This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/eDEH9r-GFBtMBjke1VQXvLsrWKE.roa File: eDEH9r-GFBtMBjke1VQXvLsrWKE.roa (raw, json) Hash identifier: xMVUiZA7B/Awy4elxHeVBURXwGMWCha5Jw3Ih7vZadE= Subject key identifier: 78:31:07:F6:BF:86:14:1B:4C:06:39:1E:D5:54:17:BC:BB:2B:58:A1 Certificate issuer: /CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a Certificate serial: 019B790FFDAC6508054699E5C04BFC2EBA50 Authority key identifier: 3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/eDEH9r-GFBtMBjke1VQXvLsrWKE.roa Signing time: Thu 01 Jan 2026 10:17:29 +0000 ROA not before: Thu 01 Jan 2026 10:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34987 IP address blocks: 185.90.4.0/24 maxlen: 24 185.90.5.0/24 maxlen: 24 185.90.6.0/24 maxlen: 24 185.90.7.0/24 maxlen: 24 2a05:dd00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:fd:ac:65:08:05:46:99:e5:c0:4b:fc:2e:ba:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a Validity Not Before: Jan 1 10:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=783107f6bf86141b4c06391ed55417bcbb2b58a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bf:28:9c:ad:fc:46:7e:26:a5:0a:f6:73:a1: d1:f2:b0:e1:2d:d5:d6:b0:57:cf:36:6e:af:02:32: 3c:03:17:79:0c:13:a6:45:c6:97:52:c2:f8:1b:12: c7:62:14:e0:e2:32:be:32:35:c7:4d:58:1a:82:97: 0a:2f:73:b4:04:4d:10:bc:7c:80:06:1d:54:85:c3: ea:ff:82:97:42:0c:a5:f4:e1:6e:fa:2c:9d:75:07: 09:1d:75:d5:7c:a2:6a:64:4a:b2:f0:b2:f4:8d:fb: fc:d8:24:03:ff:aa:bd:ce:a4:49:3b:96:44:d7:73: 43:6c:00:8b:ef:0c:30:65:88:67:d6:4d:7a:7d:d2: ef:3a:f2:2c:91:ff:93:b9:f3:65:80:23:88:7b:80: c8:99:d3:48:29:35:0d:7c:55:73:8f:79:ba:ed:68: 70:72:f7:1b:33:8e:46:5a:19:fc:b2:10:93:49:d5: 5f:85:ad:95:a1:fb:64:0c:fb:c2:5f:f4:b8:2e:f8: eb:3e:00:5e:c4:d8:67:13:67:bc:36:7f:24:f9:78: b7:39:6f:c6:0c:b2:6f:43:92:62:ac:f4:91:83:0f: 75:d0:fe:ed:03:11:84:cc:26:57:43:20:cf:83:0c: c3:5b:12:5f:1f:fd:d9:12:4b:3c:f3:ab:52:a3:e7: 2f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:31:07:F6:BF:86:14:1B:4C:06:39:1E:D5:54:17:BC:BB:2B:58:A1 X509v3 Authority Key Identifier: keyid:3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/eDEH9r-GFBtMBjke1VQXvLsrWKE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.90.4.0/22 IPv6: 2a05:dd00::/29 Signature Algorithm: sha256WithRSAEncryption 32:bc:15:c4:e9:e5:43:a3:1c:32:5c:27:59:25:2a:ea:23:f9: 34:ad:6e:18:b4:68:f3:a6:32:69:b0:c7:ec:ce:54:5a:50:f9: