This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1-mYbw_K7Fr5PIV-Hb2DU_D-_00Y.roa File: 1-mYbw_K7Fr5PIV-Hb2DU_D-_00Y.roa (raw, json) Hash identifier: CijRr1/U9Y55SiyyAmAWKCwOLoctai7fBclCHYzh7Fk= Subject key identifier: FA:66:1B:C3:F2:BB:16:BE:4F:21:5F:87:6F:60:D4:FC:3F:BF:D3:46 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019B37D95A0A095DB03E2A557AB44D2F4D18 Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1-mYbw_K7Fr5PIV-Hb2DU_D-_00Y.roa Signing time: Fri 19 Dec 2025 18:22:29 +0000 ROA not before: Fri 19 Dec 2025 18:22:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42821 IP address blocks: 77.90.128.0/24 maxlen: 24 77.90.129.0/24 maxlen: 24 77.90.130.0/24 maxlen: 24 77.90.132.0/24 maxlen: 24 77.90.133.0/24 maxlen: 24 77.90.134.0/24 maxlen: 24 77.90.136.0/24 maxlen: 24 77.90.137.0/24 maxlen: 24 77.90.139.0/24 maxlen: 24 77.90.140.0/24 maxlen: 24 77.90.143.0/24 maxlen: 24 77.90.144.0/24 maxlen: 24 77.90.146.0/24 maxlen: 24 77.90.147.0/24 maxlen: 24 77.90.148.0/24 maxlen: 24 77.90.156.0/24 maxlen: 24 77.90.188.0/24 maxlen: 24 213.209.129.0/24 maxlen: 24 213.209.138.0/24 maxlen: 24 213.209.143.0/24 maxlen: 24 213.209.156.0/24 maxlen: 24 213.209.157.0/24 maxlen: 24 2a04:29c2::/32 maxlen: 32 2a04:29c7::/32 maxlen: 32 2a04:29c7:1280:24::/64 maxlen: 64 2a04:29c7:1280:27::/64 maxlen: 64 2a04:29c7:1290:24::/64 maxlen: 64 2a04:29c7:1300:24::/64 maxlen: 64 2a04:29c7:1371:6027::/64 maxlen: 64 2a04:29c7:1420::/48 maxlen: 48 2a04:29c7:1880:24::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:d9:5a:0a:09:5d:b0:3e:2a:55:7a:b4:4d:2f:4d:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Dec 19 18:22:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fa661bc3f2bb16be4f215f876f60d4fc3fbfd346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4e:8a:0e:3a:32:c1:97:ba:ad:9d:b0:48:3e: 35:1e:f4:c3:d0:22:22:6c:e5:d8:b5:f1:42:c7:4f: f8:31:28:fa:54:04:cf:d6:b9:03:c8:c0:cd:5a:b4: 3f:36:90:19:5e:84:c5:bf:1c:f8:85:d6:0a:45:5b: 9b:8b:60:8a:96:a9:2b:c0:ba:e1:0a:e7:b8:c6:b9: f0:4d:85:ca:06:b7:5a:b0:ef:c4:7f:cf:b2:d6:e1: 73:6b:f4:64:85:0c:a4:2c:3f:b5:5a:63:78:85:d6: 48:1a:51:f1:a9:de:71:21:19:a3:25:e0:97:4e:df: 98:aa:3e:ec:2b:31:c3:10:f1:f7:13:c0:2d:3f:7a: 1b:92:e9:f2:72:66:40:f6:1d:78:65:84:dd:03:32: cd:3e:2e:82:1a:0d:ca:0e:dd:8a:da:b7:af:89:b2: 6f:98:80:cb:fb:f5:68:a0:4e:fd:33:98:40:b7:35: a9:16:3a:31:c9:7d:0b:09:4d:0d:d6:30:9a:08:a1: d9:69:d6:a0:61:96:df:fb:07:2a:fc:4f:c9:5f:a1: