrkAMGYzz8QxxavAe6DrCY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:b40::/48 2a14:8b80::/30 Signature Algorithm: sha256WithRSAEncryption 4a:5b:9d:91:a4:04:bc:a3:c4:e6:fd:dd:cb:a4:3d:f4:72:4e: ab:ef:e5:f8:77:3b:98:70:d7:84:a4:74:e3:2b:9a:a5:4b:88: 9f:11:c5:b0:34:2e:96:86:8b:73:0d:28:76:23:bb:38:74:09: 8d:a8:e2:22:8d:cb:65:51:5d:1b:92:bc:85:52:b8:ef:bd:8d: 59:d4:53:76:38:ce:c1:cc:3a:98:4d:bb:b8:93:24:53:67:87: 95:c2:29:de:63:b8:df:8b:7b:a3:f5:4f:c9:43:69:70:b4:ae: 5e:ad:93:fb:91:09:5b:e4:04:66:82:11:db:16:5c:ab:63:c2: c7:92:78:97:53:7a:1d:2c:b4:8e:dc:84:4a:a2:13:60:de:5c: fa:47:16:50:19:3f:d5:85:f1:33:b6:de:96:3d:53:e8:ee:a3: e9:62:db:67:de:a8:c5:aa:ed:60:92:57:b2:cf:d5:cb:d4:a8: ad:86:c0:6e:bc:0b:9d:ad:31:c9:c4:47:a6:24:e5:da:c1:80: d4:8a:e5:9f:be:d3:a5:ac:33:5c:7a:db:69:f3:f7:2c:78:a3: 69:2b:86:6e:ec:36:dc:4b:b5:10:6b:54:9a:44:36:70:87:83: de:60:6a:a6:47:50:0b:4a:06:c6:06:67:39:8f:53:1f:ce:ff: fc:cb:96:90 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt87W8eueyb4/IkL3TpoT/wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMTA1NDg0ZjE4N2YyMDg3ZDEyMGNhZDk3MWQ2ODJkYjMx NTk5NjUwHhcNMjYwMTAyMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzRiZWZiNjRhZTQwMGMxOThjZjNmMTBjNzE2YWYwMWVlODNhYzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKg4QMz7UtS/7PvUnxCgQFnAzMQX kOzb6zJItQtvr8MZxIr3NIGQjb1m92HXJ5XOMy2JdICSZ2MZeyQTmunsTYiS3NEd QZUBMELn1VZD37kbkkhBFcrhXzzkmqm8oi2OmRon5zQVNROYTAcsAcO/1Ap/QMK0 zZLOvIDc4CQhbJpAPevJ77mvxmspA/1Al+90EBdI89aX91L+cIFYcf9mgSAieqak E4sNhako+tEilMWfFb3kXLm1wUMDT95eEWvT3dukxsB8pQnaBb9fhZ6+X+P9zZsX qo/2fo+x6Q1MVVf5f9X5PbD3sMO84RAHYbrHLclVKu41mcFWp2zuEQl9YwIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFPdL77ZK5ADBmM8/EMcWrwHug6wmMB8GA1UdIwQY MBaAFCAQVITxh/IIfRIMrZcdaC2zFZllMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUJCVWhQR0g4Z2g5RWd5dGx4MW9MYk1WbVdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9jZWY2ZDAtZjQ4OC00ZDI1LTg2YjUt MjZhZWY4ODJmOTRmLzEvOTB2dnRrcmtBTUdZeno4UXh4YXZBZTZEckNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9jZWY2ZDAtZjQ4OC00ZDI1LTg2YjUtMjZhZWY4ODJmOTRm LzEvSUJCVWhQR0g4Z2g5RWd5dGx4MW9MYk1WbVdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwcAIAEGfAtA AwUCKhSLgDANBgkqhkiG9w0BAQsFAAOCAQEASludkaQEvKPE5v3dy6Q99HJOq+/l +Hc7mHDXhKR04yuapUuInxHFsDQuloaLcw0odiO7OHQJjajiIo3LZVFdG5K8hVK4 772NWdRTdjjOwcw6mE27uJMkU2eHlcIp3mO434t7o/VPyUNpcLSuXq2T+5EJW+QE ZoIR2xZcq2PCx5J4l1N6HSy0jtyESqITYN5c+kcWUBk/1YXxM7belj1T6O6j6WLb Z96oxartYJJXss/Vy9SorYbAbrwLna0xycRHpiTl2sGA1Irln77TpawzXHrbafP3 LHijaSuGbuw23Eu1EGtUmkQ2cIeD3mBqpkdQC0oGxgZnOY9TH87//MuWkA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:58:10 2026 by rpki-client