This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/vMy8_qPow1_oOv83hdNqlP2PfRI.roa File: vMy8_qPow1_oOv83hdNqlP2PfRI.roa (raw, json) Hash identifier: kd+7ZLZl3l6JtCbEUK+6GN4dP0dO+nAVwWVXURI3BzI= Subject key identifier: BC:CC:BC:FE:A3:E8:C3:5F:E8:3A:FF:37:85:D3:6A:94:FD:8F:7D:12 Certificate issuer: /CN=f6090b4db06a4d65935141bac98098127a8b8f5a Certificate serial: 019B7BA5002872E7E481E3E1BFD41E74EA28 Authority key identifier: F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/vMy8_qPow1_oOv83hdNqlP2PfRI.roa Signing time: Thu 01 Jan 2026 22:19:29 +0000 ROA not before: Thu 01 Jan 2026 22:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206804 IP address blocks: 185.90.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:00:28:72:e7:e4:81:e3:e1:bf:d4:1e:74:ea:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6090b4db06a4d65935141bac98098127a8b8f5a Validity Not Before: Jan 1 22:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bcccbcfea3e8c35fe83aff3785d36a94fd8f7d12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:02:dd:7d:ad:24:9e:26:cd:f4:88:fb:61:35: d3:d5:8e:a0:0b:a2:7d:01:18:cf:f7:ac:b3:da:4c: 0e:d9:be:ce:95:f8:81:70:01:af:2b:23:bc:b9:a6: 0e:5d:b1:15:01:0e:f2:85:47:ff:12:2f:f8:42:14: 97:88:d8:d8:2c:03:28:eb:0e:5c:57:3d:23:2c:fc: 26:4c:d0:da:8a:40:e0:2b:98:8e:c1:83:f3:33:f6: ad:4b:d0:ee:f8:32:75:90:48:15:c3:e0:f8:86:d1: 3f:44:e6:3b:4f:1f:4f:d5:7e:bd:b4:57:db:7a:2a: 2d:c2:fa:0d:d0:9b:d4:46:c6:d7:c8:f8:2b:25:c7: 1c:d2:61:b0:27:2d:20:ee:cd:1e:29:24:fe:9a:62: 88:44:26:39:87:6c:b8:00:f6:20:65:2c:d9:17:7b: 10:c0:3f:5f:5b:f9:76:13:bd:85:f8:64:d4:a8:89: 6f:38:6b:0f:c9:05:37:02:9c:88:83:d6:b4:4f:71: de:0b:15:83:75:38:85:c4:fb:b5:bc:8d:3a:34:6b: 72:89:57:40:8b:3d:03:cb:41:36:57:81:eb:da:56: 87:72:e3:6c:59:48:ad:19:33:36:f9:6e:ba:4b:87: 37:8e:60:01:f5:35:d3:f4:0c:26:f5:15:92:d6:87: 31:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CC:BC:FE:A3:E8:C3:5F:E8:3A:FF:37:85:D3:6A:94:FD:8F:7D:12 X509v3 Authority Key Identifier: keyid:F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/vMy8_qPow1_oOv83hdNqlP2PfRI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.90.60.0/24 Signature Algorithm: sha256WithRSAEncryption 65:14:4d:81:39:1e:37:92:df:d5:9e:b8:a9:d5:c2:f2:b1:ea: f2:69:5b:5b:e6:5d:5e:51:d5:60:6d:41:69:06:7d:c3:4c:b9: 55:30:4e:fd:da:f2:55:26:1c:40:04:00:f6:9b:8e:75:f6:a8: fe:2c:7f:2b:d2:11:6c:6f:f3:56:5f:1b:a6:d4:fe:ab:26:91: e1:bf:a4:18:27:1b:be:bc:92:55:41:d2:70:4e:af:3e:a2:a0: b0:0c:03:d7:f5:03:7e:aa:83:84:b5:af:cb:60:03:d2:04:28: 45:2f:39:24:d6:9b:b2:2a:ac:02:a4:87:82:92:c9:a7:50:da: c8:6f:6f:23:73:85:eb:ee:15:7e:00:ae:51:a5:29:c1:76:f6: ab:6b:ed:79:c2:0b:80:97:6e:cc:79:e4:0d:b5:1f:81:af:77: 5f:36:69:90:ff:c1:93:52:7c:ca:7f:23:ec:8e:45:c6:e3:c0: 40:d6:c9:29:4d:31:84:66:81:12:8d:05:48:79:34:ee:4c:db: 33:5a:8b:74:1c:8c:06:36:04:e6:45:07:74:4f:20:b2:c8:41: 07:91:11:c6:ba:48:de:1b:fc:5b:5f:63:3f:d6:4c:fb:99:db: 7b:4f:26:0b:59:37:3a:76:a1:4b:35:5d:e9:10:0c:b2:c0:73: 1f:0e:73:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pQAocufkgePhv9QedOooMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MDkwYjRkYjA2YTRkNjU5MzUxNDFiYWM5ODA5ODEyN2E4 YjhmNWEwHhcNMjYwMTAxMjIxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2NjYmNmZWEzZThjMzVmZTgzYWZmMzc4NWQzNmE5NGZkOGY3ZDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgLdfa0knibN9Ij7YTXT1Y6gC6J9 ARjP96yz2kwO2b7OlfiBcAGvKyO8uaYOXbEVAQ7yhUf/Ei/4QhSXiNjYLAMo6w5c Vz0jLPwmTNDaikDgK5iOwYPzM/atS9Du+DJ1kEgVw+D4htE/ROY7Tx9P1X69tFfb eiotwvoN0JvURsbXyPgrJccc0mGwJy0g7s0eKST+mmKIRCY5h2y4APYgZSzZF3sQ wD9fW/l2E72F+GTUqIlvOGsPyQU3ApyIg9a0T3HeCxWDdTiFxPu1vI06NGtyiVdA iz0Dy0E2V4Hr2laHcuNsWUitGTM2+W66S4c3jmAB9TXT9Awm9RWS1ocxYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLzMvP6j6MNf6Dr/N4XTapT9j30SMB8GA1UdIwQY MBaAFPYJC02wak1lk1FBusmAmBJ6i49aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWdrTFRiQnFUV1dUVVVHNnlZQ1lFbnFMajFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yZGM3YWYtMmM4Yy00NTdiLWFlYjAt NGUxZGMxNTA1MjYwLzEvdk15OF9xUG93MV9vT3Y4M2hkTnFsUDJQZlJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8yZGM3YWYtMmM4Yy00NTdiLWFlYjAtNGUxZGMxNTA1MjYw LzEvOWdrTFRiQnFUV1dUVVVHNnlZQ1lFbnFMajFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVo8MA0G CSqGSIb3DQEBCwUAA4IBAQBlFE2BOR43kt/Vnrip1cLyseryaVtb5l1eUdVgbUFp Bn3DTLlVME792vJVJhxABAD2m4519qj+LH8r0hFsb/NWXxum1P6rJpHhv6QYJxu+ vJJVQdJwTq8+oqCwDAPX9QN+qoOEta/LYAPSBChFLzkk1puyKqwCpIeCksmnUNrI b28jc4Xr7hV+AK5RpSnBdvara+15wguAl27MeeQNtR+Br3dfNmmQ/8GTUnzKfyPs jkXG48BA1skpTTGEZoESjQVIeTTuTNszWot0HIwGNgTmRQd0TyCyyEEHkRHGukje G/xbX2M/1kz7mdt7TyYLWTc6dqFLNV3pEAyywHMfDnNJ -----END CERTIFICATE-----Generated at Wed Jan 21 06:05:51 2026 by rpki-client