This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Tdr4NHuykuDUx0Jt87j3GKPUyXg.roa File: Tdr4NHuykuDUx0Jt87j3GKPUyXg.roa (raw, json) Hash identifier: JIaA1FWlPeDsB7Zi4kojy7gzXf1EIFuiipnJlT5+/bc= Subject key identifier: 4D:DA:F8:34:7B:B2:92:E0:D4:C7:42:6D:F3:B8:F7:18:A3:D4:C9:78 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12EC046170CE3A584D3173D804EEE0 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Tdr4NHuykuDUx0Jt87j3GKPUyXg.roa Signing time: Fri 02 Jan 2026 00:19:33 +0000 ROA not before: Fri 02 Jan 2026 00:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204223 IP address blocks: 77.90.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ec:04:61:70:ce:3a:58:4d:31:73:d8:04:ee:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ddaf8347bb292e0d4c7426df3b8f718a3d4c978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:10:40:79:2b:a9:c9:ee:7a:9f:4d:8a:13:18: 30:2b:db:31:11:9a:b1:64:04:f8:03:27:02:27:04: f0:21:c7:df:de:a7:4d:c5:e1:57:75:85:b2:98:6d: b6:3c:4b:69:f0:ea:7e:85:8a:e4:4a:f9:36:00:b6: 9d:41:37:28:be:51:20:5b:05:cc:28:aa:c2:9d:e5: 25:c2:8e:8e:2f:55:0e:3e:41:bd:6c:48:77:47:b1: 72:3d:3d:f5:11:c8:a4:6f:f8:16:3c:b7:0f:da:e7: d8:80:eb:50:70:a0:d7:e3:42:8a:e1:b1:e1:72:ee: 41:5b:40:f2:14:3e:c3:19:f3:c5:17:c1:66:46:cb: 1d:30:eb:a7:a1:cd:b7:ce:49:00:01:24:6b:84:37: c6:cb:b4:2e:b5:3f:3c:97:98:a3:76:5a:af:5d:3f: 65:0b:9a:ab:39:8c:01:6b:18:bb:6f:d0:a4:c2:90: d0:88:75:51:1b:05:1d:77:e2:51:c6:22:5b:e8:a5: dc:5e:99:38:36:d6:66:87:ec:7b:54:e3:98:29:ff: ee:66:0a:2b:b3:f3:b5:f3:17:d1:97:97:f1:82:23: fe:96:28:44:ee:3e:14:12:e7:80:9a:d6:33:5d:6b: d3:c6:be:df:7b:2c:0a:02:94:e7:2c:04:86:79:31: 0c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:DA:F8:34:7B:B2:92:E0:D4:C7:42:6D:F3:B8:F7:18:A3:D4:C9:78 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Tdr4NHuykuDUx0Jt87j3GKPUyXg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.26.0/24 Signature Algorithm: sha256WithRSAEncryption a6:69:fc:11:b3:13:c3:dc:00:26:a0:b5:25:80:fa:28:71:0a: 8f:84:e7:ce:62:3d:28:76:42:3a:40:d3:12:f8:fd:7f:a1:8a: a1:77:93:e3:45:a2:c1:e3:2d:52:f4:93:ad:f3:a1:10:58:f2: 52:15:84:f7:98:25:60:5e:6b:26:63:26:6f:8d:f9:6c:89:c0: ab:72:17:8f:51:f2:19:95:5e:87:42:c5:c3:f7:61:bd:e0:ed: 5e:57:7e:d1:ae:d1:26:db:59:21:3d:57:0a:07:cb:2b:c1:10: 8d:09:e9:47:e7:b6:fb:84:1a:7a:14:46:5d:03:35:25:0e:73: 4e:7d:bf:f6:8d:0c:42:4b:ec:8d:e5:ff:a7:97:e2:d4:86:59: 3e:0f:8b:e1:a7:fb:6b:bf:66:21:c2:61:0c:25:52:5b:f0:f4: e7:d5:b7:b4:f5:da:33:ec:51:2b:69:11:52:98:3b:a6:98:67: 79:5e:4b:c3:1f:8b:19:0f:66:43:7b:bc:bd:9d:5a:d9:7b:71: d8:73:24:12:39:a4:5a:a7:2a:68:a7:6a:9c:bd:5c:e7:fc:ba: b8:71:a8:0e:4c:8d:75:81:d3:fe:68:d3:a1:a3:e6:1c:87:8a: 00:a9:93:a5:56:e5:f6:ee:d9:74:64:a2:0d:39:bb:97:be:e5: ee:99:0b:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EuwEYXDOOlhNMXPYBO7gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGRhZjgzNDdiYjI5MmUwZDRjNzQyNmRmM2I4ZjcxOGEzZDRjOTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBBAeSupye56n02KExgwK9sxEZqx ZAT4AycCJwTwIcff3qdNxeFXdYWymG22PEtp8Op+hYrkSvk2ALadQTcovlEgWwXM KKrCneUlwo6OL1UOPkG9bEh3R7FyPT31Ecikb/gWPLcP2ufYgOtQcKDX40KK4bHh cu5BW0DyFD7DGfPFF8FmRssdMOunoc23zkkAASRrhDfGy7QutT88l5ijdlqvXT9l C5qrOYwBaxi7b9CkwpDQiHVRGwUdd+JRxiJb6KXcXpk4NtZmh+x7VOOYKf/uZgor s/O18xfRl5fxgiP+lihE7j4UEueAmtYzXWvTxr7feywKApTnLASGeTEMbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE3a+DR7spLg1MdCbfO49xij1Ml4MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvVGRyNE5IdXlrdURVeDBKdDg3ajNHS1BVeVhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVoaMA0G CSqGSIb3DQEBCwUAA4IBAQCmafwRsxPD3AAmoLUlgPoocQqPhOfOYj0odkI6QNMS +P1/oYqhd5PjRaLB4y1S9JOt86EQWPJSFYT3mCVgXmsmYyZvjflsicCrchePUfIZ lV6HQsXD92G94O1eV37RrtEm21khPVcKB8srwRCNCelH57b7hBp6FEZdAzUlDnNO fb/2jQxCS+yN5f+nl+LUhlk+D4vhp/trv2YhwmEMJVJb8PTn1be09doz7FEraRFS mDummGd5XkvDH4sZD2ZDe7y9nVrZe3HYcyQSOaRapypop2qcvVzn/Lq4cagOTI11 gdP+aNOho+Ych4oAqZOlVuX27tl0ZKINObuXvuXumQu8 -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:45 2026 by rpki-client