This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/RgG1IzTTnxsKQ8w-dtm5Fh2xKbs.roa File: RgG1IzTTnxsKQ8w-dtm5Fh2xKbs.roa (raw, json) Hash identifier: tdRAGWZjnB4m+ZmtOQJTd2+lOSmIXnRY+lMqsAdHbag= Subject key identifier: 46:01:B5:23:34:D3:9F:1B:0A:43:CC:3E:76:D9:B9:16:1D:B1:29:BB Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C8021FCABBDBD008459F8B7C708A138 Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/RgG1IzTTnxsKQ8w-dtm5Fh2xKbs.roa Signing time: Fri 02 Jan 2026 02:18:50 +0000 ROA not before: Fri 02 Jan 2026 02:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198952 IP address blocks: 90.85.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:21:fc:ab:bd:bd:00:84:59:f8:b7:c7:08:a1:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4601b52334d39f1b0a43cc3e76d9b9161db129bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:24:ae:61:c9:f8:dd:c5:fb:e8:e4:31:d9:c8: 07:84:52:62:da:d3:3f:48:ef:46:0c:a4:4e:2d:be: b0:ca:40:6b:1e:c9:e1:b9:48:a7:de:c8:89:f7:8f: e2:71:63:ea:bc:55:25:d8:4d:16:57:74:76:02:6c: af:41:e0:cf:0f:b3:e7:17:a8:30:53:e3:18:d9:ce: 04:f9:45:9c:e0:81:c4:d2:a0:35:8c:91:f9:98:61: 0b:44:0c:2a:6d:7c:cd:33:f6:dd:26:14:e5:55:60: a6:e1:a8:4d:52:fe:f2:09:f7:f9:a1:c2:54:8e:b8: cb:a2:a7:ae:01:a6:f2:b6:18:42:84:eb:f0:dc:78: 6c:c3:97:c6:2f:62:f6:3a:e5:63:f4:7e:59:5c:00: 31:d9:f9:a5:00:1c:c7:88:55:ac:c5:b6:41:02:4d: f4:ef:b6:37:bd:8a:19:95:a5:b3:a6:85:1c:e3:b4: 27:ca:49:08:e7:10:95:a6:0c:0c:df:47:26:7f:45: 8b:7d:c5:a7:50:2f:eb:46:f7:59:f5:e0:73:15:97: b3:52:1e:27:5a:f9:9e:45:a2:25:ef:7a:f3:88:8b: 5f:00:1f:07:31:1e:b6:80:2a:1a:c8:b8:0f:84:99: 41:97:ad:d1:b5:d7:16:27:4e:71:b5:b1:d0:6e:e2: 4c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:01:B5:23:34:D3:9F:1B:0A:43:CC:3E:76:D9:B9:16:1D:B1:29:BB X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/RgG1IzTTnxsKQ8w-dtm5Fh2xKbs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 90.85.2.0/24 Signature Algorithm: sha256WithRSAEncryption 93:f3:fb:93:c0:d0:ec:95:f9:35:b3:7e:79:4f:47:4d:46:1c: 7e:03:fe:61:c5:50:8e:9f:ce:f1:0f:53:8b:1e:22:ab:81:03: aa:a2:4d:fe:eb:31:c2:a4:92:9c:d0:86:9b:a9:7f:73:40:46: 2b:7d:12:72:ec:fe:58:c5:7d:0c:e6:88:9b:bd:d5:ad:ab:6f: e0:8a:84:e2:8d:10:22:a5:33:f7:0e:3c:6f:5a:f6:8f:de:25: de:41:ac:ee:d5:a9:b1:c1:7a:40:3d:0d:45:7c:ed:75:39:59: 01:b2:8d:64:c8:9c:aa:c9:96:3e:95:c8:ba:f6:a4:56:69:04: 3e:fb:f0:24:d1:2d:07:9c:42:e3:bc:c7:f5:aa:1a:f1:0e:35: c6:00:5d:65:63:df:62:9e:85:af:e1:b8:cb:41:b8:db:63:84: 58:a3:e4:cb:fa:30:27:bc:a2:89:d1:fc:e5:11:7c:b3:49:3a: 3c:30:cc:b8:ba:8f:34:23:6f:8f:20:07:4b:39:c4:a0:12:55: cb:07:5d:ec:f1:08:9c:f2:44:ed:7d:39:00:6f:24:79:35:97: f4:73:e8:e5:09:cc:da:ab:84:60:09:c1:6f:87:55:7a:48:83: d0:62:d6:59:1a:f4:77:8c:7c:69:3f:b3:a5:bf:04:a8:85:b4: 3c:6a:fb:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gCH8q729AIRZ+LfHCKE4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjAxYjUyMzM0ZDM5ZjFiMGE0M2NjM2U3NmQ5YjkxNjFkYjEyOWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArySuYcn43cX76OQx2cgHhFJi2tM/ SO9GDKROLb6wykBrHsnhuUin3siJ94/icWPqvFUl2E0WV3R2AmyvQeDPD7PnF6gw U+MY2c4E+UWc4IHE0qA1jJH5mGELRAwqbXzNM/bdJhTlVWCm4ahNUv7yCff5ocJU jrjLoqeuAabythhChOvw3Hhsw5fGL2L2OuVj9H5ZXAAx2fmlABzHiFWsxbZBAk30 77Y3vYoZlaWzpoUc47QnykkI5xCVpgwM30cmf0WLfcWnUC/rRvdZ9eBzFZezUh4n WvmeRaIl73rziItfAB8HMR62gCoayLgPhJlBl63RtdcWJ05xtbHQbuJMnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEYBtSM0058bCkPMPnbZuRYdsSm7MB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvUmdHMUl6VFRueHNLUTh3LWR0bTVGaDJ4S2JzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWlUCMA0G CSqGSIb3DQEBCwUAA4IBAQCT8/uTwNDslfk1s355T0dNRhx+A/5hxVCOn87xD1OL HiKrgQOqok3+6zHCpJKc0IabqX9zQEYrfRJy7P5YxX0M5oibvdWtq2/gioTijRAi pTP3DjxvWvaP3iXeQazu1amxwXpAPQ1FfO11OVkBso1kyJyqyZY+lci69qRWaQQ+ +/Ak0S0HnELjvMf1qhrxDjXGAF1lY99inoWv4bjLQbjbY4RYo+TL+jAnvKKJ0fzl EXyzSTo8MMy4uo80I2+PIAdLOcSgElXLB13s8Qic8kTtfTkAbyR5NZf0c+jlCcza q4RgCcFvh1V6SIPQYtZZGvR3jHxpP7OlvwSohbQ8avvO -----END CERTIFICATE-----Generated at Sun Jan 25 19:01:09 2026 by rpki-client