This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/vQlwbAF_mJrGee6i3Zw-aUSbGik.roa File: vQlwbAF_mJrGee6i3Zw-aUSbGik.roa (raw, json) Hash identifier: YnOQdMh9a+SzOqx2wFlffeGs61dC4j8qzTkon28Y7Rg= Subject key identifier: BD:09:70:6C:01:7F:98:9A:C6:79:EE:A2:DD:9C:3E:69:44:9B:1A:29 Certificate issuer: /CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db Certificate serial: 019BFB67501A81ADCF6F9645B990DFF1B909 Authority key identifier: AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/vQlwbAF_mJrGee6i3Zw-aUSbGik.roa Signing time: Mon 26 Jan 2026 17:43:30 +0000 ROA not before: Mon 26 Jan 2026 17:43:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202833 IP address blocks: 81.90.102.0/24 maxlen: 24 81.90.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:67:50:1a:81:ad:cf:6f:96:45:b9:90:df:f1:b9:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db Validity Not Before: Jan 26 17:43:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd09706c017f989ac679eea2dd9c3e69449b1a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0e:fa:fb:72:a8:15:67:2e:29:7c:8b:e4:bd: 29:e8:90:b7:87:59:ef:cf:26:cb:64:da:2e:d9:a8: 4e:f3:cd:65:ba:7b:4d:b4:d0:f3:1c:db:f3:75:70: 7e:7c:fd:3b:ae:06:0c:9e:4d:7f:5b:35:04:4a:97: 84:a9:4b:e8:6c:79:b2:b2:a3:ed:e2:8e:3c:d2:4d: 51:39:93:7d:76:ef:26:f7:8b:69:0c:7b:a2:77:eb: 9c:64:93:47:42:59:07:13:12:24:eb:9c:ac:96:18: 89:bc:32:0a:03:59:5a:ce:e4:8d:07:2a:27:ab:e1: c4:e5:60:a5:44:4f:9b:4e:b1:e0:7d:05:f5:13:76: 23:97:94:29:57:85:6c:f5:61:13:d1:75:25:45:d6: f4:4e:90:f4:b2:0d:08:d0:59:64:bf:d5:8e:b1:ae: 52:c8:75:73:73:4f:bf:8a:90:8a:da:a9:17:53:7a: 51:59:fd:20:bf:cb:df:ee:6c:b4:7f:75:af:e7:95: 25:58:b1:04:05:6e:8b:03:01:48:f2:a8:52:8d:a3: ff:d1:67:91:58:39:54:06:5b:69:73:77:9e:53:31: 8d:f7:5a:7b:41:c7:55:fd:ba:c5:99:01:90:2f:88: f5:8c:c0:bd:62:d1:06:0a:33:34:fc:99:7d:d2:20: 75:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:09:70:6C:01:7F:98:9A:C6:79:EE:A2:DD:9C:3E:69:44:9B:1A:29 X509v3 Authority Key Identifier: keyid:AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/vQlwbAF_mJrGee6i3Zw-aUSbGik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.90.102.0/24 81.90.105.0/24 Signature Algorithm: sha256WithRSAEncryption a3:dd:fb:07:55:57:b8:49:8b:32:bd:66:46:d4:63:06:8e:57: 54:8d:3c:5e:24:ef:ac:60:41:87:63:ea:7b:8f:b0:98:17:33: 2d:42:85:07:78:9a:28:cf:4e:4c:c9:5b:65:37:89:c1:ec:51: fc:fe:cc:4f:28:77:b4:4e:10:b5:39:0b:77:9a:ef:06:8a:21: 61:58:99:f0:66:b2:5e:b5:dd:4c:f1:3d:20:66:4c:75:a3:12: c6:97:e4:b8:53:11:b3:89:a1:fa:64:89:c3:80:ad:b6:04:ec: 37:75:c2:82:2c:38:a8:67:98:60:52:bd:b4:ce:50:16:d3:ae: 06:05:d1:61:2b:59:ac:b7:55:af:a1:08:ac:80:21:a0:58:de: 8e:66:46:72:dd:fc:19:32:49:de:3d:7f:9d:86:bb:78:29:5d: 22:ce:38:75:d1:c7:06:56:2b:d8:92:d1:a9:fb:48:27:f7:c7: eb:0f:0f:7c:2b:2f:11:c2:ba:fe:e8:2e:8f:10:b3:c2:4d:8e: 39:ac:1d:9c:d3:95:7f:4a:47:2a:67:a5:f9:6f:ed:ae:d3:92: 11:8f:d1:5a:98:18:8f:8b:ef:3b:5e:f2:6c:c1:78:cb:78:a1: 78:27:63:38:f1:c7:51:7b:f4:04:56:35:83:4a:17:d1:ea:46: 53:aa:61:9c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZv7Z1Aaga3Pb5ZFuZDf8bkJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYzhhOWJiYzJiYzNhNGM4YmI4NzZjY2RkOTVmZDg2NTI1 MGI2ZGIwHhcNMjYwMTI2MTc0MzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDA5NzA2YzAxN2Y5ODlhYzY3OWVlYTJkZDljM2U2OTQ0OWIxYTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw76+3KoFWcuKXyL5L0p6JC3h1nv zybLZNou2ahO881luntNtNDzHNvzdXB+fP07rgYMnk1/WzUESpeEqUvobHmysqPt 4o480k1ROZN9du8m94tpDHuid+ucZJNHQlkHExIk65yslhiJvDIKA1lazuSNByon q+HE5WClRE+bTrHgfQX1E3Yjl5QpV4Vs9WET0XUlRdb0TpD0sg0I0Flkv9WOsa5S yHVzc0+/ipCK2qkXU3pRWf0gv8vf7my0f3Wv55UlWLEEBW6LAwFI8qhSjaP/0WeR WDlUBltpc3eeUzGN91p7QcdV/brFmQGQL4j1jMC9YtEGCjM0/Jl90iB1IwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL0JcGwBf5iaxnnuot2cPmlEmxopMB8GA1UdIwQY MBaAFK3IqbvCvDpMi7h2zN2V/YZSULbbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmNpcHU4SzhPa3lMdUhiTTNaWDlobEpRdHRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS84Njc3MmUtNWU2Yi00MDZjLThhOWUt MTY1NGE4MGRiYzM2LzEvdlFsd2JBRl9tSnJHZWU2aTNady1hVVNiR2lrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS84Njc3MmUtNWU2Yi00MDZjLThhOWUtMTY1NGE4MGRiYzM2 LzEvcmNpcHU4SzhPa3lMdUhiTTNaWDlobEpRdHRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUVpmAwQA UVppMA0GCSqGSIb3DQEBCwUAA4IBAQCj3fsHVVe4SYsyvWZG1GMGjldUjTxeJO+s YEGHY+p7j7CYFzMtQoUHeJooz05MyVtlN4nB7FH8/sxPKHe0ThC1OQt3mu8GiiFh WJnwZrJetd1M8T0gZkx1oxLGl+S4UxGziaH6ZInDgK22BOw3dcKCLDioZ5hgUr20 zlAW064GBdFhK1mst1WvoQisgCGgWN6OZkZy3fwZMknePX+dhrt4KV0izjh10ccG VivYktGp+0gn98frDw98Ky8Rwrr+6C6PELPCTY45rB2c05V/SkcqZ6X5b+2u05IR j9FamBiPi+87XvJswXjLeKF4J2M48cdRe/QEVjWDShfR6kZTqmGc -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:26 2026 by rpki-client