This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/aPG3EYw2VofOCEzLOdUvwSZioag.roa File: aPG3EYw2VofOCEzLOdUvwSZioag.roa (raw, json) Hash identifier: Wotu54IXEWdJ5q1KogRg82/7w2mseyamEfZGS9yMPLs= Subject key identifier: 68:F1:B7:11:8C:36:56:87:CE:08:4C:CB:39:D5:2F:C1:26:62:A1:A8 Certificate issuer: /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31 Certificate serial: 019B797E575F5584C4FEF016F2B25288C695 Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/aPG3EYw2VofOCEzLOdUvwSZioag.roa Signing time: Thu 01 Jan 2026 12:18:01 +0000 ROA not before: Thu 01 Jan 2026 12:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34120 IP address blocks: 77.90.64.0/21 maxlen: 24 77.90.72.0/22 maxlen: 24 77.90.73.0/24 maxlen: 24 77.90.76.0/22 maxlen: 24 77.90.80.0/22 maxlen: 24 77.90.94.0/23 maxlen: 24 77.90.96.0/23 maxlen: 24 77.90.98.0/24 maxlen: 24 77.90.100.0/23 maxlen: 24 77.90.104.0/21 maxlen: 24 77.90.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:57:5f:55:84:c4:fe:f0:16:f2:b2:52:88:c6:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31 Validity Not Before: Jan 1 12:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68f1b7118c365687ce084ccb39d52fc12662a1a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:04:ba:89:11:48:f9:93:15:ee:e0:44:de:af: b6:74:08:c5:b5:83:8a:cf:0b:68:c0:6b:54:84:b4: eb:86:33:12:9d:ad:90:f9:8f:9d:6e:2f:02:0b:bd: 56:d6:6b:f3:2b:09:db:12:3f:a3:8e:21:b3:bc:aa: 88:2a:a3:f3:28:8c:3c:71:ad:a7:51:16:41:e9:65: e4:fb:a9:80:50:93:82:ee:7d:d8:e8:9e:c6:46:6a: 60:9e:8d:3e:66:c0:09:3b:6b:3f:82:d6:e8:36:2e: f3:12:50:17:ab:d0:27:72:28:ac:ef:e3:c0:76:12: 4a:10:a2:a5:71:bf:23:bc:30:68:36:c2:b3:b4:9e: 3c:58:ff:50:a6:5e:97:44:fc:9f:73:15:a1:1a:54: d7:fa:54:a0:7c:27:b9:38:ce:19:57:ea:12:c1:4b: f6:ea:73:19:10:38:38:91:d3:13:19:81:75:d8:c7: 1c:5c:ed:c0:a3:6e:5e:4c:b3:f4:bd:17:08:74:61: a6:88:14:59:a3:3e:e1:3a:00:c9:aa:f5:b3:05:41: 92:ff:d3:50:43:e1:b8:6d:6e:ae:8e:45:5f:ab:dd: 05:8e:2d:27:d9:b1:0f:9e:85:38:44:81:88:11:18: 78:85:f1:08:e3:7a:da:ed:19:cb:6d:66:66:f8:70: ab:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F1:B7:11:8C:36:56:87:CE:08:4C:CB:39:D5:2F:C1:26:62:A1:A8 X509v3 Authority Key Identifier: keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/aPG3EYw2VofOCEzLOdUvwSZioag.