This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/rgfQ7RnUFYhCryuejjkJdBuljlI.roa File: rgfQ7RnUFYhCryuejjkJdBuljlI.roa (raw, json) Hash identifier: zzWPOS9zzP/+5hzXtVsNoePksI2Qor0wOj+9tNGbjH0= Subject key identifier: AE:07:D0:ED:19:D4:15:88:42:AF:2B:9E:8E:39:09:74:1B:A5:8E:52 Certificate issuer: /CN=68383ffa9f20bf021c090262994212d71667ed02 Certificate serial: 019B775900A79E1112F61B38FD96061827D8 Authority key identifier: 68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/rgfQ7RnUFYhCryuejjkJdBuljlI.roa Signing time: Thu 01 Jan 2026 02:18:00 +0000 ROA not before: Thu 01 Jan 2026 02:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48901 IP address blocks: 81.90.128.0/20 maxlen: 24 81.90.131.0/28 maxlen: 28 81.90.134.0/24 maxlen: 24 81.90.136.0/23 maxlen: 24 2a00:e27::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:00:a7:9e:11:12:f6:1b:38:fd:96:06:18:27:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68383ffa9f20bf021c090262994212d71667ed02 Validity Not Before: Jan 1 02:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae07d0ed19d4158842af2b9e8e3909741ba58e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cf:28:fd:82:02:d9:13:68:c3:05:2b:04:82: 2a:62:35:3f:eb:cc:49:f9:28:82:c6:68:87:8a:93: 48:4a:53:50:6b:d2:18:20:6a:f5:17:47:34:c0:f7: 50:e4:fe:fc:24:8b:97:26:fd:ce:15:f8:34:37:31: fe:a0:64:fd:fc:8d:df:11:b8:bc:b2:b2:70:b5:d6: 69:48:8a:a9:81:aa:8e:87:83:13:c4:36:80:fb:6b: fa:5e:0a:51:bb:a6:62:48:7f:f4:46:ad:ea:67:13: c7:59:6a:ab:1a:a7:f9:41:fa:8f:f6:4a:4f:ae:ff: ad:0f:c0:00:10:d9:ca:fe:f8:0a:f6:f4:50:75:51: 6e:00:6d:b0:ec:14:41:e7:db:82:32:0c:37:62:a6: cd:95:f0:e3:ba:fd:6e:bc:8f:49:66:47:41:89:ec: 7e:ff:02:36:43:5c:14:ec:4b:c1:a8:c7:a6:b4:4b: 03:24:47:e5:32:4e:01:3d:28:ab:2d:cd:73:a4:41: 20:c4:5c:22:cd:5d:98:7d:1d:1c:12:72:14:8e:cc: 73:69:61:66:ca:a9:08:0b:89:1e:f3:ad:a9:67:3f: 22:71:01:76:4e:7d:d9:c1:d7:0b:16:8e:fa:ba:2f: 2f:74:44:dc:9c:1f:7b:ad:5c:41:52:4c:3f:cd:39: 9f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:07:D0:ED:19:D4:15:88:42:AF:2B:9E:8E:39:09:74:1B:A5:8E:52 X509v3 Authority Key Identifier: keyid:68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/rgfQ7RnUFYhCryuejjkJdBuljlI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.90.128.0/20 IPv6: 2a00:e27::/32 Signature Algorithm: sha256WithRSAEncryption 3b:22:9f:f2:01:54:ab:2d:a9:ff:4d:75:77:14:6b:c3:fa:2f: 