This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/gTuD19nmTp2j0NfdVM92eulUz50.roa File: gTuD19nmTp2j0NfdVM92eulUz50.roa (raw, json) Hash identifier: m8yAhVyb51tG8BtWITG5vAfuqvzjN7V08miYWQPPSis= Subject key identifier: 81:3B:83:D7:D9:E6:4E:9D:A3:D0:D7:DD:54:CF:76:7A:E9:54:CF:9D Certificate issuer: /CN=90f76537ff745893e3142fa0984f449b725b8fd3 Certificate serial: 019B791067FAF74D0814E231DB47D16F706A Authority key identifier: 90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/gTuD19nmTp2j0NfdVM92eulUz50.roa Signing time: Thu 01 Jan 2026 10:17:56 +0000 ROA not before: Thu 01 Jan 2026 10:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212989 IP address blocks: 194.156.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:67:fa:f7:4d:08:14:e2:31:db:47:d1:6f:70:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90f76537ff745893e3142fa0984f449b725b8fd3 Validity Not Before: Jan 1 10:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=813b83d7d9e64e9da3d0d7dd54cf767ae954cf9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:16:e6:5c:aa:1d:89:fd:82:0a:e3:b7:7e:20: 68:de:dc:bf:b4:c2:3e:a4:9b:30:8a:55:d4:48:3f: ac:49:fd:ab:74:17:61:79:56:29:2f:ae:97:93:fd: 22:22:f7:2d:92:c1:e4:3e:ea:33:79:36:d4:99:b0: 75:ae:2d:04:1a:dc:70:00:5c:43:f9:95:d5:00:a2: b3:d4:5c:39:0b:1c:a1:50:5f:82:57:d2:bf:15:6e: a6:89:60:d8:75:c2:81:2d:11:1e:d8:38:a5:76:31: 31:55:ca:53:a1:a3:15:69:5d:25:42:7e:cc:1d:bb: 7a:46:de:d0:c9:9c:a5:7b:d0:15:23:03:8a:90:b9: 7d:af:9c:4c:46:d8:ab:20:78:c4:2a:e4:2c:a7:05: bc:1a:64:37:93:25:76:87:c4:43:b5:5b:be:94:00: b7:ca:9c:a2:e4:d4:2e:e1:e7:d7:22:97:03:60:e1: 64:7a:b3:66:dd:ea:03:8e:49:28:ca:39:60:24:ae: 9b:ba:7e:da:e7:12:63:cd:c1:9a:3a:27:83:0d:f4: b9:91:f1:d0:5d:5d:61:25:6e:a0:f1:a6:23:57:85: 53:ba:d9:8e:fe:ef:05:11:c1:cb:84:13:71:90:14: e2:a7:1c:4e:7b:1c:b5:c4:a9:e3:f5:f2:e5:57:44: 92:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3B:83:D7:D9:E6:4E:9D:A3:D0:D7:DD:54:CF:76:7A:E9:54:CF:9D X509v3 Authority Key Identifier: keyid:90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/gTuD19nmTp2j0NfdVM92eulUz50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.156.22.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:4e:5f:79:a5:53:0e:0d:ec:63:d0:71:ef:11:12:1a:18:c6: 70:7a:51:92:48:84:dd:7d:25:ef:94:3a:64:c2:55:9a:81:03: 6f:e9:84:b3:fe:d2:f2:56:40:4e:17:72:bb:44:64:dc:d6:68: 60:39:2f:bd:e2:67:30:59:df:89:f5:2b:b5:76:a1:06:f9:71: b6:94:c7:58:77:f8:52:0a:ca:bf:1b:be:05:73:5a:da:ed:ae: 8c:a9:0b:d6:ea:bf:0c:c7:80:95:c5:26:c9:c3:59:2a:7e:ef: f4:ce:8e:b2:ef:06:2b:42:2e:40:8e:3f:cc:fd:93:14:fd:9f: bb:e7:2b:52:04:17:75:2c:31:b1:83:0f:6a:1e:ba:a7:ad:2a: da:13:18:75:55:94:c4:48:30:69:0a:b3:16:fe:b8:2a:22:b9: bb:3f:41:dc:6d:f8:5e:5d:60:31:0d:a8:ba:61:72:a5:55:f5: 3a:d2:1e:28:65:69:bf:e9:31:c8:ad:52:f5:7e:4c:52:ed:f1: 03:eb:25:a6:df:85:6b:69:5c:bd:5f:5c:59:f5:8c:52:83:ea: 92:47:de:9f:18:bd:67:47:06:32:38:2f:87:af:df:ee:ef:6d: 92:cf:33:ab:d0:6a:43:76:d4:f0:38:6d:77:14:1e:7d:99:d3: af:f8:2b:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EGf6900IFOIx20fRb3BqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZjc2NTM3ZmY3NDU4OTNlMzE0MmZhMDk4NGY0NDliNzI1 YjhmZDMwHhcNMjYwMTAxMTAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTNiODNkN2Q5ZTY0ZTlkYTNkMGQ3ZGQ1NGNmNzY3YWU5NTRjZjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRbmXKodif2CCuO3fiBo3ty/tMI+ pJswilXUSD+sSf2rdBdheVYpL66Xk/0iIvctksHkPuozeTbUmbB1ri0EGtxwAFxD +ZXVAKKz1Fw5CxyhUF+CV9K/FW6miWDYdcKBLREe2DildjExVcpToaMVaV0lQn7M Hbt6Rt7QyZyle9AVIwOKkLl9r5xMRtirIHjEKuQspwW8GmQ3kyV2h8RDtVu+lAC3 ypyi5NQu4efXIpcDYOFkerNm3eoDjkkoyjlgJK6bun7a5xJjzcGaOieDDfS5kfHQ XV1hJW6g8aYjV4VTutmO/u8FEcHLhBNxkBTipxxOexy1xKnj9fLlV0SSewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIE7g9fZ5k6do9DX3VTPdnrpVM+dMB8GA1UdIwQY MBaAFJD3ZTf/dFiT4xQvoJhPRJtyW4/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1BkbE5fOTBXSlBqRkMtZ21FOUVtM0piajlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80Zjc2ODAtODFhYi00YzFmLWEwN2It N2M2MmQ1YzMxNWJmLzEvZ1R1RDE5bm1UcDJqME5mZFZNOTJldWxVejUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi80Zjc2ODAtODFhYi00YzFmLWEwN2ItN2M2MmQ1YzMxNWJm LzEva1BkbE5fOTBXSlBqRkMtZ21FOUVtM0piajlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwpwWMA0G CSqGSIb3DQEBCwUAA4IBAQANTl95pVMODexj0HHvERIaGMZwelGSSITdfSXvlDpk wlWagQNv6YSz/tLyVkBOF3K7RGTc1mhgOS+94mcwWd+J9Su1dqEG+XG2lMdYd/hS Csq/G74Fc1ra7a6MqQvW6r8Mx4CVxSbJw1kqfu/0zo6y7wYrQi5Ajj/M/ZMU/Z+7 5ytSBBd1LDGxgw9qHrqnrSraExh1VZTESDBpCrMW/rgqIrm7P0HcbfheXWAxDai6 YXKlVfU60h4oZWm/6THIrVL1fkxS7fED6yWm34VraVy9X1xZ9YxSg+qSR96fGL1n RwYyOC+Hr9/u722SzzOr0GpDdtTwOG13FB59mdOv+CuH -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:55 2026 by rpki-client