This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/90MC7lpDH8Gbpn1gKbJADCIkuHQ.roa File: 90MC7lpDH8Gbpn1gKbJADCIkuHQ.roa (raw, json) Hash identifier: IdtFKKH7Qq584DOaHWX8VE6Du+XS0AqFvI0No8Ac1k0= Subject key identifier: F7:43:02:EE:5A:43:1F:C1:9B:A6:7D:60:29:B2:40:0C:22:24:B8:74 Certificate issuer: /CN=bd6fa37a2483cf579fa86250119ac0133475aad8 Certificate serial: 019B7B367B79D6416AD71007BB4087525E96 Authority key identifier: BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/90MC7lpDH8Gbpn1gKbJADCIkuHQ.roa Signing time: Thu 01 Jan 2026 20:18:46 +0000 ROA not before: Thu 01 Jan 2026 20:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 932 IP address blocks: 45.86.140.0/22 maxlen: 24 45.133.228.0/22 maxlen: 24 45.138.80.0/22 maxlen: 24 45.147.24.0/22 maxlen: 24 45.158.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.crl rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:7b:79:d6:41:6a:d7:10:07:bb:40:87:52:5e:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd6fa37a2483cf579fa86250119ac0133475aad8 Validity Not Before: Jan 1 20:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f74302ee5a431fc19ba67d6029b2400c2224b874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:29:ec:da:4a:a0:1f:b8:c2:28:f3:1a:9d:e6: 2c:09:60:d7:30:1d:03:74:f1:d0:62:f4:a4:e3:9d: 10:1e:cb:52:c6:0a:58:f7:80:22:4d:e0:e7:d0:9f: a9:da:88:7b:b6:b3:a3:41:6c:85:96:38:17:08:6c: 17:c4:78:68:2b:d9:ae:6e:7f:b1:8b:e6:67:89:0c: 99:e5:e4:09:91:16:11:6a:10:c3:f7:8e:89:da:5b: 09:fd:0b:d3:5d:59:5d:3c:1a:af:cd:cd:74:68:75: 3a:89:fa:8a:78:a4:49:d7:cb:b9:0a:9e:cb:e2:23: 39:79:53:ec:a6:30:26:81:70:db:f8:fd:d5:8f:6c: 24:55:10:24:ac:76:2f:5f:83:ac:e5:9b:d0:4f:d4: ab:b9:51:ac:ea:dc:7d:bf:e8:0c:f1:20:08:41:0e: 97:3c:54:7b:65:d2:e8:01:47:d1:98:4b:1a:3d:96: 19:4c:7f:7e:78:c6:67:31:60:f9:bc:fd:1f:28:60: fa:49:17:30:4b:1c:78:da:fc:87:14:f9:01:e7:1c: 22:c8:77:b6:a9:63:dc:b0:00:fd:03:87:3a:c1:ce: 5f:03:9b:01:a1:62:8e:6e:e4:1c:ff:ee:e2:a1:f5: 97:a3:54:10:9a:5d:d3:e3:57:18:af:58:39:85:cc: 4d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:43:02:EE:5A:43:1F:C1:9B:A6:7D:60:29:B2:40:0C:22:24:B8:74 X509v3 Authority Key Identifier: keyid:BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/90MC7lpDH8Gbpn1gKbJADCIkuHQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.140.0/22 45.133.228.0/22 45.138.80.0/22 45.147.24.0/22 45.158.228.