This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/fM0pSnChmM-aO_sLHSbdChqHH7g.roa File: fM0pSnChmM-aO_sLHSbdChqHH7g.roa (raw, json) Hash identifier: 2W4rCamqxt549Cj/WG+ZzhurssUczkcfb5l9wZfO9vo= Subject key identifier: 7C:CD:29:4A:70:A1:98:CF:9A:3B:FB:0B:1D:26:DD:0A:1A:87:1F:B8 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019B7F1371A0684B25C279EB09A3D0F7B022 Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/fM0pSnChmM-aO_sLHSbdChqHH7g.roa Signing time: Fri 02 Jan 2026 14:18:59 +0000 ROA not before: Fri 02 Jan 2026 14:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30058 IP address blocks: 77.90.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:71:a0:68:4b:25:c2:79:eb:09:a3:d0:f7:b0:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Jan 2 14:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ccd294a70a198cf9a3bfb0b1d26dd0a1a871fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:dd:c9:3f:c3:2b:ed:44:24:38:d8:fb:b6:9b: 5d:65:2b:3e:ff:ed:44:c2:b7:85:ad:e6:9f:2f:70: de:b4:26:85:ad:20:c0:d5:0e:5a:80:76:ae:2a:bc: f3:bf:74:ea:90:69:b7:30:4e:38:6a:aa:74:59:18: c2:69:bb:87:b3:a0:be:98:16:db:39:04:9a:fe:9e: 75:a3:f5:fa:7e:b6:a3:77:98:67:8f:f5:0f:0b:e0: de:98:ce:d5:a8:19:40:9d:db:72:74:79:06:7b:5d: ca:8b:5a:1a:c9:9a:8c:4a:2d:e6:e4:b9:d6:5d:5e: 32:ef:01:33:88:cc:32:8b:7d:2d:e5:bf:27:32:15: eb:c3:80:88:ce:a8:86:0f:61:07:dc:80:50:bd:40: 75:3b:77:76:f7:ff:f1:08:6f:eb:51:23:c9:70:a6: 7a:52:7e:f7:6a:58:3a:f0:90:4a:3d:83:11:c5:20: 5e:8a:6e:a7:5f:c7:69:cb:35:76:c4:93:15:8a:10: 10:05:b6:50:b7:97:b8:75:4f:6b:64:b8:a2:3a:11: 63:db:ef:21:4e:39:74:6b:be:3e:8d:e0:29:26:ee: b2:71:86:29:43:0e:fa:b0:79:7c:a5:d7:a9:e3:e2: b1:52:63:5c:9d:c7:7c:9f:72:0d:74:04:d5:9c:81: 6d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CD:29:4A:70:A1:98:CF:9A:3B:FB:0B:1D:26:DD:0A:1A:87:1F:B8 X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/fM0pSnChmM-aO_sLHSbdChqHH7g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.183.0/24 Signature Algorithm: sha256WithRSAEncryption ad:ed:18:fa:51:85:dd:e5:42:ed:0d:d5:83:e4:54:d5:ab:46: 0a:14:d7:bd:b5:1c:75:f0:1a:1b:6c:fc:96:3f:90:d9:48:99: 1f:f4:6d:2e:db:56:8a:2c:73:e1:28:5a:43:cb:e6:b6:39:7c: f4:df:41:99:56:0a:82:fb:eb:35:db:47:61:65:72:12:26:a6: 88:af:3f:76:86:40:50:0e:44:3a:6a:4b:1e:46:55:8f:7a:74: be:e1:6a:fa:c0:98:2e:53:02:9a:c2:70:fd:47:57:22:9d:21: 73:e9:f8:13:df:b2:d6:21:ee:ab:47:f9:63:0f:24:37:e3:67: 51:80:39:d6:bc:51:ac:41:4e:b9:7d:b5:17:35:b9:ed:5a:32: 78:02:78:01:a0:b3:8d:82:22:77:e2:02:56:71:ff:78:5b:53: e0:36:e0:63:14:d1:a0:74:9a:42:a6:b6:d2:d1:14:98:73:8f: 02:2d:e8:7e:fe:a4:b1:1f:60:73:28:ec:a3:71:c8:be:59:55: 87:a7:31:8f:34:89:2b:dd:63:3b:89:50:58:7a:03:56:4c:a5: 12:8a:6e:4f:b4:32:e3:ca:58:b2:49:99:3b:ff:cc:cc:2b:6b: 91:22:72:e1:1f:0c:9c:2e:40:6a:99:6b:35:13:ca:13:ac:7b: 0d:91:c6:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E3GgaEslwnnrCaPQ97AiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwMTAyMTQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2NkMjk0YTcwYTE5OGNmOWEzYmZiMGIxZDI2ZGQwYTFhODcxZmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt3JP8Mr7UQkONj7tptdZSs+/+1E wreFreafL3DetCaFrSDA1Q5agHauKrzzv3TqkGm3ME44aqp0WRjCabuHs6C+mBbb OQSa/p51o/X6frajd5hnj/UPC+DemM7VqBlAndtydHkGe13Ki1oayZqMSi3m5LnW XV4y7wEziMwyi30t5b8nMhXrw4CIzqiGD2EH3IBQvUB1O3d29//xCG/rUSPJcKZ6 Un73alg68JBKPYMRxSBeim6nX8dpyzV2xJMVihAQBbZQt5e4dU9rZLiiOhFj2+8h Tjl0a74+jeApJu6ycYYpQw76sHl8pdep4+KxUmNcncd8n3INdATVnIFtcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHzNKUpwoZjPmjv7Cx0m3Qoahx+4MB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvZk0wcFNuQ2htTS1hT19zTEhTYmRDaHFISDdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVq3MA0G CSqGSIb3DQEBCwUAA4IBAQCt7Rj6UYXd5ULtDdWD5FTVq0YKFNe9tRx18BobbPyW P5DZSJkf9G0u21aKLHPhKFpDy+a2OXz030GZVgqC++s120dhZXISJqaIrz92hkBQ DkQ6akseRlWPenS+4Wr6wJguUwKawnD9R1cinSFz6fgT37LWIe6rR/ljDyQ342dR gDnWvFGsQU65fbUXNbntWjJ4AngBoLONgiJ34gJWcf94W1PgNuBjFNGgdJpCprbS 0RSYc48CLeh+/qSxH2BzKOyjcci+WVWHpzGPNIkr3WM7iVBYegNWTKUSim5PtDLj yliySZk7/8zMK2uRInLhHwycLkBqmWs1E8oTrHsNkcZS -----END CERTIFICATE-----Generated at Tue Jan 20 12:45:12 2026 by rpki-client