This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1-w50uf7dyWqaJkX9rSj1j1QAdmU.roa File: 1-w50uf7dyWqaJkX9rSj1j1QAdmU.roa (raw, json) Hash identifier: 0u4M/3+LwWC6jREF5PvgbwEVkEiATzx8ptRinGLU0tM= Subject key identifier: FB:0E:74:B9:FE:DD:C9:6A:9A:26:45:FD:AD:28:F5:8F:54:00:76:65 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019B7F137B9A5076B21D2BD4CB297F76BA37 Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1-w50uf7dyWqaJkX9rSj1j1QAdmU.roa Signing time: Fri 02 Jan 2026 14:19:01 +0000 ROA not before: Fri 02 Jan 2026 14:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213541 IP address blocks: 77.90.168.0/24 maxlen: 24 77.90.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:7b:9a:50:76:b2:1d:2b:d4:cb:29:7f:76:ba:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Jan 2 14:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb0e74b9feddc96a9a2645fdad28f58f54007665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2a:2c:67:29:45:db:34:2f:3a:f9:1e:ee:61: ac:af:5f:03:5b:34:13:2f:b3:a7:78:0c:36:57:00: d4:87:45:f5:d9:c6:3e:e6:1a:7a:a0:26:f4:da:37: 3c:dd:82:7e:b8:fd:70:e6:d2:27:3a:a7:7e:91:9c: d1:da:04:3b:9b:d3:de:a6:45:28:cf:3b:f2:a5:59: 10:26:89:b0:82:fb:30:c3:89:cf:84:a4:3d:b1:b6: cd:0b:f1:6d:24:5b:77:9f:ce:42:82:a2:42:bf:a5: 6f:73:89:dd:f3:e1:19:c8:db:55:10:e5:f1:49:1c: 76:96:83:f3:e0:fa:f2:01:ed:b7:0d:1e:20:e8:cd: 8f:55:18:26:a2:a2:4d:44:cf:86:1b:ac:b2:78:aa: 27:fd:13:28:2d:f2:74:3a:5d:98:7f:05:b4:78:4d: 68:84:c5:90:dc:91:48:c6:d3:2a:0e:30:a6:ce:28: 42:d8:ec:5c:19:90:ef:22:65:83:db:fc:88:8f:e3: 8a:7b:c5:52:43:c3:db:ff:72:01:ac:d7:f1:3b:d1: ed:a8:03:cd:e7:d2:bd:fe:5d:56:4f:dd:74:24:8a: 46:98:de:bc:4b:67:1d:71:bb:58:93:ea:9a:27:81: c9:cf:c8:33:d6:4b:cd:5d:e5:4e:82:49:12:c4:b1: 39:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:0E:74:B9:FE:DD:C9:6A:9A:26:45:FD:AD:28:F5:8F:54:00:76:65 X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1-w50uf7dyWqaJkX9rSj1j1QAdmU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.168.0/24 77.90.174.0/24 Signature Algorithm: sha256WithRSAEncryption 39:b6:43:dd:52:3a:98:49:4a:31:ed:38:be:35:ba:0c:18:2e: 4f:24:f3:e7:1f:9c:48:3f:f6:94:f1:ab:7c:f8:8e:81:d4:79: e5:aa:e9:4b:63:72:d8:e5:76:6b:63:0a:2b:7c:98:ed:8a:02: b9:bc:ff:b7:82:7a:76:d1:3e:46:b0:e5:9b:6a:1c:e7:28:4e: 4a:bc:ab:e4:b6:f7:7a:c2:a6:fe:21:ba:00:62:32:26:0b:2d: 1e:22:57:9b:7c:60:e5:9e:b4:15:8d:a5:0b:cc:62:3a:ff:73: 40:ec:a5:b3:ee:dc:74:95:17:32:d4:4f:1f:b1:39:d7:21:c9: 07:e4:d4:49:c8:66:7e:80:bc:ad:a8:6f:bd:27:79:0e:c8:ae: 3d:54:97:b2:20:b5:79:a1:4e:7a:27:94:85:44:66:02:55:8b: b0:d8:15:da:d5:d4:01:ad:70:d8:71:fb:39:d1:37:0f:1f:b9: 22:09:cf:27:82:29:97:ba:db:ca:87:71:a1:79:80:e6:df:f0: ba:7a:4f:6b:7b:11:ef:04:a8:8e:9f:94:36:f3:02:8c:4b:86: 2c:da:4f:d2:81:61:c3:4a:78:ec:8e:09:ed:e7:be:65:4e:43: ad:36:95:8d:8f:db:db:48:18:0f:ff:45:84:04:ec:fb:bf:a1: 54:3b:d2:13 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt/E3uaUHayHSvUyyl/dro3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwMTAyMTQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjBlNzRiOWZlZGRjOTZhOWEyNjQ1ZmRhZDI4ZjU4ZjU0MDA3NjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCosZylF2zQvOvke7mGsr18DWzQT L7OneAw2VwDUh0X12cY+5hp6oCb02jc83YJ+uP1w5tInOqd+kZzR2gQ7m9PepkUo zzvypVkQJomwgvsww4nPhKQ9sbbNC/FtJFt3n85CgqJCv6Vvc4nd8+EZyNtVEOXx SRx2loPz4PryAe23DR4g6M2PVRgmoqJNRM+GG6yyeKon/RMoLfJ0Ol2YfwW0eE1o hMWQ3JFIxtMqDjCmzihC2OxcGZDvImWD2/yIj+OKe8VSQ8Pb/3IBrNfxO9HtqAPN 59K9/l1WT910JIpGmN68S2cdcbtYk+qaJ4HJz8gz1kvNXeVOgkkSxLE5fwIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPsOdLn+3clqmiZF/a0o9Y9UAHZlMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvMS13NTB1ZjdkeVdxYUprWDlyU2oxajFRQWRtVS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMzQvZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEw MS8xL08wZHVFdWlZZmxzd0xOd2t2ZG5iUC1nOGhFay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAE1aqAME AE1arjANBgkqhkiG9w0BAQsFAAOCAQEAObZD3VI6mElKMe04vjW6DBguTyTz5x+c SD/2lPGrfPiOgdR55arpS2Ny2OV2a2MKK3yY7YoCubz/t4J6dtE+RrDlm2oc5yhO Sryr5Lb3esKm/iG6AGIyJgstHiJXm3xg5Z60FY2lC8xiOv9zQOyls+7cdJUXMtRP H7E51yHJB+TUSchmfoC8rahvvSd5DsiuPVSXsiC1eaFOeieUhURmAlWLsNgV2tXU Aa1w2HH7OdE3Dx+5IgnPJ4Ipl7rbyodxoXmA5t/wunpPa3sR7wSojp+UNvMCjEuG LNpP0oFhw0p47I4J7ee+ZU5DrTaVjY/b20gYD/9FhATs+7+hVDvSEw== -----END CERTIFICATE-----Generated at Wed Jan 21 07:48:41 2026 by rpki-client