This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-d3IuWNvzKP4FPhm0TvFiuTAtdg.roa File: 1-d3IuWNvzKP4FPhm0TvFiuTAtdg.roa (raw, json) Hash identifier: DJ8eBJIVwiP6ogHmt4Qns9UPC8q7wfk1mdrmuhDTu9M= Subject key identifier: F9:DD:C8:B9:63:6F:CC:A3:F8:14:F8:66:D1:3B:C5:8A:E4:C0:B5:D8 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B77595452AE17BDE94C5B3ADAA64DFCB6 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-d3IuWNvzKP4FPhm0TvFiuTAtdg.roa Signing time: Thu 01 Jan 2026 02:18:21 +0000 ROA not before: Thu 01 Jan 2026 02:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50322 IP address blocks: 188.210.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:54:52:ae:17:bd:e9:4c:5b:3a:da:a6:4d:fc:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9ddc8b9636fcca3f814f866d13bc58ae4c0b5d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:07:d5:1b:f6:ed:31:90:e8:4c:03:e8:7b:13: 79:2e:34:86:3e:59:a2:38:b3:3a:d5:27:0d:78:27: 73:9c:d7:a5:22:ff:23:f9:3e:90:bc:68:b7:7e:38: 3a:1a:05:2a:1b:d7:fe:64:69:18:8a:3d:dd:b3:ff: 45:58:31:36:fb:c8:ce:8a:a9:45:39:12:ab:23:c5: b9:05:a0:f3:19:7b:ab:1e:cc:b1:78:7c:e9:33:16: f9:1e:1e:0a:02:08:53:85:ce:a0:f8:a5:46:fd:1d: e5:5b:7e:f5:d2:66:6e:9a:7a:07:95:61:33:bc:eb: 0f:4a:7b:0f:db:c0:24:79:28:a5:3f:8b:20:17:b1: 45:96:cb:2b:db:1f:19:e5:72:a0:e2:83:01:fe:60: a2:9a:1f:b8:7b:55:be:79:a6:52:d2:a4:c0:72:11: 1b:95:f6:76:5b:ee:e4:b5:53:a7:85:c7:c1:e0:f6: 10:f9:96:ef:08:de:d6:2e:1b:f6:aa:47:d1:b8:d8: 28:f4:23:6f:1b:fa:26:02:50:20:c9:6a:bc:59:1d: 1e:b0:04:3f:bb:a2:a0:b4:a1:26:2e:a2:e0:1b:9c: db:ea:d9:0c:8a:bb:24:30:c5:7a:0d:83:dc:1e:36: cc:13:87:d0:99:f9:ff:d1:2e:f0:9e:d3:e5:36:b5: df:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DD:C8:B9:63:6F:CC:A3:F8:14:F8:66:D1:3B:C5:8A:E4:C0:B5:D8 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-d3IuWNvzKP4FPhm0TvFiuTAtdg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.210.90.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:40:99:70:d0:61:48:8d:c9:7a:d4:df:6b:aa:c1:f0:8e:57: 42:e2:2b:9f:87:ba:25:f2:59:24:c2:67:ce:52:61:31:60:bb: 9c:e9:6c:16:1c:45:0c:62:0c:b3:2d:25:29:9e:c9:01:b2:c6: 36:72:f1:71:0f:a5:5b:76:48:49:02:a6:ce:d6:d0:b5:b2:52: 8b:10:2c:80:f1:63:98:e6:78:d2:98:5b:da:bb:aa:91:07:24: b6:d8:d8:a1:58:0e:00:2b:2c:d6:d7:9c:17:89:42:09:25:a5: 64:ad:c4:29:16:82:8d:76:02:dd:e7:f2:1f:3b:ba:cd:72:0a: b0:70:bf:ea:58:00:99:21:91:0a:8c:aa:d2:84:5f:f5:9a:4c: c0:45:23:33:a8:61:15:a7:c9:99:de:cb:5b:7b:cf:45:e5:f8: 38:5b:7c:01:53:0c:be:a2:f3:fc:ae:80:16:e3:a9:bf:2b:66: a3:7b:53:29:f0:7a:89:4a:ce:77:95:87:5e:85:68:60:74:ce: 59:13:ba:48:01:a2:82:23:1f:78:a2:dc:35:25:6e:27:68:3d: 48:91:a1:97:33:00:78:c1:13:f2:6b:74:e7:c8:8f:f3:4f:7f: f7:a8:9f:d3:da:e5:c3:3a:77:c7:57:00:d9:c0:0b:a1:6f:0b: 5d:80:53:3e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WVRSrhe96UxbOtqmTfy2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWRkYzhiOTYzNmZjY2EzZjgxNGY4NjZkMTNiYzU4YWU0YzBiNWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQfVG/btMZDoTAPoexN5LjSGPlmi OLM61ScNeCdznNelIv8j+T6QvGi3fjg6GgUqG9f+ZGkYij3ds/9FWDE2+8jOiqlF ORKrI8W5BaDzGXurHsyxeHzpMxb5Hh4KAghThc6g+KVG/R3lW3710mZumnoHlWEz vOsPSnsP28AkeSilP4sgF7FFlssr2x8Z5XKg4oMB/mCimh+4e1W+eaZS0qTAchEb lfZ2W+7ktVOnhcfB4PYQ+ZbvCN7WLhv2qkfRuNgo9CNvG/omAlAgyWq8WR0esAQ/ u6KgtKEmLqLgG5zb6tkMirskMMV6DYPcHjbME4fQmfn/0S7wntPlNrXf2wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPndyLljb8yj+BT4ZtE7xYrkwLXYMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xLzEtZDNJdVdOdnpLUDRGUGhtMFR2Rml1VEF0ZGcucm9h MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzc4L2RhMzM5OC02Njk4LTQ1ZjItYmFhZS05MmUyNWZlMTYz MzEvMS8xLU9ZbU5PRzlVVE9wM2tVU3JwakswYklobTFrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNJa MA0GCSqGSIb3DQEBCwUAA4IBAQB7QJlw0GFIjcl61N9rqsHwjldC4iufh7ol8lkk wmfOUmExYLuc6WwWHEUMYgyzLSUpnskBssY2cvFxD6VbdkhJAqbO1tC1slKLECyA 8WOY5njSmFvau6qRByS22NihWA4AKyzW15wXiUIJJaVkrcQpFoKNdgLd5/IfO7rN cgqwcL/qWACZIZEKjKrShF/1mkzARSMzqGEVp8mZ3stbe89F5fg4W3wBUwy+ovP8 roAW46m/K2aje1Mp8HqJSs53lYdehWhgdM5ZE7pIAaKCIx94otw1JW4naD1IkaGX MwB4wRPya3TnyI/zT3/3qJ/T2uXDOnfHVwDZwAuhbwtdgFM+ -----END CERTIFICATE-----Generated at Sun Jan 25 14:33:24 2026 by rpki-client