This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/N1YrFwz6MvPNL8pUon6iWLIL4KM.roa File: N1YrFwz6MvPNL8pUon6iWLIL4KM.roa (raw, json) Hash identifier: ZFgtvNP8aWZk/IJlZoc7a3QhXLBKA7t9LfcmdbeQpkw= Subject key identifier: 37:56:2B:17:0C:FA:32:F3:CD:2F:CA:54:A2:7E:A2:58:B2:0B:E0:A3 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019B7F1375F91002A6C6B2D81C97C9167D21 Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/N1YrFwz6MvPNL8pUon6iWLIL4KM.roa Signing time: Fri 02 Jan 2026 14:19:00 +0000 ROA not before: Fri 02 Jan 2026 14:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 77.90.158.0/24 maxlen: 24 77.90.159.0/24 maxlen: 24 77.90.160.0/24 maxlen: 24 77.90.161.0/24 maxlen: 24 77.90.162.0/24 maxlen: 24 77.90.163.0/24 maxlen: 24 77.90.165.0/24 maxlen: 24 77.90.169.0/24 maxlen: 24 77.90.170.0/24 maxlen: 24 77.90.171.0/24 maxlen: 24 77.90.172.0/24 maxlen: 24 77.90.175.0/24 maxlen: 24 77.90.177.0/24 maxlen: 24 77.90.182.0/24 maxlen: 24 77.90.186.0/24 maxlen: 24 213.209.131.0/24 maxlen: 24 213.209.137.0/24 maxlen: 24 213.209.139.0/24 maxlen: 24 213.209.141.0/24 maxlen: 24 213.209.152.0/24 maxlen: 24 213.209.153.0/24 maxlen: 24 213.209.154.0/24 maxlen: 24 213.209.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:75:f9:10:02:a6:c6:b2:d8:1c:97:c9:16:7d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Jan 2 14:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37562b170cfa32f3cd2fca54a27ea258b20be0a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b7:30:be:fe:5e:10:5d:fd:cb:f6:e0:b8:39: cd:30:69:68:09:ed:c1:d1:a7:ff:da:f0:58:5d:19: d6:fd:c3:c7:ef:82:75:f7:ea:32:39:d6:74:fd:e7: 02:66:d5:ea:31:76:cf:dd:93:1f:92:b9:17:12:a1: 55:2b:6d:c0:8f:16:f2:cc:4c:9e:19:6f:35:d6:4e: 1d:ab:59:3a:26:ab:23:ae:3f:c0:ba:c9:dd:91:60: e0:8b:b3:bf:53:ed:40:df:3d:05:f6:b1:0a:4d:16: 6e:fc:6d:3b:e2:51:7d:2b:d9:ce:6d:8e:3f:05:ee: 80:8e:ca:f8:b7:11:e0:37:7e:b2:8b:a0:cf:e1:76: 57:9e:e4:09:dc:1a:b9:f6:13:0c:ae:47:4c:ed:17: 21:34:95:d5:ca:c7:4f:45:79:12:81:b4:3b:d5:bc: 67:a5:5f:1a:fe:34:aa:37:50:a3:54:16:d7:1b:34: 84:f9:b9:98:97:aa:9f:95:9b:bf:03:56:0f:ed:25: 45:b2:a0:57:b8:c8:34:33:b2:ea:71:88:eb:8d:01: 34:42:0b:67:67:2e:62:24:6f:98:cc:96:eb:b0:62: 4e:80:fb:7b:85:e3:83:54:0b:c5:07:19:e5:3e:d9: c5:df:f8:26:d7:d5:58:21:ff:0b:0e:d1:d0:eb:d8: 99:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:56:2B:17:0C:FA:32:F3:CD:2F:CA:54:A2:7E:A2:58:B2:0B:E0:A3 X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/N1YrFwz6MvPNL8pUon6iWLIL4KM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.158.0-77.90.163.255 