This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9uh35hvl_J_qKbnZ0_xJMGiOslw.roa File: 9uh35hvl_J_qKbnZ0_xJMGiOslw.roa (raw, json) Hash identifier: OdThwU/nFKeyzY3KFWvA+ldlxgGN+7DS9AcQbNgXxbM= Subject key identifier: F6:E8:77:E6:1B:E5:FC:9F:EA:29:B9:D9:D3:FC:49:30:68:8E:B2:5C Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12DCA03F0C7EF6C6610D2AC5B0A30E Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9uh35hvl_J_qKbnZ0_xJMGiOslw.roa Signing time: Fri 02 Jan 2026 00:19:29 +0000 ROA not before: Fri 02 Jan 2026 00:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60345 IP address blocks: 77.90.55.0/24 maxlen: 24 89.144.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:dc:a0:3f:0c:7e:f6:c6:61:0d:2a:c5:b0:a3:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6e877e61be5fc9fea29b9d9d3fc4930688eb25c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:13:fb:61:86:2d:c1:ca:18:8c:1c:7d:e4:05: 63:cf:3b:2d:0e:f7:37:8d:8c:5a:29:5b:4f:13:7d: 19:52:45:84:ee:60:09:0d:ba:4c:1e:1a:64:dd:66: b3:d2:08:65:72:d5:25:d1:33:01:d9:1e:18:ee:ce: b9:03:14:60:bb:cf:1c:da:d6:aa:2c:f6:22:4a:81: 31:f6:03:1e:6b:5b:a2:03:31:a6:1b:94:b7:c8:df: 5f:b1:e5:85:47:8c:82:a1:86:2c:0b:c6:f3:4a:31: 84:28:c1:bc:a1:fd:f7:f8:76:80:67:df:4e:62:0c: 61:71:37:e3:c4:a3:9c:74:d2:40:79:0b:35:6b:c1: fd:3b:8f:1f:6c:23:83:11:7c:78:5f:90:c5:9f:89: e8:dc:f8:34:6a:88:cf:f0:f7:b6:84:34:ac:36:1b: bf:f2:2b:6f:91:f8:52:0a:ce:eb:c4:0d:a4:17:d6: 37:bf:80:38:10:29:d7:97:a8:e6:01:32:18:72:f0: 1c:d0:b8:9a:06:1f:69:95:d3:44:a6:08:b8:fa:e5: 54:66:97:61:51:43:ee:ad:c0:4d:c1:b3:cf:3b:a7: 97:62:85:0b:41:72:3c:af:9d:9e:52:b2:36:00:59: 0f:41:a3:9e:f7:f3:3c:f2:5d:a5:8a:21:d1:76:c7: 91:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E8:77:E6:1B:E5:FC:9F:EA:29:B9:D9:D3:FC:49:30:68:8E:B2:5C X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9uh35hvl_J_qKbnZ0_xJMGiOslw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.55.0/24 89.144.41.0/24 Signature Algorithm: sha256WithRSAEncryption b8:40:15:ea:7c:33:49:51:98:c2:df:80:69:fc:a6:74:78:3a: ba:6e:54:0a:23:95:10:4b:39:16:c7:5d:ef:6c:32:3b:79:da: 65:af:e3:ca:6e:de:06:d1:77:92:01:e1:63:28:c0:9c:9b:a1: f4:d3:85:22:fe:8c:18:8f:7e:c6:dc:e9:df:33:b8:83:d7:a1: 5b:b8:b5:c8:bc:89:fb:4a:3f:48:b7:d0:5b:bb:a9:8e:5a:16: 32:2e:05:b9:57:0e:46:29:e0:7c:05:fd:60:e1:64:be:f1:0a: f8:ef:80:ef:f3:59:5f:00:cf:11:46:b4:db:cb:66:96:35:7c: f1:78:f0:e2:30:5b:1a:c9:a3:9c:2c:08:a6:f9:48:b3:8c:24: 6e:17:fe:fd:6d:59:27:e3:5c:f8:a8:75:f3:f4:31:56:f0:10: 05:b9:cc:68:69:aa:aa:4e:23:57:65:15:2d:b6:2b:43:ca:8b: 93:2a:7b:d5:59:92:eb:df:97:52:3d:a6:22:1b:28:e9:eb:e9: e3:e7:20:9c:7d:cb:3b:38:c6:5b:27:80:af:ed:e2:2f:9b:3a: 46:cc:f1:a3:10:21:37:36:6b:2b:9b:36:a3:62:2d:b5:42:15: 82:8e:67:2f:ba:93:d3:ba:90:63:27:71:15:3f:c3:a8:a2:4f: 49:74:e9:55 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EtygPwx+9sZhDSrFsKMOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmU4NzdlNjFiZTVmYzlmZWEyOWI5ZDlkM2ZjNDkzMDY4OGViMjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBP7YYYtwcoYjBx95AVjzzstDvc3 jYxaKVtPE30ZUkWE7mAJDbpMHhpk3Waz0ghlctUl0TMB2R4Y7s65AxRgu88c2taq LPYiSoEx9gMea1uiAzGmG5S3yN9fseWFR4yCoYYsC8bzSjGEKMG8of33+HaAZ99O YgxhcTfjxKOcdNJAeQs1a8H9O48fbCODEXx4X5DFn4no3Pg0aojP8Pe2hDSsNhu/ 8itvkfhSCs7rxA2kF9Y3v4A4ECnXl6jmATIYcvAc0LiaBh9pldNEpgi4+uVUZpdh UUPurcBNwbPPO6eXYoULQXI8r52eUrI2AFkPQaOe9/M88l2liiHRdseRvwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPbod+Yb5fyf6im52dP8STBojrJcMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvOXVoMzVodmxfSl9xS2JuWjBfeEpNR2lPc2x3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVo3AwQA WZApMA0GCSqGSIb3DQEBCwUAA4IBAQC4QBXqfDNJUZjC34Bp/KZ0eDq6blQKI5UQ SzkWx13vbDI7edplr+PKbt4G0XeSAeFjKMCcm6H004Ui/owYj37G3OnfM7iD16Fb uLXIvIn7Sj9It9Bbu6mOWhYyLgW5Vw5GKeB8Bf1g4WS+8Qr474Dv81lfAM8RRrTb y2aWNXzxePDiMFsayaOcLAim+UizjCRuF/79bVkn41z4qHXz9DFW8BAFucxoaaqq TiNXZRUttitDyouTKnvVWZLr35dSPaYiGyjp6+nj5yCcfcs7OMZbJ4Cv7eIvmzpG zPGjECE3NmsrmzajYi21QhWCjmcvupPTupBjJ3EVP8Oook9JdOlV -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:54 2026 by rpki-client