This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fXiuuNMDIYiddXyHpwvfdkzttGE.roa File: fXiuuNMDIYiddXyHpwvfdkzttGE.roa (raw, json) Hash identifier: E9Mtn/QMGUqSL7IolUSureUMojj+UDkG9iB0xqVAjkg= Subject key identifier: 7D:78:AE:B8:D3:03:21:88:9D:75:7C:87:A7:0B:DF:76:4C:ED:B4:61 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12CBE989BC2C33B4FD4878799CF54B Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fXiuuNMDIYiddXyHpwvfdkzttGE.roa Signing time: Fri 02 Jan 2026 00:19:25 +0000 ROA not before: Fri 02 Jan 2026 00:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23506 IP address blocks: 77.90.25.0/24 maxlen: 24 94.249.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:cb:e9:89:bc:2c:33:b4:fd:48:78:79:9c:f5:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d78aeb8d30321889d757c87a70bdf764cedb461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:61:37:a7:38:42:28:48:13:96:2d:e2:16:f8: 73:0a:2a:36:c4:34:5c:a1:60:29:66:7f:e4:5f:cc: 69:25:14:38:cb:28:e9:cd:59:a0:fa:3e:02:84:fc: 9c:80:2a:82:8c:72:bd:28:91:83:f0:78:15:76:98: e6:f2:e8:82:b3:0f:96:e0:cc:fa:f9:07:07:ff:4a: e3:3c:77:81:8f:7a:3c:15:d3:0d:eb:27:e8:51:94: 12:cc:41:d2:eb:13:e6:74:1f:06:ba:28:19:1c:2c: 0c:7e:41:89:e6:67:52:af:6e:c2:2c:e6:1f:c9:e5: 0d:37:13:8f:89:5b:de:da:e3:25:af:43:77:6f:0b: 5c:73:3d:b6:a8:00:2c:92:e9:62:a2:b9:17:ed:88: 67:df:e6:c5:85:26:99:e6:15:e2:16:d6:ba:90:e0: 38:60:d9:fb:23:5b:df:ff:60:36:2c:56:c4:29:c7: 0f:0b:11:bb:fe:7e:c9:8a:8d:e6:c7:35:06:8b:de: 12:1f:08:a1:a3:4e:64:a6:c0:7a:79:1b:11:90:fd: 9a:43:bd:b0:e2:63:75:d0:a9:f5:6d:7a:d5:77:9b: 07:57:6b:67:ef:88:e1:c4:13:9d:87:1f:0f:28:8c: d9:f2:6c:08:f9:63:a5:75:25:d7:d3:ab:44:e0:2e: 15:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:78:AE:B8:D3:03:21:88:9D:75:7C:87:A7:0B:DF:76:4C:ED:B4:61 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fXiuuNMDIYiddXyHpwvfdkzttGE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.25.0/24 94.249.138.0/24 Signature Algorithm: sha256WithRSAEncryption c5:cc:b0:9c:0a:75:fe:50:d9:1f:9e:12:58:c7:1f:1d:e3:44: 67:41:0b:28:38:d7:c4:96:e7:a3:9e:f6:d3:70:0e:bb:6d:14: 43:99:5c:2e:72:ba:82:b4:41:f9:e6:4c:3e:b7:78:83:48:a6: 62:76:8c:e6:0e:85:2a:0e:55:82:47:41:2a:83:ff:d9:43:96: e9:23:8f:1c:9b:c8:f1:a9:c3:91:a9:2f:ed:76:19:18:71:a0: 27:a9:06:64:9a:d9:e3:62:42:38:c0:ae:bf:25:b5:85:a1:c3: b8:8b:73:c4:44:0b:f0:0c:45:e6:84:51:8e:3d:6d:f7:60:fd: eb:8d:be:d6:ad:c4:ac:cf:53:a1:47:79:10:9c:30:b7:de:03: 4d:af:be:c5:f7:28:f6:09:05:93:e5:f3:90:78:96:73:6c:d3: 72:65:87:34:a2:4d:97:b8:8b:75:c4:ff:be:bd:63:5b:42:e9: 23:93:0d:b0:da:95:38:ae:64:1c:ad:b8:4b:b4:91:bb:2d:30: 3e:4d:05:24:40:dd:56:da:18:37:19:0a:f3:28:a0:d2:43:fc: 8a:c0:44:0e:4f:2b:d8:1d:52:65:4d:bd:4f:8f:fa:4f:ad:ff: bc:31:34:4a:9f:d9:25:c4:93:2c:e9:a1:36:27:a0:2d:60:b6: 12:59:ba:df -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EsvpibwsM7T9SHh5nPVLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDc4YWViOGQzMDMyMTg4OWQ3NTdjODdhNzBiZGY3NjRjZWRiNDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GE3pzhCKEgTli3iFvhzCio2xDRc oWApZn/kX8xpJRQ4yyjpzVmg+j4ChPycgCqCjHK9KJGD8HgVdpjm8uiCsw+W4Mz6 +QcH/0rjPHeBj3o8FdMN6yfoUZQSzEHS6xPmdB8GuigZHCwMfkGJ5mdSr27CLOYf yeUNNxOPiVve2uMlr0N3bwtccz22qAAskuliorkX7Yhn3+bFhSaZ5hXiFta6kOA4 YNn7I1vf/2A2LFbEKccPCxG7/n7Jio3mxzUGi94SHwiho05kpsB6eRsRkP2aQ72w 4mN10Kn1bXrVd5sHV2tn74jhxBOdhx8PKIzZ8mwI+WOldSXX06tE4C4VTwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFH14rrjTAyGInXV8h6cL33ZM7bRhMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvZlhpdXVOTURJWWlkZFh5SHB3dmZka3p0dEdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVoZAwQA XvmKMA0GCSqGSIb3DQEBCwUAA4IBAQDFzLCcCnX+UNkfnhJYxx8d40RnQQsoONfE luejnvbTcA67bRRDmVwucrqCtEH55kw+t3iDSKZidozmDoUqDlWCR0Eqg//ZQ5bp I48cm8jxqcORqS/tdhkYcaAnqQZkmtnjYkI4wK6/JbWFocO4i3PERAvwDEXmhFGO PW33YP3rjb7WrcSsz1OhR3kQnDC33gNNr77F9yj2CQWT5fOQeJZzbNNyZYc0ok2X uIt1xP++vWNbQukjkw2w2pU4rmQcrbhLtJG7LTA+TQUkQN1W2hg3GQrzKKDSQ/yK wEQOTyvYHVJlTb1Pj/pPrf+8MTRKn9klxJMs6aE2J6AtYLYSWbrf -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:33 2026 by rpki-client