This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Wm9W969s1zDEYvgyNxsbOsCfZp0.roa File: Wm9W969s1zDEYvgyNxsbOsCfZp0.roa (raw, json) Hash identifier: 61/WUb1UHZ1kTPcgP7deUj+87twLfiFFSlO7jtM4U7o= Subject key identifier: 5A:6F:56:F7:AF:6C:D7:30:C4:62:F8:32:37:1B:1B:3A:C0:9F:66:9D Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019B7F137982F335148F0C00C13EAFC4C9EB Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Wm9W969s1zDEYvgyNxsbOsCfZp0.roa Signing time: Fri 02 Jan 2026 14:19:01 +0000 ROA not before: Fri 02 Jan 2026 14:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209372 IP address blocks: 77.90.158.0/24 maxlen: 24 77.90.159.0/24 maxlen: 24 77.90.160.0/24 maxlen: 24 77.90.161.0/24 maxlen: 24 77.90.162.0/24 maxlen: 24 77.90.163.0/24 maxlen: 24 77.90.165.0/24 maxlen: 24 77.90.167.0/24 maxlen: 24 77.90.168.0/24 maxlen: 24 77.90.169.0/24 maxlen: 24 77.90.170.0/24 maxlen: 24 77.90.171.0/24 maxlen: 24 77.90.172.0/24 maxlen: 24 77.90.174.0/24 maxlen: 24 77.90.175.0/24 maxlen: 24 77.90.177.0/24 maxlen: 24 77.90.182.0/24 maxlen: 24 77.90.186.0/24 maxlen: 24 213.209.131.0/24 maxlen: 24 213.209.135.0/24 maxlen: 24 213.209.137.0/24 maxlen: 24 213.209.139.0/24 maxlen: 24 213.209.152.0/24 maxlen: 24 213.209.153.0/24 maxlen: 24 213.209.154.0/24 maxlen: 24 213.209.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:79:82:f3:35:14:8f:0c:00:c1:3e:af:c4:c9:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Jan 2 14:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a6f56f7af6cd730c462f832371b1b3ac09f669d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:99:33:11:a2:e2:6b:f6:5f:4b:28:12:9f:62: 67:43:2a:4d:bb:e1:d8:d2:61:cb:1b:dd:f4:56:50: cc:89:31:71:af:a2:7d:09:9b:ec:c4:ae:9e:d1:0d: 4f:66:1c:b8:db:5d:63:64:b1:09:65:45:26:0f:b9: 40:2f:99:ff:06:d4:69:99:bd:74:36:b7:cb:f7:98: 70:11:60:6c:14:a2:d6:3b:9c:ba:87:60:0d:b3:b8: 79:6a:e7:6c:8d:04:63:3e:76:d0:93:a6:06:84:9f: 9b:23:78:db:99:00:0f:4d:7b:b1:c9:63:b8:12:0e: 24:17:2c:38:83:de:16:99:ee:5d:50:2d:1a:c8:7d: 04:47:8d:df:38:2f:d9:88:42:c5:90:ab:4e:fb:28: 40:3d:16:fb:7c:5d:4c:16:d3:b4:cb:fb:e5:0a:c5: 57:ce:da:43:6a:53:e5:3f:b5:c9:b5:7d:da:bf:84: 08:91:5b:6d:9a:b9:c3:85:e9:43:f7:de:49:c1:87: de:91:2d:8d:54:cf:fe:4f:f9:ff:6d:42:d2:ea:24: 68:ae:55:bf:47:bd:7c:03:34:75:4f:a9:f9:2c:4e: b1:e8:53:a2:1f:47:d0:b3:65:b0:fb:ff:87:8c:b2: 59:19:4d:f3:72:4e:0b:2c:ce:d0:4b:58:17:be:3a: cd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6F:56:F7:AF:6C:D7:30:C4:62:F8:32:37:1B:1B:3A:C0:9F:66:9D X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Wm9W969s1zDEYvgyNxsbOsCfZp0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.158.0-77.90.163.255 77.90.165.0/24 77.90.167.0-77.90.172.255 77.90.174.0/23 77.90.177.0/24 77.90.182.0/24 77.90.186.0/24 213.209.131.0/24 213.209.135.0/24 213.209.137.0/24 213.209.139.0/24 213.209.152.