This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/67diXdE0zp94sL920Z9tko6PW2M.roa File: 67diXdE0zp94sL920Z9tko6PW2M.roa (raw, json) Hash identifier: Kv8aAzpBN2jXWLuEiIev45+pZ2uF/RxH0g3lNNPlMF8= Subject key identifier: EB:B7:62:5D:D1:34:CE:9F:78:B0:BF:76:D1:9F:6D:92:8E:8F:5B:63 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12E268E9B4F9373D626A5A5A1418C6 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/67diXdE0zp94sL920Z9tko6PW2M.roa Signing time: Fri 02 Jan 2026 00:19:30 +0000 ROA not before: Fri 02 Jan 2026 00:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 150716 IP address blocks: 77.90.48.0/24 maxlen: 24 94.249.242.0/24 maxlen: 24 178.18.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:e2:68:e9:b4:f9:37:3d:62:6a:5a:5a:14:18:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ebb7625dd134ce9f78b0bf76d19f6d928e8f5b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:44:cb:4b:30:40:af:a3:0e:4d:ec:9a:08:32: 12:ec:4d:93:3a:f5:d4:73:55:f3:73:f7:2d:a8:b5: 2e:9b:58:43:17:e7:06:44:f9:bd:c8:15:0c:cc:a9: 5c:46:23:c9:9e:ef:62:a6:8b:06:59:a2:87:90:90: 65:bc:89:01:63:eb:91:c1:b4:01:0a:ed:79:ee:10: 42:93:4c:44:c5:65:c0:92:ac:69:e0:88:20:ed:0d: e6:a0:13:45:39:14:25:d4:56:4f:68:75:e2:c2:d3: 7a:40:74:16:c2:9d:ff:d7:96:3f:a9:5d:aa:75:9f: c6:93:eb:25:b8:62:be:3a:70:ad:20:34:5b:0c:f1: 35:6f:41:8c:b7:df:c8:47:89:23:d8:7f:94:d7:38: 48:d8:b8:eb:fe:b9:75:5a:4a:56:66:25:3d:ff:cc: 7c:1b:a2:88:45:4d:a1:a6:54:37:32:5d:c2:80:cf: de:4f:3c:ec:67:7a:6f:26:ff:c7:a4:c9:93:e3:4b: 9b:3b:64:c2:2d:8b:a0:bb:d1:53:6e:ee:76:04:75: b0:9d:db:28:74:14:84:a9:78:87:68:64:d3:df:9a: 99:a8:a0:35:9b:23:d6:1a:a8:52:bc:eb:34:72:4f: 35:19:6c:2c:8e:f0:e5:19:1b:a9:d1:81:9c:e7:84: 24:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B7:62:5D:D1:34:CE:9F:78:B0:BF:76:D1:9F:6D:92:8E:8F:5B:63 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/67diXdE0zp94sL920Z9tko6PW2M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.48.0/24 94.249.242.0/24 178.18.151.0/24 Signature Algorithm: sha256WithRSAEncryption c1:0d:08:75:77:f2:d7:41:c8:49:f0:c2:72:9b:b3:13:d6:06: 91:47:0e:5d:30:b9:1a:d7:b4:45:06:f3:83:8b:6d:ba:e2:9a: 4c:16:a3:f2:87:36:6f:0e:68:fb:db:27:ef:83:b1:20:fa:96: 1a:c8:ea:24:1b:11:0c:15:b4:91:bf:90:bb:6e:fb:ca:30:7b: 08:1e:f8:15:ec:16:5d:67:c1:6c:c7:34:9a:85:63:8a:d9:0a: 6d:7e:f4:ce:3b:e9:13:81:a9:e4:98:5c:7b:ec:10:46:ed:32: e8:69:cb:12:17:fd:58:20:70:ae:e7:b8:e4:82:53:ff:a9:89: e3:2b:5f:e4:22:0a:15:f0:45:b2:86:ae:b2:03:f1:e6:95:f4: 42:bf:82:bb:6d:6b:f0:cd:5f:6c:1a:1b:5d:70:74:e1:44:8b: 72:32:1f:c7:d6:f9:13:ab:21:82:49:65:78:5e:e0:2c:fe:fb: 2e:3a:ad:43:f6:ec:9a:65:ad:d0:f9:e8:b3:70:00:dc:47:36: c2:2d:79:15:ca:8e:ca:48:a9:48:14:30:fd:b2:b2:c3:ba:6e: 63:51:5c:f5:f5:86:44:5b:11:56:8b:41:2b:80:93:47:f5:9c: 39:5b:69:1f:95:62:d0:83:1c:04:ba:88:14:94:e2:e5:d1:21: 57:5c:2f:3f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8EuJo6bT5Nz1ialpaFBjGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmI3NjI1ZGQxMzRjZTlmNzhiMGJmNzZkMTlmNmQ5MjhlOGY1YjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxETLSzBAr6MOTeyaCDIS7E2TOvXU c1Xzc/ctqLUum1hDF+cGRPm9yBUMzKlcRiPJnu9iposGWaKHkJBlvIkBY+uRwbQB Cu157hBCk0xExWXAkqxp4Igg7Q3moBNFORQl1FZPaHXiwtN6QHQWwp3/15Y/qV2q dZ/Gk+sluGK+OnCtIDRbDPE1b0GMt9/IR4kj2H+U1zhI2Ljr/rl1WkpWZiU9/8x8 G6KIRU2hplQ3Ml3CgM/eTzzsZ3pvJv/HpMmT40ubO2TCLYugu9FTbu52BHWwndso dBSEqXiHaGTT35qZqKA1myPWGqhSvOs0ck81GWwsjvDlGRup0YGc54QkowIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOu3Yl3RNM6feLC/dtGfbZKOj1tjMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvNjdkaVhkRTB6cDk0c0w5MjBaOXRrbzZQVzJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATVowAwQA XvnyAwQAshKXMA0GCSqGSIb3DQEBCwUAA4IBAQDBDQh1d/LXQchJ8MJym7MT1gaR Rw5dMLka17RFBvODi2264ppMFqPyhzZvDmj72yfvg7Eg+pYayOokGxEMFbSRv5C7 bvvKMHsIHvgV7BZdZ8FsxzSahWOK2QptfvTOO+kTgankmFx77BBG7TLoacsSF/1Y IHCu57jkglP/qYnjK1/kIgoV8EWyhq6yA/HmlfRCv4K7bWvwzV9sGhtdcHThRIty Mh/H1vkTqyGCSWV4XuAs/vsuOq1D9uyaZa3Q+eizcADcRzbCLXkVyo7KSKlIFDD9 srLDum5jUVz19YZEWxFWi0ErgJNH9Zw5W2kflWLQgxwEuogUlOLl0SFXXC8/ -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:12 2026 by rpki-client