This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/onKOWpSCd5nknY7qIE0OTy6r59M.roa File: onKOWpSCd5nknY7qIE0OTy6r59M.roa (raw, json) Hash identifier: G3Ru50iFN69OvlMFP21x46QieknWj+cj2RPOdgx4g78= Subject key identifier: A2:72:8E:5A:94:82:77:99:E4:9D:8E:EA:20:4D:0E:4F:2E:AB:E7:D3 Certificate issuer: /CN=fbcdd117eac757b6f8f39428653ae12508cc6989 Certificate serial: 019A79098315CB659C0C0EFF7A25C9D72717 Authority key identifier: FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/onKOWpSCd5nknY7qIE0OTy6r59M.roa Signing time: Wed 12 Nov 2025 17:07:37 +0000 ROA not before: Wed 12 Nov 2025 17:07:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 201228 IP address blocks: 45.90.10.0/24 maxlen: 24 45.90.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:79:09:83:15:cb:65:9c:0c:0e:ff:7a:25:c9:d7:27:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbcdd117eac757b6f8f39428653ae12508cc6989 Validity Not Before: Nov 12 17:07:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a2728e5a94827799e49d8eea204d0e4f2eabe7d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5c:6b:3e:01:64:8d:2f:a5:0f:59:01:9d:b3: d7:c2:40:30:87:fc:35:12:37:d5:d2:74:68:b4:c8: b1:4e:17:ed:85:f1:3b:4f:ad:d0:c1:13:b3:ab:a4: fb:87:6f:33:35:d1:6d:19:6b:e5:de:f4:d6:b7:97: e7:dc:d5:53:7a:99:40:41:0a:bc:52:b6:55:df:15: f3:90:6c:70:a5:47:b2:ba:e5:5e:b9:53:63:5e:74: 65:27:4c:1d:47:e5:87:31:85:0b:f1:96:4e:b1:01: db:52:f6:d8:71:47:b9:79:63:7f:db:9d:5d:8f:b1: b9:da:30:18:0e:84:c8:46:12:1d:ae:40:d2:d0:60: ff:1d:4b:ab:e7:d6:63:14:9a:a3:4f:d5:85:29:26: d9:66:58:cd:8d:e8:b6:5a:50:c0:60:a2:b6:4e:65: c8:ac:40:9b:9d:f9:e9:bc:f2:97:30:13:77:26:d1: a9:bc:e7:df:5e:ee:ed:48:b8:55:5e:df:89:8d:5e: fe:99:80:10:39:0e:cb:fc:7a:0c:a7:7c:1c:df:1f: e9:d6:c4:83:60:28:d5:16:58:8e:9d:77:2b:19:e4: 8d:da:a7:90:c3:3c:dd:b0:79:34:1e:a6:2a:bf:c1: de:b4:00:ca:fd:bc:a3:62:48:83:87:17:fa:19:0f: 3a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:72:8E:5A:94:82:77:99:E4:9D:8E:EA:20:4D:0E:4F:2E:AB:E7:D3 X509v3 Authority Key Identifier: keyid:FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/onKOWpSCd5nknY7qIE0OTy6r59M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.10.