This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/PTFRjHbNQ0x7a6o3WCQgunxoXw0.roa File: PTFRjHbNQ0x7a6o3WCQgunxoXw0.roa (raw, json) Hash identifier: u7FUc9Q3tf0joiXtSaAFS9p+EHttrk7nD8+X8I6oCJg= Subject key identifier: 3D:31:51:8C:76:CD:43:4C:7B:6B:AA:37:58:24:20:BA:7C:68:5F:0D Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019B7F136EB8C0251A1B6DFFDA4BD3B915E2 Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/PTFRjHbNQ0x7a6o3WCQgunxoXw0.roa Signing time: Fri 02 Jan 2026 14:18:58 +0000 ROA not before: Fri 02 Jan 2026 14:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2856 IP address blocks: 77.90.135.0/24 maxlen: 24 77.90.138.0/24 maxlen: 24 77.90.145.0/24 maxlen: 24 77.90.151.0/24 maxlen: 24 77.90.153.0/24 maxlen: 24 77.90.164.0/24 maxlen: 24 77.90.184.0/24 maxlen: 24 185.230.13.0/24 maxlen: 24 185.230.15.0/24 maxlen: 24 213.209.146.0/24 maxlen: 24 213.209.149.0/24 maxlen: 24 213.209.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:6e:b8:c0:25:1a:1b:6d:ff:da:4b:d3:b9:15:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Jan 2 14:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d31518c76cd434c7b6baa37582420ba7c685f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7d:a8:e7:dd:82:43:8f:f1:40:64:27:0b:7e: bc:20:02:ae:88:28:b6:2d:6c:16:29:f7:76:e5:81: 7c:f5:81:60:1e:b7:0d:e2:57:cc:43:7c:08:2a:e3: 03:32:cd:24:75:64:09:fc:36:36:b9:e2:f0:3f:d2: 66:2b:b9:6e:ef:e8:00:b3:c6:95:6d:54:da:30:d5: e3:15:80:1c:bc:cc:c4:d9:06:bf:37:38:58:c0:32: 7f:1a:01:e7:3e:65:a9:ba:da:dd:bf:ee:ee:06:9e: ac:8d:85:6c:7e:ec:96:52:94:3a:d6:81:3d:25:31: 0f:3b:b7:82:19:14:a4:f9:23:7b:5f:9e:bd:0a:2a: f2:b6:68:db:1d:69:81:1e:98:b1:1f:03:a4:e8:f8: df:65:18:c8:63:56:d0:54:58:10:e0:41:47:f5:8a: 50:cd:7d:4f:b6:8a:9e:82:48:cd:ce:0e:ad:82:49: 6d:e3:1b:cb:95:3a:24:ba:a9:c4:96:01:73:c8:54: d0:4d:e0:07:ee:0a:8a:55:52:ca:2b:cb:bc:ea:a8: 1b:9c:e8:2c:6e:79:95:14:73:a1:c7:81:aa:3d:ab: 3f:bc:38:e1:8f:14:55:3b:3a:d4:4a:bb:cc:20:4d: c2:0c:46:b6:ca:fa:72:20:db:94:3f:f6:51:d4:55: 0d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:31:51:8C:76:CD:43:4C:7B:6B:AA:37:58:24:20:BA:7C:68:5F:0D X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/PTFRjHbNQ0x7a6o3WCQgunxoXw0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.135.0/24 77.90.138.0/24 77.90.145.0/24 77.90.151.0/24 77.90.153.0/24 77.90.164.0/24 