This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/0sG02fRT--XJolYuZ7_jXyMamw4.roa File: 0sG02fRT--XJolYuZ7_jXyMamw4.roa (raw, json) Hash identifier: YsaXqtsrHkKSzKqIrNyEZ6rkNj200yF1XlYMTQ9by/Q= Subject key identifier: D2:C1:B4:D9:F4:53:FB:E5:C9:A2:56:2E:67:BF:E3:5F:23:1A:9B:0E Certificate issuer: /CN=b999dd5ac03225844b6b490f92f0347ccf096708 Certificate serial: 019B78A321D1132A1CCC659108785FA10F63 Authority key identifier: B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/0sG02fRT--XJolYuZ7_jXyMamw4.roa Signing time: Thu 01 Jan 2026 08:18:35 +0000 ROA not before: Thu 01 Jan 2026 08:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41071 IP address blocks: 185.90.8.0/22 maxlen: 22 185.90.8.0/23 maxlen: 23 185.90.10.0/24 maxlen: 24 185.90.11.0/24 maxlen: 24 2a05:db80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:21:d1:13:2a:1c:cc:65:91:08:78:5f:a1:0f:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b999dd5ac03225844b6b490f92f0347ccf096708 Validity Not Before: Jan 1 08:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2c1b4d9f453fbe5c9a2562e67bfe35f231a9b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:17:8e:5f:60:29:44:c0:d3:71:86:e6:96:b7: 40:04:3b:6d:19:de:f4:14:4a:4d:95:cf:30:0c:e7: cc:ac:c1:0d:57:94:c7:62:76:4c:65:fe:eb:9a:a6: d2:65:12:db:1d:f3:2d:92:b6:4c:eb:01:06:f3:8a: 7a:fb:f9:6a:cd:09:15:ab:65:12:13:e4:94:db:10: a8:ba:55:3b:da:94:af:d9:17:3e:92:c3:5e:e7:7b: 62:86:8c:9b:c0:4f:9b:5e:be:d3:07:99:9e:1b:ce: a1:dd:60:f1:17:bc:02:64:05:11:18:fb:a4:e5:ab: f4:ad:ef:ca:42:c2:a2:b0:90:29:ea:25:c4:e7:9e: b2:ab:84:69:ac:12:1f:6e:b2:b9:47:ab:ee:0f:34: 1d:1d:9b:66:a7:20:ec:ff:f8:48:e9:c1:5a:97:f2: 88:b5:1a:c8:b7:a4:22:20:8d:30:ed:4e:16:35:93: bd:0a:11:c3:7b:0f:f8:f0:3f:56:01:02:51:a6:12: d0:fa:44:a5:d8:20:43:f9:6d:65:ba:ea:a5:8d:4a: c7:57:ed:38:af:b1:92:28:1a:b9:47:95:a2:0a:18: b1:37:38:a3:46:47:f3:09:f2:1f:83:87:49:86:bf: 58:b3:7d:f9:e8:36:7b:37:6a:c4:9e:05:7f:2a:88: a2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C1:B4:D9:F4:53:FB:E5:C9:A2:56:2E:67:BF:E3:5F:23:1A:9B:0E X509v3 Authority Key Identifier: keyid:B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/0sG02fRT--XJolYuZ7_jXyMamw4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.90.8.0/22 IPv6: 2a05:db80::/29 Signature Algorithm: sha256WithRSAEncryption 9a:5b:93:b0:db:18:5a:28:7c:43:af:83:88:09:56:70:08:81: 28:c4:65:71:ed:a3:e1:62:9d:4c:1a:a6:2a:9b:e0:a1:34:5c: 