This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XjV1BTTK5H0iFTN8Ikn8I71uO0U.roa File: XjV1BTTK5H0iFTN8Ikn8I71uO0U.roa (raw, json) Hash identifier: ntiZjKn9iyAfXTcNTpxJ1Wpo5TRmCSbYTaJqjhYzggw= Subject key identifier: 5E:35:75:05:34:CA:E4:7D:22:15:33:7C:22:49:FC:23:BD:6E:3B:45 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C1303D06CA064C1CC6DED52D364C610 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XjV1BTTK5H0iFTN8Ikn8I71uO0U.roa Signing time: Fri 02 Jan 2026 00:19:39 +0000 ROA not before: Fri 02 Jan 2026 00:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214243 IP address blocks: 77.90.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:03:d0:6c:a0:64:c1:cc:6d:ed:52:d3:64:c6:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e35750534cae47d2215337c2249fc23bd6e3b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8b:ef:2c:56:17:a1:2f:c7:95:e4:11:55:ec: 87:1f:0e:9e:23:97:a9:7a:cc:8d:28:c6:9b:ad:64: 1a:a1:8e:ae:c1:9d:fe:ef:7a:3e:1a:f2:ff:e8:48: 6e:d3:26:f1:05:92:93:03:bb:4a:d9:36:ca:2d:5a: 9e:3c:79:92:a9:b4:03:da:6d:ef:17:75:6e:ad:f4: 1f:73:d5:a5:7b:c5:e6:9d:7d:9b:fd:5a:e3:ae:aa: 73:f0:b7:de:29:28:af:48:35:51:a7:8a:5b:5a:ea: 01:5f:37:7f:88:77:0b:ab:00:d3:8c:07:70:d7:83: e6:b7:ce:01:50:67:83:fb:0b:92:34:71:dc:80:26: 69:bb:b9:2f:be:d9:14:2c:4f:6e:8f:64:3e:b6:60: f3:99:bf:f3:f6:d8:51:c9:1f:07:7c:70:0c:26:91: 1e:4a:b2:65:aa:9f:fd:40:d6:b8:64:6e:90:37:e7: 6a:8e:8f:cf:e3:8d:9b:67:e2:23:51:31:20:fb:5f: 0b:26:c5:a8:8e:1e:26:b6:0a:87:37:2f:0a:a4:df: df:c8:a4:f0:7d:fe:1b:62:ba:10:a3:27:c6:6b:42: 9b:a1:c3:eb:78:4f:5b:f9:fe:82:b8:64:d4:39:98: 28:d4:4a:ed:49:9e:23:2a:39:f6:20:33:06:14:e9: d9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:35:75:05:34:CA:E4:7D:22:15:33:7C:22:49:FC:23:BD:6E:3B:45 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XjV1BTTK5H0iFTN8Ikn8I71uO0U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.4.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:c1:b1:07:8e:8d:98:fa:91:5c:9c:24:19:42:7e:fa:5b:b1: 82:91:29:fc:30:34:f2:4c:6d:43:36:95:df:09:8e:10:8e:c5: 62:67:1e:fe:cc:c5:33:2b:8d:fe:1c:11:ba:33:5d:88:d0:6e: 66:30:1e:04:3a:cf:8b:dd:7b:9d:d3:d5:26:b8:81:a9:23:12: 64:a5:8f:11:bf:dd:d9:94:6c:7f:14:c9:cb:40:51:8b:6a:69: 9a:09:80:cd:cf:9a:98:55:ab:76:7c:59:d8:0f:30:4c:f6:ae: 9b:82:09:d9:2a:31:3c:00:f3:9d:e9:f5:6e:a0:00:68:55:1a: 3d:e4:72:fc:0f:e6:c0:37:1b:5a:0d:df:61:6c:ab:57:87:dd: 3e:66:9b:80:c3:f1:50:3d:ad:fa:cd:69:80:3c:a7:6d:25:f1: a4:41:26:78:4e:e5:f5:10:a3:aa:c7:55:39:b9:b7:ad:c5:ef: 3c:14:1b:8e:86:66:f5:25:43:2d:f3:dd:fe:24:76:c6:52:47: 25:46:f0:b3:40:7d:9b:f4:5e:cf:30:ef:57:69:0c:09:6c:19: 62:fc:44:6c:90:ea:df:01:29:4d:2a:a4:d1:8a:55:a6:ca:47: 8a:80:4e:92:93:3c:7f:85:aa:5e:ac:ce:97:0f:7f:c4:9a:71: 4c:1a:8b:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EwPQbKBkwcxt7VLTZMYQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTM1NzUwNTM0Y2FlNDdkMjIxNTMzN2MyMjQ5ZmMyM2JkNmUzYjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnovvLFYXoS/HleQRVeyHHw6eI5ep esyNKMabrWQaoY6uwZ3+73o+GvL/6Ehu0ybxBZKTA7tK2TbKLVqePHmSqbQD2m3v F3VurfQfc9Wle8XmnX2b/Vrjrqpz8LfeKSivSDVRp4pbWuoBXzd/iHcLqwDTjAdw 14Pmt84BUGeD+wuSNHHcgCZpu7kvvtkULE9uj2Q+tmDzmb/z9thRyR8HfHAMJpEe SrJlqp/9QNa4ZG6QN+dqjo/P442bZ+IjUTEg+18LJsWojh4mtgqHNy8KpN/fyKTw ff4bYroQoyfGa0KbocPreE9b+f6CuGTUOZgo1ErtSZ4jKjn2IDMGFOnZgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF41dQU0yuR9IhUzfCJJ/CO9bjtFMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvWGpWMUJUVEs1SDBpRlROOElrbjhJNzF1TzBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVoEMA0G CSqGSIb3DQEBCwUAA4IBAQBtwbEHjo2Y+pFcnCQZQn76W7GCkSn8MDTyTG1DNpXf CY4QjsViZx7+zMUzK43+HBG6M12I0G5mMB4EOs+L3Xud09UmuIGpIxJkpY8Rv93Z lGx/FMnLQFGLammaCYDNz5qYVat2fFnYDzBM9q6bggnZKjE8APOd6fVuoABoVRo9 5HL8D+bANxtaDd9hbKtXh90+ZpuAw/FQPa36zWmAPKdtJfGkQSZ4TuX1EKOqx1U5 ubetxe88FBuOhmb1JUMt893+JHbGUkclRvCzQH2b9F7PMO9XaQwJbBli/ERskOrf ASlNKqTRilWmykeKgE6Skzx/haperM6XD3/EmnFMGos8 -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:16 2026 by rpki-client