This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/kBLTmRTupqMZ775V3WFBk76m7rg.roa File: kBLTmRTupqMZ775V3WFBk76m7rg.roa (raw, json) Hash identifier: HZlBdqHoPlUN7iUDgI6AstXjX64IfWX3qTt17p+HY08= Subject key identifier: 90:12:D3:99:14:EE:A6:A3:19:EF:BE:55:DD:61:41:93:BE:A6:EE:B8 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B8E52F1709B3E8FF63B513CCB84BACD86 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/kBLTmRTupqMZ775V3WFBk76m7rg.roa Signing time: Mon 05 Jan 2026 13:22:38 +0000 ROA not before: Mon 05 Jan 2026 13:22:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4766 IP address blocks: 147.90.30.0/23 maxlen: 24 147.90.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8e:52:f1:70:9b:3e:8f:f6:3b:51:3c:cb:84:ba:cd:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 5 13:22:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9012d39914eea6a319efbe55dd614193bea6eeb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:19:9c:41:83:1b:af:02:bc:5f:b0:09:b7:50: a2:0d:d7:a2:29:9e:bf:49:bc:a2:f6:a7:24:4a:ad: 40:2a:1d:2a:51:d7:5a:c2:e5:32:7b:31:76:4a:83: 8e:96:de:dc:12:6a:e7:75:60:15:17:a8:b9:19:3f: 7e:b9:42:38:9b:1e:d0:29:11:22:3f:fc:a9:79:15: 74:cf:25:5f:a9:c4:59:21:9d:53:1f:14:92:40:10: 3e:6a:df:b9:e7:34:df:a4:8c:4e:bb:6f:03:52:cb: a8:9b:05:fc:cc:b8:e9:97:92:d2:63:b4:67:6d:d3: 92:71:23:d1:86:f3:a4:79:12:25:23:23:09:7f:3e: 3c:66:6e:da:09:76:b2:85:f6:a8:15:01:9b:6e:a3: 7b:1d:8f:d0:5c:2a:3c:a4:b7:60:b1:e5:aa:76:a5: 88:00:8b:3f:f2:46:24:5f:d2:ab:3e:d0:f0:c5:00: 88:85:96:80:79:3f:b9:4d:f7:23:6a:dc:f9:e6:d3: 67:11:e2:db:ce:6e:05:ab:82:aa:02:74:19:59:5e: bb:57:3f:94:25:7b:14:c1:32:f5:02:fb:0e:8f:f5: 82:5f:86:29:22:08:63:56:77:4a:33:dd:75:90:55: ad:03:1f:9e:48:37:fd:03:1a:9d:8e:12:87:b9:7b: ce:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:12:D3:99:14:EE:A6:A3:19:EF:BE:55:DD:61:41:93:BE:A6:EE:B8 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/kBLTmRTupqMZ775V3WFBk76m7rg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.90.30.0/23 147.90.120.0/23 Signature Algorithm: sha256WithRSAEncryption 19:bf:8f:37:4e:6b:39:7c:6e:fd:e7:ba:e7:a7:92:82:50:37: bd:69:43:57:68:94:16:bc:cb:d5:19:d7:49:7a:51:61:35:bd: 90:5d:56:29:07:a1:d6:ef:13:73:ef:db:b8:a5:22:2d:38:42: 57:f2:16:cd:97:7a:45:53:9b:26:be:cc:78:70:99:73:93:47: 9c:a2:f9:5a:03:70:7e:ad:12:a1:88:01:35:0c:77:4d:21:da: a7:50:7e:32:f0:4e:89:c7:30:84:81:41:c1:a3:ce:63:48:b9: c6:d1:cc:f1:a3:23:0f:4b:9c:f0:1e:ca:3e:f9:ca:f0:3b:86: 07:f0:66:51:6c:15:51:89:bb:5a:83:ac:93:b0:a9:72:45:6a: 67:0e:45:0d:fc:41:50:f9:ed:cb:ae:3e:3f:6b:60:84:f2:09: ab:0a:12:cd:e3:d1:b0:46:97:6e:53:3c:3c:ee:89:c1:35:ed: 1d:40:a2:12:ea:f9:3b:1e:f8:82:44:d9:10:ca:4a:24:a9:dc: 01:d6:55:a3:00:32:7c:fb:80:f0:1c:8c:d9:7f:6a:96:8c:bb: 6f:24:f7:9d:ec:16:7f:38:5b:8a:d3:9d:4b:16:4e:cf:7d:a0: 24:5f:76:9b:29:2f:4f:1f:62:1b:8d:a0:09:6e:65:37:c5:75: 87:de:bd:cf -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZuOUvFwmz6P9jtRPMuEus2GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTA1MTMyMjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDEyZDM5OTE0ZWVhNmEzMTllZmJlNTVkZDYxNDE5M2JlYTZlZWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhmcQYMbrwK8X7AJt1CiDdeiKZ6/ Sbyi9qckSq1AKh0qUddawuUyezF2SoOOlt7cEmrndWAVF6i5GT9+uUI4mx7QKREi P/ypeRV0zyVfqcRZIZ1THxSSQBA+at+55zTfpIxOu28DUsuomwX8zLjpl5LSY7Rn bdOScSPRhvOkeRIlIyMJfz48Zm7aCXayhfaoFQGbbqN7HY/QXCo8pLdgseWqdqWI AIs/8kYkX9KrPtDwxQCIhZaAeT+5Tfcjatz55tNnEeLbzm4Fq4KqAnQZWV67Vz+U JXsUwTL1AvsOj/WCX4YpIghjVndKM911kFWtAx+eSDf9AxqdjhKHuXvOowIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJAS05kU7qajGe++Vd1hQZO+pu64MB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEva0JMVG1SVHVwcU1aNzc1VjNXRkJrNzZtN3JnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBk1oeAwQB k1p4MA0GCSqGSIb3DQEBCwUAA4IBAQAZv483Tms5fG7957rnp5KCUDe9aUNXaJQW vMvVGddJelFhNb2QXVYpB6HW7xNz79u4pSItOEJX8hbNl3pFU5smvsx4cJlzk0ec ovlaA3B+rRKhiAE1DHdNIdqnUH4y8E6JxzCEgUHBo85jSLnG0czxoyMPS5zwHso+ +crwO4YH8GZRbBVRibtag6yTsKlyRWpnDkUN/EFQ+e3Lrj4/a2CE8gmrChLN49Gw RpduUzw87onBNe0dQKIS6vk7HviCRNkQykokqdwB1lWjADJ8+4DwHIzZf2qWjLtv JPed7BZ/OFuK051LFk7PfaAkX3abKS9PH2IbjaAJbmU3xXWH3r3P -----END CERTIFICATE-----Generated at Mon Jan 19 11:25:06 2026 by rpki-client