This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/tH6UAUlHkrphiRbu61-HSS86nXk.roa File: tH6UAUlHkrphiRbu61-HSS86nXk.roa (raw, json) Hash identifier: WUdezRc32+vmp8r5srct60iy1f5vPUfnPMrswiz/mE0= Subject key identifier: B4:7E:94:01:49:47:92:BA:61:89:16:EE:EB:5F:87:49:2F:3A:9D:79 Certificate issuer: /CN=94ca595385505455b8cb1d90e946ef7b0b6f5d3f Certificate serial: 019B76EB8BE45EAB7803146C287530A6A2BE Authority key identifier: 94:CA:59:53:85:50:54:55:B8:CB:1D:90:E9:46:EF:7B:0B:6F:5D:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/tH6UAUlHkrphiRbu61-HSS86nXk.roa Signing time: Thu 01 Jan 2026 00:18:26 +0000 ROA not before: Thu 01 Jan 2026 00:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212637 IP address blocks: 185.190.90.0/24 maxlen: 24 2a13:500::/32 maxlen: 33 2a13:500::/33 maxlen: 33 2a13:500:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8b:e4:5e:ab:78:03:14:6c:28:75:30:a6:a2:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94ca595385505455b8cb1d90e946ef7b0b6f5d3f Validity Not Before: Jan 1 00:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b47e9401494792ba618916eeeb5f87492f3a9d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:61:6f:19:21:7c:33:9d:a6:73:f8:76:1f:ea: 35:b2:2e:7c:48:33:91:8c:d6:55:e3:e9:76:19:84: 29:b3:68:f3:78:3e:63:67:03:5f:e6:ba:fc:fb:28: 1f:de:ec:ec:02:6d:13:22:41:af:08:d1:20:7b:f1: 72:1e:3e:25:c7:39:1b:bb:14:db:3e:5c:1c:30:b0: 83:20:32:70:87:80:2d:bb:e3:03:73:4e:b1:00:e1: e3:69:4e:4c:17:b0:a5:29:bb:90:a7:55:e8:76:a8: 5e:16:35:b2:3a:1d:e8:44:37:5f:09:0e:9f:8d:48: 42:32:e9:11:60:ba:ea:12:a2:c2:8b:ac:68:9a:69: ff:82:0e:a1:a2:fc:41:6f:97:37:80:42:f7:f6:37: 44:e7:d8:bc:3f:10:b0:e3:3f:14:70:73:d8:88:8d: b0:39:d4:82:40:86:27:2a:f3:c8:bc:2d:bd:5f:8c: 0a:61:79:4f:8b:06:fe:bd:eb:92:93:d7:df:57:d6: 7e:75:5d:8f:b9:41:92:92:eb:1d:6f:ad:ae:34:d8: 3a:c3:71:8d:10:1a:a1:22:9a:9e:f9:7a:a0:29:5c: e9:3c:fd:4d:d1:70:27:de:82:f4:96:c8:bc:91:87: 04:1f:bd:a1:d4:eb:ad:13:56:d4:bc:89:55:d6:79: 70:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:7E:94:01:49:47:92:BA:61:89:16:EE:EB:5F:87:49:2F:3A:9D:79 X509v3 Authority Key Identifier: keyid:94:CA:59:53:85:50:54:55:B8:CB:1D:90:E9:46:EF:7B:0B:6F:5D:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/tH6UAUlHkrphiRbu61-HSS86nXk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.190.90.0/24 IPv6: 2a13:500::/32 Signature Algorithm: sha256WithRSAEncryption 80:88:f9:22:d4:76:3b:8a:d4:ff:5b:68:d4:28:f2:79:2b:71: 