This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/dsyLnQm81PC6vWSd_4Ic-84kUNk.roa File: dsyLnQm81PC6vWSd_4Ic-84kUNk.roa (raw, json) Hash identifier: W1YMJZLZnowBDVYOn+T6XSNeRTFyrwQp8nHsLpeos/I= Subject key identifier: 76:CC:8B:9D:09:BC:D4:F0:BA:BD:64:9D:FF:82:1C:FB:CE:24:50:D9 Certificate issuer: /CN=f3751cf8c3a2d36c9744c96519899945ac607820 Certificate serial: 019B7F83D1A6941501709A3EC261BEEF6A94 Authority key identifier: F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/dsyLnQm81PC6vWSd_4Ic-84kUNk.roa Signing time: Fri 02 Jan 2026 16:21:43 +0000 ROA not before: Fri 02 Jan 2026 16:21:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203140 IP address blocks: 45.90.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:d1:a6:94:15:01:70:9a:3e:c2:61:be:ef:6a:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3751cf8c3a2d36c9744c96519899945ac607820 Validity Not Before: Jan 2 16:21:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76cc8b9d09bcd4f0babd649dff821cfbce2450d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:59:6d:81:24:d4:5b:08:a4:4a:ab:c9:3d:54: 78:3b:3b:0c:bb:bf:91:f6:a4:bf:61:9b:43:73:ef: 31:e4:20:85:5a:99:b8:e1:e2:eb:b2:66:30:32:ad: 89:34:11:07:c4:86:66:82:9f:00:8c:25:dc:8e:fb: ab:ea:28:4c:d9:3b:b0:aa:23:d8:ed:50:ea:e5:0e: bf:a3:ac:29:43:60:1a:df:a9:f0:fc:bc:e3:5b:83: 90:72:be:d5:62:fd:38:f3:f5:56:f3:bc:29:ef:a7: a8:47:a6:c3:db:1b:64:17:74:07:5e:2b:c9:45:8c: 8c:59:20:df:f9:86:95:6a:a6:dd:2c:3e:25:de:3a: 32:6a:d0:55:39:83:91:ef:23:a6:61:9c:97:34:18: 9a:31:7d:04:50:66:b5:28:e9:91:dd:ef:5b:8b:17: d5:24:fa:43:f3:f2:d5:07:45:97:c2:f2:c3:1c:e0: ce:a7:c1:45:fa:fd:24:45:91:da:36:ec:91:18:50: f9:12:a2:8a:81:dd:68:66:69:cf:5c:ab:ce:81:68: 03:28:fa:6e:ce:07:58:71:e4:df:4b:b0:73:32:12: 7a:e6:44:34:8a:64:56:11:6f:d2:0b:0b:19:e5:2f: 5f:5f:d2:7e:b3:7f:94:bc:73:68:9d:c6:ea:ea:c8: 46:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CC:8B:9D:09:BC:D4:F0:BA:BD:64:9D:FF:82:1C:FB:CE:24:50:D9 X509v3 Authority Key Identifier: keyid:F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/dsyLnQm81PC6vWSd_4Ic-84kUNk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.2.0/23 Signature Algorithm: sha256WithRSAEncryption a5:9d:db:c1:f4:14:01:04:b0:c3:38:8e:d9:61:ff:d9:81:37: 75:8a:0d:68:a9:e1:ad:cd:20:2c:7d:f5:85:d3:d6:82:8f:90: 7a:36:77:63:68:4f:28:7a:f8:0d:1d:fd:b5:5d:13:b3:4f:e1: e6:d8:2a:7d:64:45:90:10:bf:9d:db:0c:98:35:6e:dd:3e:63: 0d:1d:dc:53:84:3d:b3:f0:91:34:65:b9:56:df:3b:c7:48:d5: 62:fd:4f:7e:12:69:9f:4b:09:bc:0c:52:9f:c9:8a:47:ae:18: 6c:60:af:76:ac:3c:9e:93:8a:73:e9:36:94:c1:cc:f0:5a:9f: 6b:19:b5:e8:51:ea:02:7e:98:67:a5:3b:15:a2:80:f9:15:68: 90:b0:77:58:81:c1:e1:9e:08:dd:d9:db:f9:2c:d7:1d:c1:f6: f9:f7:b2:30:b8:fe:a8:1f:d7:7b:bd:6b:e2:3c:c9:1a:90:79: 76:9a:84:6b:87:b8:bb:7a:a5:60:90:8c:37:cc:48:a1:c3:7f: c1:7d:c7:14:f6:b1:e9:4c:26:dc:ee:42:71:d4:8a:eb:8d:a6: 77:b3:3f:94:88:fe:51:60:8f:45:61:51:c3:15:d6:98:f4:9c: 85:b9:d0:58:72:59:be:ec:be:9c:3e:64:21:ae:3a:98:65:bf: eb:4a:d2:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g9GmlBUBcJo+wmG+72qUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNzUxY2Y4YzNhMmQzNmM5NzQ0Yzk2NTE5ODk5OTQ1YWM2 MDc4MjAwHhcNMjYwMTAyMTYyMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmNjOGI5ZDA5YmNkNGYwYmFiZDY0OWRmZjgyMWNmYmNlMjQ1MGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+lltgSTUWwikSqvJPVR4OzsMu7+R 9qS/YZtDc+8x5CCFWpm44eLrsmYwMq2JNBEHxIZmgp8AjCXcjvur6ihM2TuwqiPY 7VDq5Q6/o6wpQ2Aa36nw/LzjW4OQcr7VYv048/VW87wp76eoR6bD2xtkF3QHXivJ RYyMWSDf+YaVaqbdLD4l3joyatBVOYOR7yOmYZyXNBiaMX0EUGa1KOmR3e9bixfV JPpD8/LVB0WXwvLDHODOp8FF+v0kRZHaNuyRGFD5EqKKgd1oZmnPXKvOgWgDKPpu zgdYceTfS7BzMhJ65kQ0imRWEW/SCwsZ5S9fX9J+s3+UvHNoncbq6shGjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHbMi50JvNTwur1knf+CHPvOJFDZMB8GA1UdIwQY MBaAFPN1HPjDotNsl0TJZRmJmUWsYHggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODNVYy1NT2kwMnlYUk1sbEdZbVpSYXhnZUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wOGY5YjQtMTE1Yy00NDg4LWI1Njct NWNmN2MwNjIxMDY1LzEvZHN5TG5RbTgxUEM2dldTZF80SWMtODRrVU5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8wOGY5YjQtMTE1Yy00NDg4LWI1NjctNWNmN2MwNjIxMDY1 LzEvODNVYy1NT2kwMnlYUk1sbEdZbVpSYXhnZUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVoCMA0G CSqGSIb3DQEBCwUAA4IBAQClndvB9BQBBLDDOI7ZYf/ZgTd1ig1oqeGtzSAsffWF 09aCj5B6NndjaE8oevgNHf21XROzT+Hm2Cp9ZEWQEL+d2wyYNW7dPmMNHdxThD2z 8JE0ZblW3zvHSNVi/U9+EmmfSwm8DFKfyYpHrhhsYK92rDyek4pz6TaUwczwWp9r GbXoUeoCfphnpTsVooD5FWiQsHdYgcHhngjd2dv5LNcdwfb597IwuP6oH9d7vWvi PMkakHl2moRrh7i7eqVgkIw3zEihw3/BfccU9rHpTCbc7kJx1IrrjaZ3sz+UiP5R YI9FYVHDFdaY9JyFudBYclm+7L6cPmQhrjqYZb/rStIY -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:41 2026 by rpki-client