This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/550784-99b6-4af1-bcf9-e8164e752c2f/1/C90AW3XegIArf-bNcNOqfY75gXw.roa File: C90AW3XegIArf-bNcNOqfY75gXw.roa (raw, json) Hash identifier: oo8doFg3P1HFO6bcCo29StzUxxdgsNyQretz+OB8VTw= Subject key identifier: 0B:DD:00:5B:75:DE:80:80:2B:7F:E6:CD:70:D3:AA:7D:8E:F9:81:7C Certificate issuer: /CN=ffafe9aefb87baea21e4425d47b11996bdb1e28e Certificate serial: 019BDAFB4FF05B341A8670698D2455335C9E Authority key identifier: FF:AF:E9:AE:FB:87:BA:EA:21:E4:42:5D:47:B1:19:96:BD:B1:E2:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6_prvuHuuoh5EJdR7EZlr2x4o4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/550784-99b6-4af1-bcf9-e8164e752c2f/1/C90AW3XegIArf-bNcNOqfY75gXw.roa Signing time: Tue 20 Jan 2026 10:37:41 +0000 ROA not before: Tue 20 Jan 2026 10:37:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29355 IP address blocks: 151.237.144.0/20 maxlen: 20 164.138.40.0/21 maxlen: 21 164.138.40.0/22 maxlen: 22 164.138.40.0/23 maxlen: 23 164.138.40.0/24 maxlen: 24 164.138.41.0/24 maxlen: 24 164.138.42.0/23 maxlen: 23 164.138.44.0/24 maxlen: 24 164.138.45.0/24 maxlen: 24 164.138.46.0/24 maxlen: 24 185.129.192.0/22 maxlen: 22 185.129.192.0/23 maxlen: 23 185.129.192.0/24 maxlen: 24 185.129.193.0/24 maxlen: 24 185.129.194.0/23 maxlen: 23 185.129.194.0/24 maxlen: 24 185.129.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/550784-99b6-4af1-bcf9-e8164e752c2f/1/_6_prvuHuuoh5EJdR7EZlr2x4o4.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/550784-99b6-4af1-bcf9-e8164e752c2f/1/_6_prvuHuuoh5EJdR7EZlr2x4o4.mft rsync://rpki.ripe.net/repository/DEFAULT/_6_prvuHuuoh5EJdR7EZlr2x4o4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:fb:4f:f0:5b:34:1a:86:70:69:8d:24:55:33:5c:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffafe9aefb87baea21e4425d47b11996bdb1e28e Validity Not Before: Jan 20 10:37:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bdd005b75de80802b7fe6cd70d3aa7d8ef9817c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d3:37:a5:4f:1c:46:65:42:75:41:47:fe:02: d5:b0:93:73:d0:5a:28:82:f1:fe:3b:2f:d6:e2:a6: 84:24:27:73:b3:a3:56:2f:b7:b7:83:3a:c2:a1:2c: fb:e6:2d:31:c1:cc:a9:dd:64:fd:07:ae:d9:a1:c3: e9:b7:11:8d:2a:6b:ac:59:bf:00:b3:6a:a4:cc:c7: 0f:c9:f2:bd:a4:20:8f:05:e8:d3:89:be:3c:5c:1f: f6:5c:f2:ad:ea:64:35:f7:db:15:1a:e3:17:97:b5: 88:25:a6:44:40:43:07:77:f6:99:11:64:9d:f8:ea: 2f:39:c6:6c:1f:3d:1c:1e:6b:33:8a:91:aa:4f:b7: d2:0f:95:c8:40:f0:94:d8:ba:46:00:41:2c:e0:ec: 63:be:d0:2c:65:81:71:e0:50:7e:f6:1a:64:6c:7e: c6:bd:c8:c0:ae:c2:c0:70:1a:b2:b4:ce:1b:cd:cf: f6:e9:c2:46:7b:0f:79:cc:65:db:79:f4:c3:9b:db: 2c:59:3e:7c:30:0e:db:00:73:33:0c:43:36:0c:6b: 7d:b9:30:c8:09:4d:65:db:c4:09:d3:f7:61:8c:e9: 8a:5f:bc:07:34:9e:c1:ae:f2:1b:05:c1:92:7c:62: aa:3c:8c:8e:0d:71:72:07:1b:7e:8e:ef:da:79:bd: 97:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:DD:00:5B:75:DE:80:80:2B:7F:E6:CD:70:D3:AA:7D:8E:F9:81:7C X509v3 Authority Key Identifier: