This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/h1-LmPnN9wg5MTj3u7TEzKmqOZM.roa File: h1-LmPnN9wg5MTj3u7TEzKmqOZM.roa (raw, json) Hash identifier: te1UT65T+su12qKzENE8K2NubBL02KLcnqE1He4fsaU= Subject key identifier: 87:5F:8B:98:F9:CD:F7:08:39:31:38:F7:BB:B4:C4:CC:A9:AA:39:93 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C1304B319D2A60E20E6808AC4D95590 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/h1-LmPnN9wg5MTj3u7TEzKmqOZM.roa Signing time: Fri 02 Jan 2026 00:19:39 +0000 ROA not before: Fri 02 Jan 2026 00:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214339 IP address blocks: 77.90.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:04:b3:19:d2:a6:0e:20:e6:80:8a:c4:d9:55:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=875f8b98f9cdf708393138f7bbb4c4cca9aa3993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5b:85:d2:e6:fb:8d:3b:55:7f:4b:cc:3c:2b: 5d:eb:e9:ab:bb:5b:26:74:61:bf:28:2c:82:bf:67: 92:fa:5c:64:b9:e1:c9:44:da:6b:5a:7f:2e:c6:09: 0b:58:21:5f:03:38:09:f8:16:2b:d1:9d:84:95:1e: f8:a5:be:20:41:af:06:61:50:8f:a8:64:b0:b0:05: 41:be:2b:da:ca:dc:e8:ff:9a:e9:bd:a8:10:ea:8e: 50:53:fc:7a:0c:ee:9a:2c:26:70:6f:17:fd:a7:c0: 90:0a:44:32:52:2f:3d:28:08:a6:06:c8:7b:92:48: cc:ee:13:4a:ad:21:83:0e:2d:74:d9:10:b6:36:69: 9c:80:4c:f1:b2:67:0c:34:25:85:ac:05:35:1b:47: 0a:c3:4a:46:e3:d1:b6:87:29:cf:7b:f7:0a:58:35: 7a:23:08:c0:68:73:8d:01:98:35:1b:a2:cd:a3:b7: ed:6e:c9:e4:e1:7f:1f:f1:dd:2e:49:9f:be:8c:a5: 2d:b5:59:25:97:58:02:84:d3:3f:9f:d4:50:cf:72: d9:3d:5a:2d:98:98:db:82:d6:d5:b5:f3:8c:22:b2: 5c:25:12:ad:a2:80:61:e5:dd:c3:7c:44:a5:c5:88: 05:26:0f:b3:1d:4c:aa:ed:11:49:67:8a:de:88:26: 34:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5F:8B:98:F9:CD:F7:08:39:31:38:F7:BB:B4:C4:CC:A9:AA:39:93 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/h1-LmPnN9wg5MTj3u7TEzKmqOZM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.56.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:1d:ac:0b:ef:13:d6:73:9f:4d:29:9c:0a:e6:ca:e6:17:b6: c5:29:ad:7f:64:d5:84:23:bf:fe:ea:26:9b:06:7c:19:7f:19: 54:cd:57:26:b0:c0:e6:af:67:9a:90:7c:0f:fe:25:b8:f5:3f: ad:29:4a:e8:d2:f5:fb:0f:b4:88:43:6d:dd:77:a5:c3:56:34: e3:48:c0:88:9e:de:6d:e0:b9:9a:49:40:f6:fa:a4:cb:2e:1d: d0:88:72:8a:3e:39:8f:3d:65:59:d1:98:58:c4:ac:dc:82:00: b3:82:fb:6c:f6:d4:35:2b:3e:61:a0:35:59:19:48:f5:01:06: a9:7f:62:63:9b:ea:6e:20:17:2c:33:9b:1e:c6:e6:10:ae:ff: 10:b7:bb:34:ac:8c:72:e3:81:ad:ea:87:14:60:bf:86:93:14: 05:3d:34:f0:38:b3:2a:5d:80:0a:af:98:15:75:78:23:3c:e2: de:78:41:2e:75:a2:9b:2a:22:db:ac:8b:e1:bc:54:30:86:03: 54:17:a5:e9:dc:74:83:20:48:92:b8:f6:cc:0a:cf:03:4f:cf: ef:29:46:11:3b:6e:83:a4:b0:cb:ba:b6:dc:07:77:5a:4c:19: be:46:49:11:b5:c3:66:4c:7e:ed:63:42:51:58:9c:e4:f1:ff: e0:88:79:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EwSzGdKmDiDmgIrE2VWQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzVmOGI5OGY5Y2RmNzA4MzkzMTM4ZjdiYmI0YzRjY2E5YWEzOTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFuF0ub7jTtVf0vMPCtd6+mru1sm dGG/KCyCv2eS+lxkueHJRNprWn8uxgkLWCFfAzgJ+BYr0Z2ElR74pb4gQa8GYVCP qGSwsAVBvivaytzo/5rpvagQ6o5QU/x6DO6aLCZwbxf9p8CQCkQyUi89KAimBsh7 kkjM7hNKrSGDDi102RC2NmmcgEzxsmcMNCWFrAU1G0cKw0pG49G2hynPe/cKWDV6 IwjAaHONAZg1G6LNo7ftbsnk4X8f8d0uSZ++jKUttVkll1gChNM/n9RQz3LZPVot mJjbgtbVtfOMIrJcJRKtooBh5d3DfESlxYgFJg+zHUyq7RFJZ4reiCY0xQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIdfi5j5zfcIOTE497u0xMypqjmTMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvaDEtTG1Qbk45d2c1TVRqM3U3VEV6S21xT1pNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVo4MA0G CSqGSIb3DQEBCwUAA4IBAQAdHawL7xPWc59NKZwK5srmF7bFKa1/ZNWEI7/+6iab BnwZfxlUzVcmsMDmr2eakHwP/iW49T+tKUro0vX7D7SIQ23dd6XDVjTjSMCInt5t 4LmaSUD2+qTLLh3QiHKKPjmPPWVZ0ZhYxKzcggCzgvts9tQ1Kz5hoDVZGUj1AQap f2Jjm+puIBcsM5sexuYQrv8Qt7s0rIxy44Gt6ocUYL+GkxQFPTTwOLMqXYAKr5gV dXgjPOLeeEEudaKbKiLbrIvhvFQwhgNUF6Xp3HSDIEiSuPbMCs8DT8/vKUYRO26D pLDLurbcB3daTBm+RkkRtcNmTH7tY0JRWJzk8f/giHl4 -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:59 2026 by rpki-client