This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1-eyTRoTrUEgfUZmnNwb0ZCIh2fU.roa File: 1-eyTRoTrUEgfUZmnNwb0ZCIh2fU.roa (raw, json) Hash identifier: nAQmWQt6GsOnHDFvZWie2zCKByxsiNEEjnIJhBw6QEE= Subject key identifier: F9:EC:93:46:84:EB:50:48:1F:51:99:A7:37:06:F4:64:22:21:D9:F5 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019B045F3F60DCC1902DFF96DB80653B6E19 Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1-eyTRoTrUEgfUZmnNwb0ZCIh2fU.roa Signing time: Tue 09 Dec 2025 18:28:29 +0000 ROA not before: Tue 09 Dec 2025 18:28:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42821 IP address blocks: 77.90.128.0/24 maxlen: 24 77.90.129.0/24 maxlen: 24 77.90.130.0/24 maxlen: 24 77.90.132.0/24 maxlen: 24 77.90.133.0/24 maxlen: 24 77.90.134.0/24 maxlen: 24 77.90.136.0/24 maxlen: 24 77.90.137.0/24 maxlen: 24 77.90.139.0/24 maxlen: 24 77.90.140.0/24 maxlen: 24 77.90.143.0/24 maxlen: 24 77.90.144.0/24 maxlen: 24 77.90.146.0/24 maxlen: 24 77.90.147.0/24 maxlen: 24 77.90.148.0/24 maxlen: 24 77.90.156.0/24 maxlen: 24 77.90.188.0/24 maxlen: 24 213.209.138.0/24 maxlen: 24 213.209.159.0/24 maxlen: 24 2a04:29c2::/32 maxlen: 32 2a04:29c7::/32 maxlen: 32 2a04:29c7:1280:24::/64 maxlen: 64 2a04:29c7:1280:27::/64 maxlen: 64 2a04:29c7:1290:24::/64 maxlen: 64 2a04:29c7:1300:24::/64 maxlen: 64 2a04:29c7:1371:6027::/64 maxlen: 64 2a04:29c7:1420::/48 maxlen: 48 2a04:29c7:1880:24::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:5f:3f:60:dc:c1:90:2d:ff:96:db:80:65:3b:6e:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Dec 9 18:28:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f9ec934684eb50481f5199a73706f4642221d9f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9c:52:35:5c:a9:30:07:02:fe:2c:8d:29:fa: 03:d2:ef:c5:e5:80:9a:77:59:86:b0:2e:17:0e:95: 85:7c:26:bf:2f:cd:2b:c6:60:24:cd:f8:02:9f:c9: f6:67:69:36:75:3c:0d:a7:69:9a:a2:f6:65:47:29: f1:d9:6c:57:2a:64:f3:0e:49:93:de:aa:40:26:40: 66:11:4b:06:d8:f3:e5:38:22:8c:7d:31:aa:f5:41: a3:7b:b0:e2:35:cd:b3:67:a6:e9:70:3c:cf:3a:ea: 4d:57:22:fb:ea:6d:eb:30:62:6f:11:80:2b:05:c6: c6:02:4a:77:a9:19:1f:2f:5f:74:d7:e6:2d:01:a2: 51:fe:21:a4:5d:c7:47:ce:10:ad:b2:72:41:9e:99: 35:37:4f:ff:86:27:b9:87:89:2e:d7:59:28:63:db: e7:51:54:12:2b:fc:74:68:71:75:4b:a7:35:56:0c: 8e:9a:01:7b:b7:a0:5e:a2:2c:15:5b:04:58:2a:bc: d6:8c:38:f3:7c:0c:75:b2:8e:f1:05:47:ca:f2:ac: 55:e5:9f:8e:03:87:a7:07:46:ce:65:d9:fc:81:51: fc:92:3f:97:1c:5b:19:bc:f2:95:ed:37:0c:2c:d9: ef:6b:d5:fa:f3:23:e3:c6:54:6f:a0:63:74:53:ef: 70:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:EC:93:46:84:EB:50:48:1F:51:99:A7:37:06:F4:64:22:21:D9:F5 X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1-eyTRoTrUEgfUZmnNwb0ZCIh2fU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.128.0-77.90.130.255 