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.64.0-77.90.83.255 77.90.94.0-77.90.98.255 77.90.100.0/23 77.90.104.0-77.90.127.255 Signature Algorithm: sha256WithRSAEncryption 6b:4c:71:8f:0a:c7:d7:ac:99:35:a4:dd:bc:5a:89:65:e2:6c: 31:bb:22:a0:4d:3a:23:e1:e3:4f:58:fe:7b:45:2a:38:8b:44: 67:7c:aa:75:2e:a8:be:48:f2:e0:59:a1:13:e0:4e:13:1b:30: fe:3b:22:e6:c9:75:f0:21:f0:b8:88:e9:51:3e:af:16:28:17: 79:31:f9:17:96:63:66:de:5a:ba:fb:cc:ca:e9:e2:5c:28:da: d4:d5:76:10:76:c4:9d:c1:47:d8:8f:78:20:8a:48:d6:ed:f8: 99:7a:ce:79:e9:b3:6d:71:46:81:0f:54:03:ee:5a:3a:01:2d: 30:aa:d8:e1:18:25:c0:5b:43:89:f6:d5:af:bf:47:ee:b9:38: e9:7e:12:31:49:af:b8:66:ef:26:d8:c8:bb:98:44:72:75:3c: d0:b5:ec:f6:cc:f3:64:6f:be:b3:10:2b:92:81:80:27:9a:56: 3c:3b:bd:ca:4f:f7:80:7b:95:66:e6:52:c7:c8:1a:9f:3b:59: 35:60:b7:c9:71:cd:8a:0d:72:78:de:89:58:05:a0:3c:2f:52: 5e:56:a5:bc:21:ec:97:c6:9a:39:d5:c4:4a:02:3c:9e:a0:08: a1:53:8e:cc:11:55:9b:cb:ed:a5:d1:5e:02:00:64:99:47:17: 99:cc:cf:a5 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt5fldfVYTE/vAW8rJSiMaVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZDc5NGFjNjAxY2UyNTA1YjY1Zjk3NWE3ZDUxNmEyZjAw YTViMzEwHhcNMjYwMTAxMTIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGYxYjcxMThjMzY1Njg3Y2UwODRjY2IzOWQ1MmZjMTI2NjJhMWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAS6iRFI+ZMV7uBE3q+2dAjFtYOK zwtowGtUhLTrhjMSna2Q+Y+dbi8CC71W1mvzKwnbEj+jjiGzvKqIKqPzKIw8ca2n URZB6WXk+6mAUJOC7n3Y6J7GRmpgno0+ZsAJO2s/gtboNi7zElAXq9Anciis7+PA dhJKEKKlcb8jvDBoNsKztJ48WP9Qpl6XRPyfcxWhGlTX+lSgfCe5OM4ZV+oSwUv2 6nMZEDg4kdMTGYF12MccXO3Ao25eTLP0vRcIdGGmiBRZoz7hOgDJqvWzBUGS/9NQ Q+G4bW6ujkVfq90Fji0n2bEPnoU4RIGIERh4hfEI43ra7RnLbWZm+HCr0wIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFGjxtxGMNlaHzghMyznVL8EmYqGoMB8GA1UdIwQY MBaAFMrXlKxgHOJQW2X5dafVFqLwClsxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXRlVXJHQWM0bEJiWmZsMXA5VVdvdkFLV3pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mOWE0YmUtZDc5Yy00MTkyLWE2YjMt M2I5ODhmMTg4ZDkxLzEvYVBHM0VZdzJWb2ZPQ0V6TE9kVXZ3U1ppb2FnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9mOWE0YmUtZDc5Yy00MTkyLWE2YjMtM2I5ODhmMTg4ZDkx LzEveXRlVXJHQWM0bEJiWmZsMXA5VVdvdkFLV3pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwMAwDBAZNWkAD BAJNWlAwDAMEAU1aXgMEAE1aYgMEAU1aZDAMAwQDTVpoAwQHTVoAMA0GCSqGSIb3 DQEBCwUAA4IBAQBrTHGPCsfXrJk1pN28Woll4mwxuyKgTToj4eNPWP57RSo4i0Rn fKp1Lqi+SPLgWaET4E4TGzD+OyLmyXXwIfC4iOlRPq8WKBd5MfkXlmNm3lq6+8zK 6eJcKNrU1XYQdsSdwUfYj3ggikjW7fiZes556bNtcUaBD1QD7lo6AS0wqtjhGCXA W0OJ9tWvv0fuuTjpfhIxSa+4Zu8m2Mi7mERydTzQtez2zPNkb76zECuSgYAnmlY8 O73KT/eAe5Vm5lLHyBqfO1k1YLfJcc2KDXJ43olYBaA8L1JeVqW8IeyXxpo51cRK AjyeoAihU47MEVWby+2l0V4CAGSZRxeZzM+l -----END CERTIFICATE-----Generated at Wed Jan 21 08:37:56 2026 by rpki-client