This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/n90xmr_CM6O4WDRtYmfgJfxxrvA.roa File: n90xmr_CM6O4WDRtYmfgJfxxrvA.roa (raw, json) Hash identifier: lPtn9C/LBef80I4Gcyice5R+gf5Md1ot7qq45wVZu/E= Subject key identifier: 9F:DD:31:9A:BF:C2:33:A3:B8:58:34:6D:62:67:E0:25:FC:71:AE:F0 Certificate issuer: /CN=890c4983ee18bc5e025faafde31c64134a4620ac Certificate serial: 019B7EA74AAEE8F96E22010C527553942B00 Authority key identifier: 89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/n90xmr_CM6O4WDRtYmfgJfxxrvA.roa Signing time: Fri 02 Jan 2026 12:20:51 +0000 ROA not before: Fri 02 Jan 2026 12:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56634 IP address blocks: 192.162.212.0/22 maxlen: 22 192.162.212.0/24 maxlen: 24 192.162.213.0/24 maxlen: 24 192.162.214.0/24 maxlen: 24 192.162.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.crl rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:4a:ae:e8:f9:6e:22:01:0c:52:75:53:94:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=890c4983ee18bc5e025faafde31c64134a4620ac Validity Not Before: Jan 2 12:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fdd319abfc233a3b858346d6267e025fc71aef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:80:e1:a8:97:61:e5:63:8d:95:db:88:97:32: 91:38:ce:a6:d6:4e:24:2a:4d:ae:a0:b3:db:a4:69: f9:49:6d:11:9a:9f:47:c3:6d:cc:fe:0e:46:74:9c: e6:6a:22:67:6e:df:c3:c5:bd:01:a6:8d:1c:36:2f: b2:25:3b:3d:4e:8a:eb:ce:f0:88:a7:7b:f7:86:2f: 3c:26:16:f4:04:8f:06:e9:66:3f:c8:29:70:3d:ea: d6:2e:9e:92:98:51:81:ba:04:05:5d:ba:07:b1:40: 5b:f0:d6:1a:9f:ea:27:c3:63:43:8a:be:80:a2:64: 64:35:01:ab:31:16:1b:a0:5e:aa:13:05:0d:72:fa: 18:02:14:ca:0c:b1:64:04:ff:ad:f3:f0:ad:c5:25: 8f:96:eb:e2:da:3d:48:03:b1:ad:d3:1f:63:fc:1e: 46:4a:17:fa:f9:a9:15:d2:1c:41:c8:70:3a:94:f8: 64:71:6e:57:f3:ab:db:77:76:29:cb:13:0c:8a:7e: da:5d:12:80:42:de:53:d4:b7:2d:4e:c4:88:3d:e5: 2d:52:e0:75:a7:2c:80:42:93:ce:a0:0c:7d:0f:be: 42:ee:98:1b:cc:8b:f5:4f:6a:67:d9:b0:47:0e:d8: 90:b7:17:0a:54:fd:42:39:aa:e5:3e:62:ec:20:b1: cf:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:DD:31:9A:BF:C2:33:A3:B8:58:34:6D:62:67:E0:25:FC:71:AE:F0 X509v3 Authority Key Identifier: keyid:89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/n90xmr_CM6O4WDRtYmfgJfxxrvA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.162.212.