This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/pblQLLIelXG_jpCdqyQDwPb0XUc.roa File: pblQLLIelXG_jpCdqyQDwPb0XUc.roa (raw, json) Hash identifier: /u3Gbz07RTbVh8feTDyGBzHJCEtGuqn+2UdQbLKXSP4= Subject key identifier: A5:B9:50:2C:B2:1E:95:71:BF:8E:90:9D:AB:24:03:C0:F6:F4:5D:47 Certificate issuer: /CN=f324d0f47297680535eb2799189db888b4066782 Certificate serial: 019B77593602106C4F306B50D94C4541D077 Authority key identifier: F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/pblQLLIelXG_jpCdqyQDwPb0XUc.roa Signing time: Thu 01 Jan 2026 02:18:13 +0000 ROA not before: Thu 01 Jan 2026 02:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30848 IP address blocks: 185.90.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 23:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:36:02:10:6c:4f:30:6b:50:d9:4c:45:41:d0:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f324d0f47297680535eb2799189db888b4066782 Validity Not Before: Jan 1 02:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5b9502cb21e9571bf8e909dab2403c0f6f45d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:20:2d:47:92:ad:89:af:2b:89:d2:67:ec:01: d4:a0:6a:aa:a1:98:a5:e7:c4:b6:57:54:f4:a3:34: 41:1f:03:ac:24:f1:01:87:a0:b3:28:65:1e:36:8e: a2:fa:9c:fa:2a:e8:e2:50:45:41:2a:4f:c7:3e:34: e6:70:1d:74:26:52:db:b9:a1:ae:7e:b9:ea:00:74: d3:00:2c:fe:ab:65:4f:1a:c9:42:49:a4:33:24:94: 97:70:fc:c1:ca:5d:7d:d6:09:63:cc:41:35:fa:22: bb:9f:99:8e:e4:cd:37:0d:ad:79:26:c2:ed:cf:78: bd:cc:3a:b7:09:ad:b9:73:84:5d:39:00:03:a7:a3: bd:4b:4d:fc:cf:01:4d:7b:b1:c1:5e:5c:3f:5b:41: 94:d8:45:5d:37:50:3a:0c:be:d7:55:c4:dc:47:11: 1d:56:c9:f0:55:a4:f3:12:37:5e:0e:0b:48:39:8a: bf:22:60:52:5a:2e:4f:58:58:0b:31:af:5b:db:57: af:34:ef:d2:b4:07:70:ab:c3:c8:93:2a:50:0d:7d: 37:d5:df:9d:27:01:77:4e:98:34:c8:46:72:fe:d5: 47:97:73:c7:d3:23:30:e4:c1:1f:14:a2:1c:ca:3d: 39:46:32:b7:37:00:35:e5:b6:b4:af:51:31:01:11: 70:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B9:50:2C:B2:1E:95:71:BF:8E:90:9D:AB:24:03:C0:F6:F4:5D:47 X509v3 Authority Key Identifier: keyid:F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/pblQLLIelXG_jpCdqyQDwPb0XUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.90.68.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:e4:3a:c4:b8:7f:66:51:f5:bd:60:d3:f8:6f:d8:07:93:98: ac:d9:8c:f0:01:7f:02:00:3d:c8:75:91:a1:63:e0:e2:35:20: 6c:98:f2:46:13:57:b5:c0:a1:c6:86:02:53:2e:8b:0f:6d:ef: ad:1a:96:9f:e0:2c:81:8a:5e:e3:62:6e:65:69:85:74:34:98: 27:49:4d:89:39:98:22:1c:d2:2d:6d:40:13:c0:0a:03:4c:7c: e7:0b:7e:fc:a7:7b:40:c5:01:0c:ee:8f:65:d2:57:23:4e:81: 15:cb:8f:1d:da:fb:0a:07:a6:fa:6e:3f:2b:8d:e8:84:c6:f3: 92:21:50:91:45:15:04:91:ea:da:bd:fa:0a:e2:16:2b:ef:24: c4:29:28:bc:61:54:97:fb:00:c9:f9:f5:80:03:aa:24:be:82: 66:a2:6a:33:5b:5f:23:70:fb:d0:a6:06:36:5d:10:e0:9b:72: aa:33:e0:7a:0e:35:87:97:60:ee:c2:3f:0b:f1:6c:fd:8c:93: d9:c9:0d:a6:62:0b:94:a0:5e:37:0b:bb:42:cf:62:6d:85:ca: 37:ce:02:f0:a1:fb:e3:c5:e7:e5:48:1d:f3:a7:84:d0:af:ee: b4:86:37:92:a8:b7:3a:ed:5f:ed:88:fa:17:fa:16:2a:cc:66: 8f:8c:e2:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WTYCEGxPMGtQ2UxFQdB3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjRkMGY0NzI5NzY4MDUzNWViMjc5OTE4OWRiODg4YjQw NjY3ODIwHhcNMjYwMTAxMDIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWI5NTAyY2IyMWU5NTcxYmY4ZTkwOWRhYjI0MDNjMGY2ZjQ1ZDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSAtR5Ktia8ridJn7AHUoGqqoZil 58S2V1T0ozRBHwOsJPEBh6CzKGUeNo6i+pz6KujiUEVBKk/HPjTmcB10JlLbuaGu frnqAHTTACz+q2VPGslCSaQzJJSXcPzByl191gljzEE1+iK7n5mO5M03Da15JsLt z3i9zDq3Ca25c4RdOQADp6O9S038zwFNe7HBXlw/W0GU2EVdN1A6DL7XVcTcRxEd VsnwVaTzEjdeDgtIOYq/ImBSWi5PWFgLMa9b21evNO/StAdwq8PIkypQDX031d+d JwF3Tpg0yEZy/tVHl3PH0yMw5MEfFKIcyj05RjK3NwA15ba0r1ExARFwnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKW5UCyyHpVxv46QnaskA8D29F1HMB8GA1UdIwQY MBaAFPMk0PRyl2gFNesnmRiduIi0BmeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlUUTlIS1hhQVUxNnllWkdKMjRpTFFHWjRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC85MGQzNjYtMmZhYi00N2U1LTkwYjkt MDI2NWU1Y2Q2OTY2LzEvcGJsUUxMSWVsWEdfanBDZHF5UUR3UGIwWFVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC85MGQzNjYtMmZhYi00N2U1LTkwYjktMDI2NWU1Y2Q2OTY2 LzEvOHlUUTlIS1hhQVUxNnllWkdKMjRpTFFHWjRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVpEMA0G CSqGSIb3DQEBCwUAA4IBAQAL5DrEuH9mUfW9YNP4b9gHk5is2YzwAX8CAD3IdZGh Y+DiNSBsmPJGE1e1wKHGhgJTLosPbe+tGpaf4CyBil7jYm5laYV0NJgnSU2JOZgi HNItbUATwAoDTHznC378p3tAxQEM7o9l0lcjToEVy48d2vsKB6b6bj8rjeiExvOS IVCRRRUEkeravfoK4hYr7yTEKSi8YVSX+wDJ+fWAA6okvoJmomozW18jcPvQpgY2 XRDgm3KqM+B6DjWHl2Duwj8L8Wz9jJPZyQ2mYguUoF43C7tCz2Jthco3zgLwofvj xeflSB3zp4TQr+60hjeSqLc67V/tiPoX+hYqzGaPjOI9 -----END CERTIFICATE-----Generated at Tue Jan 27 08:30:42 2026 by rpki-client