This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/B90wLC90Rj0MQGZL0STOoi505J0.roa File: B90wLC90Rj0MQGZL0STOoi505J0.roa (raw, json) Hash identifier: Lezj4c9FnHyrfbbbklEmIeFidZD8OuQTzFH9GxN7llU= Subject key identifier: 07:DD:30:2C:2F:74:46:3D:0C:40:66:4B:D1:24:CE:A2:2E:74:E4:9D Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e Certificate serial: 019B7A5B822DCBD84DA92F450A3AC7A28044 Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/B90wLC90Rj0MQGZL0STOoi505J0.roa Signing time: Thu 01 Jan 2026 16:19:35 +0000 ROA not before: Thu 01 Jan 2026 16:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198154 IP address blocks: 5.160.144.0/24 maxlen: 24 5.160.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:82:2d:cb:d8:4d:a9:2f:45:0a:3a:c7:a2:80:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e Validity Not Before: Jan 1 16:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07dd302c2f74463d0c40664bd124cea22e74e49d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fe:53:19:f9:90:bc:45:2a:00:c8:4e:ea:a7: ae:e9:5e:43:92:ab:39:c3:ae:45:3e:cd:33:fc:0c: c9:38:82:09:3d:53:96:63:37:85:2d:34:ed:69:4b: f8:6a:76:c1:39:b3:04:75:38:dd:fe:86:7b:31:94: b8:5a:8f:54:2f:21:4f:88:f2:3b:5c:ac:63:9d:f7: 66:3d:1a:af:0e:8e:3b:4d:6e:fe:86:9c:f7:fa:f9: 0e:12:a8:2c:63:fb:9c:06:97:ec:d2:82:d7:fc:c1: 29:6c:7b:25:83:de:8d:46:1e:d0:6e:bd:45:0c:91: 9c:d2:d0:b6:8a:9d:7f:b3:d7:06:b1:a8:86:3c:b3: 33:f6:f2:1c:ab:97:41:69:e4:fd:1a:84:d2:c1:22: 37:e9:d7:c4:d9:db:1d:13:c3:34:ed:35:eb:8a:a8: 95:9f:3c:11:67:1e:ab:16:97:b4:51:f0:6d:20:3d: 2a:bc:36:0d:df:b7:19:9c:eb:86:4d:87:93:15:ba: fd:2f:b3:b6:c4:9e:c6:76:78:67:0f:15:6e:ab:1f: ce:9a:8a:85:13:d9:e5:f4:80:e5:d7:81:d7:2c:18: 10:40:10:75:93:bc:3e:02:75:80:0a:0d:f3:fa:81: 17:a6:fd:6c:87:7f:a6:73:d4:ea:91:14:75:74:ef: cf:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DD:30:2C:2F:74:46:3D:0C:40:66:4B:D1:24:CE:A2:2E:74:E4:9D X509v3 Authority Key Identifier: keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/B90wLC90Rj0MQGZL0STOoi505J0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.160.144.0/24 5.160.198.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:27:4e:e3:95:52:41:2e:83:b4:c2:fd:1a:bc:da:53:69:8f: b5:42:69:18:d4:68:e7:ff:38:45:21:83:e0:92:92:e8:f1:e6: c6:99:2e:ab:c0:a8:39:c2:66:ae:a7:2f:32:c7:a6:45:d6:f8: 05:d5:9d:0d:c3:08:bd:0a:e7:e7:58:9c:86:29:b9:af:ad:7f: e5:7c:c3:c7:26:27:34:e3:35:25:52:58:5d:f9:5a:6a:be:41: 09:2b:05:f1:8d:db:fe:e7:9d:07:a6:e8:25:01:7b:90:18:b4: e4:e0:6f:39:ea:e4:96:77:24:e6:5e:63:e8:97:66:1c:c1:81: 26:cb:7a:38:24:11:f4:f5:8b:e1:4f:c6:72:70:19:8c:03:d3: b8:35:6a:1b:0c:e6:0b:b5:fb:3f:f6:e3:1a:9c:cd:e0:5b:44: e4:7a:b6:88:6d:74:f0:1a:37:cd:99:2c:bb:03:fe:e0:6d:65: 31:e3:c3:21:2f:e6:00:88:9a:5d:04:8f:07:97:07:4c:e4:44: 09:3b:59:b7:e3:70:e0:e5:9a:23:3d:67:52:22:35:78:5a:30: e3:34:d7:3d:6e:5c:cc:a5:f2:a4:29:70:96:f2:c9:e4:b3:1a: 4b:a0:85:0d:11:44:26:2e:76:57:4b:32:a9:a9:02:97:df:74: 49:5a:33:a5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W4Ity9hNqS9FCjrHooBEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy OGI4N2UwHhcNMjYwMTAxMTYxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2RkMzAyYzJmNzQ0NjNkMGM0MDY2NGJkMTI0Y2VhMjJlNzRlNDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf5TGfmQvEUqAMhO6qeu6V5Dkqs5 w65FPs0z/AzJOIIJPVOWYzeFLTTtaUv4anbBObMEdTjd/oZ7MZS4Wo9ULyFPiPI7 XKxjnfdmPRqvDo47TW7+hpz3+vkOEqgsY/ucBpfs0oLX/MEpbHslg96NRh7Qbr1F DJGc0tC2ip1/s9cGsaiGPLMz9vIcq5dBaeT9GoTSwSI36dfE2dsdE8M07TXriqiV nzwRZx6rFpe0UfBtID0qvDYN37cZnOuGTYeTFbr9L7O2xJ7GdnhnDxVuqx/OmoqF E9nl9IDl14HXLBgQQBB1k7w+AnWACg3z+oEXpv1sh3+mc9TqkRR1dO/PWQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAfdMCwvdEY9DEBmS9EkzqIudOSdMB8GA1UdIwQY MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt YjQ1NDBjNzRjOTRiLzEvQjkwd0xDOTBSajBNUUdaTDBTVE9vaTUwNUowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEtYjQ1NDBjNzRjOTRi LzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABaCQAwQA BaDGMA0GCSqGSIb3DQEBCwUAA4IBAQAtJ07jlVJBLoO0wv0avNpTaY+1QmkY1Gjn /zhFIYPgkpLo8ebGmS6rwKg5wmaupy8yx6ZF1vgF1Z0Nwwi9CufnWJyGKbmvrX/l fMPHJic04zUlUlhd+VpqvkEJKwXxjdv+550HpuglAXuQGLTk4G856uSWdyTmXmPo l2YcwYEmy3o4JBH09YvhT8ZycBmMA9O4NWobDOYLtfs/9uManM3gW0TkeraIbXTw GjfNmSy7A/7gbWUx48MhL+YAiJpdBI8HlwdM5EQJO1m343Dg5ZojPWdSIjV4WjDj NNc9blzMpfKkKXCW8snksxpLoIUNEUQmLnZXSzKpqQKX33RJWjOl -----END CERTIFICATE-----Generated at Sun Jan 25 17:41:36 2026 by rpki-client