This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/vObQf-9yIZlLVVZBDoK-sQ5xsoM.roa File: vObQf-9yIZlLVVZBDoK-sQ5xsoM.roa (raw, json) Hash identifier: YZx/dQuYWJM5ToVcfaVtj/imOld/qG4uL61E0uaObng= Subject key identifier: BC:E6:D0:7F:EF:72:21:99:4B:55:56:41:0E:82:BE:B1:0E:71:B2:83 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019B7F13782D6219E517F3155B3160EEFEC0 Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/vObQf-9yIZlLVVZBDoK-sQ5xsoM.roa Signing time: Fri 02 Jan 2026 14:19:00 +0000 ROA not before: Fri 02 Jan 2026 14:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207710 IP address blocks: 77.90.177.0/24 maxlen: 24 77.90.186.0/24 maxlen: 24 213.209.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:78:2d:62:19:e5:17:f3:15:5b:31:60:ee:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Jan 2 14:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bce6d07fef7221994b5556410e82beb10e71b283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f9:08:2f:91:14:b1:20:5e:44:9f:3e:66:12: 34:24:a9:34:48:4a:47:8e:4a:a9:c8:50:16:f3:83: 72:56:f4:82:8f:4f:cb:bd:ce:36:7b:7c:61:b5:1b: a0:f6:0d:d4:43:94:1a:64:d3:ef:7f:76:c7:74:e0: 73:1c:d2:08:3e:ae:ea:19:9f:d2:6a:4e:8b:82:c8: 96:3e:c8:0a:ff:bf:7f:e6:78:a6:87:ab:d7:40:4a: 37:9e:44:81:e6:5e:bd:1b:4d:68:99:e5:00:d9:04: 09:9e:eb:9f:95:20:52:1f:6d:2c:3b:db:0f:e7:09: 8c:80:99:b6:3e:05:bc:c4:3f:25:ef:fe:95:b3:6c: fb:7d:d8:03:3a:b4:d2:be:8d:ea:e3:24:48:f2:93: 02:f2:2f:2a:08:6b:29:91:44:f0:0b:49:e3:da:46: ba:60:15:2a:e3:93:47:74:1b:1f:85:95:15:02:95: 12:17:57:dd:e6:88:82:12:00:22:b3:43:3a:a5:af: 15:fe:cd:b0:03:eb:28:3b:19:f4:d8:fb:df:3f:b4: 27:f0:16:93:35:68:0e:17:70:42:7e:24:7e:b1:20: ff:b4:d2:79:67:29:5b:4d:fd:90:c9:31:e1:93:6c: 4e:a6:55:9e:da:e2:01:37:63:a6:04:44:82:d7:0c: 3e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E6:D0:7F:EF:72:21:99:4B:55:56:41:0E:82:BE:B1:0E:71:B2:83 X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/vObQf-9yIZlLVVZBDoK-sQ5xsoM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.177.0/24 77.90.186.0/24 213.209.131.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:1a:ef:a7:cf:7e:9d:96:4c:f1:20:63:e1:b7:82:81:f4:4f: 25:33:e4:1b:ef:a6:ae:56:4a:c0:d5:02:51:2d:1b:d4:ef:af: c1:13:ea:31:a0:dd:94:e6:0a:6a:df:6d:f7:96:28:56:e7:09: e2:74:df:66:a2:23:3a:7e:8e:88:5f:07:57:87:c0:2e:ea:96: 9d:53:54:02:00:3d:05:99:46:55:d0:95:8b:b7:9c:db:bb:75: 09:90:57:2f:a4:7b:83:98:1e:66:fa:64:39:c6:98:98:28:2e: 0c:9f:bd:cf:7f:45:4f:16:52:ac:38:de:04:c2:66:77:f3:8e: 7f:41:38:43:08:ab:63:88:ca:0a:54:60:49:d3:9e:ad:a5:25: 57:09:a7:8d:02:1c:88:17:e9:36:61:bb:6a:2a:57:25:9d:df: 91:08:2c:b0:3e:5f:40:af:8d:b3:d5:5a:23:1f:ba:85:f1:1a: 0b:7c:cd:6d:ec:bd:27:b0:f8:8b:fa:50:7c:c9:a0:d9:b0:13: 3d:67:5d:8c:b6:8f:dc:58:17:0e:f0:f7:cb:9b:48:3f:15:8a: e2:a7:6b:5d:9b:f8:2c:ee:38:9b:0e:47:0e:fa:54:c7:4c:5b: a2:e6:9b:92:40:44:fc:c1:04:67:8e:95:93:7a:fc:e6:21:08: f8:23:7a:f0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/E3gtYhnlF/MVWzFg7v7AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwMTAyMTQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2U2ZDA3ZmVmNzIyMTk5NGI1NTU2NDEwZTgyYmViMTBlNzFiMjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/kIL5EUsSBeRJ8+ZhI0JKk0SEpH jkqpyFAW84NyVvSCj0/Lvc42e3xhtRug9g3UQ5QaZNPvf3bHdOBzHNIIPq7qGZ/S ak6LgsiWPsgK/79/5nimh6vXQEo3nkSB5l69G01omeUA2QQJnuuflSBSH20sO9sP 5wmMgJm2PgW8xD8l7/6Vs2z7fdgDOrTSvo3q4yRI8pMC8i8qCGspkUTwC0nj2ka6 YBUq45NHdBsfhZUVApUSF1fd5oiCEgAis0M6pa8V/s2wA+soOxn02PvfP7Qn8BaT NWgOF3BCfiR+sSD/tNJ5ZylbTf2QyTHhk2xOplWe2uIBN2OmBESC1ww+YwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLzm0H/vciGZS1VWQQ6CvrEOcbKDMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvdk9iUWYtOXlJWmxMVlZaQkRvSy1zUTV4c29NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATVqxAwQA TVq6AwQA1dGDMA0GCSqGSIb3DQEBCwUAA4IBAQCbGu+nz36dlkzxIGPht4KB9E8l M+Qb76auVkrA1QJRLRvU76/BE+oxoN2U5gpq3233lihW5wnidN9moiM6fo6IXwdX h8Au6padU1QCAD0FmUZV0JWLt5zbu3UJkFcvpHuDmB5m+mQ5xpiYKC4Mn73Pf0VP FlKsON4EwmZ3845/QThDCKtjiMoKVGBJ056tpSVXCaeNAhyIF+k2YbtqKlclnd+R CCywPl9Ar42z1VojH7qF8RoLfM1t7L0nsPiL+lB8yaDZsBM9Z12Mto/cWBcO8PfL m0g/FYrip2tdm/gs7jibDkcO+lTHTFui5puSQET8wQRnjpWTevzmIQj4I3rw -----END CERTIFICATE-----Generated at Wed Jan 21 07:47:49 2026 by rpki-client