This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/U7gfmQdyK7rrBMOaGqaO2B4Ue1U.roa File: U7gfmQdyK7rrBMOaGqaO2B4Ue1U.roa (raw, json) Hash identifier: Y0nJxnMlAmpyk9nVhUAlb8+mx35Q8vUORd+XAdIrOxM= Subject key identifier: 53:B8:1F:99:07:72:2B:BA:EB:04:C3:9A:1A:A6:8E:D8:1E:14:7B:55 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12E6527EE3C646B340F563E331A25E Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/U7gfmQdyK7rrBMOaGqaO2B4Ue1U.roa Signing time: Fri 02 Jan 2026 00:19:31 +0000 ROA not before: Fri 02 Jan 2026 00:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200461 IP address blocks: 77.90.44.0/24 maxlen: 24 178.18.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:e6:52:7e:e3:c6:46:b3:40:f5:63:e3:31:a2:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53b81f9907722bbaeb04c39a1aa68ed81e147b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e7:7b:a2:b5:c5:0a:fc:78:70:fa:a3:2c:41: a6:9f:7c:74:21:7e:c0:4e:6c:a4:65:3c:ef:c6:c3: b3:0b:5c:fa:a7:31:3d:7a:f3:84:a3:63:28:b2:f3: b7:d6:7f:c5:1d:7b:cf:61:d6:de:f6:87:d0:77:6d: 90:aa:5a:de:e8:d5:d3:6c:83:d5:57:37:49:63:cf: 9d:5d:db:e1:f7:dc:5c:db:ca:00:75:25:ef:93:a0: 4d:e3:36:39:21:43:da:f7:2d:04:01:92:86:7c:4e: d0:0a:ae:64:05:f4:36:82:6b:7f:b5:57:e5:73:e2: 0e:ce:d9:8d:3f:4c:ab:b9:af:a6:e6:7c:75:80:53: 67:ea:12:e3:52:bf:55:b3:f1:91:2a:f0:84:c6:fb: a9:e5:7a:b9:1f:31:db:6d:29:17:ce:bb:c1:70:f6: 87:f6:ae:37:7d:62:65:35:df:37:27:1c:3a:93:ed: b9:10:ad:0f:c4:db:9c:fd:2d:87:9a:8e:3a:ed:f5: 35:c3:e8:d0:03:f0:4a:ae:a3:da:d3:36:d4:33:ad: d5:72:80:21:8f:f4:9f:f2:ee:79:d2:5a:c6:81:e1: 1f:08:40:35:32:db:4c:af:50:71:94:c2:00:a4:bc: 1f:e9:ee:8e:3a:f7:9b:2d:12:d5:95:a9:ed:14:61: 2c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B8:1F:99:07:72:2B:BA:EB:04:C3:9A:1A:A6:8E:D8:1E:14:7B:55 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/U7gfmQdyK7rrBMOaGqaO2B4Ue1U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.44.0/24 178.18.148.0/24 Signature Algorithm: sha256WithRSAEncryption 18:7f:fb:f5:7c:e1:8d:69:b2:8b:52:1a:10:f4:a2:a2:46:72: be:c8:eb:01:db:b8:3b:dc:f8:e6:00:f8:16:c2:74:96:9a:89: 0c:49:be:52:99:98:78:13:b1:51:eb:19:57:de:dc:5a:40:d0: 35:25:64:40:73:9f:0c:d8:09:5e:4d:2c:cb:3c:83:e7:fa:54: 11:af:73:05:d7:33:c8:25:41:ca:9b:60:f3:d0:98:42:ca:71: fb:5f:8d:59:90:e1:14:54:f8:ba:1f:e5:d6:28:e2:90:66:dc: 51:10:62:13:be:f3:16:c1:e5:9f:30:b8:8c:d8:51:41:04:bc: 79:ea:ff:2c:b9:18:4b:39:8b:ca:63:77:2d:ce:ed:f9:50:03: 6a:cb:c0:8a:e3:da:f3:9a:52:dd:72:1f:21:c6:c4:af:d0:83: d6:32:58:19:fd:20:5d:ce:64:db:ca:bd:3d:9c:0b:c3:34:e4: 10:92:b9:d0:4c:ed:0f:93:f0:48:71:c7:e2:56:4e:5f:f7:23: ad:16:b8:46:ab:70:81:28:94:33:4f:e7:13:ad:6e:ef:cf:87: 43:24:75:96:8b:2a:ea:ad:bf:e9:ec:00:2b:19:29:fe:44:89: 85:fc:f4:b3:b1:a5:e3:9e:2e:71:7c:4d:71:45:d0:bd:0b:dd: 7d:5c:01:2e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EuZSfuPGRrNA9WPjMaJeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2I4MWY5OTA3NzIyYmJhZWIwNGMzOWExYWE2OGVkODFlMTQ3YjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ed7orXFCvx4cPqjLEGmn3x0IX7A TmykZTzvxsOzC1z6pzE9evOEo2MosvO31n/FHXvPYdbe9ofQd22Qqlre6NXTbIPV VzdJY8+dXdvh99xc28oAdSXvk6BN4zY5IUPa9y0EAZKGfE7QCq5kBfQ2gmt/tVfl c+IOztmNP0yrua+m5nx1gFNn6hLjUr9Vs/GRKvCExvup5Xq5HzHbbSkXzrvBcPaH 9q43fWJlNd83Jxw6k+25EK0PxNuc/S2Hmo467fU1w+jQA/BKrqPa0zbUM63VcoAh j/Sf8u550lrGgeEfCEA1MttMr1BxlMIApLwf6e6OOvebLRLVlantFGEskwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFO4H5kHciu66wTDmhqmjtgeFHtVMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvVTdnZm1RZHlLN3JyQk1PYUdxYU8yQjRVZTFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVosAwQA shKUMA0GCSqGSIb3DQEBCwUAA4IBAQAYf/v1fOGNabKLUhoQ9KKiRnK+yOsB27g7 3PjmAPgWwnSWmokMSb5SmZh4E7FR6xlX3txaQNA1JWRAc58M2AleTSzLPIPn+lQR r3MF1zPIJUHKm2Dz0JhCynH7X41ZkOEUVPi6H+XWKOKQZtxREGITvvMWweWfMLiM 2FFBBLx56v8suRhLOYvKY3ctzu35UANqy8CK49rzmlLdch8hxsSv0IPWMlgZ/SBd zmTbyr09nAvDNOQQkrnQTO0Pk/BIccfiVk5f9yOtFrhGq3CBKJQzT+cTrW7vz4dD JHWWiyrqrb/p7AArGSn+RImF/PSzsaXjni5xfE1xRdC9C919XAEu -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:32 2026 by rpki-client