This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/0JqDGO3zEAPtzyEllTXxlHU8D6s.roa File: 0JqDGO3zEAPtzyEllTXxlHU8D6s.roa (raw, json) Hash identifier: 30zt4SdMrQD3mYFxcaO98Ys+4idxO93NzA+6h84mZFg= Subject key identifier: D0:9A:83:18:ED:F3:10:03:ED:CF:21:25:95:35:F1:94:75:3C:0F:AB Certificate issuer: /CN=729b33de6051d04d75f6bb1f7e53b1efd6646211 Certificate serial: 019B7BA3BD6D585086CBC34797D6BC38D356 Authority key identifier: 72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/0JqDGO3zEAPtzyEllTXxlHU8D6s.roa Signing time: Thu 01 Jan 2026 22:18:07 +0000 ROA not before: Thu 01 Jan 2026 22:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2872 IP address blocks: 185.152.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:bd:6d:58:50:86:cb:c3:47:97:d6:bc:38:d3:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=729b33de6051d04d75f6bb1f7e53b1efd6646211 Validity Not Before: Jan 1 22:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d09a8318edf31003edcf21259535f194753c0fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6b:2a:88:7e:68:c8:42:ba:39:3d:12:5e:03: ce:d8:50:70:ad:d7:e3:92:e6:d6:a7:f5:28:8f:5f: 1e:17:b9:79:6f:76:29:59:fb:90:c6:26:47:9b:e9: 91:22:1a:b3:d1:4b:b9:fe:e0:f9:b5:59:1b:52:25: 10:f3:e3:e6:26:7e:17:49:b6:6c:19:74:df:11:2a: c4:18:91:a7:1b:aa:fa:6f:51:19:09:47:fe:a7:97: 7c:83:64:50:43:8f:f5:83:e0:e4:a3:32:95:81:d8: 22:62:fe:68:62:cb:e1:5f:50:46:13:b3:0f:e5:8b: 83:5e:aa:58:37:d1:77:bb:14:a0:8e:e3:4b:78:84: 19:94:8a:99:06:55:2b:c3:95:12:ee:08:db:7b:d2: ab:b9:c5:c2:49:7e:d9:85:88:15:c6:c7:e4:f3:dc: cf:39:99:35:a7:a3:82:53:c9:48:3c:a5:7b:0f:dc: a7:72:16:f7:e9:c7:55:8e:ba:1c:64:6c:7d:bd:67: 91:df:16:0c:d6:b3:8e:23:8a:d8:17:d4:65:27:b7: 10:40:72:bf:e9:b7:c5:97:5d:22:5f:fc:66:01:09: bb:a7:a0:20:08:30:d4:f4:f3:39:15:84:f4:40:75: ef:1a:88:40:bf:98:bc:cf:14:55:7f:a2:f5:9d:14: e0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9A:83:18:ED:F3:10:03:ED:CF:21:25:95:35:F1:94:75:3C:0F:AB X509v3 Authority Key Identifier: keyid:72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/0JqDGO3zEAPtzyEllTXxlHU8D6s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.152.90.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:f3:b1:fb:93:db:35:1e:c0:ad:78:c0:47:28:2f:56:57:18: ad:7d:98:d8:e0:6e:63:7f:70:d7:32:22:ad:6e:56:14:75:30: d6:df:79:84:64:d0:35:05:7c:dc:a4:b0:2e:01:97:36:75:85: bc:71:bd:04:8d:6c:1b:cc:a1:2f:24:cd:6c:42:73:f1:2c:00: f8:5f:a1:9e:00:2f:45:48:0f:ad:7a:ba:1d:84:72:26:7d:c5: 08:98:b9:f1:bf:76:2f:d4:db:fd:ff:b9:26:a9:b3:62:d5:4b: 9b:67:6d:90:e9:c5:f1:65:9e:ff:10:4d:42:7c:ff:e3:80:92: 01:d7:f5:75:f1:fd:72:f9:71:a8:38:1b:b1:20:cc:6b:82:49: 3d:65:c8:db:0c:c7:0a:1e:eb:14:18:a8:a4:89:f7:56:71:bf: 98:d3:75:92:54:4c:e1:14:60:d9:3e:8e:c8:93:2d:ac:12:3b: c8:5e:67:ea:5f:08:ae:50:cc:f0:b4:07:1c:9f:44:68:10:1a: 57:b8:d7:c1:34:16:09:fe:ff:98:2f:eb:48:30:3b:ca:37:09: 51:e6:41:7f:b9:08:3d:f1:9e:f2:2b:47:8a:89:e1:0c:d2:80: 0d:8e:7d:ef:16:58:2f:26:4c:04:55:2b:d2:63:d0:c2:6c:17: cf:44:48:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o71tWFCGy8NHl9a8ONNWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyOWIzM2RlNjA1MWQwNGQ3NWY2YmIxZjdlNTNiMWVmZDY2 NDYyMTEwHhcNMjYwMTAxMjIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDlhODMxOGVkZjMxMDAzZWRjZjIxMjU5NTM1ZjE5NDc1M2MwZmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWsqiH5oyEK6OT0SXgPO2FBwrdfj kubWp/Uoj18eF7l5b3YpWfuQxiZHm+mRIhqz0Uu5/uD5tVkbUiUQ8+PmJn4XSbZs GXTfESrEGJGnG6r6b1EZCUf+p5d8g2RQQ4/1g+DkozKVgdgiYv5oYsvhX1BGE7MP 5YuDXqpYN9F3uxSgjuNLeIQZlIqZBlUrw5US7gjbe9KrucXCSX7ZhYgVxsfk89zP OZk1p6OCU8lIPKV7D9ynchb36cdVjrocZGx9vWeR3xYM1rOOI4rYF9RlJ7cQQHK/ 6bfFl10iX/xmAQm7p6AgCDDU9PM5FYT0QHXvGohAv5i8zxRVf6L1nRTg/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNCagxjt8xAD7c8hJZU18ZR1PA+rMB8GA1UdIwQY MBaAFHKbM95gUdBNdfa7H35Tse/WZGIRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3BzejNtQlIwRTExOXJzZmZsT3g3OVprWWhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8yZDk1NDEtZWI3ZS00YTFhLWI4NGIt NmVhMjc5YTJlNmNiLzEvMEpxREdPM3pFQVB0enlFbGxUWHhsSFU4RDZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8yZDk1NDEtZWI3ZS00YTFhLWI4NGItNmVhMjc5YTJlNmNi LzEvY3BzejNtQlIwRTExOXJzZmZsT3g3OVprWWhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZhaMA0G CSqGSIb3DQEBCwUAA4IBAQCL87H7k9s1HsCteMBHKC9WVxitfZjY4G5jf3DXMiKt blYUdTDW33mEZNA1BXzcpLAuAZc2dYW8cb0EjWwbzKEvJM1sQnPxLAD4X6GeAC9F SA+terodhHImfcUImLnxv3Yv1Nv9/7kmqbNi1UubZ22Q6cXxZZ7/EE1CfP/jgJIB 1/V18f1y+XGoOBuxIMxrgkk9ZcjbDMcKHusUGKikifdWcb+Y03WSVEzhFGDZPo7I ky2sEjvIXmfqXwiuUMzwtAccn0RoEBpXuNfBNBYJ/v+YL+tIMDvKNwlR5kF/uQg9 8Z7yK0eKieEM0oANjn3vFlgvJkwEVSvSY9DCbBfPREhu -----END CERTIFICATE-----Generated at Mon Jan 26 18:19:18 2026 by rpki-client