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:85:56:6e:00:74:1c:e8:98:b3:a0:1b:8b:96:8c:6e:c3:6b: 48:9b:ec:8c:da:5b:6f:a2:28:02:23:78:bd:b2:4f:c0:e6:e2: 3a:8d:d6:ce:ef:e9:cc:b4:60:a7:30:53:97:da:cd:1a:23:11: 90:92:37:94:3b:e3:fe:78:47:1c:b0:6d:09:6b:57:3a:db:ec: ec:00:e0:53:9b:83:16:eb:3a:ff:84:8a:08:3d:be:8f:45:12: bf:39:b0:c0:49:ab:ff:fc:96:0f:59:4c:78:59:16:9f:41:50: 5e:d5:90:8b:36:e6:20:c9:f4:40:46:3f:9d:67:d1:4f:21:ca: d0:3d:7c:67:39:e8:0b:f8:8d:f8:3c:f7:70:0f:81:e6:6d:7d: 13:16:7b:ee:68:be:4f:0e:d3:51:53:b8:03:02:b0:01:07:50: d3:57:61:4a:df:47:c5:75:da:5a:e2:78:25:34:c9:93:4e:72: ce:4d:81:42:d4:21:59:c1:48:ed:23:bb:91:0f:e2:7d:d9:10: 03:76:46:7d:92:f3:d6:25:0b:20:37:17:1c:f4:a6:b5:86:4e: af:ff:d3:88:5c:47:e0:c4:ff:d6:ae:76:c8:92:11:4d:c1:4c: 70:b3:39:de:44:c5:ab:2a:49:19:39:55:7e:a9:41:6d:ef:db: 7c:d1:ef:6a -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt7Nnt51kFq1xAHu0CHUl6WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNmZhMzdhMjQ4M2NmNTc5ZmE4NjI1MDExOWFjMDEzMzQ3 NWFhZDgwHhcNMjYwMTAxMjAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzQzMDJlZTVhNDMxZmMxOWJhNjdkNjAyOWIyNDAwYzIyMjRiODc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCns2kqgH7jCKPManeYsCWDXMB0D dPHQYvSk450QHstSxgpY94AiTeDn0J+p2oh7trOjQWyFljgXCGwXxHhoK9mubn+x i+ZniQyZ5eQJkRYRahDD946J2lsJ/QvTXVldPBqvzc10aHU6ifqKeKRJ18u5Cp7L 4iM5eVPspjAmgXDb+P3Vj2wkVRAkrHYvX4Os5ZvQT9SruVGs6tx9v+gM8SAIQQ6X PFR7ZdLoAUfRmEsaPZYZTH9+eMZnMWD5vP0fKGD6SRcwSxx42vyHFPkB5xwiyHe2 qWPcsAD9A4c6wc5fA5sBoWKObuQc/+7iofWXo1QQml3T41cYr1g5hcxNzQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFPdDAu5aQx/Bm6Z9YCmyQAwiJLh0MB8GA1UdIwQY MBaAFL1vo3okg89Xn6hiUBGawBM0darYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlctamVpU0R6MWVmcUdKUUVackFFelIxcXRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9lM2FkYTItYzlkZi00NGUyLThiMGYt OGZmMTYxMWU4YmI0LzEvOTBNQzdscERIOEdicG4xZ0tiSkFEQ0lrdUhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9lM2FkYTItYzlkZi00NGUyLThiMGYtOGZmMTYxMWU4YmI0 LzEvdlctamVpU0R6MWVmcUdKUUVackFFelIxcXRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCLVaMAwQC LYXkAwQCLYpQAwQCLZMYAwQCLZ7kMA0GCSqGSIb3DQEBCwUAA4IBAQAahVZuAHQc 6JizoBuLloxuw2tIm+yM2ltvoigCI3i9sk/A5uI6jdbO7+nMtGCnMFOX2s0aIxGQ kjeUO+P+eEccsG0Ja1c62+zsAOBTm4MW6zr/hIoIPb6PRRK/ObDASav//JYPWUx4 WRafQVBe1ZCLNuYgyfRARj+dZ9FPIcrQPXxnOegL+I34PPdwD4HmbX0TFnvuaL5P DtNRU7gDArABB1DTV2FK30fFddpa4nglNMmTTnLOTYFC1CFZwUjtI7uRD+J92RAD dkZ9kvPWJQsgNxcc9Ka1hk6v/9OIXEfgxP/WrnbIkhFNwUxwszneRMWrKkkZOVV+ qUFt79t80e9q -----END CERTIFICATE-----Generated at Sun Jan 25 16:35:58 2026 by rpki-client