This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/3QNvsW8uqI5SRJ2arDoqnLh1Snk.roa File: 3QNvsW8uqI5SRJ2arDoqnLh1Snk.roa (raw, json) Hash identifier: 6UcWlt5kutrk7QnYcIIi10ehqxpEztrBDXBmmSnWosA= Subject key identifier: DD:03:6F:B1:6F:2E:A8:8E:52:44:9D:9A:AC:3A:2A:9C:B8:75:4A:79 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019B7F1378FC3F3FFE306BDB070369DFAE3A Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/3QNvsW8uqI5SRJ2arDoqnLh1Snk.roa Signing time: Fri 02 Jan 2026 14:19:01 +0000 ROA not before: Fri 02 Jan 2026 14:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208185 IP address blocks: 77.90.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:78:fc:3f:3f:fe:30:6b:db:07:03:69:df:ae:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Jan 2 14:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd036fb16f2ea88e52449d9aac3a2a9cb8754a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:35:04:0c:e7:cb:7f:41:42:b0:a5:2a:61:cf: 50:b0:f6:6a:75:7a:87:ad:2e:d3:46:50:6c:42:5a: c1:24:a7:70:5c:0e:d7:60:11:64:7a:9b:44:0d:a3: 25:13:b0:75:97:b2:43:f5:f3:d5:84:0b:b3:55:28: 76:3a:e7:b6:95:58:c2:18:b3:5e:01:c0:ad:99:6b: d3:43:9a:38:63:61:a7:3d:0e:f5:2b:f0:0b:23:45: f6:98:56:6a:40:1c:47:a1:8d:61:63:05:0b:cb:d0: 19:c3:8a:df:b7:35:ec:70:ad:08:12:49:69:d7:e6: ad:1f:40:38:21:f0:3e:58:4e:09:4f:67:cb:6b:58: c6:11:07:07:36:2a:32:c7:3e:69:77:2b:7c:5b:d7: f8:f5:a7:67:1d:54:e0:36:ec:fc:92:34:2e:ce:b2: da:a7:b2:a4:b0:9f:c1:60:ba:8b:a7:5c:c7:85:9b: 22:b9:f0:ac:02:fe:12:48:fc:17:23:bf:14:63:77: 32:ea:db:96:06:bc:ee:92:a1:55:cd:17:f5:0d:82: fd:f8:7c:e4:b5:7a:e2:72:82:8f:d8:45:f8:74:f7: 91:15:c1:a0:52:85:5c:78:f4:05:3a:4d:0b:ac:17: 6a:bb:7d:85:5e:0f:c5:16:5a:6a:a3:c8:b7:49:bd: 25:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:03:6F:B1:6F:2E:A8:8E:52:44:9D:9A:AC:3A:2A:9C:B8:75:4A:79 X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/3QNvsW8uqI5SRJ2arDoqnLh1Snk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.148.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:8b:17:9c:bc:7d:5e:a4:f4:25:67:9f:c0:61:2f:55:ed:2e: 3e:d7:ba:4c:56:50:c0:cc:8e:59:e4:8a:8e:7e:3e:9c:92:cd: 8a:13:1e:df:02:76:59:24:f4:38:26:a2:a1:51:33:48:91:ad: 75:19:0a:22:07:10:fb:4c:6a:97:c0:27:b4:b9:c9:78:d7:c5: 66:16:11:2b:79:1b:0b:77:7b:ad:c0:48:e6:6b:b1:cc:a2:e3: 7f:3c:00:8d:5e:61:c7:1b:53:c3:fd:40:6f:b3:87:a9:05:1a: 5a:0b:1b:21:31:3e:88:fd:4e:f8:70:9b:c8:84:73:47:12:2b: b7:f4:82:b7:61:37:0a:c5:af:51:3d:9f:62:c1:b7:ff:da:f8: 3d:16:ce:99:26:32:b8:a5:93:65:07:00:7f:98:4b:d2:95:2a: 02:41:ef:11:44:24:ad:20:78:1b:b7:26:42:e2:43:18:ef:11: b8:8c:5f:78:f1:0e:9b:29:da:d9:7c:ca:2e:97:0a:13:36:b2: be:1e:92:47:0d:ec:33:07:bb:9d:e0:03:38:fe:46:cb:c8:c4: 35:c0:dd:6c:88:57:12:99:f1:44:56:20:b5:70:f9:44:6d:93: 78:6d:ff:40:17:70:e6:c1:23:88:10:8f:11:a0:38:b7:85:be: d9:d2:d4:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E3j8Pz/+MGvbBwNp3646MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwMTAyMTQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDAzNmZiMTZmMmVhODhlNTI0NDlkOWFhYzNhMmE5Y2I4NzU0YTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzUEDOfLf0FCsKUqYc9QsPZqdXqH rS7TRlBsQlrBJKdwXA7XYBFkeptEDaMlE7B1l7JD9fPVhAuzVSh2Oue2lVjCGLNe AcCtmWvTQ5o4Y2GnPQ71K/ALI0X2mFZqQBxHoY1hYwULy9AZw4rftzXscK0IEklp 1+atH0A4IfA+WE4JT2fLa1jGEQcHNioyxz5pdyt8W9f49adnHVTgNuz8kjQuzrLa p7KksJ/BYLqLp1zHhZsiufCsAv4SSPwXI78UY3cy6tuWBrzukqFVzRf1DYL9+Hzk tXricoKP2EX4dPeRFcGgUoVcePQFOk0LrBdqu32FXg/FFlpqo8i3Sb0l5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN0Db7FvLqiOUkSdmqw6Kpy4dUp5MB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvM1FOdnNXOHVxSTVTUkoyYXJEb3FuTGgxU25rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVqUMA0G CSqGSIb3DQEBCwUAA4IBAQAKixecvH1epPQlZ5/AYS9V7S4+17pMVlDAzI5Z5IqO fj6cks2KEx7fAnZZJPQ4JqKhUTNIka11GQoiBxD7TGqXwCe0ucl418VmFhEreRsL d3utwEjma7HMouN/PACNXmHHG1PD/UBvs4epBRpaCxshMT6I/U74cJvIhHNHEiu3 9IK3YTcKxa9RPZ9iwbf/2vg9Fs6ZJjK4pZNlBwB/mEvSlSoCQe8RRCStIHgbtyZC 4kMY7xG4jF948Q6bKdrZfMoulwoTNrK+HpJHDewzB7ud4AM4/kbLyMQ1wN1siFcS mfFEViC1cPlEbZN4bf9AF3DmwSOIEI8RoDi3hb7Z0tQu -----END CERTIFICATE-----Generated at Wed Jan 21 07:47:30 2026 by rpki-client