This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8VT-cDwmUH56bY7SDvHMoztfKdw.roa
File: 8VT-cDwmUH56bY7SDvHMoztfKdw.roa (raw, json)
Hash identifier: 0G5ZvUQkIYwthDFu9IzPp5cbjQf+z6KCDCD4fXAuzm0=
Subject key identifier: F1:54:FE:70:3C:26:50:7E:7A:6D:8E:D2:0E:F1:CC:A3:3B:5F:29:DC
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019ADD80AC4DFB49EA39A59AF45D49D5A5BB
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8VT-cDwmUH56bY7SDvHMoztfKdw.roa
Signing time: Tue 02 Dec 2025 05:19:48 +0000
ROA not before: Tue 02 Dec 2025 05:19:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207695
IP address blocks: 77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:dd:80:ac:4d:fb:49:ea:39:a5:9a:f4:5d:49:d5:a5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 2 05:19:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f154fe703c26507e7a6d8ed20ef1cca33b5f29dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:de:b9:ce:16:f3:eb:8e:63:cf:f3:75:5f:
1d:03:10:b9:b3:29:05:6b:9f:6b:7d:ac:59:56:63:
26:ce:4a:36:d4:12:31:93:bd:78:94:62:41:9e:47:
0b:5d:99:54:97:f7:45:d8:df:a2:26:af:b2:9f:c2:
2c:b3:81:ae:1b:d2:f6:5a:a1:a8:dd:d8:a6:74:9f:
85:44:66:e8:16:a8:dc:8f:5f:62:bd:7f:5e:a4:30:
cb:80:64:54:41:c5:62:d6:a1:8e:82:f2:7d:01:93:
ed:19:63:87:05:88:cc:d2:55:19:48:2b:eb:e2:d4:
14:13:76:9a:91:ee:cd:42:9d:87:7b:7b:83:9a:54:
b4:b5:a7:5d:9c:5e:a0:1e:44:89:aa:19:5c:cb:9e:
4b:04:b7:be:95:ae:1c:17:4d:ae:5c:fa:69:03:80:
e5:50:8b:4f:c0:12:9a:6c:b0:ce:f9:40:4e:dd:57:
e2:cd:01:c5:30:b5:ff:5a:97:8b:47:34:43:81:7a:
38:61:b8:06:bb:4a:95:df:9e:ef:c3:c3:22:13:90:
f3:f3:bc:19:e1:77:0d:5f:ac:a4:af:82:5a:b8:ac:
d7:a4:8e:72:76:5f:32:69:9f:72:26:a3:e3:7e:e1:
bb:03:f7:76:34:d4:69:7e:2f:6f:dd:ad:f6:b1:bb:
5e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:54:FE:70:3C:26:50:7E:7A:6D:8E:D2:0E:F1:CC:A3:3B:5F:29:DC
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8VT-cDwmUH56bY7SDvHMoztfKdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.41.0/24
77.90.52.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:93:8d:79:33:a0:2d:0a:3b:9d:30:e0:ca:c4:6e:ff:7a:74:
c2:63:2b:a6:e7:6d:b9:86:7a:39:7c:ca:61:cb:36:cd:8a:78:
b7:d0:86:ba:fd:db:7c:0d:83:dc:a8:a9:cb:61:17:4e:b6:c4:
6b:7e:ee:2e:68:96:b8:4a:cf:e1:6d:16:40:b1:61:a0:71:31:
b1:5e:ab:1b:59:c8:f0:a7:71:ff:c2:07:ab:d0:18:94:6c:ea:
0d:56:df:3c:43:b9:ef:17:8e:8f:f8:8e:1c:f5:6d:83:ef:7c:
93:cd:eb:27:85:1f:51:f8:2e:39:a6:b4:69:03:4b:a2:70:fa:
cc:b3:d5:ce:58:5f:99:7b:c2:3e:56:ef:08:1e:7a:11:c0:5d:
23:43:38:a2:8c:22:e9:16:53:47:78:67:84:35:35:fe:fa:40:
cf:b6:52:c3:3c:83:0c:45:21:ac:36:bb:6e:af:e5:f9:c6:77:
4c:c5:bb:87:04:45:0a:bd:96:c7:d9:c7:b7:43:f5:50:a8:7c:
f5:7a:25:0c:5f:72:04:56:be:35:0e:41:7e:2c:6b:2a:c3:43:
90:ea:e1:d2:8b:7f:97:6f:78:0f:69:8f:5e:59:89:e3:46:a8:
10:c0:66:c7:16:71:1d:c1:c1:a8:bf:a4:58:80:55:16:ba:92:
6a:e8:9c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 17:03:52 2025 by rpki-client