This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QrSocv8iEL8mFK1s5D7Bh6oCf_o.roa File: QrSocv8iEL8mFK1s5D7Bh6oCf_o.roa (raw, json) Hash identifier: 0EBu6dMRuPyf8i7LGXWEFRybsBI2j1t5eFZE4fsJjJY= Subject key identifier: 42:B4:A8:72:FF:22:10:BF:26:14:AD:6C:E4:3E:C1:87:AA:02:7F:FA Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019BA1B46E03517DF028E804B2A9E468D6D5 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QrSocv8iEL8mFK1s5D7Bh6oCf_o.roa Signing time: Fri 09 Jan 2026 07:41:55 +0000 ROA not before: Fri 09 Jan 2026 07:41:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26042 IP address blocks: 77.90.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:b4:6e:03:51:7d:f0:28:e8:04:b2:a9:e4:68:d6:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 9 07:41:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42b4a872ff2210bf2614ad6ce43ec187aa027ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:bf:dd:05:e9:bc:99:c9:22:51:a6:ba:ee:cb: 07:98:04:80:d4:51:21:5c:cb:3c:fb:41:95:8a:d0: b5:0b:c2:c8:ff:a7:63:7a:16:54:a0:bf:2d:51:a3: f0:dc:ed:59:dc:9c:a6:cf:30:12:96:46:9e:25:a7: 3f:07:bd:1c:90:0c:a8:d6:25:03:ae:2a:ef:e6:f0: d7:07:9d:fc:6f:d3:85:aa:d1:65:e9:5a:98:f6:df: 60:89:f0:29:f9:3e:aa:a5:15:d3:57:07:96:76:ec: 2f:ba:b0:80:86:85:f2:50:32:c7:3a:b6:25:ff:89: cc:48:97:a0:c7:22:03:a9:31:2c:83:35:cb:a0:26: ea:49:0f:22:69:7f:27:41:83:c5:a9:f4:12:2a:9b: bc:3a:32:f0:4b:60:f5:7b:a5:08:79:f8:18:ea:3a: dd:14:e6:54:a7:98:45:ab:c0:48:c9:90:98:1b:b2: 31:cc:8a:61:d5:c0:98:41:64:9f:80:e4:52:d3:55: db:72:df:49:96:0b:ed:98:4f:45:0f:33:03:6e:8c: 10:5b:1c:73:b0:a4:57:4a:d4:d9:14:dd:34:f6:c9: eb:9f:53:67:ee:05:fe:7a:d3:f5:5a:eb:ea:50:7e: fd:48:d1:7d:01:72:bc:c3:6d:2a:f5:8c:f2:a6:b1: b2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B4:A8:72:FF:22:10:BF:26:14:AD:6C:E4:3E:C1:87:AA:02:7F:FA X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QrSocv8iEL8mFK1s5D7Bh6oCf_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.21.0/24 Signature Algorithm: sha256WithRSAEncryption 51:5c:dd:b1:49:47:a0:04:6a:e8:65:61:77:5d:5c:79:0c:dd: 66:80:4c:12:86:96:54:fa:3d:29:34:18:ac:f7:19:63:f1:ca: ca:50:fd:91:30:56:5e:a8:ce:ba:c1:ef:50:e3:c2:1f:6c:94: b4:00:26:16:ee:49:6f:0e:7b:ef:d7:3b:79:39:25:d3:9b:e5: 6b:60:04:01:6d:20:aa:b3:67:26:ec:f2:4d:5c:e9:4d:f8:0e: c7:72:66:8e:fe:cf:c1:6e:69:76:31:c9:b5:0c:9f:45:fc:38: 7c:6b:a7:4a:bd:1a:7a:ad:0c:8a:5c:50:e9:ee:91:6e:52:20: b9:cd:b6:25:24:9e:a6:6d:7b:e0:73:e0:b7:4b:20:da:4d:f0: a4:07:4c:15:b5:8d:f9:fd:f5:74:e2:4a:a9:96:57:40:78:8c: c8:b8:ec:26:c1:c2:70:99:94:9b:18:4f:23:d5:a0:a6:dc:43: 19:5e:f2:e8:5f:b2:bd:3c:13:f3:f8:df:a3:4f:40:5b:ff:8b: 4c:7a:b4:84:1c:bb:4f:7b:79:18:b7:3d:98:86:d4:7a:36:a9: 6f:ab:08:89:fd:54:80:4e:3a:19:18:e3:a1:a0:6a:62:08:54: df:1e:48:88:0e:0b:bc:84:55:34:83:a6:2e:fe:eb:f2:13:8c: 86:29:d5:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuhtG4DUX3wKOgEsqnkaNbVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTA5MDc0MTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmI0YTg3MmZmMjIxMGJmMjYxNGFkNmNlNDNlYzE4N2FhMDI3ZmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr/dBem8mckiUaa67ssHmASA1FEh XMs8+0GVitC1C8LI/6djehZUoL8tUaPw3O1Z3JymzzASlkaeJac/B70ckAyo1iUD rirv5vDXB538b9OFqtFl6VqY9t9gifAp+T6qpRXTVweWduwvurCAhoXyUDLHOrYl /4nMSJegxyIDqTEsgzXLoCbqSQ8iaX8nQYPFqfQSKpu8OjLwS2D1e6UIefgY6jrd FOZUp5hFq8BIyZCYG7IxzIph1cCYQWSfgORS01Xbct9JlgvtmE9FDzMDbowQWxxz sKRXStTZFN009snrn1Nn7gX+etP1WuvqUH79SNF9AXK8w20q9YzyprGymQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEK0qHL/IhC/JhStbOQ+wYeqAn/6MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvUXJTb2N2OGlFTDhtRksxczVEN0JoNm9DZl9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVoVMA0G CSqGSIb3DQEBCwUAA4IBAQBRXN2xSUegBGroZWF3XVx5DN1mgEwShpZU+j0pNBis 9xlj8crKUP2RMFZeqM66we9Q48IfbJS0ACYW7klvDnvv1zt5OSXTm+VrYAQBbSCq s2cm7PJNXOlN+A7HcmaO/s/Bbml2Mcm1DJ9F/Dh8a6dKvRp6rQyKXFDp7pFuUiC5 zbYlJJ6mbXvgc+C3SyDaTfCkB0wVtY35/fV04kqplldAeIzIuOwmwcJwmZSbGE8j 1aCm3EMZXvLoX7K9PBPz+N+jT0Bb/4tMerSEHLtPe3kYtz2YhtR6NqlvqwiJ/VSA TjoZGOOhoGpiCFTfHkiIDgu8hFU0g6Yu/uvyE4yGKdWt -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:19 2026 by rpki-client