This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/IGOtfSCHb-PcgN6otd-LjwgBgcY.roa File: IGOtfSCHb-PcgN6otd-LjwgBgcY.roa (raw, json) Hash identifier: mIaFqnuv58vVdHvIIehpAChWeIDBu6nXZiEhEu38H88= Subject key identifier: 20:63:AD:7D:20:87:6F:E3:DC:80:DE:A8:B5:DF:8B:8F:08:01:81:C6 Certificate issuer: /CN=68383ffa9f20bf021c090262994212d71667ed02 Certificate serial: 019B775900704BD679ADC4B1A14D815E984C Authority key identifier: 68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/IGOtfSCHb-PcgN6otd-LjwgBgcY.roa Signing time: Thu 01 Jan 2026 02:18:00 +0000 ROA not before: Thu 01 Jan 2026 02:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25048 IP address blocks: 81.90.128.0/20 maxlen: 24 2a00:e20::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:00:70:4b:d6:79:ad:c4:b1:a1:4d:81:5e:98:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68383ffa9f20bf021c090262994212d71667ed02 Validity Not Before: Jan 1 02:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2063ad7d20876fe3dc80dea8b5df8b8f080181c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e0:0c:e2:d1:08:11:81:c5:d8:7b:2d:ed:a7: 13:ea:6e:e9:6b:be:9f:16:84:3d:74:e6:dc:b5:15: 89:4e:34:90:0c:81:e9:5d:a4:39:12:9f:97:0c:f5: c4:b0:50:83:50:2f:48:7a:ea:d9:7c:62:e1:4b:02: 6b:b7:ca:84:20:f3:ba:3c:d7:75:a9:cf:af:92:e7: ee:8d:fe:3e:0d:0a:78:1f:1a:ec:cc:ad:df:4c:f7: 1f:25:64:89:45:cd:e7:7a:ee:a6:53:03:75:71:95: 8b:11:93:7e:2f:bd:3c:05:7d:22:67:61:25:e7:e5: ae:98:d6:e6:ab:3b:f7:39:30:8e:a1:11:7a:8c:d1: e2:d3:cb:f6:02:e4:7b:57:04:e2:8f:50:f1:85:ce: 4a:95:90:3e:00:50:67:6b:ad:55:0b:e9:1c:1c:c2: bf:2f:e8:b9:d6:56:80:c1:7f:48:33:7d:c6:09:d7: 5b:1a:97:ff:36:90:02:20:43:8f:d0:16:d5:c6:b3: 19:6c:95:ca:99:17:4d:aa:c3:7f:d9:66:e7:37:40: 77:60:6b:77:0a:98:7a:19:93:87:ff:c7:40:02:1c: e6:d9:1c:c6:ae:5c:ff:fb:b7:44:b7:72:25:b6:f1: 36:2a:7f:18:16:da:07:96:73:97:78:20:45:33:9a: c3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:63:AD:7D:20:87:6F:E3:DC:80:DE:A8:B5:DF:8B:8F:08:01:81:C6 X509v3 Authority Key Identifier: keyid:68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/IGOtfSCHb-PcgN6otd-LjwgBgcY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.90.128.0/20 IPv6: 2a00:e20::/29 Signature Algorithm: sha256WithRSAEncryption 5a:bc:1d:fe:bd:61:68:94:c6:6c:97:71:78:97:4b:1e:b7:a6: b6:d6:79:fd:74:ca:31:54:9b:c1:99:c9:70:59:ab:e5:93:d2: b8:f0:fd:0b:54:6c:4a:28:15:5c:96:aa:ac:67:de:8a:1d:da: a4:88:0b:0f:49:d5:98:d9:66:d1:7f:5c:ed:cd:40:8b:38:aa: 5f:d3:c6:c3:be:85:7d:3a:cf:77:4c:18:06:53:d2:40:09:7a: cd:8d:b1:8d:1a:4f:54:ce:07:c1:e8:82:c7:bd:37:40:b1:0e: ce:f8:f6:a1:ba:b0:d1:56:ed:4f:5f:7a:85:a7:c4:08:c9:88: 07:03:34:fd:31:b5:f5:05:28:e6:b4:6b:88:79:e8:dd:38:ba: c5:3e:b0:bb:f8:98:d8:10:7b:52:cb:af:12:e9:1f:84:0d:76: f7:a1:43:b6:96:0b:0b:2e:00:7b:94:92:7a:bd:a6:bc:c7:e0: d3:5f:c8:86:73:f1:90:ef:44:40:67:5f:a7:c6:38:a1:fd:57: f7:54:06:5c:31:41:5d:5c:ea:7a:7c:8f:b4:f9:75:69:2d:99: 83:1f:b6:3c:6c:70:2a:8a:90:c3:49:4b:4e:a3:44:43:f5:34: f2:37:5c:26:4e:c9:cd:97:c2:d3:5f:f7:76:fe:ee:18:e5:61: 1b:c9:e4:d2 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WQBwS9Z5rcSxoU2BXphMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MzgzZmZhOWYyMGJmMDIxYzA5MDI2Mjk5NDIxMmQ3MTY2 N2VkMDIwHhcNMjYwMTAxMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDYzYWQ3ZDIwODc2ZmUzZGM4MGRlYThiNWRmOGI4ZjA4MDE4MWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eAM4tEIEYHF2Hst7acT6m7pa76f FoQ9dObctRWJTjSQDIHpXaQ5Ep+XDPXEsFCDUC9IeurZfGLhSwJrt8qEIPO6PNd1 qc+vkufujf4+DQp4HxrszK3fTPcfJWSJRc3neu6mUwN1cZWLEZN+L708BX0iZ2El 5+WumNbmqzv3OTCOoRF6jNHi08v2AuR7VwTij1Dxhc5KlZA+AFBna61VC+kcHMK/ L+i51laAwX9IM33GCddbGpf/NpACIEOP0BbVxrMZbJXKmRdNqsN/2WbnN0B3YGt3 Cph6GZOH/8dAAhzm2RzGrlz/+7dEt3IltvE2Kn8YFtoHlnOXeCBFM5rDtQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCBjrX0gh2/j3IDeqLXfi48IAYHGMB8GA1UdIwQY MBaAFGg4P/qfIL8CHAkCYplCEtcWZ+0CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iOGU5NDAtMjIwMS00MDZlLThhYWYt NDA2MGU5ZWVlYjllLzEvSUdPdGZTQ0hiLVBjZ042b3RkLUxqd2dCZ2NZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9iOGU5NDAtMjIwMS00MDZlLThhYWYtNDA2MGU5ZWVlYjll LzEvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEUVqAMA0E AgACMAcDBQMqAA4gMA0GCSqGSIb3DQEBCwUAA4IBAQBavB3+vWFolMZsl3F4l0se t6a21nn9dMoxVJvBmclwWavlk9K48P0LVGxKKBVclqqsZ96KHdqkiAsPSdWY2WbR f1ztzUCLOKpf08bDvoV9Os93TBgGU9JACXrNjbGNGk9UzgfB6ILHvTdAsQ7O+Pah urDRVu1PX3qFp8QIyYgHAzT9MbX1BSjmtGuIeejdOLrFPrC7+JjYEHtSy68S6R+E DXb3oUO2lgsLLgB7lJJ6vaa8x+DTX8iGc/GQ70RAZ1+nxjih/Vf3VAZcMUFdXOp6 fI+0+XVpLZmDH7Y8bHAqipDDSUtOo0RD9TTyN1wmTsnNl8LTX/d2/u4Y5WEbyeTS -----END CERTIFICATE-----Generated at Sun Jan 25 16:34:09 2026 by rpki-client