77.90.184.0/24 185.230.13.0/24 185.230.15.0/24 213.209.146.0/24 213.209.149.0-213.209.150.255 Signature Algorithm: sha256WithRSAEncryption 78:cf:be:59:b4:0f:29:af:5b:85:8f:7e:43:49:6d:cd:8d:f4: e2:59:ab:80:c8:37:fd:33:a1:31:90:1e:d7:97:b2:ff:ad:b6: 22:26:27:a3:80:8f:8f:6d:cd:e6:e0:2c:cd:b6:67:7c:02:00: 86:a7:3e:e5:72:fe:51:b8:df:3b:7e:10:bd:cc:db:c3:38:b6: 23:44:b6:a9:8c:1b:2a:c2:f4:68:60:aa:f8:58:fc:5f:a0:ca: cd:c9:41:5f:aa:a7:5c:08:0d:0e:83:b1:cc:4b:e2:16:80:1d: 61:c5:7d:f9:39:fb:85:8a:d3:d5:55:32:6e:78:e2:82:15:44: bf:5a:26:18:98:fc:6f:97:1d:fb:80:78:37:0f:00:c5:3a:8d: d8:7f:e4:b2:12:e3:ad:cd:32:4b:e4:d6:b5:90:ca:6f:77:a6: 4e:0c:ee:c8:3f:28:ef:32:2c:ab:bb:7d:32:a2:17:a0:0a:3f: b8:73:b2:1d:f9:01:86:71:82:6c:ae:ac:5d:74:ac:b1:ad:a0: 69:ff:cb:64:56:e0:b7:61:8a:52:80:90:83:83:a8:70:7d:a8: 72:dc:80:34:2b:0b:c1:77:51:2a:02:83:d2:fc:e1:a0:49:58: 08:4e:9d:cf:3b:3e:74:86:61:fb:d0:2c:32:74:37:4a:1a:b2: 1a:e3:ec:10 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgISAZt/E264wCUaG23/2kvTuRXiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwMTAyMTQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDMxNTE4Yzc2Y2Q0MzRjN2I2YmFhMzc1ODI0MjBiYTdjNjg1ZjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH2o592CQ4/xQGQnC368IAKuiCi2 LWwWKfd25YF89YFgHrcN4lfMQ3wIKuMDMs0kdWQJ/DY2ueLwP9JmK7lu7+gAs8aV bVTaMNXjFYAcvMzE2Qa/NzhYwDJ/GgHnPmWputrdv+7uBp6sjYVsfuyWUpQ61oE9 JTEPO7eCGRSk+SN7X569CirytmjbHWmBHpixHwOk6PjfZRjIY1bQVFgQ4EFH9YpQ zX1PtoqegkjNzg6tgklt4xvLlTokuqnElgFzyFTQTeAH7gqKVVLKK8u86qgbnOgs bnmVFHOhx4GqPas/vDjhjxRVOzrUSrvMIE3CDEa2yvpyINuUP/ZR1FUN+QIDAQAB o4ICTTCCAkkwHQYDVR0OBBYEFD0xUYx2zUNMe2uqN1gkILp8aF8NMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvUFRGUmpIYk5RMHg3YTZvM1dDUWd1bnhvWHcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQATVqHAwQA TVqKAwQATVqRAwQATVqXAwQATVqZAwQATVqkAwQATVq4AwQAueYNAwQAueYPAwQA 1dGSMAwDBADV0ZUDBADV0ZYwDQYJKoZIhvcNAQELBQADggEBAHjPvlm0DymvW4WP fkNJbc2N9OJZq4DIN/0zoTGQHteXsv+ttiImJ6OAj49tzebgLM22Z3wCAIanPuVy /lG43zt+EL3M28M4tiNEtqmMGyrC9GhgqvhY/F+gys3JQV+qp1wIDQ6DscxL4haA HWHFffk5+4WK09VVMm544oIVRL9aJhiY/G+XHfuAeDcPAMU6jdh/5LIS463NMkvk 1rWQym93pk4M7sg/KO8yLKu7fTKiF6AKP7hzsh35AYZxgmyurF10rLGtoGn/y2RW 4LdhilKAkIODqHB9qHLcgDQrC8F3USoCg9L84aBJWAhOnc87PnSGYfvQLDJ0N0oa shrj7BA= -----END CERTIFICATE-----Generated at Thu Jan 8 17:33:59 2026 by rpki-client