This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/iytQpP8cOKt_SZr-dWu1mE4wm4s.roa File: iytQpP8cOKt_SZr-dWu1mE4wm4s.roa (raw, json) Hash identifier: yu00tFptzGFBvQTaVZf5FqouszpkfBRiVtW4WyFln90= Subject key identifier: 8B:2B:50:A4:FF:1C:38:AB:7F:49:9A:FE:75:6B:B5:98:4E:30:9B:8B Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019B7F1376255F64930B83C9067BE756D929 Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/iytQpP8cOKt_SZr-dWu1mE4wm4s.roa Signing time: Fri 02 Jan 2026 14:19:00 +0000 ROA not before: Fri 02 Jan 2026 14:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62425 IP address blocks: 77.90.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:76:25:5f:64:93:0b:83:c9:06:7b:e7:56:d9:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Jan 2 14:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b2b50a4ff1c38ab7f499afe756bb5984e309b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:aa:5a:79:56:e6:17:9a:d5:8c:0e:df:a4:7c: 6d:ad:1f:f2:cd:fe:53:40:d9:b7:38:69:c2:3f:20: fd:4d:b8:db:f2:e0:e3:d0:d9:5c:df:eb:53:22:cb: 3a:e3:dc:e1:74:6d:e4:3b:fd:34:36:65:25:eb:5a: f4:d1:e0:59:89:97:30:67:8d:79:96:f6:e6:0f:0b: 1f:97:1b:2e:7f:be:4a:46:ee:1f:03:3d:9b:c5:76: e9:b6:87:e8:ba:f8:35:7c:e9:0b:2c:a4:5f:94:c8: 8f:27:a4:a1:50:a3:b2:a8:8d:93:65:11:44:25:c4: 1d:17:91:dc:dd:42:df:b3:25:a2:dd:d6:de:61:52: 20:94:61:2e:de:66:dc:01:b8:e2:ee:d0:29:da:83: c5:56:f9:f2:45:95:cb:c9:8b:13:1b:9a:42:80:0f: 6e:7d:f6:a2:35:78:49:e2:29:be:45:76:be:62:26: 24:e4:01:20:e0:ef:2a:e2:c0:b3:19:68:ef:98:73: 85:87:b2:df:d1:ee:5d:b7:1d:0b:f3:07:17:0d:67: 01:2b:0d:b3:bc:0d:ae:6c:ec:83:4e:94:b6:b2:0e: 68:7f:6d:8f:4d:bb:87:cb:bf:d6:5e:e9:22:d3:bb: dc:4a:00:71:5a:9b:28:f7:96:e3:f1:32:b7:98:36: a2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:2B:50:A4:FF:1C:38:AB:7F:49:9A:FE:75:6B:B5:98:4E:30:9B:8B X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/iytQpP8cOKt_SZr-dWu1mE4wm4s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.131.0/24 Signature Algorithm: sha256WithRSAEncryption ac:1a:38:65:a0:e3:46:cb:db:3a:32:62:bb:c2:1d:93:b2:28: 80:1e:60:d3:13:41:4b:5b:5f:c0:c0:e5:e3:a7:5f:19:2a:b9: 01:eb:dd:ff:b6:e4:1d:74:d8:9b:a4:48:88:ae:ac:bb:bf:e9: f6:a1:82:73:ec:04:d0:77:0d:0b:d7:16:a6:22:d5:83:fb:2f: a0:f2:a7:0f:ec:8b:c0:c9:77:ff:2c:7e:27:5d:0d:2a:a7:2e: e7:8e:4e:75:cc:0a:bc:30:82:cb:12:55:d8:fb:3c:4b:a6:32: 58:75:e1:f8:f7:12:06:c8:7e:6d:0f:b4:01:e6:c5:47:d8:43: 94:28:b7:82:7e:53:ad:04:36:3a:52:85:4f:02:ae:fb:e2:ef: 83:ab:e9:1e:4c:e6:f7:30:4f:3c:8d:28:4c:ff:49:e5:55:83: d0:30:75:eb:4c:d1:c5:7d:66:f7:09:8d:82:a6:11:d7:0f:dc: 14:88:06:cd:c5:9d:43:c5:02:02:44:9c:e7:a3:53:bc:76:bb: 4d:45:2e:e3:63:fb:b4:40:d3:71:d9:97:aa:5e:d9:bf:30:ec: 18:bf:98:3c:89:15:0e:35:59:d6:cb:6f:cd:c0:a3:13:37:a6: 1a:03:37:bd:0e:36:2e:d5:0b:be:a9:77:b6:e1:5b:8d:01:73: b3:e1:9c:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E3YlX2STC4PJBnvnVtkpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwMTAyMTQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjJiNTBhNGZmMWMzOGFiN2Y0OTlhZmU3NTZiYjU5ODRlMzA5YjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qpaeVbmF5rVjA7fpHxtrR/yzf5T QNm3OGnCPyD9Tbjb8uDj0Nlc3+tTIss649zhdG3kO/00NmUl61r00eBZiZcwZ415 lvbmDwsflxsuf75KRu4fAz2bxXbptofouvg1fOkLLKRflMiPJ6ShUKOyqI2TZRFE JcQdF5Hc3ULfsyWi3dbeYVIglGEu3mbcAbji7tAp2oPFVvnyRZXLyYsTG5pCgA9u ffaiNXhJ4im+RXa+YiYk5AEg4O8q4sCzGWjvmHOFh7Lf0e5dtx0L8wcXDWcBKw2z vA2ubOyDTpS2sg5of22PTbuHy7/WXuki07vcSgBxWpso95bj8TK3mDaixwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIsrUKT/HDirf0ma/nVrtZhOMJuLMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvaXl0UXBQOGNPS3RfU1pyLWRXdTFtRTR3bTRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVqDMA0G CSqGSIb3DQEBCwUAA4IBAQCsGjhloONGy9s6MmK7wh2TsiiAHmDTE0FLW1/AwOXj p18ZKrkB693/tuQddNibpEiIrqy7v+n2oYJz7ATQdw0L1xamItWD+y+g8qcP7IvA yXf/LH4nXQ0qpy7njk51zAq8MILLElXY+zxLpjJYdeH49xIGyH5tD7QB5sVH2EOU KLeCflOtBDY6UoVPAq774u+Dq+keTOb3ME88jShM/0nlVYPQMHXrTNHFfWb3CY2C phHXD9wUiAbNxZ1DxQICRJzno1O8drtNRS7jY/u0QNNx2ZeqXtm/MOwYv5g8iRUO NVnWy2/NwKMTN6YaAze9DjYu1Qu+qXe24VuNAXOz4ZzX -----END CERTIFICATE-----Generated at Wed Jan 21 07:48:04 2026 by rpki-client