77.90.132.0-77.90.134.255 77.90.136.0/23 77.90.139.0-77.90.140.255 77.90.143.0-77.90.144.255 77.90.146.0-77.90.148.255 77.90.156.0/24 77.90.188.0/24 213.209.138.0/24 213.209.159.0/24 IPv6: 2a04:29c2::/32 2a04:29c7::/32 Signature Algorithm: sha256WithRSAEncryption 28:f4:26:37:43:10:b9:7b:1d:5b:62:3c:af:5f:fc:78:10:0a: cb:44:61:eb:cb:21:46:ec:59:be:97:f1:2e:c8:81:cc:90:73: 43:69:1b:6e:c3:19:b4:90:50:8f:ad:29:e9:51:ee:ba:03:ff: 86:69:7b:82:2b:f1:b6:6e:cc:9e:f8:81:70:e2:79:4b:ba:5b: 63:b6:f6:ac:2d:60:7c:a6:c5:48:f1:e0:70:30:ec:46:bc:21: cb:0a:de:4f:a0:c2:56:45:79:9a:97:94:65:ac:bd:ee:d2:5e: ab:35:2f:d5:18:8a:e8:ff:96:1e:ce:b6:89:5e:bb:6e:9c:5b: d8:ce:a0:7a:0f:8e:6d:31:73:54:2e:f9:2b:86:41:21:55:60: 57:af:80:c0:b1:af:d8:b5:05:ec:cf:eb:8d:74:37:43:a1:05: 16:36:f8:f8:a3:bb:11:86:c4:2c:0c:88:db:07:e4:fa:e7:c9: 42:52:1d:32:bc:94:78:55:7a:bd:2a:58:13:d4:ec:2c:dc:92: 5f:e5:4e:43:3b:68:8b:e4:31:dc:46:22:4b:58:3b:6e:32:dd: 5e:3a:83:a1:59:d0:8a:98:28:9f:f3:08:40:b7:cc:74:6e:3d: 22:c0:03:43:1f:f3:d2:44:ce:5d:db:58:da:da:96:6e:b7:d7: cd:10:0c:54 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgISAZsEXz9g3MGQLf+W24BlO24ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjUxMjA5MTgyODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWVjOTM0Njg0ZWI1MDQ4MWY1MTk5YTczNzA2ZjQ2NDIyMjFkOWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZxSNVypMAcC/iyNKfoD0u/F5YCa d1mGsC4XDpWFfCa/L80rxmAkzfgCn8n2Z2k2dTwNp2maovZlRynx2WxXKmTzDkmT 3qpAJkBmEUsG2PPlOCKMfTGq9UGje7DiNc2zZ6bpcDzPOupNVyL76m3rMGJvEYAr BcbGAkp3qRkfL1901+YtAaJR/iGkXcdHzhCtsnJBnpk1N0//hie5h4ku11koY9vn UVQSK/x0aHF1S6c1VgyOmgF7t6BeoiwVWwRYKrzWjDjzfAx1so7xBUfK8qxV5Z+O A4enB0bOZdn8gVH8kj+XHFsZvPKV7TcMLNnva9X68yPjxlRvoGN0U+9wmQIDAQAB o4ICgTCCAn0wHQYDVR0OBBYEFPnsk0aE61BIH1GZpzcG9GQiIdn1MB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvMS1leVRSb1RyVUVnZlVabW5Od2IwWkNJaDJmVS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMzQvZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEw MS8xL08wZHVFdWlZZmxzd0xOd2t2ZG5iUC1nOGhFay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCBlQYIKwYBBQUHAQcBAf8EgYUwgYIwagQCAAEwZDAMAwQH TVqAAwQATVqCMAwDBAJNWoQDBABNWoYDBAFNWogwDAMEAE1aiwMEAE1ajDAMAwQA TVqPAwQATVqQMAwDBAFNWpIDBABNWpQDBABNWpwDBABNWrwDBADV0YoDBADV0Z8w FAQCAAIwDgMFACoEKcIDBQAqBCnHMA0GCSqGSIb3DQEBCwUAA4IBAQAo9CY3QxC5 ex1bYjyvX/x4EArLRGHryyFG7Fm+l/EuyIHMkHNDaRtuwxm0kFCPrSnpUe66A/+G aXuCK/G2bsye+IFw4nlLultjtvasLWB8psVI8eBwMOxGvCHLCt5PoMJWRXmal5Rl rL3u0l6rNS/VGIro/5YezraJXrtunFvYzqB6D45tMXNULvkrhkEhVWBXr4DAsa/Y tQXsz+uNdDdDoQUWNvj4o7sRhsQsDIjbB+T658lCUh0yvJR4VXq9KlgT1Ows3JJf 5U5DO2iL5DHcRiJLWDtuMt1eOoOhWdCKmCif8whAt8x0bj0iwANDH/PSRM5d21ja 2pZut9fNEAxU -----END CERTIFICATE-----Generated at Sun Dec 14 01:10:52 2025 by rpki-client