This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/NRPhnSsp6ID8skg7poMTmgp3wbc.roa File: NRPhnSsp6ID8skg7poMTmgp3wbc.roa (raw, json) Hash identifier: EVzVbFUnz06DaUAsq7BcezR6aSKAnjizU9IS3eT5X/c= Subject key identifier: 35:13:E1:9D:2B:29:E8:80:FC:B2:48:3B:A6:83:13:9A:0A:77:C1:B7 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019B7F137ACEF265E3EAD08CFD0B97831A54 Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/NRPhnSsp6ID8skg7poMTmgp3wbc.roa Signing time: Fri 02 Jan 2026 14:19:01 +0000 ROA not before: Fri 02 Jan 2026 14:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 77.90.178.0/24 maxlen: 24 213.209.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:7a:ce:f2:65:e3:ea:d0:8c:fd:0b:97:83:1a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Jan 2 14:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3513e19d2b29e880fcb2483ba683139a0a77c1b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:42:10:20:1b:2b:07:31:d8:94:2c:2a:b2:28: 4c:ce:59:15:eb:33:7e:37:71:04:93:bc:d1:22:4e: b0:de:53:04:0d:3f:f4:b9:80:5c:2d:42:32:97:da: 4e:82:f6:ab:e3:03:66:b7:43:22:d3:ff:d3:d1:14: b8:96:24:fe:d3:9e:52:5e:b8:c3:73:54:8e:2c:9c: cd:b1:44:4c:0c:07:2f:cf:df:6f:79:5d:77:02:8b: bc:5a:f9:e2:9e:a6:87:be:0b:60:72:d0:23:ea:59: 32:33:9d:df:ee:1f:24:b4:99:a9:6e:2f:bc:da:72: b6:df:71:a1:7a:cd:e7:e2:e1:41:dd:27:32:3f:9f: 06:39:ae:96:db:86:76:22:32:50:58:7a:f7:fa:1e: 14:cd:92:c1:7b:d6:74:89:b2:8d:a8:17:79:71:fd: 49:fa:95:f3:12:34:d0:05:0f:ae:88:19:d9:25:d5: 65:e4:80:40:21:b2:4d:06:fc:9f:96:65:c6:1f:f4: b1:44:2c:7d:70:30:a5:19:69:be:f2:d2:7d:85:3f: 1f:6f:f7:3c:a8:f7:fb:55:7c:dc:40:c5:58:5d:b8: 35:44:33:cb:c1:5d:3f:bc:cf:61:eb:14:15:77:61: 7e:4e:ee:8b:b9:3c:5a:91:1e:f6:88:2f:b8:81:f6: fa:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:13:E1:9D:2B:29:E8:80:FC:B2:48:3B:A6:83:13:9A:0A:77:C1:B7 X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/NRPhnSsp6ID8skg7poMTmgp3wbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.178.0/24 213.209.130.0/24 Signature Algorithm: sha256WithRSAEncryption 77:7a:a6:6e:55:f9:83:0e:b6:9c:cc:ac:97:51:41:63:2e:d2: 0d:d6:c7:38:23:f7:69:62:e8:c3:26:d2:65:9e:f9:d4:8b:36: ef:b2:01:bd:59:35:30:3f:4d:4f:7d:2c:c1:82:30:7b:a1:c2: 83:65:c0:21:ef:cb:43:a6:f2:81:35:fc:07:2b:6c:31:4e:4d: e0:f8:d2:af:0d:70:e3:c8:32:48:6c:99:c1:11:5c:53:51:12: c7:98:a6:38:5f:7a:58:2b:be:5e:2b:d9:d9:25:23:17:5e:1c: 40:0b:da:d6:77:a9:1f:c8:74:42:f5:b3:f9:43:5b:a7:5a:8e: 96:1b:59:55:a0:58:3f:b1:77:8d:0f:b5:b2:df:77:21:b1:2a: e0:08:66:ff:e3:6a:cd:16:25:b3:9c:85:ba:52:b7:63:ce:53: 31:b0:a8:e4:6e:aa:03:5f:3d:78:a8:01:26:07:71:e1:de:93: ff:16:1c:8b:dd:20:a4:f0:db:22:76:0f:62:41:24:92:86:18: e2:7a:12:52:85:71:51:1b:40:c2:00:a5:94:06:75:15:e6:ac: 1e:0c:f0:28:74:dc:b1:d7:43:2b:ca:b1:0f:5e:2e:51:6f:b1: 79:79:19:15:e6:40:bb:94:14:92:8a:7d:95:e2:9e:76:92:e1: 32:8d:1a:0b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/E3rO8mXj6tCM/QuXgxpUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwMTAyMTQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTEzZTE5ZDJiMjllODgwZmNiMjQ4M2JhNjgzMTM5YTBhNzdjMWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkIQIBsrBzHYlCwqsihMzlkV6zN+ N3EEk7zRIk6w3lMEDT/0uYBcLUIyl9pOgvar4wNmt0Mi0//T0RS4liT+055SXrjD c1SOLJzNsURMDAcvz99veV13Aou8WvninqaHvgtgctAj6lkyM53f7h8ktJmpbi+8 2nK233Ghes3n4uFB3ScyP58GOa6W24Z2IjJQWHr3+h4UzZLBe9Z0ibKNqBd5cf1J +pXzEjTQBQ+uiBnZJdVl5IBAIbJNBvyflmXGH/SxRCx9cDClGWm+8tJ9hT8fb/c8 qPf7VXzcQMVYXbg1RDPLwV0/vM9h6xQVd2F+Tu6LuTxakR72iC+4gfb6EQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDUT4Z0rKeiA/LJIO6aDE5oKd8G3MB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvTlJQaG5Tc3A2SUQ4c2tnN3BvTVRtZ3Azd2JjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVqyAwQA 1dGCMA0GCSqGSIb3DQEBCwUAA4IBAQB3eqZuVfmDDraczKyXUUFjLtIN1sc4I/dp YujDJtJlnvnUizbvsgG9WTUwP01PfSzBgjB7ocKDZcAh78tDpvKBNfwHK2wxTk3g +NKvDXDjyDJIbJnBEVxTURLHmKY4X3pYK75eK9nZJSMXXhxAC9rWd6kfyHRC9bP5 Q1unWo6WG1lVoFg/sXeND7Wy33chsSrgCGb/42rNFiWznIW6UrdjzlMxsKjkbqoD Xz14qAEmB3Hh3pP/FhyL3SCk8Nsidg9iQSSShhjiehJShXFRG0DCAKWUBnUV5qwe DPAodNyx10MryrEPXi5Rb7F5eRkV5kC7lBSSin2V4p52kuEyjRoL -----END CERTIFICATE-----Generated at Wed Jan 21 07:47:48 2026 by rpki-client