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:cb:a8:11:ba:3d:b6:f3:f6:74:ba:06:54:f3:e9:1c:00:7b: f8:b7:1e:30:93:e1:3a:3b:1f:63:7f:ec:b0:f6:6f:82:05:c2: 33:d4:d4:a3:fd:e9:c6:91:ea:62:7e:3c:91:32:fe:13:33:00: dd:67:2f:7d:c8:75:b4:58:42:b7:19:5c:14:d1:58:b3:a9:1e: 5a:ed:3b:d2:be:53:6f:c7:95:e2:90:51:5c:25:78:42:74:b1: 53:87:49:af:54:9f:3a:0b:51:e6:d0:d0:37:90:de:c1:ae:fd: a3:51:52:a5:37:9e:72:dc:e2:9d:f1:a4:e5:30:9d:2e:4a:ed: 6d:61:c9:c4:37:c6:b7:72:4b:3b:b5:06:e9:36:22:92:21:64: b6:05:ff:3b:59:25:aa:2e:a4:fb:38:2d:94:12:e4:39:c3:de: 27:f6:d8:4b:5d:36:74:30:6e:f8:56:13:3e:f8:14:d9:a9:60: ce:cb:b4:4f:61:ca:e3:82:52:71:3d:ea:17:b1:26:68:59:38: b7:2d:b8:a5:2c:80:4c:4d:dd:1d:6d:da:61:f9:60:e0:d4:40: b2:10:50:91:dd:75:45:78:aa:c6:a3:c8:33:d5:cd:0d:3b:9a: 6f:a9:52:78:97:04:5d:d4:13:97:ba:24:b0:04:8a:31:ea:6f: 7e:b7:01:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p0qu6PluIgEMUnVTlCsAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MGM0OTgzZWUxOGJjNWUwMjVmYWFmZGUzMWM2NDEzNGE0 NjIwYWMwHhcNMjYwMTAyMTIyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmRkMzE5YWJmYzIzM2EzYjg1ODM0NmQ2MjY3ZTAyNWZjNzFhZWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoDhqJdh5WONlduIlzKROM6m1k4k Kk2uoLPbpGn5SW0Rmp9Hw23M/g5GdJzmaiJnbt/Dxb0Bpo0cNi+yJTs9TorrzvCI p3v3hi88Jhb0BI8G6WY/yClwPerWLp6SmFGBugQFXboHsUBb8NYan+onw2NDir6A omRkNQGrMRYboF6qEwUNcvoYAhTKDLFkBP+t8/CtxSWPluvi2j1IA7Gt0x9j/B5G Shf6+akV0hxByHA6lPhkcW5X86vbd3YpyxMMin7aXRKAQt5T1LctTsSIPeUtUuB1 pyyAQpPOoAx9D75C7pgbzIv1T2pn2bBHDtiQtxcKVP1COarlPmLsILHPOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ/dMZq/wjOjuFg0bWJn4CX8ca7wMB8GA1UdIwQY MBaAFIkMSYPuGLxeAl+q/eMcZBNKRiCsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVF4SmctNFl2RjRDWDZyOTR4eGtFMHBHSUt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My80MTFjNGItMTU2YS00Y2MwLWEzNGUt ZWMxOWNkMzhmMjQ1LzEvbjkweG1yX0NNNk80V0RSdFltZmdKZnh4cnZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My80MTFjNGItMTU2YS00Y2MwLWEzNGUtZWMxOWNkMzhmMjQ1 LzEvaVF4SmctNFl2RjRDWDZyOTR4eGtFMHBHSUt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwKLUMA0G CSqGSIb3DQEBCwUAA4IBAQB9y6gRuj228/Z0ugZU8+kcAHv4tx4wk+E6Ox9jf+yw 9m+CBcIz1NSj/enGkepifjyRMv4TMwDdZy99yHW0WEK3GVwU0VizqR5a7TvSvlNv x5XikFFcJXhCdLFTh0mvVJ86C1Hm0NA3kN7Brv2jUVKlN55y3OKd8aTlMJ0uSu1t YcnEN8a3cks7tQbpNiKSIWS2Bf87WSWqLqT7OC2UEuQ5w94n9thLXTZ0MG74VhM+ +BTZqWDOy7RPYcrjglJxPeoXsSZoWTi3LbilLIBMTd0dbdph+WDg1ECyEFCR3XVF eKrGo8gz1c0NO5pvqVJ4lwRd1BOXuiSwBIox6m9+twFE -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:35 2026 by rpki-client