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:59:c3:35:cc:36:cd:8d:38:c5:07:5d:23:fd:30:5f:9e:b5: c1:8c:25:02:88:3b:ff:8b:8d:b2:b4:22:2b:6a:5e:7c:3e:cc: 22:58:29:eb:19:5c:da:62:63:60:4f:4d:38:20:ee:b1:3d:2c: 40:a9:69:cf:48:ca:ff:ea:1c:17:3b:5a:b0:04:b5:c9:27:4e: f8:7d:75:72:53:83:8c:d4:c3:6a:91:a3:cc:80:45:0a:07:44: 40:0c:2b:af:36:08:ff:94:ef:c0:b5:a8:18:4e:72:ac:66:48: cf:18:49:32:24:5b:4d:36:75:1f:ff:22:86:af:c2:2c:05:d0: e6:0c:13:7f:dd:8f:b8:a0:b4:4b:6b:d7:07:64:a8:9a:f2:eb: 85:6e:8a:48:1f:44:c4:91:50:b0:c0:66:cf:ba:79:be:e8:db: 80:e1:1a:1d:ba:74:9e:a1:85:86:bb:d1:ac:98:68:ff:fa:d9: f0:63:79:0a:bf:c9:d1:4f:58:6e:91:7d:93:06:8f:83:db:9f: fe:2d:68:d8:f6:46:63:df:c6:ca:da:c5:b3:cd:f1:78:36:f9: 8f:c4:d2:fc:f8:7b:da:9a:94:f4:94:14:d0:05:89:82:66:d2: 44:18:35:32:17:ef:6e:6f:e7:a0:79:7c:5c:2e:a8:93:9e:f7: d8:d7:c0:3c -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZp5CYMVy2WcDA7/eiXJ1ycXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiY2RkMTE3ZWFjNzU3YjZmOGYzOTQyODY1M2FlMTI1MDhj YzY5ODkwHhcNMjUxMTEyMTcwNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjcyOGU1YTk0ODI3Nzk5ZTQ5ZDhlZWEyMDRkMGU0ZjJlYWJlN2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFxrPgFkjS+lD1kBnbPXwkAwh/w1 EjfV0nRotMixThfthfE7T63QwROzq6T7h28zNdFtGWvl3vTWt5fn3NVTeplAQQq8 UrZV3xXzkGxwpUeyuuVeuVNjXnRlJ0wdR+WHMYUL8ZZOsQHbUvbYcUe5eWN/251d j7G52jAYDoTIRhIdrkDS0GD/HUur59ZjFJqjT9WFKSbZZljNjei2WlDAYKK2TmXI rECbnfnpvPKXMBN3JtGpvOffXu7tSLhVXt+JjV7+mYAQOQ7L/HoMp3wc3x/p1sSD YCjVFliOnXcrGeSN2qeQwzzdsHk0HqYqv8HetADK/byjYkiDhxf6GQ86SwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKJyjlqUgneZ5J2O6iBNDk8uq+fTMB8GA1UdIwQY MBaAFPvN0Rfqx1e2+POUKGU64SUIzGmJMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS04M1JGLXJIVjdiNDg1UW9aVHJoSlFqTWFZay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvOWFhOTlkLWJlNDMtNGQ3NC1hZmM5 LTk2NDQyNWMxOGM2Zi8xL29uS09XcFNDZDVua25ZN3FJRTBPVHk2cjU5TS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOWIvOWFhOTlkLWJlNDMtNGQ3NC1hZmM5LTk2NDQyNWMxOGM2 Zi8xLzEtODNSRi1ySFY3YjQ4NVFvWlRyaEpRak1hWWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEtWgow DQYJKoZIhvcNAQELBQADggEBAH1ZwzXMNs2NOMUHXSP9MF+etcGMJQKIO/+LjbK0 IitqXnw+zCJYKesZXNpiY2BPTTgg7rE9LECpac9Iyv/qHBc7WrAEtcknTvh9dXJT g4zUw2qRo8yARQoHREAMK682CP+U78C1qBhOcqxmSM8YSTIkW002dR//IoavwiwF 0OYME3/dj7igtEtr1wdkqJry64VuikgfRMSRULDAZs+6eb7o24DhGh26dJ6hhYa7 0ayYaP/62fBjeQq/ydFPWG6RfZMGj4Pbn/4taNj2RmPfxsraxbPN8Xg2+Y/E0vz4 e9qalPSUFNAFiYJm0kQYNTIX725v56B5fFwuqJOe99jXwDw= -----END CERTIFICATE-----Generated at Sat Dec 6 18:47:40 2025 by rpki-client