This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/p0uAjHSmHvLpM75XX6oCkhGmdmc.roa File: p0uAjHSmHvLpM75XX6oCkhGmdmc.roa (raw, json) Hash identifier: njnabPJ7OUUwxsk5r103td3tMTROdrl25ScvQlzUSm8= Subject key identifier: A7:4B:80:8C:74:A6:1E:F2:E9:33:BE:57:5F:AA:02:92:11:A6:76:67 Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057 Certificate serial: 019B7A5B9339143A483B88D52DCDE6F8E3D8 Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/p0uAjHSmHvLpM75XX6oCkhGmdmc.roa Signing time: Thu 01 Jan 2026 16:19:40 +0000 ROA not before: Thu 01 Jan 2026 16:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14380 IP address blocks: 87.237.219.0/24 maxlen: 24 206.195.50.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 21:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:93:39:14:3a:48:3b:88:d5:2d:cd:e6:f8:e3:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057 Validity Not Before: Jan 1 16:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a74b808c74a61ef2e933be575faa029211a67667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8c:b1:10:77:42:61:c9:1d:97:86:b7:a2:b6: c0:8b:d9:03:3d:71:18:ad:7d:b9:74:bd:e4:0b:70: 00:80:00:f1:c2:e8:f4:37:28:83:5a:4e:63:01:e3: a2:7f:ef:a9:35:a8:53:c9:1d:af:3f:9e:2b:2d:f7: 7b:55:e6:16:df:41:c1:6f:58:d3:8d:11:94:3f:2a: 8f:68:67:3a:af:0d:5f:27:0b:d5:a8:11:1a:5f:ee: a5:44:59:f3:c7:a3:99:1a:da:2d:dc:d7:43:1d:5f: 44:f3:dd:f9:bc:21:a7:bc:db:59:8f:75:0b:18:b5: 13:7b:8b:20:84:f1:3f:b5:d4:8f:ef:f3:64:4f:bb: 08:4e:21:09:2a:3d:b7:30:47:a9:81:c0:d8:fc:5c: 23:45:27:36:89:2b:92:34:ab:ac:36:b6:dc:80:25: 7f:d2:c7:44:00:d7:77:fb:b5:02:f1:11:7e:c8:85: 08:76:70:c7:e2:cf:88:8a:27:bc:65:fd:ad:13:6e: 34:90:ff:b2:5e:24:84:db:18:ff:a5:d9:04:c2:77: d0:59:33:18:f3:7d:39:af:47:96:3c:3e:8e:ec:9f: 44:ee:3e:77:81:90:5d:80:4e:97:b6:e6:4f:5d:63: 4b:20:a5:57:0b:30:f0:ee:ef:b8:1a:6d:72:90:9f: bb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4B:80:8C:74:A6:1E:F2:E9:33:BE:57:5F:AA:02:92:11:A6:76:67 X509v3 Authority Key Identifier: keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/p0uAjHSmHvLpM75XX6oCkhGmdmc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.237.219.0/24 206.195.50.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:b6:a0:0a:d5:b5:c1:93:b1:4b:3f:a5:41:83:35:e5:7b:60: bb:7c:2e:df:33:7b:a8:87:aa:c8:51:ec:cd:cb:25:3b:3c:48: 58:7c:c2:4b:9b:4f:e7:7f:7e:c9:a7:54:84:bc:1c:3f:7c:a2: 18:7f:e6:89:59:cd:e6:81:13:69:b3:a6:e1:c2:79:70:a3:c3: c6:0a:54:ef:8f:0e:38:34:ea:c3:87:cf:1e:74:e3:50:d7:a4: b6:d6:68:7f:3e:db:0d:92:f2:06:76:d6:fc:ac:ad:de:ce:8b: 75:64:c7:50:2f:f2:4e:d7:7a:b9:8e:ad:cc:d1:60:96:f1:96: 6d:6c:55:3d:82:f5:52:c7:d3:0a:75:1a:57:0e:75:b3:70:bf: 63:96:31:09:48:56:db:17:d3:49:b7:da:4e:1d:75:d6:73:be: b2:be:5c:94:9b:35:ad:92:b2:ef:49:b8:d5:6d:b7:cd:75:0b: eb:c8:3f:8b:83:5f:7e:13:4d:d0:8b:1e:ce:b5:fa:31:c7:03: 22:12:9b:ee:ad:19:0f:1e:86:59:29:85:aa:f2:88:5b:a7:71: c7:61:d9:d8:cd:19:59:4f:4a:72:11:d9:2d:18:5e:d2:70:1c: 33:14:36:2b:47:ce:1d:2a:03:ae:9c:a5:f1:a3:39:d9:4a:d7: 68:ca:de:33 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W5M5FDpIO4jVLc3m+OPYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNjIwNjM4Y2ExZDgzNTY1MGUwOGRkY2YzNjNmMTA3ODli NTMwNTcwHhcNMjYwMTAxMTYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzRiODA4Yzc0YTYxZWYyZTkzM2JlNTc1ZmFhMDI5MjExYTY3NjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4yxEHdCYckdl4a3orbAi9kDPXEY rX25dL3kC3AAgADxwuj0NyiDWk5jAeOif++pNahTyR2vP54rLfd7VeYW30HBb1jT jRGUPyqPaGc6rw1fJwvVqBEaX+6lRFnzx6OZGtot3NdDHV9E8935vCGnvNtZj3UL GLUTe4sghPE/tdSP7/NkT7sITiEJKj23MEepgcDY/FwjRSc2iSuSNKusNrbcgCV/ 0sdEANd3+7UC8RF+yIUIdnDH4s+Iiie8Zf2tE240kP+yXiSE2xj/pdkEwnfQWTMY 8305r0eWPD6O7J9E7j53gZBdgE6XtuZPXWNLIKVXCzDw7u+4Gm1ykJ+7CQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKdLgIx0ph7y6TO+V1+qApIRpnZnMB8GA1UdIwQY MBaAFJBiBjjKHYNWUOCN3PNj8QeJtTBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80MWFmMmQtZjNkZS00NWQ1LTk0MWMt YzQzYWM0MjllNTNmLzEvcDB1QWpIU21IdkxwTTc1WFg2b0NraEdtZG1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS80MWFmMmQtZjNkZS00NWQ1LTk0MWMtYzQzYWM0MjllNTNm LzEva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV+3bAwQB zsMyMA0GCSqGSIb3DQEBCwUAA4IBAQA8tqAK1bXBk7FLP6VBgzXle2C7fC7fM3uo h6rIUezNyyU7PEhYfMJLm0/nf37Jp1SEvBw/fKIYf+aJWc3mgRNps6bhwnlwo8PG ClTvjw44NOrDh88edONQ16S21mh/PtsNkvIGdtb8rK3ezot1ZMdQL/JO13q5jq3M 0WCW8ZZtbFU9gvVSx9MKdRpXDnWzcL9jljEJSFbbF9NJt9pOHXXWc76yvlyUmzWt krLvSbjVbbfNdQvryD+Lg19+E03Qix7OtfoxxwMiEpvurRkPHoZZKYWq8ohbp3HH YdnYzRlZT0pyEdktGF7ScBwzFDYrR84dKgOunKXxoznZStdoyt4z -----END CERTIFICATE-----Generated at Thu Jan 22 04:15:21 2026 by rpki-client