This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/YOScCZOEoyh83GESQuA-HKfz_1M.roa File: YOScCZOEoyh83GESQuA-HKfz_1M.roa (raw, json) Hash identifier: CteQCK4cP/Zc51NLcE5eT7lXfdoEywZpql4o4V6LWUk= Subject key identifier: 60:E4:9C:09:93:84:A3:28:7C:DC:61:12:42:E0:3E:1C:A7:F3:FF:53 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019A674D69CF0B8D514B0D3697AFC4C2C267 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/YOScCZOEoyh83GESQuA-HKfz_1M.roa Signing time: Sun 09 Nov 2025 06:28:37 +0000 ROA not before: Sun 09 Nov 2025 06:28:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 26042 IP address blocks: 77.90.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:67:4d:69:cf:0b:8d:51:4b:0d:36:97:af:c4:c2:c2:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 9 06:28:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=60e49c099384a3287cdc611242e03e1ca7f3ff53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c6:71:80:95:44:ee:4d:52:da:64:ea:70:e5: 49:27:73:3e:82:bb:3b:c7:e0:44:54:aa:c9:26:3d: 24:57:f4:b3:c8:8f:c6:70:70:be:6d:14:cf:90:96: 95:97:43:6e:79:8c:99:2e:9b:72:8b:3e:7a:bf:e1: 32:71:df:dc:62:91:41:d7:f3:be:d5:16:ef:1e:92: e8:77:0d:d9:3f:62:71:f2:da:db:7f:7a:6d:d2:24: 61:52:f4:0e:5a:07:58:02:d8:61:9a:b3:a0:c1:b9: 7a:25:48:32:85:10:98:8f:77:98:bb:f3:fa:a4:46: 50:25:b6:b8:8b:de:96:4f:f8:a2:09:2c:57:cb:ae: 0d:67:eb:6c:ba:0b:25:3f:3b:d9:57:0b:b8:9e:95: bc:d3:f2:02:77:5b:d4:85:34:5b:eb:9d:48:38:a4: 1e:2a:b0:8f:d3:b3:fb:2b:3d:80:21:41:8e:47:ee: 1f:99:57:6e:a3:0e:1e:c9:09:b6:e3:bf:fb:77:4f: e7:7f:8f:ae:de:4d:6d:5c:a5:45:e2:be:2d:0b:55: e0:8f:c6:8a:e0:55:10:15:f2:29:7f:f8:cc:18:5a: 2d:b9:5f:32:7c:45:69:96:e9:3c:14:3b:ff:a4:a5: 29:c0:1e:d5:7c:5f:c8:0b:82:d8:a0:b0:66:2e:90: 7c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E4:9C:09:93:84:A3:28:7C:DC:61:12:42:E0:3E:1C:A7:F3:FF:53 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/YOScCZOEoyh83GESQuA-HKfz_1M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.21.0/24 Signature Algorithm: sha256WithRSAEncryption 69:95:ea:23:5b:66:70:19:8a:25:56:10:7e:23:94:a2:86:78: 2e:de:90:4c:aa:e5:55:fb:df:51:e2:56:b2:25:03:68:d2:44: 42:19:ab:9c:5c:57:f6:72:4a:b9:8c:45:df:ea:97:6c:99:06: 41:9c:80:de:74:81:a8:1a:b6:fd:e4:07:c2:94:d3:a7:8c:97: 96:ff:0b:9a:fd:c5:63:7c:5b:77:09:5b:bc:ac:09:32:50:88: f3:4e:84:83:29:5e:a0:c6:5d:ad:4d:76:91:e7:b2:4e:36:9c: e1:c6:5c:7e:45:54:a9:a9:0a:69:30:19:68:f4:3e:f3:4d:c5: be:ce:2f:c5:d1:64:78:51:ea:62:ff:1d:cb:28:a9:de:fd:73: 0c:bf:6d:21:3e:26:40:da:fe:78:29:2c:4e:37:e1:b0:c3:d5: f8:51:d2:2a:28:75:71:c1:5b:01:d9:f4:12:d2:89:cd:f8:4b: 2a:0d:1a:bb:8b:64:6f:09:0f:12:a8:64:12:65:83:50:2e:42: 13:92:40:79:7f:80:50:5e:ff:24:38:ea:51:f6:58:03:5e:a8: 96:00:e6:f9:db:16:31:48:31:05:1f:0a:52:e1:fb:f1:3d:53: 04:f1:3d:0c:d0:65:b3:65:d3:da:f3:f1:18:45:f8:bb:60:07: 05:11:9e:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpnTWnPC41RSw02l6/EwsJnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTA5MDYyODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGU0OWMwOTkzODRhMzI4N2NkYzYxMTI0MmUwM2UxY2E3ZjNmZjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsZxgJVE7k1S2mTqcOVJJ3M+grs7 x+BEVKrJJj0kV/SzyI/GcHC+bRTPkJaVl0NueYyZLptyiz56v+Eycd/cYpFB1/O+ 1RbvHpLodw3ZP2Jx8trbf3pt0iRhUvQOWgdYAthhmrOgwbl6JUgyhRCYj3eYu/P6 pEZQJba4i96WT/iiCSxXy64NZ+tsugslPzvZVwu4npW80/ICd1vUhTRb651IOKQe KrCP07P7Kz2AIUGOR+4fmVduow4eyQm247/7d0/nf4+u3k1tXKVF4r4tC1Xgj8aK 4FUQFfIpf/jMGFotuV8yfEVpluk8FDv/pKUpwB7VfF/IC4LYoLBmLpB8AwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGDknAmThKMofNxhEkLgPhyn8/9TMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvWU9TY0NaT0VveWg4M0dFU1F1QS1IS2Z6XzFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVoVMA0G CSqGSIb3DQEBCwUAA4IBAQBpleojW2ZwGYolVhB+I5Sihngu3pBMquVV+99R4lay JQNo0kRCGaucXFf2ckq5jEXf6pdsmQZBnIDedIGoGrb95AfClNOnjJeW/wua/cVj fFt3CVu8rAkyUIjzToSDKV6gxl2tTXaR57JONpzhxlx+RVSpqQppMBlo9D7zTcW+ zi/F0WR4Uepi/x3LKKne/XMMv20hPiZA2v54KSxON+Gww9X4UdIqKHVxwVsB2fQS 0onN+EsqDRq7i2RvCQ8SqGQSZYNQLkITkkB5f4BQXv8kOOpR9lgDXqiWAOb52xYx SDEFHwpS4fvxPVME8T0M0GWzZdPa8/EYRfi7YAcFEZ7V -----END CERTIFICATE-----Generated at Fri Dec 5 17:04:58 2025 by rpki-client