This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/v1tSGd3C-K9-06m4B94Gav_UhK0.roa File: v1tSGd3C-K9-06m4B94Gav_UhK0.roa (raw, json) Hash identifier: KWqnrWgZy/fH64jimxEEgQFW0ax9yNje1IAv772G7mg= Subject key identifier: BF:5B:52:19:DD:C2:F8:AF:7E:D3:A9:B8:07:DE:06:6A:FF:D4:84:AD Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019B7F137877FF335A86845DC8614F8D3517 Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/v1tSGd3C-K9-06m4B94Gav_UhK0.roa Signing time: Fri 02 Jan 2026 14:19:01 +0000 ROA not before: Fri 02 Jan 2026 14:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207795 IP address blocks: 77.90.177.0/24 maxlen: 24 213.209.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:78:77:ff:33:5a:86:84:5d:c8:61:4f:8d:35:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Jan 2 14:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf5b5219ddc2f8af7ed3a9b807de066affd484ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:56:85:d7:b5:45:9c:87:d6:be:9b:72:17:1f: a4:83:5a:41:ca:cc:76:17:3e:4f:ea:32:00:48:cb: 18:58:6c:53:20:ab:da:f7:ef:b5:74:36:be:c0:4f: bb:8d:e5:fa:be:a3:77:da:c7:d4:02:7e:4b:c3:fb: 65:a5:76:1f:13:bb:ed:e1:4c:e3:b0:71:0e:ce:b3: 65:e2:b2:95:fd:7b:50:6c:03:42:6b:06:e0:3e:9a: 7b:64:16:75:7d:bf:12:90:b3:18:35:17:6c:58:f5: 39:fe:3c:1e:aa:8c:4e:f3:0f:56:07:69:4f:e6:f2: 59:9f:ab:72:ca:a4:fe:b7:cc:9c:09:ae:3b:53:69: 80:e8:34:c7:03:91:77:c5:79:b7:92:71:ba:07:6d: ea:66:83:f1:3c:ce:a5:0b:70:c1:2f:29:4b:aa:9b: 01:94:15:4d:27:f3:b7:12:b1:db:4c:e7:1c:a3:af: e7:99:e3:74:a2:50:03:02:10:b8:9d:79:95:0b:57: d7:c6:09:8a:52:e3:d4:6d:95:18:a4:dd:c2:2c:23: 47:43:8c:a8:92:17:6f:af:cf:d3:77:81:c8:59:2c: 3a:a0:61:38:c0:20:a4:12:de:13:c5:80:9a:0d:fc: 60:35:e0:28:bb:ec:64:0a:6b:43:80:29:55:27:56: db:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:5B:52:19:DD:C2:F8:AF:7E:D3:A9:B8:07:DE:06:6A:FF:D4:84:AD X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/v1tSGd3C-K9-06m4B94Gav_UhK0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.177.0/24 213.209.131.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:0c:c8:78:d0:ca:63:a0:fa:8a:4e:c4:50:08:3f:bc:a8:2c: 50:db:c0:b6:39:6b:97:6f:0f:4c:0d:a2:b0:63:94:3a:05:be: 67:c2:d0:f7:bc:13:a1:46:da:fd:c0:0c:fc:5f:da:38:1f:81: db:89:e8:fe:21:45:5b:96:1c:22:33:5c:77:d9:2c:70:db:0c: 23:4a:19:1f:30:5f:06:94:d1:d4:e9:a4:18:5e:0c:a3:31:0d: f3:19:af:4c:e1:84:0b:a9:6d:69:aa:bd:96:42:c6:b9:b8:f7: 51:d6:29:af:e0:7f:65:0f:fa:55:dc:41:96:80:7e:92:61:d8: 79:97:0d:3f:6a:bc:61:a6:37:cf:0e:38:bb:78:a7:66:ec:63: 4f:06:77:40:17:c4:ee:5c:79:ae:a3:e4:a0:ec:ae:c6:9c:88: 2e:4e:3a:18:a9:c8:4b:a4:31:12:f4:fd:e0:30:03:b1:01:50: ca:d0:7d:85:52:85:6f:de:c6:22:53:8e:6c:66:b6:6a:f9:1b: c6:a5:06:97:8c:b4:9f:44:1b:64:e2:c9:a5:65:68:66:e6:90: fe:7f:2e:dc:27:95:7f:cd:01:e4:79:f6:15:4f:bb:b1:d6:f2: f7:88:43:a1:b3:41:01:07:41:57:22:34:b1:d5:d7:02:90:73: 3e:b3:04:aa -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/E3h3/zNahoRdyGFPjTUXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwMTAyMTQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjViNTIxOWRkYzJmOGFmN2VkM2E5YjgwN2RlMDY2YWZmZDQ4NGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFaF17VFnIfWvptyFx+kg1pBysx2 Fz5P6jIASMsYWGxTIKva9++1dDa+wE+7jeX6vqN32sfUAn5Lw/tlpXYfE7vt4Uzj sHEOzrNl4rKV/XtQbANCawbgPpp7ZBZ1fb8SkLMYNRdsWPU5/jweqoxO8w9WB2lP 5vJZn6tyyqT+t8ycCa47U2mA6DTHA5F3xXm3knG6B23qZoPxPM6lC3DBLylLqpsB lBVNJ/O3ErHbTOcco6/nmeN0olADAhC4nXmVC1fXxgmKUuPUbZUYpN3CLCNHQ4yo khdvr8/Td4HIWSw6oGE4wCCkEt4TxYCaDfxgNeAou+xkCmtDgClVJ1bb4wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL9bUhndwvivftOpuAfeBmr/1IStMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvdjF0U0dkM0MtSzktMDZtNEI5NEdhdl9VaEswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVqxAwQA 1dGDMA0GCSqGSIb3DQEBCwUAA4IBAQALDMh40MpjoPqKTsRQCD+8qCxQ28C2OWuX bw9MDaKwY5Q6Bb5nwtD3vBOhRtr9wAz8X9o4H4Hbiej+IUVblhwiM1x32Sxw2wwj ShkfMF8GlNHU6aQYXgyjMQ3zGa9M4YQLqW1pqr2WQsa5uPdR1imv4H9lD/pV3EGW gH6SYdh5lw0/arxhpjfPDji7eKdm7GNPBndAF8TuXHmuo+Sg7K7GnIguTjoYqchL pDES9P3gMAOxAVDK0H2FUoVv3sYiU45sZrZq+RvGpQaXjLSfRBtk4smlZWhm5pD+ fy7cJ5V/zQHkefYVT7ux1vL3iEOhs0EBB0FXIjSx1dcCkHM+swSq -----END CERTIFICATE-----Generated at Tue Jan 20 00:56:52 2026 by rpki-client