This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/90bA_1c0b9wqSfAPCrrQL_H-kZA.roa File: 90bA_1c0b9wqSfAPCrrQL_H-kZA.roa (raw, json) Hash identifier: r0eCLDLHOhzDC6shAKnaCsXhzGuMaX3Bckc660qpoRM= Subject key identifier: F7:46:C0:FF:57:34:6F:DC:2A:49:F0:0F:0A:BA:D0:2F:F1:FE:91:90 Certificate issuer: /CN=2791a7b8ee8440522b0b5530c85dce1d73f967b7 Certificate serial: 019B7EA6672223D3F57FF9B26BD99D1065D1 Authority key identifier: 27:91:A7:B8:EE:84:40:52:2B:0B:55:30:C8:5D:CE:1D:73:F9:67:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/90bA_1c0b9wqSfAPCrrQL_H-kZA.roa Signing time: Fri 02 Jan 2026 12:19:53 +0000 ROA not before: Fri 02 Jan 2026 12:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214526 IP address blocks: 95.128.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.crl rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft rsync://rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:67:22:23:d3:f5:7f:f9:b2:6b:d9:9d:10:65:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2791a7b8ee8440522b0b5530c85dce1d73f967b7 Validity Not Before: Jan 2 12:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f746c0ff57346fdc2a49f00f0abad02ff1fe9190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a0:5b:6f:46:7b:00:84:2d:5e:6f:43:ff:1f: b5:27:d0:b5:61:24:07:9b:0b:52:02:2b:80:8d:fe: db:48:92:b6:ed:85:c0:da:0a:39:1b:f7:01:06:22: c5:e4:5b:14:a1:70:df:88:fd:d6:f9:af:5b:3a:eb: e3:22:4b:82:78:7c:f7:ed:f6:b2:7a:cf:02:84:90: 79:09:c1:03:a6:08:bd:f1:c1:f3:be:6b:61:4f:5b: 23:22:d1:b7:2f:63:48:ce:db:4f:ba:4b:ba:f7:1e: a5:e1:8b:3c:55:43:c0:de:a8:c3:4e:ab:be:6c:cd: 72:fb:47:12:0d:1e:e4:e1:5b:c3:a1:c6:e9:39:67: 3d:f4:d8:df:09:77:d3:bb:c0:60:c8:3f:f2:fc:9f: d9:44:7d:1d:4d:53:2c:b8:e3:f9:5a:50:90:ce:41: d9:84:e3:ae:82:b4:6c:27:b1:dc:94:b2:5e:40:ff: 09:e2:e8:68:84:f8:6e:45:52:c0:ce:5f:d6:a8:39: be:bc:d4:d9:5c:6f:16:02:94:b3:32:6d:d9:83:c2: c1:d7:ab:b2:fc:3b:4c:9f:da:78:08:3c:1c:cb:bc: fd:ad:85:b4:86:98:f8:5d:e0:29:66:42:19:8d:a1: cd:44:ae:55:1d:d5:50:18:df:ff:be:16:e5:19:46: 41:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:46:C0:FF:57:34:6F:DC:2A:49:F0:0F:0A:BA:D0:2F:F1:FE:91:90 X509v3 Authority Key Identifier: keyid:27:91:A7:B8:EE:84:40:52:2B:0B:55:30:C8:5D:CE:1D:73:F9:67:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/90bA_1c0b9wqSfAPCrrQL_H-kZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.128.196.0/24 Signature Algorithm: sha256WithRSAEncryption 65:54:65:34:85:b4:a2:3e:dc:5c:42:cf:c9:86:f9:7e:11:c6: 