ad:3c:0d:e6:93:5a:e8:f4:15:d4:4a:02:dd:67:d3:ee:54:7b: e5:5d:eb:75:65:4c:7e:58:66:ee:f0:c0:3f:2d:56:18:16:23: 85:01:5f:09:9d:ce:e1:fb:e5:44:3b:20:25:88:f2:95:25:99: df:86:30:ed:6d:1e:8a:df:af:cb:47:fa:5e:7d:8b:48:1e:4d: 16:3c:9e:4e:bf:68:c5:9d:14:db:b6:de:75:47:96:79:a0:68: 05:f4:c4:31:bc:23:2c:a1:c2:41:c4:f8:6c:5e:ff:8d:09:47: 66:01:ba:fd:00:ec:c6:00:87:a3:da:15:f1:ec:98:15:ce:80: 0e:da:aa:ed:59:a4:25:7b:23:b6:6a:ce:38:fd:aa:80:aa:24: 6f:f4:4a:0e:06:5c:ab:13:cd:55:dd:3a:76:19:8b:bf:a6:d3: 6e:ea:77:f4:00:ad:34:53:4e:ea:d0:36:a4:1f:19:c1:e7:a3: 50:12:7f:9d:45:b1:d1:2c:54:10:c4:fd:96:df:a4:03:c4:8c: 1d:fb:8b:43:ba:fb:28:fb:5d:e1:84:53:2c:63:d9:7f:46:fa: 66:5c:fd:5d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5D/2sZQgFRpnlwEv8LrpQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZGZkNzYwNGRmYTBlYjhhZTIwZTkwZmNmMTMwMzkzYjhh ODU2NGEwHhcNMjYwMTAxMTAxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODMxMDdmNmJmODYxNDFiNGMwNjM5MWVkNTU0MTdiY2JiMmI1OGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor8onK38Rn4mpQr2c6HR8rDhLdXW sFfPNm6vAjI8Axd5DBOmRcaXUsL4GxLHYhTg4jK+MjXHTVgagpcKL3O0BE0QvHyA Bh1UhcPq/4KXQgyl9OFu+iyddQcJHXXVfKJqZEqy8LL0jfv82CQD/6q9zqRJO5ZE 13NDbACL7wwwZYhn1k16fdLvOvIskf+TufNlgCOIe4DImdNIKTUNfFVzj3m67Whw cvcbM45GWhn8shCTSdVfha2VoftkDPvCX/S4LvjrPgBexNhnE2e8Nn8k+Xi3OW/G DLJvQ5JirPSRgw910P7tAxGEzCZXQyDPgwzDWxJfH/3ZEks886tSo+cv8wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHgxB/a/hhQbTAY5HtVUF7y7K1ihMB8GA1UdIwQY MBaAFDvf12BN+g64riDpD88TA5O4qFZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzlfWFlFMzZEcml1SU9rUHp4TURrN2lvVmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84ZGMyYzctM2ZjMC00NDZkLTgwN2Mt ZWY2YzllYWQ2MTFjLzEvZURFSDlyLUdGQnRNQmprZTFWUVh2THNyV0tFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS84ZGMyYzctM2ZjMC00NDZkLTgwN2MtZWY2YzllYWQ2MTFj LzEvTzlfWFlFMzZEcml1SU9rUHp4TURrN2lvVmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVoEMA0E AgACMAcDBQMqBd0AMA0GCSqGSIb3DQEBCwUAA4IBAQAyvBXE6eVDoxwyXCdZJSrq I/k0rW4YtGjzpjJpsMfszlRaUPmtPA3mk1ro9BXUSgLdZ9PuVHvlXet1ZUx+WGbu 8MA/LVYYFiOFAV8Jnc7h++VEOyAliPKVJZnfhjDtbR6K36/LR/pefYtIHk0WPJ5O v2jFnRTbtt51R5Z5oGgF9MQxvCMsocJBxPhsXv+NCUdmAbr9AOzGAIej2hXx7JgV zoAO2qrtWaQleyO2as44/aqAqiRv9EoOBlyrE81V3Tp2GYu/ptNu6nf0AK00U07q 0DakHxnB56NQEn+dRbHRLFQQxP2W36QDxIwd+4tDuvso+13hhFMsY9l/RvpmXP1d -----END CERTIFICATE-----Generated at Mon Jan 26 16:57:57 2026 by rpki-client