This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/90ZIqQa3ERD9A6AR0yDS0Ec37cY.roa File: 90ZIqQa3ERD9A6AR0yDS0Ec37cY.roa (raw, json) Hash identifier: iE2mVoJ0i6L3jXcd51Zfq6Loe5QGdHiC0j+EHZfnph4= Subject key identifier: F7:46:48:A9:06:B7:11:10:FD:03:A0:11:D3:20:D2:D0:47:37:ED:C6 Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b Certificate serial: 019BFAF2608504F81EBBA5A5EDB641DC1287 Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/90ZIqQa3ERD9A6AR0yDS0Ec37cY.roa Signing time: Mon 26 Jan 2026 15:35:46 +0000 ROA not before: Mon 26 Jan 2026 15:35:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56971 IP address blocks: 5.144.179.0/24 maxlen: 24 5.178.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:f2:60:85:04:f8:1e:bb:a5:a5:ed:b6:41:dc:12:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b Validity Not Before: Jan 26 15:35:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f74648a906b71110fd03a011d320d2d04737edc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:40:72:c3:6f:3a:a5:26:61:3f:37:fd:1c:0b: 7d:e8:2e:4b:d7:4f:44:1d:4b:36:19:62:41:74:fa: 39:be:1e:32:29:1d:af:27:8a:55:c0:4a:c7:46:b9: 97:25:3e:66:0d:42:74:c4:2d:11:a9:38:e4:f7:c0: 8a:40:9f:3f:e4:72:52:5c:c2:a1:dd:d9:5d:63:69: 96:df:58:88:88:fc:e1:9a:1d:03:9e:21:33:30:64: 0d:f1:ce:a5:2b:43:be:d7:91:c0:27:03:3a:9f:4e: 2a:0a:7f:0d:cb:99:48:fa:58:b5:60:22:d3:49:aa: 72:f6:1e:8d:d3:dc:31:19:c0:37:32:8b:a1:27:19: e1:1d:d2:c7:46:f6:fb:25:b4:0c:e6:31:8a:09:4a: 62:21:72:f5:e5:58:3c:9c:dd:00:2c:00:e0:92:f7: 80:5e:ba:38:e6:ba:c9:14:06:38:c5:72:0b:2c:3e: 23:b3:cd:08:c2:9c:57:e7:04:11:b6:66:dc:93:f0: 14:b4:2e:b9:1e:a2:b5:41:b0:e0:cf:b2:21:65:56: 5a:e6:5e:f8:0c:b8:cd:3f:e3:10:57:6e:a8:70:17: b6:4c:12:8b:7b:1f:fa:b6:e3:dd:83:80:bc:17:0b: 97:03:a3:e9:51:81:cb:a6:2c:0f:16:cd:78:b5:71: 51:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:46:48:A9:06:B7:11:10:FD:03:A0:11:D3:20:D2:D0:47:37:ED:C6 X509v3 Authority Key Identifier: keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/90ZIqQa3ERD9A6AR0yDS0Ec37cY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.144.179.0/24 5.178.96.0/24 Signature Algorithm: sha256WithRSAEncryption b7:91:3a:c7:51:5a:69:d4:13:5e:12:aa:c5:d3:0f:66:99:32: 66:6b:94:34:1d:1e:3f:1b:9e:99:e7:62:4d:43:5e:0e:08:fa: e3:32:92:d9:d2:e7:95:76:7a:48:a9:03:98:73:d3:4d:18:33: 7c:71:54:dc:aa:c1:4c:d4:f5:4c:3f:30:96:2b:dd:1e:2a:22: 25:5a:6a:9a:08:6e:9f:f6:25:ae:ef:85:b8:6f:db:d8:6c:32: bc:3c:73:45:77:9a:b2:fe:95:22:7d:35:a3:61:b6:ef:1e:87: 07:61:70:12:9b:04:f1:71:7b:c4:1a:4e:4d:96:e5:57:d0:66: 14:44:b5:cc:b5:eb:ef:69:b6:78:53:a9:0e:39:a0:a9:d3:4e: 91:d9:55:d5:11:e9:79:f7:20:06:9e:40:1e:7f:8c:57:ae:21: 34:e6:74:b3:c6:01:15:bc:8a:98:0e:46:72:d5:0b:3a:3a:a3: 49:7a:0a:83:34:32:e1:f5:fd:d9:a5:f5:3b:8d:fb:3d:50:75: 85:fd:ad:33:0c:7b:de:c8:3d:ec:e8:aa:41:fd:fa:7b:3a:ea: 76:48:8a:1d:23:32:53:90:70:3a:3f:be:dd:25:d2:ab:bc:21: 11:0b:24:17:7e:46:e6:1c:ee:dc:7a:da:98:73:bc:54:40:ef: 0a:90:a0:c4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZv68mCFBPgeu6Wl7bZB3BKHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5 M2U0NmIwHhcNMjYwMTI2MTUzNTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzQ2NDhhOTA2YjcxMTEwZmQwM2EwMTFkMzIwZDJkMDQ3MzdlZGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUByw286pSZhPzf9HAt96C5L109E HUs2GWJBdPo5vh4yKR2vJ4pVwErHRrmXJT5mDUJ0xC0RqTjk98CKQJ8/5HJSXMKh 3dldY2mW31iIiPzhmh0DniEzMGQN8c6lK0O+15HAJwM6n04qCn8Ny5lI+li1YCLT Sapy9h6N09wxGcA3MouhJxnhHdLHRvb7JbQM5jGKCUpiIXL15Vg8nN0ALADgkveA Xro45rrJFAY4xXILLD4js80IwpxX5wQRtmbck/AUtC65HqK1QbDgz7IhZVZa5l74 DLjNP+MQV26ocBe2TBKLex/6tuPdg4C8FwuXA6PpUYHLpiwPFs14tXFRrwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPdGSKkGtxEQ/QOgEdMg0tBHN+3GMB8GA1UdIwQY MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt Y2Q2MTUyMjYxYzZmLzEvOTBaSXFRYTNFUkQ5QTZBUjB5RFMwRWMzN2NZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABZCzAwQA BbJgMA0GCSqGSIb3DQEBCwUAA4IBAQC3kTrHUVpp1BNeEqrF0w9mmTJma5Q0HR4/ G56Z52JNQ14OCPrjMpLZ0ueVdnpIqQOYc9NNGDN8cVTcqsFM1PVMPzCWK90eKiIl WmqaCG6f9iWu74W4b9vYbDK8PHNFd5qy/pUifTWjYbbvHocHYXASmwTxcXvEGk5N luVX0GYURLXMtevvabZ4U6kOOaCp006R2VXVEel59yAGnkAef4xXriE05nSzxgEV vIqYDkZy1Qs6OqNJegqDNDLh9f3ZpfU7jfs9UHWF/a0zDHveyD3s6KpB/fp7Oup2 SIodIzJTkHA6P77dJdKrvCERCyQXfkbmHO7cetqYc7xUQO8KkKDE -----END CERTIFICATE-----Generated at Thu Feb 5 02:51:44 2026 by rpki-client