8a:9e:22:a8:cb:25:7d:f7:cc:10:ee:8c:0e:f8:d1:75:ba:b1: 3a:bb:03:29:16:8b:95:e7:3f:bd:a0:f3:5b:26:62:e8:46:16: e2:7c:4f:12:2c:ef:71:42:43:df:01:44:93:13:7b:7e:1e:34: 38:64:4f:46:a1:d6:0c:06:35:b0:10:3a:f3:bb:8f:c0:cc:24: 4f:8e:d8:80:06:e0:f9:62:71:33:77:e6:c4:5a:34:29:49:29: de:ad:6d:ef:2f:42:80:f7:eb:7f:bd:d3:e6:0c:75:f6:8e:65: 71:04:d6:8c:69:e3:79:bf:09:d6:02:8d:4b:7a:3d:7b:bf:ab: 2e:00:87:7f:9c:db:d6:d8:ff:58:5a:b4:7b:4c:72:cd:b9:35: 68:8d:28:ff:a7:39:f9:6e:6c:68:b7:78:64:2f:dd:37:5e:6b: 9c:ae:bc:b6:71:ef:6b:79:44:31:ef:61:0a:41:ee:8c:e4:77: ed:77:0f:04:a8:d0:86:ec:3a:95:84:80:e7:4d:cb:58:e7:3a: 0f:a8:44:dd:e9:7f:7a:9a:ce:c9:b9:81:53:66:f4:59:24:16: 20:2e:9f:b2:f7:e7:55:d8:6b:f8:bb:1f:8f:9f:68:50:85:db: e8:c3:94:f8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WQCnnhES9hs4/ZYGGCfYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MzgzZmZhOWYyMGJmMDIxYzA5MDI2Mjk5NDIxMmQ3MTY2 N2VkMDIwHhcNMjYwMTAxMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTA3ZDBlZDE5ZDQxNTg4NDJhZjJiOWU4ZTM5MDk3NDFiYTU4ZTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs8o/YIC2RNowwUrBIIqYjU/68xJ +SiCxmiHipNISlNQa9IYIGr1F0c0wPdQ5P78JIuXJv3OFfg0NzH+oGT9/I3fEbi8 srJwtdZpSIqpgaqOh4MTxDaA+2v6XgpRu6ZiSH/0Rq3qZxPHWWqrGqf5QfqP9kpP rv+tD8AAENnK/vgK9vRQdVFuAG2w7BRB59uCMgw3YqbNlfDjuv1uvI9JZkdBiex+ /wI2Q1wU7EvBqMemtEsDJEflMk4BPSirLc1zpEEgxFwizV2YfR0cEnIUjsxzaWFm yqkIC4ke862pZz8icQF2Tn3ZwdcLFo76ui8vdETcnB97rVxBUkw/zTmfIwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFK4H0O0Z1BWIQq8rno45CXQbpY5SMB8GA1UdIwQY MBaAFGg4P/qfIL8CHAkCYplCEtcWZ+0CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iOGU5NDAtMjIwMS00MDZlLThhYWYt NDA2MGU5ZWVlYjllLzEvcmdmUTdSblVGWWhDcnl1ZWpqa0pkQnVsamxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9iOGU5NDAtMjIwMS00MDZlLThhYWYtNDA2MGU5ZWVlYjll LzEvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEUVqAMA0E AgACMAcDBQAqAA4nMA0GCSqGSIb3DQEBCwUAA4IBAQA7Ip/yAVSrLan/TXV3FGvD +i+KniKoyyV998wQ7owO+NF1urE6uwMpFouV5z+9oPNbJmLoRhbifE8SLO9xQkPf AUSTE3t+HjQ4ZE9GodYMBjWwEDrzu4/AzCRPjtiABuD5YnEzd+bEWjQpSSnerW3v L0KA9+t/vdPmDHX2jmVxBNaMaeN5vwnWAo1Lej17v6suAId/nNvW2P9YWrR7THLN uTVojSj/pzn5bmxot3hkL903Xmucrry2ce9reUQx72EKQe6M5Hftdw8EqNCG7DqV hIDnTctY5zoPqETd6X96ms7JuYFTZvRZJBYgLp+y9+dV2Gv4ux+Pn2hQhdvow5T4 -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:36 2026 by rpki-client