92:69:e9:d2:d7:23:ec:6e:7b:84:f5:60:8b:e2:1a:49:81:53: 9e:c0:44:3d:ea:50:a8:7d:3d:1f:a6:90:38:57:1f:36:be:31: 0b:23:e6:ef:33:4c:b0:a2:d2:28:b5:0c:53:f9:70:95:9d:3d: 29:04:80:0b:85:ea:9f:53:1b:5e:64:93:f9:52:ab:43:33:d0: f8:96:5b:e0:61:47:5c:2c:27:2f:a9:af:94:16:56:b4:cf:2a: 7c:6b:14:4c:08:4f:d9:e5:2b:bb:d3:a1:5d:bb:1d:11:a1:3e: d5:3f:7d:41:ce:21:70:20:13:e1:b8:9a:87:4c:95:b1:5b:39: 32:40:b0:02:4c:2e:e9:f5:b2:bc:0d:d5:12:ae:35:72:d5:85: 88:b3:44:59:2f:74:61:5f:85:7a:dd:58:6e:55:61:7e:fe:90: b4:32:42:df:75:d8:8d:b7:85:57:70:e9:11:ff:2a:81:47:95: a7:cb:ff:70:6f:fc:a8:2f:60:1a:e7:b7:bc:2c:31:d9:0c:d9: 4b:e7:02:2d:52:9d:ff:30:55:d4:ea:31:2f:fa:a2:e5:0d:ce: 45:a3:db:30 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4oyHREyoczGWRCHhfoQ9jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTlkZDVhYzAzMjI1ODQ0YjZiNDkwZjkyZjAzNDdjY2Yw OTY3MDgwHhcNMjYwMTAxMDgxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmMxYjRkOWY0NTNmYmU1YzlhMjU2MmU2N2JmZTM1ZjIzMWE5YjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnReOX2ApRMDTcYbmlrdABDttGd70 FEpNlc8wDOfMrMENV5THYnZMZf7rmqbSZRLbHfMtkrZM6wEG84p6+/lqzQkVq2US E+SU2xCoulU72pSv2Rc+ksNe53tihoybwE+bXr7TB5meG86h3WDxF7wCZAURGPuk 5av0re/KQsKisJAp6iXE556yq4RprBIfbrK5R6vuDzQdHZtmpyDs//hI6cFal/KI tRrIt6QiII0w7U4WNZO9ChHDew/48D9WAQJRphLQ+kSl2CBD+W1luuqljUrHV+04 r7GSKBq5R5WiChixNzijRkfzCfIfg4dJhr9Ys3356DZ7N2rEngV/KoiigwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNLBtNn0U/vlyaJWLme/418jGpsOMB8GA1UdIwQY MBaAFLmZ3VrAMiWES2tJD5LwNHzPCWcIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpuZFdzQXlKWVJMYTBrUGt2QTBmTThKWndnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9jN2YwNWQtMzVmNS00MTE1LTlmN2Yt ZmNhYWYyZWYzNjAxLzEvMHNHMDJmUlQtLVhKb2xZdVo3X2pYeU1hbXc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9jN2YwNWQtMzVmNS00MTE1LTlmN2YtZmNhYWYyZWYzNjAx LzEvdVpuZFdzQXlKWVJMYTBrUGt2QTBmTThKWndnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVoIMA0E AgACMAcDBQMqBduAMA0GCSqGSIb3DQEBCwUAA4IBAQCaW5Ow2xhaKHxDr4OICVZw CIEoxGVx7aPhYp1MGqYqm+ChNFySaenS1yPsbnuE9WCL4hpJgVOewEQ96lCofT0f ppA4Vx82vjELI+bvM0ywotIotQxT+XCVnT0pBIALheqfUxteZJP5UqtDM9D4llvg YUdcLCcvqa+UFla0zyp8axRMCE/Z5Su706Fdux0RoT7VP31BziFwIBPhuJqHTJWx WzkyQLACTC7p9bK8DdUSrjVy1YWIs0RZL3RhX4V63VhuVWF+/pC0MkLfddiNt4VX cOkR/yqBR5Wny/9wb/yoL2Aa57e8LDHZDNlL5wItUp3/MFXU6jEv+qLlDc5Fo9sw -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:40 2026 by rpki-client