This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/E_v0bNYlLtVQM1--pIuT918H72U.roa File: E_v0bNYlLtVQM1--pIuT918H72U.roa (raw, json) Hash identifier: aVGT5S1MCcaux4fm6OCR8ebJDDrb+WKy9ZF1A2XfnnI= Subject key identifier: 13:FB:F4:6C:D6:25:2E:D5:50:33:5F:BE:A4:8B:93:F7:5F:07:EF:65 Certificate issuer: /CN=50bb158d29e37500d5c3a25dada149b2a503f6a5 Certificate serial: 019B7EA6E5725AA0F15517D6F7BA9226D704 Authority key identifier: 50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/E_v0bNYlLtVQM1--pIuT918H72U.roa Signing time: Fri 02 Jan 2026 12:20:25 +0000 ROA not before: Fri 02 Jan 2026 12:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5413 IP address blocks: 185.121.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:e5:72:5a:a0:f1:55:17:d6:f7:ba:92:26:d7:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50bb158d29e37500d5c3a25dada149b2a503f6a5 Validity Not Before: Jan 2 12:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13fbf46cd6252ed550335fbea48b93f75f07ef65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:86:21:13:99:19:58:98:aa:60:93:e4:41:36: a6:75:ed:95:1d:5a:71:4c:c5:33:4c:49:b9:8c:85: 85:c6:7c:fa:60:7d:5c:1a:f0:95:85:f8:a9:48:33: 2b:76:1c:e5:ed:a6:88:cb:ee:14:9e:b0:ce:16:f4: 38:9c:3a:c4:6d:ea:b6:49:ee:76:91:60:0d:95:71: 45:c9:52:1f:7e:15:74:f0:c4:a3:7b:a8:ce:e6:8d: ab:fe:92:07:f4:cd:4f:32:18:14:91:e4:27:a4:49: 0c:de:27:ad:c0:7c:c2:92:e3:c9:26:93:ca:91:cf: 08:0b:30:88:7c:29:49:9c:ef:52:b1:7d:8d:07:4f: 04:6f:3e:18:e9:6d:bc:a2:3a:d6:15:e7:78:a7:66: 04:1d:7c:dc:19:f8:e2:31:ca:3f:76:e8:37:61:72: 06:a8:73:15:cf:f8:91:9e:f8:5e:0b:44:1b:a8:0b: 98:6b:c5:88:bc:fc:5a:b4:0a:8f:7d:9b:90:28:3a: e5:4f:53:5e:ae:ea:e7:a6:cd:ce:58:00:cf:ee:ee: 7f:33:a6:26:7f:0c:da:e5:3f:c8:9d:3d:8c:d8:e0: e9:ab:8e:85:ef:d4:43:c1:b7:8a:d9:9b:88:1c:9f: 06:8c:e6:39:9d:5a:36:c6:6f:ee:f7:21:b6:cd:6c: c2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FB:F4:6C:D6:25:2E:D5:50:33:5F:BE:A4:8B:93:F7:5F:07:EF:65 X509v3 Authority Key Identifier: keyid:50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/E_v0bNYlLtVQM1--pIuT918H72U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.90.0/24 Signature Algorithm: sha256WithRSAEncryption d8:d4:b2:d0:c3:04:e7:d9:bb:2e:bf:b9:f8:f8:ff:ce:63:19: eb:e2:14:b2:05:80:50:45:5a:95:06:d6:d8:0a:dc:ef:02:96: 04:01:04:bc:f4:b6:b5:31:83:ee:3b:99:7e:4b:d9:9b:bd:de: 9d:f4:38:db:9f:9d:49:3a:4b:22:be:02:47:09:1a:1c:d8:cb: b4:cd:0a:5b:0d:82:bd:bd:7f:3c:70:85:f8:4d:cf:e8:51:49: 80:9f:db:cc:24:0c:34:53:b3:d3:30:00:17:a3:19:51:16:cc: b4:d1:ac:85:e2:1c:d4:0a:fe:e7:8e:10:5c:90:dc:4b:c3:13: dc:19:ff:2c:70:e5:f9:44:2c:a5:34:ed:87:f2:91:32:07:b6: 11:62:52:f4:c5:b8:7e:32:78:93:ae:93:41:0f:4f:69:b3:63: c5:2d:f3:96:4b:61:19:26:4d:e3:8c:ca:2a:80:03:d6:aa:23: 7c:95:79:11:10:2c:9d:d2:c0:8c:f0:44:18:95:9d:de:ec:f1: ac:c3:73:aa:f9:a7:b2:bc:70:b9:bb:28:d5:81:d1:38:ea:d3: e9:72:6d:7c:fd:b0:a1:e3:1c:67:b1:5a:1d:6b:b7:81:d5:68: f1:0a:d3:e7:fa:8c:52:b0:50:0c:20:7d:64:a4:0b:db:f5:69: 08:99:4f:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+puVyWqDxVRfW97qSJtcEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwYmIxNThkMjllMzc1MDBkNWMzYTI1ZGFkYTE0OWIyYTUw M2Y2YTUwHhcNMjYwMTAyMTIyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2ZiZjQ2Y2Q2MjUyZWQ1NTAzMzVmYmVhNDhiOTNmNzVmMDdlZjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIYhE5kZWJiqYJPkQTamde2VHVpx TMUzTEm5jIWFxnz6YH1cGvCVhfipSDMrdhzl7aaIy+4UnrDOFvQ4nDrEbeq2Se52 kWANlXFFyVIffhV08MSje6jO5o2r/pIH9M1PMhgUkeQnpEkM3ietwHzCkuPJJpPK kc8ICzCIfClJnO9SsX2NB08Ebz4Y6W28ojrWFed4p2YEHXzcGfjiMco/dug3YXIG qHMVz/iRnvheC0QbqAuYa8WIvPxatAqPfZuQKDrlT1Nerurnps3OWADP7u5/M6Ym fwza5T/InT2M2ODpq46F79RDwbeK2ZuIHJ8GjOY5nVo2xm/u9yG2zWzCaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBP79GzWJS7VUDNfvqSLk/dfB+9lMB8GA1UdIwQY MBaAFFC7FY0p43UA1cOiXa2hSbKlA/alMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUxzVmpTbmpkUURWdzZKZHJhRkpzcVVEOXFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi80NWQyODQtYTM3My00NTUyLWJjOGEt NzQzMTEyYjBlNzcxLzEvRV92MGJOWWxMdFZRTTEtLXBJdVQ5MThINzJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi80NWQyODQtYTM3My00NTUyLWJjOGEtNzQzMTEyYjBlNzcx LzEvVUxzVmpTbmpkUURWdzZKZHJhRkpzcVVEOXFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXlaMA0G CSqGSIb3DQEBCwUAA4IBAQDY1LLQwwTn2bsuv7n4+P/OYxnr4hSyBYBQRVqVBtbY CtzvApYEAQS89La1MYPuO5l+S9mbvd6d9Djbn51JOksivgJHCRoc2Mu0zQpbDYK9 vX88cIX4Tc/oUUmAn9vMJAw0U7PTMAAXoxlRFsy00ayF4hzUCv7njhBckNxLwxPc Gf8scOX5RCylNO2H8pEyB7YRYlL0xbh+MniTrpNBD09ps2PFLfOWS2EZJk3jjMoq gAPWqiN8lXkRECyd0sCM8EQYlZ3e7PGsw3Oq+aeyvHC5uyjVgdE46tPpcm18/bCh 4xxnsVoda7eB1WjxCtPn+oxSsFAMIH1kpAvb9WkImU/y -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:04 2026 by rpki-client