This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gv1ZNmqY2GrpZPu70UbLDv4-F8M.roa File: gv1ZNmqY2GrpZPu70UbLDv4-F8M.roa (raw, json) Hash identifier: SA9iSlhFoiRJude9Y23Vv3UFkKSJcKsRqSkxpm7bMoQ= Subject key identifier: 82:FD:59:36:6A:98:D8:6A:E9:64:FB:BB:D1:46:CB:0E:FE:3E:17:C3 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019AFD5AC2B0FEC20512B6A111B53B56470C Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gv1ZNmqY2GrpZPu70UbLDv4-F8M.roa Signing time: Mon 08 Dec 2025 09:46:14 +0000 ROA not before: Mon 08 Dec 2025 09:46:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207695 IP address blocks: 77.90.41.0/24 maxlen: 24 77.90.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:5a:c2:b0:fe:c2:05:12:b6:a1:11:b5:3b:56:47:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 8 09:46:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=82fd59366a98d86ae964fbbbd146cb0efe3e17c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f0:dd:1f:3d:82:7b:92:c6:66:46:3e:f5:97: 21:45:aa:da:cb:42:70:b6:8d:4d:c7:df:20:0b:af: 05:30:7e:39:40:07:22:84:46:12:ee:57:8f:a2:43: 71:87:e0:a3:77:a3:42:ce:36:ee:98:40:11:86:e4: a9:af:52:33:0f:01:3e:fa:7f:8b:eb:8b:94:9d:b3: 55:da:3d:f8:58:f7:03:c5:0c:17:8b:ec:df:04:07: bf:48:b7:c2:30:bb:45:ea:f7:7d:a3:6b:c0:23:9e: 08:7f:ba:4b:0f:c4:50:e6:e7:2c:df:17:2f:a7:58: 49:cf:e1:d4:08:94:9e:8a:28:fd:d5:4e:32:10:37: 28:c0:f2:8b:0c:39:e5:58:9c:02:36:4d:f2:73:61: 81:2a:3a:95:2a:1c:bd:38:3e:e3:15:0a:30:bb:cf: 21:32:47:5d:af:de:4b:21:96:bc:ce:86:f1:30:ee: c2:9b:34:d5:d7:45:6f:a2:ed:89:a2:af:b9:d1:e7: 79:4f:35:60:01:bc:fd:5c:58:b5:89:5a:62:09:8d: 5d:e6:88:24:a9:d2:91:ce:24:a5:52:1d:2b:35:c4: f7:1a:c3:8c:48:97:ca:6a:14:59:13:cb:c9:44:5c: e0:51:44:56:35:4d:52:87:98:ec:17:e8:a6:8e:19: 6d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FD:59:36:6A:98:D8:6A:E9:64:FB:BB:D1:46:CB:0E:FE:3E:17:C3 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gv1ZNmqY2GrpZPu70UbLDv4-F8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.41.0/24 77.90.52.0/24 Signature Algorithm: sha256WithRSAEncryption a5:cd:21:e1:82:3d:79:9f:e2:c0:e6:e8:40:b5:d0:2d:b9:a4: ab:ab:83:36:b3:19:3f:8f:97:cf:41:10:39:81:c7:67:11:0b: 21:15:73:f7:3f:06:bb:d5:f8:4d:f9:23:1d:b7:00:d1:a8:56: ef:de:2c:1d:b6:bf:92:3a:d2:3f:73:f3:9c:d2:56:f7:5c:25: bc:0b:74:af:56:3b:98:88:3b:6d:17:f5:ca:bd:0f:eb:15:4a: 3f:f2:c7:82:e7:a7:61:07:50:09:49:21:e8:5e:ee:03:28:75: be:63:92:74:86:09:77:81:d0:6d:fe:86:99:df:4e:2b:68:ba: cc:ae:41:f8:08:65:97:86:64:d5:87:11:c0:df:da:32:16:fb: ec:b0:35:26:73:4b:23:aa:f2:40:a5:be:2d:1a:db:a3:87:72: e3:12:0c:71:0d:48:47:c7:a1:41:1d:3a:34:92:ef:3e:7a:2b: f6:11:46:3b:c6:41:b5:b2:29:c0:08:66:f2:e9:f3:7b:54:43: e6:4c:97:86:df:13:a9:f0:e8:a5:17:d4:94:43:c0:eb:fc:5f: 65:7c:60:84:48:c7:b4:90:65:72:c5:25:ee:f0:3f:9d:c8:33: c6:3b:a3:90:03:2a:2d:e8:48:0c:66:e9:30:11:d9:e2:c5:ce: 09:23:19:bf -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZr9WsKw/sIFErahEbU7VkcMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjA4MDk0NjE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmZkNTkzNjZhOThkODZhZTk2NGZiYmJkMTQ2Y2IwZWZlM2UxN2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPDdHz2Ce5LGZkY+9ZchRaray0Jw to1Nx98gC68FMH45QAcihEYS7lePokNxh+Cjd6NCzjbumEARhuSpr1IzDwE++n+L 64uUnbNV2j34WPcDxQwXi+zfBAe/SLfCMLtF6vd9o2vAI54If7pLD8RQ5ucs3xcv p1hJz+HUCJSeiij91U4yEDcowPKLDDnlWJwCNk3yc2GBKjqVKhy9OD7jFQowu88h Mkddr95LIZa8zobxMO7CmzTV10Vvou2Joq+50ed5TzVgAbz9XFi1iVpiCY1d5ogk qdKRziSlUh0rNcT3GsOMSJfKahRZE8vJRFzgUURWNU1Sh5jsF+imjhltGwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIL9WTZqmNhq6WT7u9FGyw7+PhfDMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvZ3YxWk5tcVkyR3JwWlB1NzBVYkxEdjQtRjhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVopAwQA TVo0MA0GCSqGSIb3DQEBCwUAA4IBAQClzSHhgj15n+LA5uhAtdAtuaSrq4M2sxk/ j5fPQRA5gcdnEQshFXP3Pwa71fhN+SMdtwDRqFbv3iwdtr+SOtI/c/Oc0lb3XCW8 C3SvVjuYiDttF/XKvQ/rFUo/8seC56dhB1AJSSHoXu4DKHW+Y5J0hgl3gdBt/oaZ 304raLrMrkH4CGWXhmTVhxHA39oyFvvssDUmc0sjqvJApb4tGtujh3LjEgxxDUhH x6FBHTo0ku8+eiv2EUY7xkG1sinACGby6fN7VEPmTJeG3xOp8OilF9SUQ8Dr/F9l fGCESMe0kGVyxSXu8D+dyDPGO6OQAyot6EgMZukwEdnixc4JIxm/ -----END CERTIFICATE-----Generated at Fri Dec 19 20:55:23 2025 by rpki-client