This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/imz4zogpz3gRWTsTrtdPdQHFIJI.roa File: imz4zogpz3gRWTsTrtdPdQHFIJI.roa (raw, json) Hash identifier: Omm2qGrQmn0g7Ax1AVDShwbJWCjhszNL2cv6OMuwfQg= Subject key identifier: 8A:6C:F8:CE:88:29:CF:78:11:59:3B:13:AE:D7:4F:75:01:C5:20:92 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019B7F137AFA15102D24F05FE9A65FDC51A8 Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/imz4zogpz3gRWTsTrtdPdQHFIJI.roa Signing time: Fri 02 Jan 2026 14:19:01 +0000 ROA not before: Fri 02 Jan 2026 14:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213296 IP address blocks: 77.90.177.0/24 maxlen: 24 213.209.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:7a:fa:15:10:2d:24:f0:5f:e9:a6:5f:dc:51:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Jan 2 14:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a6cf8ce8829cf7811593b13aed74f7501c52092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ed:6d:1f:13:d7:7f:68:e8:8c:18:e1:99:10: 1a:bc:96:27:d4:ea:4e:90:ce:8c:31:87:5c:fd:5b: e5:6a:dd:c8:5f:04:7d:0d:d3:3d:6b:7d:f0:52:a7: 58:26:48:53:f1:1d:42:ae:73:81:e4:11:e5:8e:35: 28:d8:5f:a3:87:34:bc:5a:2d:c5:92:cf:c5:9b:54: 97:0b:b7:ca:73:71:74:ca:f1:7b:49:2d:f9:d0:dd: 4b:56:0f:00:35:fb:f8:28:05:d8:26:33:dc:86:7f: 6c:f9:b6:47:a1:fe:07:c8:d9:0b:dc:a7:3f:d4:8e: 28:b8:47:d8:86:56:f8:2f:9e:d6:51:ba:38:66:c5: 6f:37:10:d7:2d:66:59:9a:68:7f:96:81:6f:7b:f1: 7f:df:b7:31:2c:00:e0:b3:1a:c6:fa:79:60:97:4e: 82:5b:d6:0b:63:b5:fd:d0:4b:1c:79:95:2e:26:a8: 9c:23:da:36:27:aa:3c:d3:45:f7:d4:c7:8b:4d:13: ea:46:11:d7:70:25:23:52:68:b5:31:86:c9:ce:75: ec:bc:b2:2d:f1:87:bc:40:88:e2:41:73:bf:07:44: 5d:c3:cd:06:59:88:71:be:df:94:c7:bb:53:9e:de: 0f:24:2d:0a:fe:14:3c:21:f5:c3:eb:55:f4:1a:bf: 0f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:6C:F8:CE:88:29:CF:78:11:59:3B:13:AE:D7:4F:75:01:C5:20:92 X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/imz4zogpz3gRWTsTrtdPdQHFIJI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.177.0/24 213.209.131.0/24 Signature Algorithm: sha256WithRSAEncryption 85:e5:6a:a0:1d:b9:96:d7:18:16:82:d3:8c:66:62:ed:09:84: 69:24:7b:1d:06:f6:34:ce:73:ce:37:4f:35:80:23:b3:be:58: 74:c6:d7:5d:d6:a1:f2:61:1d:2a:6f:02:1f:17:29:f3:77:16: 0d:64:eb:68:ab:4b:09:81:36:50:e2:3a:d2:91:d8:60:4f:eb: 39:73:71:e4:ec:ef:3e:3f:fb:bc:35:28:1d:22:70:1f:90:60: bf:85:37:a4:4e:3f:25:97:6b:7c:16:ea:5e:81:ce:64:2e:a6: 7b:98:f4:a5:07:14:a3:41:11:95:e2:5a:9a:73:95:72:bd:ae: c0:46:6d:cc:7c:c4:d6:c6:de:e8:64:4d:cd:f3:7e:dd:dd:52: 16:f4:6e:21:d3:1e:42:1c:46:86:ae:db:7c:93:9d:57:24:ee: 34:8d:97:92:0a:88:ab:d9:4e:e4:ab:d4:03:65:cc:ac:2a:78: b3:15:b4:5f:86:92:2a:ac:a9:fd:94:ef:43:74:4c:ab:a8:97: 00:0b:3d:74:30:9a:76:59:20:ed:14:70:8f:a5:c3:28:17:ee: 7b:0e:85:93:64:6c:15:f8:d7:dc:98:24:ae:27:f9:19:f2:a3: 60:70:11:f7:39:d2:31:ff:d0:b3:53:f5:74:c6:23:0f:51:e5: 50:7d:a5:54 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/E3r6FRAtJPBf6aZf3FGoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwMTAyMTQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTZjZjhjZTg4MjljZjc4MTE1OTNiMTNhZWQ3NGY3NTAxYzUyMDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO1tHxPXf2jojBjhmRAavJYn1OpO kM6MMYdc/Vvlat3IXwR9DdM9a33wUqdYJkhT8R1CrnOB5BHljjUo2F+jhzS8Wi3F ks/Fm1SXC7fKc3F0yvF7SS350N1LVg8ANfv4KAXYJjPchn9s+bZHof4HyNkL3Kc/ 1I4ouEfYhlb4L57WUbo4ZsVvNxDXLWZZmmh/loFve/F/37cxLADgsxrG+nlgl06C W9YLY7X90EsceZUuJqicI9o2J6o800X31MeLTRPqRhHXcCUjUmi1MYbJznXsvLIt 8Ye8QIjiQXO/B0Rdw80GWYhxvt+Ux7tTnt4PJC0K/hQ8IfXD61X0Gr8PMQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIps+M6IKc94EVk7E67XT3UBxSCSMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvaW16NHpvZ3B6M2dSV1RzVHJ0ZFBkUUhGSUpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVqxAwQA 1dGDMA0GCSqGSIb3DQEBCwUAA4IBAQCF5WqgHbmW1xgWgtOMZmLtCYRpJHsdBvY0 znPON081gCOzvlh0xtdd1qHyYR0qbwIfFynzdxYNZOtoq0sJgTZQ4jrSkdhgT+s5 c3Hk7O8+P/u8NSgdInAfkGC/hTekTj8ll2t8Fupegc5kLqZ7mPSlBxSjQRGV4lqa c5Vyva7ARm3MfMTWxt7oZE3N837d3VIW9G4h0x5CHEaGrtt8k51XJO40jZeSCoir 2U7kq9QDZcysKnizFbRfhpIqrKn9lO9DdEyrqJcACz10MJp2WSDtFHCPpcMoF+57 DoWTZGwV+NfcmCSuJ/kZ8qNgcBH3OdIx/9CzU/V0xiMPUeVQfaVU -----END CERTIFICATE-----Generated at Tue Jan 20 00:56:17 2026 by rpki-client