This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/XMyLdOS2bIE96SI_Y7vrT4NRElA.roa File: XMyLdOS2bIE96SI_Y7vrT4NRElA.roa (raw, json) Hash identifier: 7LMGDq5jvyak0GBeomNmhFa4WQbFzhagQ7kTGAIWNrE= Subject key identifier: 5C:CC:8B:74:E4:B6:6C:81:3D:E9:22:3F:63:BB:EB:4F:83:51:12:50 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019B7F1373C5A19F290AE2109C795EE661DE Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/XMyLdOS2bIE96SI_Y7vrT4NRElA.roa Signing time: Fri 02 Jan 2026 14:18:59 +0000 ROA not before: Fri 02 Jan 2026 14:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51765 IP address blocks: 77.90.176.0/24 maxlen: 24 77.90.187.0/24 maxlen: 24 213.209.132.0/24 maxlen: 24 213.209.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:73:c5:a1:9f:29:0a:e2:10:9c:79:5e:e6:61:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Jan 2 14:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ccc8b74e4b66c813de9223f63bbeb4f83511250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:03:91:75:bd:0c:7a:99:55:82:11:6c:78:32: 90:03:61:f2:9d:f1:9a:17:cb:bb:22:4c:4c:8d:bc: 7f:76:e4:14:1a:14:ef:ba:bc:9e:af:1a:84:aa:b9: 12:3a:b7:2c:ba:17:0b:8e:f0:b5:6b:db:40:27:6c: d1:7d:91:f5:2f:57:8b:b9:df:80:ab:7a:1d:1e:46: d9:57:04:f9:8d:43:dc:41:d4:70:35:83:a8:74:a4: aa:3e:13:70:54:75:a8:68:1f:66:5c:3b:33:bd:2c: 91:c0:72:cb:5e:63:0e:a6:5c:2e:ef:e6:69:6f:24: 40:b6:0f:4a:c5:57:d2:00:f1:a1:e2:f8:15:7e:dd: ce:cb:05:be:b5:9f:8e:b4:1d:51:94:67:d2:4d:0c: db:ac:a4:8a:ff:f9:53:0a:78:12:68:01:43:a9:12: 67:e9:fe:f0:9e:15:46:f1:98:2f:3a:0d:33:2f:09: 65:e1:a4:a5:70:47:ca:0f:72:39:cd:de:d1:12:3a: bb:0f:46:57:fb:57:28:2b:b0:e7:53:0f:5f:df:ed: 62:0f:27:66:7a:b5:16:59:09:37:27:11:54:1c:c7: 46:2a:6d:8b:7e:0d:73:31:0a:12:4d:bd:f8:7b:09: 62:66:b9:81:94:cc:30:c2:5c:34:c2:a6:6a:3f:b2: b8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CC:8B:74:E4:B6:6C:81:3D:E9:22:3F:63:BB:EB:4F:83:51:12:50 X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/XMyLdOS2bIE96SI_Y7vrT4NRElA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.176.0/24 77.90.187.0/24 213.209.132.0/24 213.209.148.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:22:60:7e:04:3b:d3:d9:f2:20:6e:0b:53:14:b5:3f:a8:12: e5:b9:76:e0:37:8c:f2:65:c5:7d:ca:46:7c:54:5d:07:19:f5: 6b:45:a7:44:16:de:d4:7a:9d:89:38:ec:cb:d3:e8:b2:c5:25: a1:2f:c6:37:f5:ef:e2:6a:e5:14:30:f0:f6:e9:f6:49:ea:be: 10:67:b4:f8:7d:86:3a:55:be:46:e2:af:5b:db:cb:3e:42:d6: 7c:a2:b9:92:a3:de:9e:b8:95:ee:ea:6b:f0:f5:e2:3c:4f:07: 90:ea:c1:38:ad:39:43:cf:45:0a:17:a9:92:ba:05:72:cf:31: d6:61:38:fd:05:ce:92:1c:88:c1:f3:e1:a8:aa:79:2e:10:be: a8:b6:34:2a:9f:2f:94:f9:9d:67:32:07:a1:07:7f:b2:85:3f: eb:63:e4:80:0d:cf:fd:b1:ae:11:de:6e:e9:07:df:b5:b5:38: a3:26:f8:7c:8f:f5:9a:1a:c1:07:54:a8:d2:b5:e3:bf:18:b5: ed:94:a1:05:a8:62:fa:d3:c7:09:93:85:6e:b6:c9:79:ec:af: 8a:22:34:6c:b7:5e:a2:46:3c:47:f1:2f:d5:e0:a7:cb:d9:18: b8:20:e6:9a:3e:14:df:07:f3:87:92:b1:d4:f4:f8:5a:9c:17: 34:03:8d:04 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/E3PFoZ8pCuIQnHle5mHeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwMTAyMTQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2NjOGI3NGU0YjY2YzgxM2RlOTIyM2Y2M2JiZWI0ZjgzNTExMjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQORdb0MeplVghFseDKQA2HynfGa F8u7IkxMjbx/duQUGhTvuryerxqEqrkSOrcsuhcLjvC1a9tAJ2zRfZH1L1eLud+A q3odHkbZVwT5jUPcQdRwNYOodKSqPhNwVHWoaB9mXDszvSyRwHLLXmMOplwu7+Zp byRAtg9KxVfSAPGh4vgVft3OywW+tZ+OtB1RlGfSTQzbrKSK//lTCngSaAFDqRJn 6f7wnhVG8ZgvOg0zLwll4aSlcEfKD3I5zd7REjq7D0ZX+1coK7DnUw9f3+1iDydm erUWWQk3JxFUHMdGKm2Lfg1zMQoSTb34ewliZrmBlMwwwlw0wqZqP7K4bwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFFzMi3TktmyBPekiP2O760+DURJQMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvWE15TGRPUzJiSUU5NlNJX1k3dnJUNE5SRWxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQATVqwAwQA TVq7AwQA1dGEAwQA1dGUMA0GCSqGSIb3DQEBCwUAA4IBAQCbImB+BDvT2fIgbgtT FLU/qBLluXbgN4zyZcV9ykZ8VF0HGfVrRadEFt7Uep2JOOzL0+iyxSWhL8Y39e/i auUUMPD26fZJ6r4QZ7T4fYY6Vb5G4q9b28s+QtZ8ormSo96euJXu6mvw9eI8TweQ 6sE4rTlDz0UKF6mSugVyzzHWYTj9Bc6SHIjB8+GoqnkuEL6otjQqny+U+Z1nMgeh B3+yhT/rY+SADc/9sa4R3m7pB9+1tTijJvh8j/WaGsEHVKjSteO/GLXtlKEFqGL6 08cJk4Vutsl57K+KIjRst16iRjxH8S/V4KfL2Ri4IOaaPhTfB/OHkrHU9PhanBc0 A40E -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:53 2026 by rpki-client