This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/9Oga3ncG8UuHhw-WIGEJO6D5hKI.roa File: 9Oga3ncG8UuHhw-WIGEJO6D5hKI.roa (raw, json) Hash identifier: mRwsMyDZVlc7uM1xeqJI2exTq6IzthC36gMrJ2GHsig= Subject key identifier: F4:E8:1A:DE:77:06:F1:4B:87:87:0F:96:20:61:09:3B:A0:F9:84:A2 Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C8062F167DF4096C894B05047C33A12 Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/9Oga3ncG8UuHhw-WIGEJO6D5hKI.roa Signing time: Fri 02 Jan 2026 02:19:07 +0000 ROA not before: Fri 02 Jan 2026 02:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60139 IP address blocks: 90.156.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:62:f1:67:df:40:96:c8:94:b0:50:47:c3:3a:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4e81ade7706f14b87870f962061093ba0f984a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ae:e8:8e:4d:31:02:97:a2:0b:3a:d6:96:51: c9:9f:1f:b9:de:54:73:bd:af:87:2a:b2:d6:54:d9: 5c:1a:0b:46:46:bf:10:89:c5:18:a1:f5:1b:ea:d0: 69:f6:e4:43:15:5b:37:16:4d:5a:50:60:9f:f2:d5: 31:40:a1:50:fb:b5:a7:0c:ed:a6:39:22:6d:91:13: 60:79:72:80:22:ed:e1:b0:bc:69:2f:36:30:1a:8d: 1e:1d:b1:e9:d1:c7:fe:b9:17:e8:ef:20:0c:f0:33: 95:aa:cd:df:02:2d:2e:f9:b8:f9:fe:d7:63:af:f4: 24:38:01:19:29:33:e8:81:15:9f:b0:ab:cb:64:43: 2a:7e:8d:3d:4b:a1:9e:4c:bd:f8:6a:e8:aa:1e:b1: 8c:d2:f6:b4:2b:8c:d6:39:f7:a9:f8:ac:eb:e6:2c: 5a:86:ce:59:95:87:64:0b:f2:5f:10:93:82:a4:1f: f9:a9:9c:4e:8a:fc:e3:24:1e:dc:33:57:96:b4:49: 9d:4a:88:3c:dc:96:48:5a:1a:e5:ae:9c:fc:ed:63: 0f:a9:6f:6e:c9:8e:69:c8:76:8a:82:f2:f9:14:85: 71:44:40:fa:5a:19:dd:23:1f:ff:5e:7a:79:a5:f9: 4f:1d:d3:80:77:77:89:b9:61:ad:e3:e5:2c:13:ad: 25:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E8:1A:DE:77:06:F1:4B:87:87:0F:96:20:61:09:3B:A0:F9:84:A2 X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/9Oga3ncG8UuHhw-WIGEJO6D5hKI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 90.156.146.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:66:bc:67:69:77:c2:32:97:56:4b:97:78:4e:80:00:84:14: 17:89:e6:56:22:b5:4b:db:88:49:b6:eb:55:3a:87:de:ed:36: 9c:5c:a9:05:01:23:73:ac:1e:ee:7a:7c:77:f3:6e:43:f0:b3: 6d:0e:16:12:04:cb:7f:d7:f3:9d:d1:58:9e:11:7b:93:00:a9: 59:37:d6:c9:f0:91:c4:67:ed:a2:0d:fd:13:10:aa:7e:e1:0c: 63:ba:4b:51:31:6c:5c:3b:df:78:c2:f9:5f:96:d3:63:27:ac: a9:c1:d0:21:53:7b:01:db:70:00:e2:d6:da:b1:85:0b:01:7e: 20:02:7e:0e:2d:ea:7b:97:5d:d5:3f:2b:84:91:1b:5c:af:c7: 21:0e:9f:96:d4:f3:1c:7a:e4:d6:cb:65:ed:68:39:3c:fb:ba: 74:99:4f:3a:3a:7b:2f:b7:c0:bb:d5:25:b7:10:54:9b:e6:e7: ae:ed:ef:03:77:e6:12:7c:61:50:76:9a:af:c9:1a:6e:fc:41: 55:eb:a3:01:36:39:66:30:be:35:30:ae:6e:55:fd:11:d0:fd: 73:0d:b3:89:bf:4e:12:f4:75:51:a1:9e:8b:b6:ca:ae:a0:1b: 5f:fe:99:01:1e:6d:b6:e1:b3:f2:57:c4:80:4c:0d:b2:ed:6f: db:3c:28:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gGLxZ99AlsiUsFBHwzoSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGU4MWFkZTc3MDZmMTRiODc4NzBmOTYyMDYxMDkzYmEwZjk4NGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq7ojk0xApeiCzrWllHJnx+53lRz va+HKrLWVNlcGgtGRr8QicUYofUb6tBp9uRDFVs3Fk1aUGCf8tUxQKFQ+7WnDO2m OSJtkRNgeXKAIu3hsLxpLzYwGo0eHbHp0cf+uRfo7yAM8DOVqs3fAi0u+bj5/tdj r/QkOAEZKTPogRWfsKvLZEMqfo09S6GeTL34auiqHrGM0va0K4zWOfep+Kzr5ixa hs5ZlYdkC/JfEJOCpB/5qZxOivzjJB7cM1eWtEmdSog83JZIWhrlrpz87WMPqW9u yY5pyHaKgvL5FIVxRED6WhndIx//Xnp5pflPHdOAd3eJuWGt4+UsE60lVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPToGt53BvFLh4cPliBhCTug+YSiMB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvOU9nYTNuY0c4VXVIaHctV0lHRUpPNkQ1aEtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWpySMA0G CSqGSIb3DQEBCwUAA4IBAQBvZrxnaXfCMpdWS5d4ToAAhBQXieZWIrVL24hJtutV Oofe7TacXKkFASNzrB7uenx3825D8LNtDhYSBMt/1/Od0VieEXuTAKlZN9bJ8JHE Z+2iDf0TEKp+4QxjuktRMWxcO994wvlfltNjJ6ypwdAhU3sB23AA4tbasYULAX4g An4OLep7l13VPyuEkRtcr8chDp+W1PMceuTWy2XtaDk8+7p0mU86Onsvt8C71SW3 EFSb5ueu7e8Dd+YSfGFQdpqvyRpu/EFV66MBNjlmML41MK5uVf0R0P1zDbOJv04S 9HVRoZ6LtsquoBtf/pkBHm224bPyV8SATA2y7W/bPCjD -----END CERTIFICATE-----Generated at Sat Jan 10 03:55:37 2026 by rpki-client