This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/6ukkUq47_d2FjDn2mGzCVotpwug.roa File: 6ukkUq47_d2FjDn2mGzCVotpwug.roa (raw, json) Hash identifier: BSpIOmqaO5YAgsvsZQqH6+DD7MhtSJv4k++NTBFYMhA= Subject key identifier: EA:E9:24:52:AE:3B:FD:DD:85:8C:39:F6:98:6C:C2:56:8B:69:C2:E8 Certificate issuer: /CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38 Certificate serial: 019B7C7F345957171E9B5BB59595C84FE94E Authority key identifier: EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/6ukkUq47_d2FjDn2mGzCVotpwug.roa Signing time: Fri 02 Jan 2026 02:17:49 +0000 ROA not before: Fri 02 Jan 2026 02:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8789 IP address blocks: 90.155.112.0/20 maxlen: 20 90.155.112.0/21 maxlen: 21 90.155.120.0/21 maxlen: 21 90.155.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:34:59:57:17:1e:9b:5b:b5:95:95:c8:4f:e9:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38 Validity Not Before: Jan 2 02:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eae92452ae3bfddd858c39f6986cc2568b69c2e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c0:be:35:d7:16:d5:8d:19:73:a1:68:60:ab: f0:3d:dc:a0:05:dc:33:5f:9d:ce:41:97:23:10:f9: 59:1c:f4:b1:96:a1:3b:01:67:cb:69:2a:50:1f:5b: 45:8d:98:12:52:b8:61:83:13:fc:3e:1e:a4:70:20: d3:f2:03:5c:e7:6c:1a:06:74:07:7a:c6:36:ac:0e: fd:ba:f9:17:4b:e8:62:1a:14:16:83:c0:5d:51:20: 7e:cf:a9:ec:0a:6a:12:de:1f:56:c4:d6:c5:23:3a: 35:49:ba:2b:67:31:05:e1:8f:fc:01:9f:0f:02:93: 6b:81:f9:93:d8:da:ee:24:08:02:4e:5d:e9:87:20: 36:0d:2c:24:42:57:ef:65:cc:56:2b:4a:0a:0f:aa: d3:8b:76:b1:af:0d:9e:d8:94:05:4f:8d:36:b3:63: 71:8c:ec:e9:98:9a:2b:e3:ff:ba:a4:1d:da:48:be: 2f:3e:52:8f:47:67:3b:36:53:0b:1e:b0:a6:d7:6b: 96:69:fe:10:74:4c:b8:df:de:de:13:2e:24:0f:33: 2e:35:b1:2c:df:de:f9:ad:ad:fc:bf:10:bc:42:b7: 36:86:02:5e:85:d1:96:1e:4c:e6:9f:ca:66:ca:1f: fb:28:5c:9f:26:05:77:8a:02:e2:fa:79:f0:6d:b8: 6c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E9:24:52:AE:3B:FD:DD:85:8C:39:F6:98:6C:C2:56:8B:69:C2:E8 X509v3 Authority Key Identifier: keyid:EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/6ukkUq47_d2FjDn2mGzCVotpwug.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 90.155.112.0/20 Signature Algorithm: sha256WithRSAEncryption 49:dc:a8:c3:71:f3:07:24:07:e3:3d:84:6c:43:2b:fc:09:b7: e0:6b:fe:d6:96:81:b9:fb:48:b0:92:aa:f1:2e:23:11:a0:9f: 6b:31:eb:62:d6:02:c8:aa:90:e8:65:11:73:ed:db:8a:4a:9d: c3:f2:31:3a:98:ac:fb:b8:63:7b:83:14:22:12:9d:f7:5b:6b: 15:f9:9a:8f:50:f5:88:95:58:3d:8e:e6:a4:9e:81:0f:f8:d6: 5d:c5:ac:9e:6d:6c:a4:e6:13:0f:d1:16:45:38:47:5c:0a:37: af:e1:c3:75:2f:96:39:ef:e3:2e:00:49:2c:56:9a:a2:27:60: b0:84:e5:d9:50:87:bc:51:ee:0f:a3:4b:63:c1:c2:4b:47:8e: 85:63:f4:82:e8:f3:10:d7:b4:97:6f:16:02:14:82:a4:9a:07: 6e:b4:f7:36:41:15:55:c7:3f:ab:89:5b:92:ef:ba:c8:54:49: 33:14:64:2c:85:7e:89:83:46:26:67:97:60:c9:82:28:1c:c2: 57:9f:6b:2f:2f:2a:07:71:a5:47:7e:10:e8:61:30:82:77:92: 95:e6:63:3a:0e:d1:b9:fb:55:a7:a6:08:29:18:ce:2e:6b:e7: f0:b3:fe:d9:e6:b3:68:86:cb:bf:b8:ba:96:b2:54:68:ef:d8: f5:9f:16:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fzRZVxcem1u1lZXIT+lOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWIwODk5ZTM4YTk2YjU0ZmM0Y2JjZDEwZWY1MzljNTRl ZDRkMzgwHhcNMjYwMTAyMDIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWU5MjQ1MmFlM2JmZGRkODU4YzM5ZjY5ODZjYzI1NjhiNjljMmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cC+NdcW1Y0Zc6FoYKvwPdygBdwz X53OQZcjEPlZHPSxlqE7AWfLaSpQH1tFjZgSUrhhgxP8Ph6kcCDT8gNc52waBnQH esY2rA79uvkXS+hiGhQWg8BdUSB+z6nsCmoS3h9WxNbFIzo1SborZzEF4Y/8AZ8P ApNrgfmT2NruJAgCTl3phyA2DSwkQlfvZcxWK0oKD6rTi3axrw2e2JQFT402s2Nx jOzpmJor4/+6pB3aSL4vPlKPR2c7NlMLHrCm12uWaf4QdEy4397eEy4kDzMuNbEs 3975ra38vxC8Qrc2hgJehdGWHkzmn8pmyh/7KFyfJgV3igLi+nnwbbhszQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOrpJFKuO/3dhYw59phswlaLacLoMB8GA1UdIwQY MBaAFO4bCJnjipa1T8TLzRDvU5xU7U04MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2hzSW1lT0tsclZQeE12TkVPOVRuRlR0VFRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjVhNDMtODE3Yi00NDliLWJjZmMt YWRmNmRhYjg4Yzg0LzEvNnVra1VxNDdfZDJGakRuMm1HekNWb3Rwd3VnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mYjVhNDMtODE3Yi00NDliLWJjZmMtYWRmNmRhYjg4Yzg0 LzEvN2hzSW1lT0tsclZQeE12TkVPOVRuRlR0VFRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEWptwMA0G CSqGSIb3DQEBCwUAA4IBAQBJ3KjDcfMHJAfjPYRsQyv8Cbfga/7WloG5+0iwkqrx LiMRoJ9rMeti1gLIqpDoZRFz7duKSp3D8jE6mKz7uGN7gxQiEp33W2sV+ZqPUPWI lVg9juaknoEP+NZdxayebWyk5hMP0RZFOEdcCjev4cN1L5Y57+MuAEksVpqiJ2Cw hOXZUIe8Ue4Po0tjwcJLR46FY/SC6PMQ17SXbxYCFIKkmgdutPc2QRVVxz+riVuS 77rIVEkzFGQshX6Jg0YmZ5dgyYIoHMJXn2svLyoHcaVHfhDoYTCCd5KV5mM6DtG5 +1WnpggpGM4ua+fws/7Z5rNohsu/uLqWslRo79j1nxbU -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:32 2026 by rpki-client