This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/1-Mv_wvDIJH6b39D7zFwGgmQByl8.roa File: 1-Mv_wvDIJH6b39D7zFwGgmQByl8.roa (raw, json) Hash identifier: w5/COnwlw5ye1DaZjZ7hXRbFTAAUSFBl9a5cKLHfrqk= Subject key identifier: F8:CB:FF:C2:F0:C8:24:7E:9B:DF:D0:FB:CC:5C:06:82:64:01:CA:5F Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Certificate serial: 019B78A36AFBA5CF82FD5A3A46761CD15BD1 Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/1-Mv_wvDIJH6b39D7zFwGgmQByl8.roa Signing time: Thu 01 Jan 2026 08:18:54 +0000 ROA not before: Thu 01 Jan 2026 08:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34996 IP address blocks: 90.158.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:6a:fb:a5:cf:82:fd:5a:3a:46:76:1c:d1:5b:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Validity Not Before: Jan 1 08:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8cbffc2f0c8247e9bdfd0fbcc5c06826401ca5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:54:f5:b2:f9:8c:c8:b9:e5:c3:1e:2f:fc:c1: 78:fa:48:b5:fb:1a:d8:90:18:ea:31:d0:ff:4a:02: 5f:cc:20:a0:d8:49:22:24:0a:62:3a:9b:0b:88:6e: ba:bc:8e:b0:23:c1:26:82:86:08:ef:bd:27:f3:56: 5e:ae:c4:40:0b:93:50:b5:02:38:ea:90:65:6f:22: dc:8c:82:b3:32:4e:57:1c:c2:2f:40:b7:4e:6a:e6: 61:6f:c5:03:e1:24:56:65:72:d0:ac:7b:54:ca:9e: ea:7f:cc:88:b4:2c:c6:f0:1d:f3:c5:9f:f3:65:9e: 9b:a9:98:44:fb:f2:2d:02:d7:1a:e7:f5:84:d7:e0: f9:9d:3f:ca:6c:be:2c:5d:b9:99:3b:74:4b:06:f7: b9:0f:f0:f1:0a:a2:30:2c:56:f7:5f:a4:20:f7:36: 11:ce:c9:ba:ff:7d:4e:98:88:71:f5:0d:78:bb:97: bd:ed:b6:88:7e:4d:57:70:a8:5d:9e:24:fa:ba:b3: be:0a:14:4e:d7:7a:c5:f8:00:8a:dc:2d:29:31:f5: d1:1b:02:51:c8:b0:1e:b1:6d:90:80:d4:23:0b:e1: 4c:7f:e7:0a:c3:d7:78:a2:2e:42:46:52:fd:93:0e: b5:95:be:f2:44:9e:3d:8f:69:02:58:8f:5e:bb:7f: 3e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CB:FF:C2:F0:C8:24:7E:9B:DF:D0:FB:CC:5C:06:82:64:01:CA:5F X509v3 Authority Key Identifier: keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/1-Mv_wvDIJH6b39D7zFwGgmQByl8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 90.158.250.0/24 Signature Algorithm: sha256WithRSAEncryption a6:13:52:90:2f:36:4d:af:f6:56:11:aa:fc:c1:50:ea:68:38: fc:87:ae:10:59:d4:61:6c:84:b3:a5:23:26:c9:cc:b1:6e:a1: 94:a1:a4:80:b2:2b:99:7a:ed:1b:b5:c2:5c:97:b9:24:c2:64: 0b:43:ed:3b:78:80:a0:05:6e:31:f1:3c:63:f3:9a:e6:7f:a1: 81:2f:fb:d7:30:89:05:8a:8c:6e:e5:7a:63:51:ed:28:e6:47: 71:1a:2e:41:eb:51:bf:0f:26:cd:57:9c:e0:e0:c9:26:3c:03: 69:0c:62:3d:6e:ea:74:1c:f2:21:29:40:fe:db:ca:23:73:d6: 15:6c:d3:f6:2e:60:98:17:67:8f:53:8b:2d:40:cf:6b:4c:23: b7:a1:6e:b9:38:0d:b0:b9:f4:1f:e8:8a:a0:6e:ad:85:05:8a: a0:7f:f9:90:5f:e7:31:40:11:e9:16:0e:35:08:37:aa:6b:46: 47:ef:7f:ad:db:fd:8b:bb:c7:50:70:10:fe:36:43:64:46:44: f4:e4:67:be:db:dd:5f:ae:2b:f8:bb:d9:d9:42:ce:7e:e8:df: e9:cf:78:9d:2c:21:b9:65:12:69:95:32:c9:27:96:c5:22:0a: 66:32:cb:9a:ad:19:bb:03:6c:e7:da:5f:1c:95:4d:37:a7:93: 0c:57:d0:bf -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4o2r7pc+C/Vo6RnYc0VvRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTlmMmFkOTE1ODRiYWZmMDQ2NzQ0N2JhYzhmYjk3OGQx ZjlkZDMwHhcNMjYwMTAxMDgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGNiZmZjMmYwYzgyNDdlOWJkZmQwZmJjYzVjMDY4MjY0MDFjYTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulT1svmMyLnlwx4v/MF4+ki1+xrY kBjqMdD/SgJfzCCg2EkiJApiOpsLiG66vI6wI8EmgoYI770n81ZersRAC5NQtQI4 6pBlbyLcjIKzMk5XHMIvQLdOauZhb8UD4SRWZXLQrHtUyp7qf8yItCzG8B3zxZ/z ZZ6bqZhE+/ItAtca5/WE1+D5nT/KbL4sXbmZO3RLBve5D/DxCqIwLFb3X6Qg9zYR zsm6/31OmIhx9Q14u5e97baIfk1XcKhdniT6urO+ChRO13rF+ACK3C0pMfXRGwJR yLAesW2QgNQjC+FMf+cKw9d4oi5CRlL9kw61lb7yRJ49j2kCWI9eu38+LQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPjL/8LwyCR+m9/Q+8xcBoJkAcpfMB8GA1UdIwQY MBaAFDkZ8q2RWEuv8EZ0R7rI+5eNH53TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUt MzJhYTY3MzFjMjkxLzEvMS1Ndl93dkRJSkg2YjM5RDd6RndHZ21RQnlsOC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzUvOTExOGUyLWFlNzQtNGMyNC1hNzc1LTMyYWE2NzMxYzI5 MS8xL09SbnlyWkZZUzZfd1JuUkh1c2o3bDQwZm5kTS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFqe+jAN BgkqhkiG9w0BAQsFAAOCAQEAphNSkC82Ta/2VhGq/MFQ6mg4/IeuEFnUYWyEs6Uj JsnMsW6hlKGkgLIrmXrtG7XCXJe5JMJkC0PtO3iAoAVuMfE8Y/Oa5n+hgS/71zCJ BYqMbuV6Y1HtKOZHcRouQetRvw8mzVec4ODJJjwDaQxiPW7qdBzyISlA/tvKI3PW FWzT9i5gmBdnj1OLLUDPa0wjt6FuuTgNsLn0H+iKoG6thQWKoH/5kF/nMUAR6RYO NQg3qmtGR+9/rdv9i7vHUHAQ/jZDZEZE9ORnvtvdX64r+LvZ2ULOfujf6c94nSwh uWUSaZUyySeWxSIKZjLLmq0ZuwNs59pfHJVNN6eTDFfQvw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:31:15 2026 by rpki-client