This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe4179-a21d-4ea4-8a1a-d57a4da4cc1e/1/h90SUmw4PVrpoCMUAoczhUm4mmc.roa File: h90SUmw4PVrpoCMUAoczhUm4mmc.roa (raw, json) Hash identifier: OJd1fxbbJrrbja2c68nFBqAepOB23BCWXwj4IjbBGdY= Subject key identifier: 87:DD:12:52:6C:38:3D:5A:E9:A0:23:14:02:87:33:85:49:B8:9A:67 Certificate issuer: /CN=78220e2d4a591497c0f91b880ce6f0a3e47770e4 Certificate serial: 019B77591F1B91CF9989C0D29562E881315F Authority key identifier: 78:22:0E:2D:4A:59:14:97:C0:F9:1B:88:0C:E6:F0:A3:E4:77:70:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eCIOLUpZFJfA-RuIDObwo-R3cOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe4179-a21d-4ea4-8a1a-d57a4da4cc1e/1/h90SUmw4PVrpoCMUAoczhUm4mmc.roa Signing time: Thu 01 Jan 2026 02:18:07 +0000 ROA not before: Thu 01 Jan 2026 02:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15368 IP address blocks: 213.183.192.0/20 maxlen: 20 213.183.208.0/21 maxlen: 21 2a00:4e00::/36 maxlen: 36 2a00:4e00:1000::/36 maxlen: 36 2a00:4e00:2000::/36 maxlen: 36 2a00:4e00:3000::/36 maxlen: 36 2a00:4e00:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe4179-a21d-4ea4-8a1a-d57a4da4cc1e/1/eCIOLUpZFJfA-RuIDObwo-R3cOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe4179-a21d-4ea4-8a1a-d57a4da4cc1e/1/eCIOLUpZFJfA-RuIDObwo-R3cOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/eCIOLUpZFJfA-RuIDObwo-R3cOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:1f:1b:91:cf:99:89:c0:d2:95:62:e8:81:31:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78220e2d4a591497c0f91b880ce6f0a3e47770e4 Validity Not Before: Jan 1 02:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87dd12526c383d5ae9a023140287338549b89a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b9:e3:f1:d3:b4:de:bd:9f:8f:d0:94:02:43: 5b:b6:e8:7a:fc:25:dc:e4:db:b8:b4:5b:94:73:43: 57:02:ee:28:56:36:53:54:34:33:5e:9a:1e:13:de: d3:7f:e8:00:f2:fb:22:1b:3e:6e:af:3d:41:85:52: 5a:ed:7d:27:54:22:91:ca:cd:1f:0d:1e:f7:dd:53: c3:7f:57:0c:70:50:cb:0f:75:76:3a:be:dd:0a:bb: d0:24:fd:89:92:5a:b4:9c:c4:bb:e8:6c:d2:61:d4: 0c:4a:a1:d2:5e:9f:b3:12:e1:fe:e8:9e:28:cb:86: 62:8e:bf:fb:67:8f:47:fc:62:28:ed:bc:d5:98:00: 62:62:b7:07:33:41:25:a4:d0:a8:7d:dc:2a:f9:d4: 09:76:8e:d2:6d:f5:eb:9a:53:61:37:17:1b:1c:ab: 53:98:e5:2b:b6:3b:13:04:a7:3f:41:2b:d5:6b:b3: a4:30:52:73:d1:4a:05:8c:d6:f4:01:09:38:ea:f1: ef:12:ce:ad:9d:97:56:7a:99:26:df:6c:9a:de:35: a8:72:12:5f:4a:e8:eb:90:b0:be:01:f7:eb:91:84: bc:e7:e5:0b:41:fe:65:7d:5d:47:b4:d2:2b:5c:25: 65:00:86:a8:68:84:76:d6:04:35:21:fd:27:5b:54: 78:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DD:12:52:6C:38:3D:5A:E9:A0:23:14:02:87:33:85:49:B8:9A:67 X509v3 Authority Key Identifier: