This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/dyhISIVJYnQ9ybz_AsRYU5My57Y.roa File: dyhISIVJYnQ9ybz_AsRYU5My57Y.roa (raw, json) Hash identifier: 6M8dGVL1XSKqF6+zRwzaIq8qxdlh40ft/+AT+SuTaNg= Subject key identifier: 77:28:48:48:85:49:62:74:3D:C9:BC:FF:02:C4:58:53:93:32:E7:B6 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B8DD35C4EE28C9F9FB00C712A92D269FB Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/dyhISIVJYnQ9ybz_AsRYU5My57Y.roa Signing time: Mon 05 Jan 2026 11:03:17 +0000 ROA not before: Mon 05 Jan 2026 11:03:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 984 IP address blocks: 147.90.2.0/24 maxlen: 24 147.90.4.0/24 maxlen: 24 147.90.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:d3:5c:4e:e2:8c:9f:9f:b0:0c:71:2a:92:d2:69:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 5 11:03:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77284848854962743dc9bcff02c458539332e7b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b3:45:a5:ce:c3:e6:8f:95:09:2f:44:40:4e: a3:9c:24:e3:00:7c:48:5c:46:64:55:26:42:ad:b6: d7:7f:b6:86:70:fb:57:9f:0d:4f:57:9e:a3:69:86: ec:27:48:57:c8:d7:23:a8:83:b8:0b:ed:b1:16:bf: 58:09:68:ca:13:7c:e5:71:6e:60:cf:3d:f7:a2:a4: 3e:33:64:2f:b1:d6:43:cb:21:f8:c0:c9:7b:e5:60: fd:97:71:ed:28:2c:15:ea:49:a4:6c:f1:3c:b8:ea: d1:86:63:2b:67:15:0f:85:8d:1b:bc:8a:a0:14:a9: b9:d9:dc:44:fd:1d:cb:20:95:ce:83:b4:55:00:31: 2d:96:29:de:e5:07:91:7f:37:da:ce:88:f0:35:a9: de:cf:16:20:77:cf:fd:19:69:82:67:b7:45:d3:d0: b1:ed:51:e7:62:2f:d0:98:18:8d:e1:58:5b:e8:b6: 83:6f:85:83:a9:de:15:22:41:29:3e:e5:9c:04:d5: 64:b8:c3:fc:50:5d:89:d4:e7:46:55:dd:23:a0:e4: d7:72:50:3f:1f:b5:1d:23:aa:de:90:0c:c3:2e:89: da:5a:e8:7a:65:49:84:db:be:e0:58:0a:20:50:08: f9:c6:e5:fd:59:25:f4:60:cf:f4:20:c3:d5:84:a4: 2a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:28:48:48:85:49:62:74:3D:C9:BC:FF:02:C4:58:53:93:32:E7:B6 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/dyhISIVJYnQ9ybz_AsRYU5My57Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.90.2.0/24 147.90.4.0/24 147.90.15.0/24 Signature Algorithm: sha256WithRSAEncryption c6:a6:0b:e5:09:5f:29:9b:82:d1:41:c5:7e:ab:fb:4f:e9:62: 58:3c:53:79:b3:31:6f:e4:f3:ff:c6:f6:6b:75:bc:13:8d:d0: b6:55:b6:8f:c6:d6:83:9e:1e:00:d3:46:d7:5d:75:aa:81:e9: 48:23:2e:55:fd:d2:ce:48:f9:de:f9:fe:d4:4c:28:ba:bf:df: 61:6b:0b:90:71:f9:8f:21:bb:63:20:f5:97:c0:f8:2b:7c:b4: 2c:48:88:96:7e:d5:c6:be:a4:59:76:f2:49:6b:94:12:14:2b: 48:37:01:89:e1:d0:eb:9b:3d:4f:5b:63:47:22:ec:64:df:ce: 53:9a:d6:04:27:e7:52:1f:4a:c3:76:c8:8d:22:6a:8a:b5:6b: 9f:a5:22:2f:07:f3:cf:82:51:91:f4:22:6a:0d:16:59:99:a5: 92:bb:86:16:3b:c8:b3:f4:2e:ce:77:a4:fc:df:86:b1:fb:4d: ee:df:7e:04:dc:b9:70:c6:15:df:78:88:10:77:23:98:27:e4: 40:ec:a3:6d:fd:8a:0c:e6:57:5c:bd:3b:b8:6e:0c:fb:41:bc: 1c:9e:c7:78:90:1d:bc:6b:0a:ba:43:01:d9:ac:1e:06:d0:95: 99:f2:bf:72:2a:95:e7:aa:b1:76:d3:a0:d8:37:ba:8b:0e:4d: 61:4d:3c:c8 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZuN01xO4oyfn7AMcSqS0mn7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTA1MTEwMzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzI4NDg0ODg1NDk2Mjc0M2RjOWJjZmYwMmM0NTg1MzkzMzJlN2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37NFpc7D5o+VCS9EQE6jnCTjAHxI XEZkVSZCrbbXf7aGcPtXnw1PV56jaYbsJ0hXyNcjqIO4C+2xFr9YCWjKE3zlcW5g zz33oqQ+M2QvsdZDyyH4wMl75WD9l3HtKCwV6kmkbPE8uOrRhmMrZxUPhY0bvIqg FKm52dxE/R3LIJXOg7RVADEtline5QeRfzfazojwNanezxYgd8/9GWmCZ7dF09Cx 7VHnYi/QmBiN4Vhb6LaDb4WDqd4VIkEpPuWcBNVkuMP8UF2J1OdGVd0joOTXclA/ H7UdI6rekAzDLonaWuh6ZUmE277gWAogUAj5xuX9WSX0YM/0IMPVhKQqJwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHcoSEiFSWJ0Pcm8/wLEWFOTMue2MB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvZHloSVNJVkpZblE5eWJ6X0FzUllVNU15NTdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAk1oCAwQA k1oEAwQAk1oPMA0GCSqGSIb3DQEBCwUAA4IBAQDGpgvlCV8pm4LRQcV+q/tP6WJY PFN5szFv5PP/xvZrdbwTjdC2VbaPxtaDnh4A00bXXXWqgelIIy5V/dLOSPne+f7U TCi6v99hawuQcfmPIbtjIPWXwPgrfLQsSIiWftXGvqRZdvJJa5QSFCtINwGJ4dDr mz1PW2NHIuxk385TmtYEJ+dSH0rDdsiNImqKtWufpSIvB/PPglGR9CJqDRZZmaWS u4YWO8iz9C7Od6T834ax+03u334E3LlwxhXfeIgQdyOYJ+RA7KNt/YoM5ldcvTu4 bgz7Qbwcnsd4kB28awq6QwHZrB4G0JWZ8r9yKpXnqrF206DYN7qLDk1hTTzI -----END CERTIFICATE-----Generated at Sun Jan 18 04:28:15 2026 by rpki-client