This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/B7v_4u9tce5LsJfrgNghTzfNK-I.roa File: B7v_4u9tce5LsJfrgNghTzfNK-I.roa (raw, json) Hash identifier: S9ySYWeINxU7ifdLKKBgxnw/x+kZ8pDp0WrRyO3fq48= Subject key identifier: 07:BB:FF:E2:EF:6D:71:EE:4B:B0:97:EB:80:D8:21:4F:37:CD:2B:E2 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019B7F13759EBB992B3C9292A6C427D786C7 Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/B7v_4u9tce5LsJfrgNghTzfNK-I.roa Signing time: Fri 02 Jan 2026 14:19:00 +0000 ROA not before: Fri 02 Jan 2026 14:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 77.90.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 05:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:75:9e:bb:99:2b:3c:92:92:a6:c4:27:d7:86:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Jan 2 14:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07bbffe2ef6d71ee4bb097eb80d8214f37cd2be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:70:19:57:2a:8c:de:96:6a:3f:e5:af:8b:23: 64:95:20:2f:4d:63:eb:43:ec:7a:0b:1a:11:9c:87: c7:03:9f:67:a5:37:d5:ba:33:5b:32:ae:5a:24:ca: 60:04:d2:0b:8a:fd:fe:c1:05:8f:c7:8d:e0:22:f8: c2:55:ef:59:f4:01:4e:1e:a3:c9:36:42:43:ee:6e: 25:15:54:c0:d9:1d:45:72:b5:db:fe:06:aa:40:3f: 51:d0:7c:bb:62:35:8c:9e:30:dd:3e:11:53:00:da: c5:2d:d4:9c:73:71:88:42:fe:04:40:90:38:c9:e2: 45:80:2a:1a:25:ef:9a:85:61:4f:3e:77:68:44:ce: 60:93:df:bd:6f:39:a4:cc:57:d4:40:eb:fc:92:e2: d4:38:44:be:49:16:06:91:e3:aa:32:c0:10:6e:4b: 20:04:20:22:1c:14:5a:f6:89:9d:b7:46:a6:16:c7: 09:f7:97:0f:6b:b0:8b:e0:68:af:53:f8:b8:9f:45: f2:6e:5a:5e:17:bb:03:b8:80:30:fc:68:ab:7e:87: 7a:21:4d:52:ef:5f:82:86:01:3b:78:19:65:8d:58: d2:cb:40:9c:9a:e6:4e:27:34:a9:cd:ff:91:83:94: de:ca:2f:90:0e:31:dc:c9:7e:d4:08:60:e5:31:8f: b1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BB:FF:E2:EF:6D:71:EE:4B:B0:97:EB:80:D8:21:4F:37:CD:2B:E2 X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/B7v_4u9tce5LsJfrgNghTzfNK-I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.178.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:e7:f6:64:3b:47:84:57:a2:3d:a3:14:fc:60:ae:2f:0b:b4: a8:77:2a:ab:76:42:c9:d6:ab:7f:40:18:e1:c6:ac:75:8f:b0: d2:9d:3a:3f:48:1a:7e:97:5e:55:3f:f6:5f:f0:d7:fc:c0:8d: 8f:2f:20:89:65:b6:57:58:ca:e4:0b:de:b7:e0:53:ff:54:b7: 04:8c:42:c6:09:5a:a9:c5:a5:c5:36:7f:a6:26:fc:55:7a:01: bb:1d:23:0b:34:22:c5:6b:4f:62:ec:36:bb:eb:02:a8:6f:d7: 34:2c:eb:c9:d7:0c:13:25:26:74:49:9b:2a:68:a6:2d:b4:65: 5a:aa:98:8f:66:b9:cb:f6:dc:fe:57:e8:07:8a:ed:08:84:d4: 5b:6e:3d:d7:eb:dd:bf:eb:ca:ff:77:78:48:87:47:2d:9c:f0: 42:ba:ad:8c:71:cb:a8:d3:0c:8d:56:59:7f:06:24:1e:92:ec: f8:e3:71:fa:da:9f:e5:bd:30:27:73:7f:de:2b:6e:11:8c:0c: f0:56:53:b6:6c:84:04:c8:89:f2:ac:cd:7d:0c:ca:84:b0:93: a7:2f:52:db:97:a0:ce:41:ad:1c:08:9b:22:e7:ec:22:c3:91: 45:ac:34:69:f8:35:a5:cc:7e:55:a8:8e:89:8c:2b:71:5d:f9: 83:67:bd:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E3Weu5krPJKSpsQn14bHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwMTAyMTQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2JiZmZlMmVmNmQ3MWVlNGJiMDk3ZWI4MGQ4MjE0ZjM3Y2QyYmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3AZVyqM3pZqP+WviyNklSAvTWPr Q+x6CxoRnIfHA59npTfVujNbMq5aJMpgBNILiv3+wQWPx43gIvjCVe9Z9AFOHqPJ NkJD7m4lFVTA2R1FcrXb/gaqQD9R0Hy7YjWMnjDdPhFTANrFLdScc3GIQv4EQJA4 yeJFgCoaJe+ahWFPPndoRM5gk9+9bzmkzFfUQOv8kuLUOES+SRYGkeOqMsAQbksg BCAiHBRa9omdt0amFscJ95cPa7CL4GivU/i4n0XyblpeF7sDuIAw/Girfod6IU1S 71+ChgE7eBlljVjSy0CcmuZOJzSpzf+Rg5Teyi+QDjHcyX7UCGDlMY+xvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAe7/+LvbXHuS7CX64DYIU83zSviMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvQjd2XzR1OXRjZTVMc0pmcmdOZ2hUemZOSy1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVqyMA0G CSqGSIb3DQEBCwUAA4IBAQB75/ZkO0eEV6I9oxT8YK4vC7SodyqrdkLJ1qt/QBjh xqx1j7DSnTo/SBp+l15VP/Zf8Nf8wI2PLyCJZbZXWMrkC9634FP/VLcEjELGCVqp xaXFNn+mJvxVegG7HSMLNCLFa09i7Da76wKob9c0LOvJ1wwTJSZ0SZsqaKYttGVa qpiPZrnL9tz+V+gHiu0IhNRbbj3X692/68r/d3hIh0ctnPBCuq2Mccuo0wyNVll/ BiQekuz443H62p/lvTAnc3/eK24RjAzwVlO2bIQEyInyrM19DMqEsJOnL1Lbl6DO Qa0cCJsi5+wiw5FFrDRp+DWlzH5VqI6JjCtxXfmDZ727 -----END CERTIFICATE-----Generated at Thu Jan 8 12:55:41 2026 by rpki-client