keyid:78:22:0E:2D:4A:59:14:97:C0:F9:1B:88:0C:E6:F0:A3:E4:77:70:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCIOLUpZFJfA-RuIDObwo-R3cOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe4179-a21d-4ea4-8a1a-d57a4da4cc1e/1/h90SUmw4PVrpoCMUAoczhUm4mmc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe4179-a21d-4ea4-8a1a-d57a4da4cc1e/1/eCIOLUpZFJfA-RuIDObwo-R3cOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.183.192.0-213.183.215.255 IPv6: 2a00:4e00::-2a00:4e00:4fff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 10:d1:fa:f1:6d:4a:c6:fd:31:36:a8:aa:9a:8f:fd:70:f2:c6: d7:41:8e:72:43:32:33:2c:44:3c:9b:dc:e0:5d:0f:38:55:58: 71:bb:c2:8a:f4:14:5a:5b:83:df:be:1d:c0:5c:87:71:cb:86: b0:87:47:61:c5:56:59:2e:3b:94:35:ab:b6:aa:96:b5:01:7b: cc:3f:d8:1a:93:72:f9:5a:ed:49:f6:ac:f2:e0:a8:00:eb:ea: 3a:fe:60:f0:f9:ae:a5:3a:f3:d1:af:5f:45:ef:3a:3a:8a:7b: fc:ac:af:80:41:2a:bb:9c:62:a1:f9:ed:e4:7b:ff:5c:fe:a4: e1:05:b1:76:99:ae:a0:80:22:22:36:70:ba:b3:f1:52:86:cf: 22:12:b4:f7:e4:af:9d:32:91:0f:18:87:b4:18:34:e9:5c:34: a1:40:c5:d1:72:7e:71:e7:86:5a:3c:7b:1b:5d:c5:05:ab:b6: e2:2d:08:14:b1:d9:a9:b2:48:30:90:ca:a3:4e:ac:8d:c1:5a: f2:38:cb:42:70:02:75:07:ff:1e:39:b5:bd:a0:ab:e5:87:cf: 77:ec:a9:41:f4:33:79:05:29:db:f8:8a:7a:de:dd:b9:fb:01: 33:84:13:e2:b6:f4:9d:56:8f:49:eb:af:e8:f6:66:a9:06:42: e9:f6:27:f9 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt3WR8bkc+ZicDSlWLogTFfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4MjIwZTJkNGE1OTE0OTdjMGY5MWI4ODBjZTZmMGEzZTQ3 NzcwZTQwHhcNMjYwMTAxMDIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2RkMTI1MjZjMzgzZDVhZTlhMDIzMTQwMjg3MzM4NTQ5Yjg5YTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7nj8dO03r2fj9CUAkNbtuh6/CXc 5Nu4tFuUc0NXAu4oVjZTVDQzXpoeE97Tf+gA8vsiGz5urz1BhVJa7X0nVCKRys0f DR733VPDf1cMcFDLD3V2Or7dCrvQJP2Jklq0nMS76GzSYdQMSqHSXp+zEuH+6J4o y4Zijr/7Z49H/GIo7bzVmABiYrcHM0ElpNCofdwq+dQJdo7SbfXrmlNhNxcbHKtT mOUrtjsTBKc/QSvVa7OkMFJz0UoFjNb0AQk46vHvEs6tnZdWepkm32ya3jWochJf SujrkLC+AffrkYS85+ULQf5lfV1HtNIrXCVlAIaoaIR21gQ1If0nW1R49wIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFIfdElJsOD1a6aAjFAKHM4VJuJpnMB8GA1UdIwQY MBaAFHgiDi1KWRSXwPkbiAzm8KPkd3DkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUNJT0xVcFpGSmZBLVJ1SURPYndvLVIzY09RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTQxNzktYTIxZC00ZWE0LThhMWEt ZDU3YTRkYTRjYzFlLzEvaDkwU1VtdzRQVnJwb0NNVUFvY3poVW00bW1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTQxNzktYTIxZC00ZWE0LThhMWEtZDU3YTRkYTRjYzFl LzEvZUNJT0xVcFpGSmZBLVJ1SURPYndvLVIzY09RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAUBAIAATAOMAwDBAbVt8AD BAPVt9AwFgQCAAIwEDAOAwQBKgBOAwYEKgBOAEAwDQYJKoZIhvcNAQELBQADggEB ABDR+vFtSsb9MTaoqpqP/XDyxtdBjnJDMjMsRDyb3OBdDzhVWHG7wor0FFpbg9++ HcBch3HLhrCHR2HFVlkuO5Q1q7aqlrUBe8w/2BqTcvla7Un2rPLgqADr6jr+YPD5 rqU689GvX0XvOjqKe/ysr4BBKrucYqH57eR7/1z+pOEFsXaZrqCAIiI2cLqz8VKG zyIStPfkr50ykQ8Yh7QYNOlcNKFAxdFyfnHnhlo8extdxQWrtuItCBSx2amySDCQ yqNOrI3BWvI4y0JwAnUH/x45tb2gq+WHz3fsqUH0M3kFKdv4inre3bn7ATOEE+K2 9J1Wj0nrr+j2ZqkGQun2J/k= -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:34 2026 by rpki-client