This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/fEyQPPeKri3xxIwF-GK2DK9OO9c.roa File: fEyQPPeKri3xxIwF-GK2DK9OO9c.roa (raw, json) Hash identifier: 7YArpvgzsRn7tFDaYlxf0t+umiWwVKrDBhvgYPCrlAc= Subject key identifier: 7C:4C:90:3C:F7:8A:AE:2D:F1:C4:8C:05:F8:62:B6:0C:AF:4E:3B:D7 Certificate issuer: /CN=90a02705006532ef33a0064f875a100923509fd5 Certificate serial: 019B7FF1F9006CD21CDC6ED77B1699320344 Authority key identifier: 90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/fEyQPPeKri3xxIwF-GK2DK9OO9c.roa Signing time: Fri 02 Jan 2026 18:22:02 +0000 ROA not before: Fri 02 Jan 2026 18:22:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198380 IP address blocks: 185.154.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:f9:00:6c:d2:1c:dc:6e:d7:7b:16:99:32:03:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90a02705006532ef33a0064f875a100923509fd5 Validity Not Before: Jan 2 18:22:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c4c903cf78aae2df1c48c05f862b60caf4e3bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a2:51:f6:e1:d8:23:f9:22:78:65:b9:6f:5a: 69:26:65:3e:40:11:9f:bc:d2:6d:9b:96:4e:00:30: 2e:50:ef:69:23:73:dc:b1:5e:11:22:49:2e:2c:47: 0c:d8:e5:b2:2e:39:14:78:ce:ea:65:ef:97:4f:36: b9:7f:d9:3b:41:c8:b8:a6:c1:a4:4a:fb:bf:07:db: 6c:5b:aa:08:ab:2c:1a:74:18:02:51:e5:de:21:6c: 81:84:f3:f5:14:f5:b1:51:e1:42:a3:14:14:d6:39: 66:e3:91:ca:24:37:a4:9f:f8:46:f5:bc:ec:5d:26: 67:80:5c:ac:eb:b7:65:d8:9e:d7:c0:6c:a9:f4:1e: 16:e0:ed:bd:3c:72:2f:a4:11:dd:26:8e:4e:86:06: a8:e8:ef:8e:3c:18:ac:2e:55:60:f2:19:49:96:4a: a2:35:0b:c2:4c:bd:8c:a4:af:3b:c4:95:67:79:2f: bd:77:7a:72:f6:9e:70:9b:c1:17:e2:2f:38:25:ed: 1d:d9:e8:67:8b:8d:cd:26:62:05:93:d7:31:d5:f7: b2:26:36:36:a5:a8:a1:99:9f:94:94:83:0c:17:ab: e6:34:68:3a:b7:11:d7:55:10:d5:1a:05:5c:28:f7: ad:84:a9:b6:9b:e3:c3:d1:70:3c:c0:43:cd:ae:25: 51:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4C:90:3C:F7:8A:AE:2D:F1:C4:8C:05:F8:62:B6:0C:AF:4E:3B:D7 X509v3 Authority Key Identifier: keyid:90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/fEyQPPeKri3xxIwF-GK2DK9OO9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.154.236.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:7e:d1:d3:64:e3:f4:6c:0b:f4:ee:24:ba:fa:3b:c2:e5:3a: 7b:91:d7:dc:20:15:62:b2:81:0b:e2:4e:0f:d0:42:10:c5:30: c3:dc:a7:c4:b0:5b:3e:5b:0a:f7:96:6c:df:7a:7c:80:40:38: 98:95:ec:82:3e:20:79:5b:61:81:d9:cc:3e:4d:8c:4e:b1:6a: 0a:8c:0b:9b:ea:ad:08:9a:4e:bb:8d:66:73:0a:33:90:2b:35: ac:96:13:88:ab:49:91:15:45:36:7a:04:1d:c0:ac:e5:64:d7: f7:3e:9a:2e:11:2f:42:35:ab:ea:5b:7c:5b:e5:f7:df:6f:3d: a7:f9:f1:5c:23:4d:fe:0c:15:d4:08:ac:0a:d9:80:cb:d1:04: 99:ea:1e:e5:04:a2:d2:1c:0a:c8:28:35:23:b1:55:ef:44:ec: af:a2:13:8f:30:bd:41:c9:73:a2:27:95:c0:a4:d6:2b:cf:d0: 40:df:cc:c1:88:aa:9d:03:74:03:1e:5d:b2:8f:eb:41:5c:b0: 5e:f5:58:65:fd:05:7b:1c:ab:c5:29:6a:e7:29:49:35:33:d6: 24:20:dc:5f:1a:73:51:c5:d1:4e:08:1b:da:ce:ac:76:9d:f2: 47:94:33:93:bf:a2:02:73:8f:f1:c5:d7:97:27:ab:cf:a6:ab: dd:bc:34:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8fkAbNIc3G7XexaZMgNEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYTAyNzA1MDA2NTMyZWYzM2EwMDY0Zjg3NWExMDA5MjM1 MDlmZDUwHhcNMjYwMTAyMTgyMjAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzRjOTAzY2Y3OGFhZTJkZjFjNDhjMDVmODYyYjYwY2FmNGUzYmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKJR9uHYI/kieGW5b1ppJmU+QBGf vNJtm5ZOADAuUO9pI3PcsV4RIkkuLEcM2OWyLjkUeM7qZe+XTza5f9k7Qci4psGk Svu/B9tsW6oIqywadBgCUeXeIWyBhPP1FPWxUeFCoxQU1jlm45HKJDekn/hG9bzs XSZngFys67dl2J7XwGyp9B4W4O29PHIvpBHdJo5Ohgao6O+OPBisLlVg8hlJlkqi NQvCTL2MpK87xJVneS+9d3py9p5wm8EX4i84Je0d2ehni43NJmIFk9cx1feyJjY2 paihmZ+UlIMMF6vmNGg6txHXVRDVGgVcKPethKm2m+PD0XA8wEPNriVRzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHxMkDz3iq4t8cSMBfhitgyvTjvXMB8GA1UdIwQY MBaAFJCgJwUAZTLvM6AGT4daEAkjUJ/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0tBbkJRQmxNdTh6b0FaUGgxb1FDU05RbjlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kOWY0ODItMTM1ZS00N2Y2LTkzMTct Njc4NWFkYTUyN2MxLzEvZkV5UVBQZUtyaTN4eEl3Ri1HSzJESzlPTzljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9kOWY0ODItMTM1ZS00N2Y2LTkzMTctNjc4NWFkYTUyN2Mx LzEva0tBbkJRQmxNdTh6b0FaUGgxb1FDU05RbjlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZrsMA0G CSqGSIb3DQEBCwUAA4IBAQArftHTZOP0bAv07iS6+jvC5Tp7kdfcIBVisoEL4k4P 0EIQxTDD3KfEsFs+Wwr3lmzfenyAQDiYleyCPiB5W2GB2cw+TYxOsWoKjAub6q0I mk67jWZzCjOQKzWslhOIq0mRFUU2egQdwKzlZNf3PpouES9CNavqW3xb5fffbz2n +fFcI03+DBXUCKwK2YDL0QSZ6h7lBKLSHArIKDUjsVXvROyvohOPML1ByXOiJ5XA pNYrz9BA38zBiKqdA3QDHl2yj+tBXLBe9Vhl/QV7HKvFKWrnKUk1M9YkINxfGnNR xdFOCBvazqx2nfJHlDOTv6ICc4/xxdeXJ6vPpqvdvDTb -----END CERTIFICATE-----Generated at Sun Jan 25 18:09:05 2026 by rpki-client