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:85:76:d1:75:35:ae:05:e9:74:5f:9e:e3:87:cf:ea:ab:12: be:cb:16:6e:92:66:87:40:31:34:ba:03:95:96:72:ec:b0:78: c9:1a:31:e7:18:db:03:db:0f:79:b0:6a:8e:31:30:c8:6b:00: ac:26:17:cf:6a:d2:d7:7a:72:e9:2c:bb:4d:d9:df:07:ff:4c: 82:f4:2d:72:cc:78:d8:5f:9d:23:2d:3a:36:e7:b6:a1:cb:de: 02:b0:6e:a6:a4:1f:15:0a:cb:cf:5f:06:da:98:86:3b:a5:fa: 43:49:3e:5c:7e:ea:b5:d9:8a:d7:4e:b9:f3:85:aa:83:91:1d: 70:e7:97:9c:6a:19:6f:b9:09:16:f9:67:76:99:39:3c:19:48: 98:b2:07:bb:31:01:8b:4c:db:1c:de:31:ec:80:d5:01:76:a2: 35:34:1e:08:4a:b0:07:a4:7b:ca:d4:78:28:c4:b1:28:5e:f8: 10:ab:39:5e:70:70:1e:04:e6:ad:15:67:ad:76:ae:13:fb:0f: bc:ca:7a:a9:99:61:81:f9:2b:9c:9c:a6:48:fe:da:39:96:6b: 28:b2:c3:bd:09:e9:e0:32:8c:f1:66:d2:5e:64:17:b3:84:c8: 8e:86:37:f1:66:f7:10:cb:00:eb:6e:d0:1a:ef:7c:8e:3e:30: 77:c4:96:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgISAZt/E3mC8zUUjwwAwT6vxMnrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwMTAyMTQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTZmNTZmN2FmNmNkNzMwYzQ2MmY4MzIzNzFiMWIzYWMwOWY2NjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5kzEaLia/ZfSygSn2JnQypNu+HY 0mHLG930VlDMiTFxr6J9CZvsxK6e0Q1PZhy4211jZLEJZUUmD7lAL5n/BtRpmb10 NrfL95hwEWBsFKLWO5y6h2ANs7h5audsjQRjPnbQk6YGhJ+bI3jbmQAPTXuxyWO4 Eg4kFyw4g94Wme5dUC0ayH0ER43fOC/ZiELFkKtO+yhAPRb7fF1MFtO0y/vlCsVX ztpDalPlP7XJtX3av4QIkVttmrnDhelD995JwYfekS2NVM/+T/n/bULS6iRorlW/ R718AzR1T6n5LE6x6FOiH0fQs2Ww+/+HjLJZGU3zck4LLM7QS1gXvjrNSwIDAQAB o4ICWzCCAlcwHQYDVR0OBBYEFFpvVvevbNcwxGL4MjcbGzrAn2adMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvV205Vzk2OXMxekRFWXZneU54c2JPc0NmWnAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHEGCCsGAQUFBwEHAQH/BGIwYDBeBAIAATBYMAwDBAFNWp4D BAJNWqADBABNWqUwDAMEAE1apwMEAE1arAMEAU1argMEAE1asQMEAE1atgMEAE1a ugMEANXRgwMEANXRhwMEANXRiQMEANXRiwMEAtXRmDANBgkqhkiG9w0BAQsFAAOC AQEAC4V20XU1rgXpdF+e44fP6qsSvssWbpJmh0AxNLoDlZZy7LB4yRox5xjbA9sP ebBqjjEwyGsArCYXz2rS13py6Sy7TdnfB/9MgvQtcsx42F+dIy06Nue2ocveArBu pqQfFQrLz18G2piGO6X6Q0k+XH7qtdmK106584Wqg5EdcOeXnGoZb7kJFvlndpk5 PBlImLIHuzEBi0zbHN4x7IDVAXaiNTQeCEqwB6R7ytR4KMSxKF74EKs5XnBwHgTm rRVnrXauE/sPvMp6qZlhgfkrnJymSP7aOZZrKLLDvQnp4DKM8WbSXmQXs4TIjoY3 8Wb3EMsA627QGu98jj4wd8SWMA== -----END CERTIFICATE-----Generated at Wed Jan 21 07:49:42 2026 by rpki-client