This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QBeJzfuQJS884a98KUDH9KW8vqY.roa File: QBeJzfuQJS884a98KUDH9KW8vqY.roa (raw, json) Hash identifier: WnlYfitjXbCfJ1eoKeVz+J0Eoz9HtlB2/YjqscrfiGg= Subject key identifier: 40:17:89:CD:FB:90:25:2F:3C:E1:AF:7C:29:40:C7:F4:A5:BC:BE:A6 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C1302FB35BA3A3A5BB27DFC5EF5CC24 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QBeJzfuQJS884a98KUDH9KW8vqY.roa Signing time: Fri 02 Jan 2026 00:19:39 +0000 ROA not before: Fri 02 Jan 2026 00:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214194 IP address blocks: 77.90.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:02:fb:35:ba:3a:3a:5b:b2:7d:fc:5e:f5:cc:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=401789cdfb90252f3ce1af7c2940c7f4a5bcbea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:32:1c:cc:a0:90:80:5d:dd:f6:2f:e1:ff:4b: 2b:cf:12:cc:91:11:c3:d0:ad:ee:3f:76:ea:c4:29: 7b:64:c3:08:98:99:4c:e5:e1:cb:47:68:ed:21:c7: 60:63:db:9b:e3:f4:40:7c:37:d2:b0:f1:f0:f2:e8: d3:e3:f0:f4:19:c9:c4:61:83:97:4d:2f:63:34:3e: 01:13:b9:a0:c0:a5:3f:36:d1:74:83:8a:15:2c:08: 9d:1d:25:c3:19:1f:10:0a:d5:3d:f7:98:e1:e7:44: 13:01:99:03:ca:4a:a0:67:f1:aa:39:f0:1e:f0:ef: 42:e5:c7:7b:c5:6a:60:b3:f6:35:b0:25:c3:1f:9c: 36:61:7f:09:db:05:71:3d:50:6f:65:04:2e:13:c8: 2a:21:7c:12:4a:7e:67:ce:26:c1:3c:f1:65:6a:2e: 9a:5a:f7:d2:24:0e:e6:34:eb:7b:fe:e3:8e:d6:a5: 0c:47:2b:cd:dd:a3:0e:17:d5:54:a1:88:c5:a7:96: f3:da:c4:b8:b5:db:70:9d:be:cb:17:c9:c4:5a:b9: a0:d2:34:21:54:ef:1a:db:eb:9a:6d:82:7e:9a:c4: bf:4b:21:65:97:23:1e:7d:35:7c:21:0d:9e:ab:7d: 23:92:41:85:03:ab:4f:ec:02:1c:1b:74:b6:9c:07: c7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:17:89:CD:FB:90:25:2F:3C:E1:AF:7C:29:40:C7:F4:A5:BC:BE:A6 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QBeJzfuQJS884a98KUDH9KW8vqY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.36.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:fb:e7:7a:45:8c:99:a8:54:8c:c0:84:24:ba:08:77:b6:20: 68:96:c4:9e:dc:f1:ac:99:fd:1d:d6:fe:e6:58:9b:02:01:2b: db:9a:a4:1c:a1:cc:05:ee:a2:1a:9c:f0:59:dd:93:ab:12:67: f7:5e:13:d5:c4:93:69:88:f3:fe:94:ee:ee:69:28:3b:79:16: 0a:01:d3:10:58:c3:c8:61:fa:6f:37:68:f6:4a:fd:41:17:d3: 5b:16:1c:f9:65:09:85:9c:f7:b0:41:c2:c6:31:8e:f3:ed:30: 29:0a:b9:67:ff:67:c8:f6:80:fc:fb:0a:77:f6:64:6d:4a:db: 2a:83:ed:ac:66:7a:5e:ff:e0:d5:22:22:ec:cc:60:4a:a9:ea: fc:01:ac:42:b4:1a:63:42:c0:cd:60:80:d0:2f:38:94:bf:55: b1:d8:a6:52:0a:ac:b3:a4:6e:33:b0:46:60:43:0d:64:61:48: ab:65:ec:ae:02:42:66:a0:a1:18:38:91:c1:ed:6d:99:85:a2: 6c:86:09:21:f2:00:95:19:a2:8d:e9:a8:8a:f6:8b:50:61:51: 62:f1:7f:b6:55:ba:2a:c0:7f:7f:21:c1:03:04:25:18:79:29: b3:c3:88:d8:bb:c9:2a:c7:a2:ca:a1:5d:16:d8:88:36:cf:f3: 4e:ab:51:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EwL7Nbo6Oluyffxe9cwkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDE3ODljZGZiOTAyNTJmM2NlMWFmN2MyOTQwYzdmNGE1YmNiZWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojIczKCQgF3d9i/h/0srzxLMkRHD 0K3uP3bqxCl7ZMMImJlM5eHLR2jtIcdgY9ub4/RAfDfSsPHw8ujT4/D0GcnEYYOX TS9jND4BE7mgwKU/NtF0g4oVLAidHSXDGR8QCtU995jh50QTAZkDykqgZ/GqOfAe 8O9C5cd7xWpgs/Y1sCXDH5w2YX8J2wVxPVBvZQQuE8gqIXwSSn5nzibBPPFlai6a WvfSJA7mNOt7/uOO1qUMRyvN3aMOF9VUoYjFp5bz2sS4tdtwnb7LF8nEWrmg0jQh VO8a2+uabYJ+msS/SyFllyMefTV8IQ2eq30jkkGFA6tP7AIcG3S2nAfHgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEAXic37kCUvPOGvfClAx/SlvL6mMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvUUJlSnpmdVFKUzg4NGE5OEtVREg5S1c4dnFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVokMA0G CSqGSIb3DQEBCwUAA4IBAQCN++d6RYyZqFSMwIQkugh3tiBolsSe3PGsmf0d1v7m WJsCASvbmqQcocwF7qIanPBZ3ZOrEmf3XhPVxJNpiPP+lO7uaSg7eRYKAdMQWMPI YfpvN2j2Sv1BF9NbFhz5ZQmFnPewQcLGMY7z7TApCrln/2fI9oD8+wp39mRtStsq g+2sZnpe/+DVIiLszGBKqer8AaxCtBpjQsDNYIDQLziUv1Wx2KZSCqyzpG4zsEZg Qw1kYUirZeyuAkJmoKEYOJHB7W2ZhaJshgkh8gCVGaKN6aiK9otQYVFi8X+2Vboq wH9/IcEDBCUYeSmzw4jYu8kqx6LKoV0W2Ig2z/NOq1EJ -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:38 2026 by rpki-client