This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-sUcT24lvqazVNfmRU8Ql6bgjpQ.roa File: 1-sUcT24lvqazVNfmRU8Ql6bgjpQ.roa (raw, json) Hash identifier: r7xUPYpuC9z5ZAMIg7Xau9vOjyhOO1yk/NknSRsjxi8= Subject key identifier: FA:C5:1C:4F:6E:25:BE:A6:B3:54:D7:E6:45:4F:10:97:A6:E0:8E:94 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12D0C568ED858B03FE86235D220615 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-sUcT24lvqazVNfmRU8Ql6bgjpQ.roa Signing time: Fri 02 Jan 2026 00:19:26 +0000 ROA not before: Fri 02 Jan 2026 00:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43607 IP address blocks: 77.90.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:d0:c5:68:ed:85:8b:03:fe:86:23:5d:22:06:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fac51c4f6e25bea6b354d7e6454f1097a6e08e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3c:1c:12:5f:d7:c9:6a:8b:67:51:1e:99:ac: dc:88:31:a2:37:79:77:53:7a:8d:e0:89:6f:d8:10: 00:ef:0c:c4:78:34:c8:76:c9:36:ba:8d:b7:8e:c9: 52:1e:39:2f:ae:5a:6e:6f:40:84:09:14:55:01:41: be:f4:a0:82:71:ec:7c:0e:84:86:3e:42:c7:5d:70: 45:0c:80:f5:df:50:14:41:65:6b:30:2b:35:f1:78: 6b:f3:22:f0:b2:a6:67:c9:5f:a4:7c:a3:b2:4b:2a: 73:cb:da:a0:2e:28:33:78:c1:a7:ac:9b:d2:47:5a: 61:2a:55:66:32:fb:11:6d:9e:c7:76:cd:1c:72:8a: e9:f4:e7:e5:cb:17:42:dd:e9:8d:6d:2c:0b:c2:61: 01:31:57:4f:a2:06:23:55:82:c3:a3:76:ce:30:40: 58:b2:fe:67:2d:be:0b:57:b5:d1:7a:f9:e0:f2:9a: 08:07:f1:13:a4:c4:6d:fd:71:78:8c:c6:d2:8b:c7: 39:41:d7:b5:80:14:68:b9:5a:f0:91:3d:40:07:17: 28:16:d7:7a:3d:0b:01:94:55:a2:ec:db:80:ff:6d: 0d:53:74:fe:f5:16:9b:1e:6a:50:95:91:a8:3f:62: 8a:db:78:49:18:d6:4d:11:da:6a:b3:7b:ad:9d:20: 66:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C5:1C:4F:6E:25:BE:A6:B3:54:D7:E6:45:4F:10:97:A6:E0:8E:94 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-sUcT24lvqazVNfmRU8Ql6bgjpQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.24.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:9e:46:c3:e6:d2:b0:08:53:76:a9:9a:fc:fb:35:6f:96:11: ed:a5:07:82:19:50:eb:2b:82:19:57:53:a0:81:c1:35:63:9d: 6d:3e:50:7d:41:10:aa:d2:10:5e:ab:cf:77:17:de:81:95:8c: b8:1e:e9:f8:ed:18:88:7c:98:a5:cf:32:2d:60:e9:cd:6c:3c: fc:d4:bb:31:1b:69:a8:05:c6:95:d6:f7:04:f7:2d:1c:9e:b9: fb:db:1e:b4:d0:3b:5e:27:b1:ca:f2:d1:d6:98:f8:51:81:17: ca:a3:f9:7b:a3:aa:96:3e:5f:8d:cf:d1:95:b8:17:f1:a9:29: bc:a6:e1:ec:b9:0d:23:b6:d3:cd:90:c2:ed:41:53:c0:c5:d1: 61:18:3f:d9:83:22:ed:34:b5:9d:ee:32:bb:7f:ff:ba:2e:76: 95:08:13:a5:92:da:98:0e:85:45:bf:9b:de:61:5e:65:a2:ee: 3f:67:49:58:65:49:ab:29:03:51:8f:e2:80:db:30:b2:9a:40: aa:99:6b:f6:62:cd:64:7e:29:71:bc:3f:c3:e3:11:f1:07:92: a5:1b:34:70:98:f5:1a:9f:4a:da:88:53:38:6e:ee:db:7f:53: ca:1f:2c:51:e4:56:d5:f8:de:78:1d:fb:28:e5:3e:46:69:40: 2e:5d:f8:a2 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8EtDFaO2FiwP+hiNdIgYVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWM1MWM0ZjZlMjViZWE2YjM1NGQ3ZTY0NTRmMTA5N2E2ZTA4ZTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzwcEl/XyWqLZ1EemazciDGiN3l3 U3qN4Ilv2BAA7wzEeDTIdsk2uo23jslSHjkvrlpub0CECRRVAUG+9KCCcex8DoSG PkLHXXBFDID131AUQWVrMCs18Xhr8yLwsqZnyV+kfKOySypzy9qgLigzeMGnrJvS R1phKlVmMvsRbZ7Hds0ccorp9OflyxdC3emNbSwLwmEBMVdPogYjVYLDo3bOMEBY sv5nLb4LV7XRevng8poIB/ETpMRt/XF4jMbSi8c5Qde1gBRouVrwkT1ABxcoFtd6 PQsBlFWi7NuA/20NU3T+9RabHmpQlZGoP2KK23hJGNZNEdpqs3utnSBmbwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPrFHE9uJb6ms1TX5kVPEJem4I6UMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvMS1zVWNUMjRsdnFhelZOZm1SVThRbDZiZ2pwUS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTAvOTY1ODM3LTUyY2ItNDZiNC1hZWRiLWUxYmQ4OGQzZmQw Ny8xL1BtQ1hhWWFHNFZWZlVmYklnN3hhV0ZTYkkySS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE1aGDAN BgkqhkiG9w0BAQsFAAOCAQEAG55Gw+bSsAhTdqma/Ps1b5YR7aUHghlQ6yuCGVdT oIHBNWOdbT5QfUEQqtIQXqvPdxfegZWMuB7p+O0YiHyYpc8yLWDpzWw8/NS7MRtp qAXGldb3BPctHJ65+9setNA7XiexyvLR1pj4UYEXyqP5e6Oqlj5fjc/RlbgX8akp vKbh7LkNI7bTzZDC7UFTwMXRYRg/2YMi7TS1ne4yu3//ui52lQgTpZLamA6FRb+b 3mFeZaLuP2dJWGVJqykDUY/igNswsppAqplr9mLNZH4pcbw/w+MR8QeSpRs0cJj1 Gp9K2ohTOG7u239Tyh8sUeRW1fjeeB37KOU+RmlALl34og== -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:08 2026 by rpki-client