77.90.165.0/24 77.90.169.0-77.90.172.255 77.90.175.0/24 77.90.177.0/24 77.90.182.0/24 77.90.186.0/24 213.209.131.0/24 213.209.137.0/24 213.209.139.0/24 213.209.141.0/24 213.209.152.0/22 Signature Algorithm: sha256WithRSAEncryption b5:46:58:48:da:67:85:66:f2:c7:52:0e:e7:ab:23:dc:44:c0: 67:74:13:0b:f1:1c:0a:07:fe:36:19:36:1a:85:ed:29:8c:14: fd:05:af:c9:0c:75:c5:af:54:30:c1:38:f1:a8:30:4d:0d:9c: 5f:07:86:a8:a8:41:35:c8:76:ed:93:1c:05:f0:fb:a5:dd:59: f1:dc:ae:f8:fd:f8:a6:70:47:20:b1:22:d4:f5:48:1a:b4:67: 37:d7:f0:4e:e0:f5:b7:f5:b1:58:07:28:1a:4a:91:c8:1c:fd: 96:5f:da:12:6d:2f:2b:aa:09:0d:99:93:69:d0:ba:16:12:83: 88:c8:af:e3:be:11:3f:9f:ff:f0:61:a5:de:3e:ad:a4:70:6f: ef:6d:ae:e4:9d:0f:bb:49:ef:a2:f2:43:09:63:d5:d7:16:1f: ce:67:0a:b3:36:d8:35:3a:61:a6:c3:1a:44:4c:67:c2:9a:7d: 25:ee:22:18:54:90:b6:93:6f:d6:b6:7c:92:11:1e:00:06:3c: e7:6d:dc:08:3c:07:32:b4:1c:25:95:c2:6a:bf:bc:88:e3:fd: 5a:be:d2:53:79:2f:e9:18:64:50:d7:89:8c:c2:07:22:05:46: 39:bb:93:43:bc:0b:65:72:ce:3d:93:42:9b:92:a7:17:af:70: dd:0f:76:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgISAZt/E3X5EAKmxrLYHJfJFn0hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwMTAyMTQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzU2MmIxNzBjZmEzMmYzY2QyZmNhNTRhMjdlYTI1OGIyMGJlMGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17cwvv5eEF39y/bguDnNMGloCe3B 0af/2vBYXRnW/cPH74J19+oyOdZ0/ecCZtXqMXbP3ZMfkrkXEqFVK23AjxbyzEye GW811k4dq1k6Jqsjrj/AusndkWDgi7O/U+1A3z0F9rEKTRZu/G074lF9K9nObY4/ Be6Ajsr4txHgN36yi6DP4XZXnuQJ3Bq59hMMrkdM7RchNJXVysdPRXkSgbQ71bxn pV8a/jSqN1CjVBbXGzSE+bmYl6qflZu/A1YP7SVFsqBXuMg0M7LqcYjrjQE0Qgtn Zy5iJG+YzJbrsGJOgPt7heODVAvFBxnlPtnF3/gm19VYIf8LDtHQ69iZrQIDAQAB o4ICWzCCAlcwHQYDVR0OBBYEFDdWKxcM+jLzzS/KVKJ+oliyC+CjMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvTjFZckZ3ejZNdlBOTDhwVW9uNmlXTElMNEtNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHEGCCsGAQUFBwEHAQH/BGIwYDBeBAIAATBYMAwDBAFNWp4D BAJNWqADBABNWqUwDAMEAE1aqQMEAE1arAMEAE1arwMEAE1asQMEAE1atgMEAE1a ugMEANXRgwMEANXRiQMEANXRiwMEANXRjQMEAtXRmDANBgkqhkiG9w0BAQsFAAOC AQEAtUZYSNpnhWbyx1IO56sj3ETAZ3QTC/EcCgf+Nhk2GoXtKYwU/QWvyQx1xa9U MME48agwTQ2cXweGqKhBNch27ZMcBfD7pd1Z8dyu+P34pnBHILEi1PVIGrRnN9fw TuD1t/WxWAcoGkqRyBz9ll/aEm0vK6oJDZmTadC6FhKDiMiv474RP5//8GGl3j6t pHBv722u5J0Pu0nvovJDCWPV1xYfzmcKszbYNTphpsMaRExnwpp9Je4iGFSQtpNv 1rZ8khEeAAY8523cCDwHMrQcJZXCar+8iOP9Wr7SU3kv6RhkUNeJjMIHIgVGObuT Q7wLZXLOPZNCm5KnF69w3Q92MQ== -----END CERTIFICATE-----Generated at Wed Jan 21 07:48:04 2026 by rpki-client