This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/rWY90c2-byEiqpH-pAXqLcTVBl8.roa File: rWY90c2-byEiqpH-pAXqLcTVBl8.roa (raw, json) Hash identifier: /cBf700BNhkKxHBETlqRX/grSyvQegr8+YbQwI/BM70= Subject key identifier: AD:66:3D:D1:CD:BE:6F:21:22:AA:91:FE:A4:05:EA:2D:C4:D5:06:5F Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46 Certificate serial: 019B79109889752C69A43CC10C358B660B6B Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/rWY90c2-byEiqpH-pAXqLcTVBl8.roa Signing time: Thu 01 Jan 2026 10:18:09 +0000 ROA not before: Thu 01 Jan 2026 10:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204954 IP address blocks: 192.58.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:98:89:75:2c:69:a4:3c:c1:0c:35:8b:66:0b:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46 Validity Not Before: Jan 1 10:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad663dd1cdbe6f2122aa91fea405ea2dc4d5065f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5a:44:f9:d3:8a:39:e2:df:f4:6f:6e:2f:23: ff:89:f7:cc:0a:86:38:57:04:34:c4:eb:bf:83:be: 4f:ce:b6:7c:54:4b:95:b1:ae:02:ec:89:37:ed:42: a2:1a:38:77:7a:19:f2:60:a2:f4:5d:bc:14:a4:8c: fa:d8:78:a2:14:7d:8e:e6:b9:54:5f:82:26:04:2b: bc:de:13:3e:99:bf:65:a9:99:d9:67:5e:f5:7d:c8: 75:df:a5:a9:e4:97:f4:f0:e3:9c:c4:e7:b7:5e:a5: 97:e1:60:f4:2b:95:90:89:f3:98:bb:3b:99:07:e0: c5:ea:f5:6e:5c:18:71:c9:8b:43:06:44:52:66:e8: e1:cb:ba:da:a1:e4:5b:b0:17:c5:c4:14:f3:4e:ac: 34:d5:76:c6:c0:4f:f6:88:e9:26:07:80:b3:d9:36: c8:eb:85:f8:b0:b4:87:59:72:75:9c:84:33:aa:02: 41:30:cd:a5:a8:88:71:7c:59:24:2b:18:c6:12:9f: 00:55:da:d4:cf:56:d9:c6:b6:c8:91:98:b9:84:fb: 0c:2f:3f:4d:fa:32:65:9d:1e:a4:1f:79:c2:8b:85: 33:e4:f2:41:f1:31:7b:45:b9:e3:83:e5:f0:e6:22: 1c:c3:64:87:6b:eb:bf:5b:ce:9d:31:aa:d3:7c:f2: 50:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:66:3D:D1:CD:BE:6F:21:22:AA:91:FE:A4:05:EA:2D:C4:D5:06:5F X509v3 Authority Key Identifier: keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/rWY90c2-byEiqpH-pAXqLcTVBl8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.58.60.0/22 Signature Algorithm: sha256WithRSAEncryption 17:ae:1f:36:e2:89:5a:ae:1d:1c:a6:1d:6c:bf:5c:0f:38:ce: aa:03:4d:c2:2e:88:35:01:1f:87:89:44:57:62:ea:2a:5d:b3: 6a:d4:13:97:33:3b:7b:47:8a:32:bf:7a:e9:e6:2a:f9:c1:31: dd:fc:81:d2:68:da:87:58:16:3d:73:74:4e:60:de:4c:ff:40: a5:e4:8c:e0:4b:c2:1a:bc:d3:cb:23:bf:45:76:80:94:f7:73: f1:f1:9b:f4:75:c6:97:91:36:ec:a3:41:79:b3:dd:60:64:03: 6e:86:bf:9d:9a:08:6f:97:7b:95:6d:a5:d0:66:ff:5c:23:83: b8:e2:78:b9:3c:1d:2e:09:f9:73:c3:4e:29:ed:24:c6:e7:73: a4:d0:90:74:94:0a:54:ae:e6:95:7c:2a:e4:8e:94:5b:4f:fc: 74:48:e7:42:8a:9a:9e:42:86:80:f6:50:47:e5:d5:2b:ee:b5: 2f:ec:37:e6:30:f4:e8:c1:27:93:cf:ea:74:4e:c6:49:3e:72: 0e:79:22:76:38:06:4c:ab:65:58:78:50:11:61:fd:d9:04:e9: da:d5:b2:c1:6b:c7:06:be:8b:00:7c:7f:7b:d3:61:33:69:97: 77:24:68:f2:29:5c:2d:72:8d:5a:8a:4f:d1:2c:f9:a3:0e:0b: 92:c5:6a:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EJiJdSxppDzBDDWLZgtrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj NWRiNDYwHhcNMjYwMTAxMTAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDY2M2RkMWNkYmU2ZjIxMjJhYTkxZmVhNDA1ZWEyZGM0ZDUwNjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFpE+dOKOeLf9G9uLyP/iffMCoY4 VwQ0xOu/g75PzrZ8VEuVsa4C7Ik37UKiGjh3ehnyYKL0XbwUpIz62HiiFH2O5rlU X4ImBCu83hM+mb9lqZnZZ171fch136Wp5Jf08OOcxOe3XqWX4WD0K5WQifOYuzuZ B+DF6vVuXBhxyYtDBkRSZujhy7raoeRbsBfFxBTzTqw01XbGwE/2iOkmB4Cz2TbI 64X4sLSHWXJ1nIQzqgJBMM2lqIhxfFkkKxjGEp8AVdrUz1bZxrbIkZi5hPsMLz9N +jJlnR6kH3nCi4Uz5PJB8TF7Rbnjg+Xw5iIcw2SHa+u/W86dMarTfPJQPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK1mPdHNvm8hIqqR/qQF6i3E1QZfMB8GA1UdIwQY MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt YTRjYThiOWMyMDViLzEvcldZOTBjMi1ieUVpcXBILXBBWHFMY1RWQmw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwDo8MA0G CSqGSIb3DQEBCwUAA4IBAQAXrh824olarh0cph1sv1wPOM6qA03CLog1AR+HiURX YuoqXbNq1BOXMzt7R4oyv3rp5ir5wTHd/IHSaNqHWBY9c3ROYN5M/0Cl5IzgS8Ia vNPLI79FdoCU93Px8Zv0dcaXkTbso0F5s91gZANuhr+dmghvl3uVbaXQZv9cI4O4 4ni5PB0uCflzw04p7STG53Ok0JB0lApUruaVfCrkjpRbT/x0SOdCipqeQoaA9lBH 5dUr7rUv7DfmMPTowSeTz+p0TsZJPnIOeSJ2OAZMq2VYeFARYf3ZBOna1bLBa8cG vosAfH9702EzaZd3JGjyKVwtco1aik/RLPmjDguSxWoi -----END CERTIFICATE-----Generated at Sun Jan 25 16:27:35 2026 by rpki-client