keyid:FF:AF:E9:AE:FB:87:BA:EA:21:E4:42:5D:47:B1:19:96:BD:B1:E2:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6_prvuHuuoh5EJdR7EZlr2x4o4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/550784-99b6-4af1-bcf9-e8164e752c2f/1/C90AW3XegIArf-bNcNOqfY75gXw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/550784-99b6-4af1-bcf9-e8164e752c2f/1/_6_prvuHuuoh5EJdR7EZlr2x4o4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.237.144.0/20 164.138.40.0/21 185.129.192.0/22 Signature Algorithm: sha256WithRSAEncryption b0:4c:9b:7c:60:60:b2:39:ea:00:d1:89:54:b5:15:c5:be:11: 64:5e:6b:6b:4f:06:ce:47:c8:b3:af:74:e5:e0:1e:3c:fa:64: 09:7c:bc:46:17:70:8b:63:34:54:44:05:00:ea:d5:1d:56:55: 89:12:a5:1f:4e:d6:2f:a7:c1:da:63:77:59:1f:b2:82:d2:42: 0f:d5:8e:86:90:a9:88:dd:9d:22:f0:bf:34:47:a7:34:e7:7e: dd:31:a9:02:c6:4f:1e:50:c0:62:5e:8d:ae:9c:4b:88:1c:fe: dc:e4:99:99:9e:3f:9b:dd:08:ba:0f:b1:40:6b:90:f3:c8:8f: 01:11:f5:15:95:72:96:3d:bc:6d:6c:e2:41:1c:af:0a:49:d0: 25:60:e2:83:f7:a8:e6:cf:c4:fb:d3:40:d6:e8:94:63:62:29: 98:55:6f:48:f2:b7:95:96:98:fa:3c:83:96:22:12:99:7f:34: 46:93:3f:23:7c:2e:a2:00:23:ac:d0:49:88:a8:7f:ec:46:a2: 59:36:82:94:95:63:a1:ce:6c:87:c7:64:f5:f1:86:b7:a5:60: 37:79:1d:70:67:78:76:1b:58:75:06:0b:d2:ce:c5:ed:86:3d: 74:6e:ae:70:9e:0a:1b:af:1b:6c:10:4c:f9:6c:fe:17:7a:bc: df:c8:34:85 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZva+0/wWzQahnBpjSRVM1yeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYWZlOWFlZmI4N2JhZWEyMWU0NDI1ZDQ3YjExOTk2YmRi MWUyOGUwHhcNMjYwMTIwMTAzNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmRkMDA1Yjc1ZGU4MDgwMmI3ZmU2Y2Q3MGQzYWE3ZDhlZjk4MTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtM3pU8cRmVCdUFH/gLVsJNz0Foo gvH+Oy/W4qaEJCdzs6NWL7e3gzrCoSz75i0xwcyp3WT9B67ZocPptxGNKmusWb8A s2qkzMcPyfK9pCCPBejTib48XB/2XPKt6mQ199sVGuMXl7WIJaZEQEMHd/aZEWSd +OovOcZsHz0cHmszipGqT7fSD5XIQPCU2LpGAEEs4OxjvtAsZYFx4FB+9hpkbH7G vcjArsLAcBqytM4bzc/26cJGew95zGXbefTDm9ssWT58MA7bAHMzDEM2DGt9uTDI CU1l28QJ0/dhjOmKX7wHNJ7BrvIbBcGSfGKqPIyODXFyBxt+ju/aeb2XDwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAvdAFt13oCAK3/mzXDTqn2O+YF8MB8GA1UdIwQY MBaAFP+v6a77h7rqIeRCXUexGZa9seKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZfcHJ2dUh1dW9oNUVKZFI3RVpscjJ4NG80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81NTA3ODQtOTliNi00YWYxLWJjZjkt ZTgxNjRlNzUyYzJmLzEvQzkwQVczWGVnSUFyZi1iTmNOT3FmWTc1Z1h3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy81NTA3ODQtOTliNi00YWYxLWJjZjktZTgxNjRlNzUyYzJm LzEvXzZfcHJ2dUh1dW9oNUVKZFI3RVpscjJ4NG80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEl+2QAwQD pIooAwQCuYHAMA0GCSqGSIb3DQEBCwUAA4IBAQCwTJt8YGCyOeoA0YlUtRXFvhFk XmtrTwbOR8izr3Tl4B48+mQJfLxGF3CLYzRURAUA6tUdVlWJEqUfTtYvp8HaY3dZ H7KC0kIP1Y6GkKmI3Z0i8L80R6c0537dMakCxk8eUMBiXo2unEuIHP7c5JmZnj+b 3Qi6D7FAa5DzyI8BEfUVlXKWPbxtbOJBHK8KSdAlYOKD96jmz8T700DW6JRjYimY VW9I8reVlpj6PIOWIhKZfzRGkz8jfC6iACOs0EmIqH/sRqJZNoKUlWOhzmyHx2T1 8Ya3pWA3eR1wZ3h2G1h1BgvSzsXthj10bq5wngobrxtsEEz5bP4XerzfyDSF -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:29 2026 by rpki-client