2a:a4:3a:d8:55:b2:cc:e8:21:91:5d:4e:28:fe:ea:7e:1b:93: 6f:6e:5e:fe:65:d3:c7:ed:29:9a:c7:ad:04:04:a6:84:10:55: 10:a2:2a:de:4c:f4:b3:7b:39:fe:67:9f:91:8f:86:b9:4c:99: 0f:66:ab:01:8f:55:db:df:fc:22:eb:0d:c3:84:aa:83:e9:4d: 26:8d:2e:b1:7e:21:c3:2f:c4:d3:b6:c2:5b:00:a2:5b:86:4d: 62:f8:58:92:ce:4e:02:b9:5f:d7:41:f5:45:45:86:1c:5b:49: f5:3f:48:c4:b2:4f:ea:98:01:f1:85:26:a0:c8:ef:f0:67:4d: 69:a5:d0:07:80:e1:f5:aa:d9:af:82:8d:b0:8b:cf:a6:99:ea: 07:7e:72:ea:29:d2:fd:98:8e:bf:ee:54:7c:d5:58:81:48:26: 93:f6:ee:3a:38:dd:aa:b9:f2:27:20:09:ef:e4:c4:e1:70:80: 8c:8d:c9:fe:f4:b3:f8:52:6f:b7:10:c5:fd:10:5c:06:75:5a: d3:75:e0:38:4f:82:68:1d:c6:a1:43:f3:3a:45:4f:85:51:ed: d5:b7:b8:fa:d2:42:45:e8:f7:42:00:2b:1c:a0:4a:cf:c3:ad: 00:8b:56:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pmciI9P1f/mya9mdEGXRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTFhN2I4ZWU4NDQwNTIyYjBiNTUzMGM4NWRjZTFkNzNm OTY3YjcwHhcNMjYwMTAyMTIxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzQ2YzBmZjU3MzQ2ZmRjMmE0OWYwMGYwYWJhZDAyZmYxZmU5MTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKBbb0Z7AIQtXm9D/x+1J9C1YSQH mwtSAiuAjf7bSJK27YXA2go5G/cBBiLF5FsUoXDfiP3W+a9bOuvjIkuCeHz37fay es8ChJB5CcEDpgi98cHzvmthT1sjItG3L2NIzttPuku69x6l4Ys8VUPA3qjDTqu+ bM1y+0cSDR7k4VvDocbpOWc99NjfCXfTu8BgyD/y/J/ZRH0dTVMsuOP5WlCQzkHZ hOOugrRsJ7HclLJeQP8J4uhohPhuRVLAzl/WqDm+vNTZXG8WApSzMm3Zg8LB16uy /DtMn9p4CDwcy7z9rYW0hpj4XeApZkIZjaHNRK5VHdVQGN//vhblGUZBCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPdGwP9XNG/cKknwDwq60C/x/pGQMB8GA1UdIwQY MBaAFCeRp7juhEBSKwtVMMhdzh1z+We3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVHbnVPNkVRRklyQzFVd3lGM09IWFA1WjdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xM2I0YmMtMTk3ZS00MGE2LWI4NDUt OWVjZDhjYzUwYTg4LzEvOTBiQV8xYzBiOXdxU2ZBUENyclFMX0gta1pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xM2I0YmMtMTk3ZS00MGE2LWI4NDUtOWVjZDhjYzUwYTg4 LzEvSjVHbnVPNkVRRklyQzFVd3lGM09IWFA1WjdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4DEMA0G CSqGSIb3DQEBCwUAA4IBAQBlVGU0hbSiPtxcQs/Jhvl+EcYqpDrYVbLM6CGRXU4o /up+G5Nvbl7+ZdPH7Smax60EBKaEEFUQoireTPSzezn+Z5+Rj4a5TJkPZqsBj1Xb 3/wi6w3DhKqD6U0mjS6xfiHDL8TTtsJbAKJbhk1i+FiSzk4CuV/XQfVFRYYcW0n1 P0jEsk/qmAHxhSagyO/wZ01ppdAHgOH1qtmvgo2wi8+mmeoHfnLqKdL9mI6/7lR8 1ViBSCaT9u46ON2qufInIAnv5MThcICMjcn+9LP4Um+3EMX9EFwGdVrTdeA4T4Jo HcahQ/M6RU+FUe3Vt7j60kJF6PdCACscoErPw60Ai1Yh -----END CERTIFICATE-----Generated at Sun Jan 25 23:49:49 2026 by rpki-client