03:d6:b8:c5:d5:57:bf:0a:79:e6:1d:cc:57:84:a3:85:1c:15: d5:26:60:78:cf:7d:85:e2:d9:d4:26:0b:7a:8c:71:c2:0e:a5: b3:62:ca:1f:cb:b9:43:d4:a8:2e:b2:fe:7d:62:44:f1:d8:79: 20:d0:8b:27:4d:57:68:f1:17:73:ad:84:04:fd:97:d0:67:90: ea:cd:9d:98:d8:aa:e4:40:67:c5:bc:7e:0f:c0:ad:51:55:8b: ef:97:94:8d:c1:6f:c0:66:a4:1e:b5:2a:98:39:e9:d7:09:d0: 84:ba:a5:a9:6a:ee:ae:79:d6:50:a4:6d:db:f3:0b:06:68:cc: 6d:b1:3b:53:c2:5b:d2:49:b4:66:81:24:9d:4c:e7:9e:39:44: 45:eb:65:60:d7:e8:4d:74:30:0a:3f:69:f2:47:bb:74:0e:25: 84:f7:9f:e6:3a:50:57:25:73:4d:28:f6:26:74:48:24:98:1c: bf:bb:49:87:b8:5d:8d:d4:01:76:e2:f8:26:2d:b8:1d:c4:77: 42:32:10:42:de:6a:00:a6:b8:64:ed:ad:9e:16:de:a3:8d:f8: b1:2a:bb:f6:c4:4f:a4:85:eb:4a:3b:e5:75:01:90:96:b1:fc: a4:39:dc:c5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt264vkXqt4AxRsKHUwpqK+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0Y2E1OTUzODU1MDU0NTViOGNiMWQ5MGU5NDZlZjdiMGI2 ZjVkM2YwHhcNMjYwMTAxMDAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDdlOTQwMTQ5NDc5MmJhNjE4OTE2ZWVlYjVmODc0OTJmM2E5ZDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WFvGSF8M52mc/h2H+o1si58SDOR jNZV4+l2GYQps2jzeD5jZwNf5rr8+ygf3uzsAm0TIkGvCNEge/FyHj4lxzkbuxTb PlwcMLCDIDJwh4Atu+MDc06xAOHjaU5MF7ClKbuQp1XodqheFjWyOh3oRDdfCQ6f jUhCMukRYLrqEqLCi6xommn/gg6hovxBb5c3gEL39jdE59i8PxCw4z8UcHPYiI2w OdSCQIYnKvPIvC29X4wKYXlPiwb+veuSk9ffV9Z+dV2PuUGSkusdb62uNNg6w3GN EBqhIpqe+XqgKVzpPP1N0XAn3oL0lsi8kYcEH72h1OutE1bUvIlV1nlw7wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLR+lAFJR5K6YYkW7utfh0kvOp15MB8GA1UdIwQY MBaAFJTKWVOFUFRVuMsdkOlG73sLb10/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbE1wWlU0VlFWRlc0eXgyUTZVYnZld3R2WFQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS81ODkyZDEtNmY1MS00Y2IzLTkzZTIt MGYwNDk0Y2E2ZDJjLzEvdEg2VUFVbEhrcnBoaVJidTYxLUhTUzg2blhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS81ODkyZDEtNmY1MS00Y2IzLTkzZTItMGYwNDk0Y2E2ZDJj LzEvbE1wWlU0VlFWRlc0eXgyUTZVYnZld3R2WFQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAub5aMA0E AgACMAcDBQAqEwUAMA0GCSqGSIb3DQEBCwUAA4IBAQCAiPki1HY7itT/W2jUKPJ5 K3ED1rjF1Ve/CnnmHcxXhKOFHBXVJmB4z32F4tnUJgt6jHHCDqWzYsofy7lD1Kgu sv59YkTx2Hkg0IsnTVdo8RdzrYQE/ZfQZ5DqzZ2Y2KrkQGfFvH4PwK1RVYvvl5SN wW/AZqQetSqYOenXCdCEuqWpau6uedZQpG3b8wsGaMxtsTtTwlvSSbRmgSSdTOee OURF62Vg1+hNdDAKP2nyR7t0DiWE95/mOlBXJXNNKPYmdEgkmBy/u0mHuF2N1AF2 4vgmLbgdxHdCMhBC3moAprhk7a2eFt6jjfixKrv2xE+khetKO+V1AZCWsfykOdzF -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:33 2026 by rpki-client