a2:25:82:15:3a:41:12:f4:05:14:be:43:26:6a:3e: f4:94:e6:92:00:2a:d3:05:09:10:20:fc:ff:c0:27: eb:5a:5f:a5:8a:df:34:e7:5b:de:9f:0a:0f:fa:37: d4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:66:1B:C3:F2:BB:16:BE:4F:21:5F:87:6F:60:D4:FC:3F:BF:D3:46 X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1-mYbw_K7Fr5PIV-Hb2DU_D-_00Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.128.0-77.90.130.255 77.90.132.0-77.90.134.255 77.90.136.0/23 77.90.139.0-77.90.140.255 77.90.143.0-77.90.144.255 77.90.146.0-77.90.148.255 77.90.156.0/24 77.90.188.0/24 213.209.129.0/24 213.209.138.0/24 213.209.143.0/24 213.209.156.0/23 IPv6: 2a04:29c2::/32 2a04:29c7::/32 Signature Algorithm: sha256WithRSAEncryption 78:47:3f:37:03:de:9b:cf:f8:5b:bb:b2:86:48:a5:c9:c9:9f: 13:bd:25:62:d9:f3:22:ce:85:be:89:27:68:ab:f3:a8:cc:02: 1f:fa:d1:88:9c:f5:d2:e8:95:6b:19:40:55:0d:c7:be:4e:19: 17:6d:46:bb:81:c9:a9:23:2a:f9:ae:66:57:23:ad:30:76:ae: ca:65:5d:61:9f:22:14:a2:ee:cb:96:9a:15:d4:3c:bc:80:cd: d4:81:d3:e7:89:c3:15:37:f2:ea:f5:8d:09:98:06:ec:ab:45: 0d:22:b8:f2:4d:cf:25:70:d4:41:d9:75:d8:ad:13:14:1f:57: 66:97:70:74:14:ab:1a:c9:d4:5e:da:c7:6c:05:18:75:50:91: 1a:b8:39:3a:32:65:43:0c:f9:72:db:c2:2e:19:4a:97:bb:1b: 29:95:2f:a5:ed:f3:1c:c2:a6:e1:cf:21:0d:da:bd:5e:d4:78: 48:51:b3:1d:90:b5:17:7d:eb:71:67:07:68:3c:9d:67:eb:40: 23:e7:54:17:eb:47:40:5d:e2:98:98:0d:99:ab:d4:70:07:69: 9f:65:d6:7f:39:fb:7b:cf:49:80:01:fa:bb:52:af:2e:2c:af: 85:da:09:79:2a:11:b0:ee:5f:e5:9f:f1:88:ab:34:9f:30:c5: 58:98:53:01 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgISAZs32VoKCV2wPipVerRNL00YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjUxMjE5MTgyMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTY2MWJjM2YyYmIxNmJlNGYyMTVmODc2ZjYwZDRmYzNmYmZkMzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE6KDjoywZe6rZ2wSD41HvTD0CIi bOXYtfFCx0/4MSj6VATP1rkDyMDNWrQ/NpAZXoTFvxz4hdYKRVubi2CKlqkrwLrh Cue4xrnwTYXKBrdasO/Ef8+y1uFza/RkhQykLD+1WmN4hdZIGlHxqd5xIRmjJeCX Tt+Yqj7sKzHDEPH3E8AtP3obkunycmZA9h14ZYTdAzLNPi6CGg3KDt2K2revibJv mIDL+/VooE79M5hAtzWpFjoxyX0LCU0N1jCaCKHZadagYZbf+wcq/E/JX6GiJYIV OkES9AUUvkMmaj70lOaSACrTBQkQIPz/wCfrWl+lit8051venwoP+jfUeQIDAQAB o4ICjTCCAokwHQYDVR0OBBYEFPpmG8Pyuxa+TyFfh29g1Pw/v9NGMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvMS1tWWJ3X0s3RnI1UElWLUhiMkRVX0QtXzAwWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMzQvZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEw MS8xL08wZHVFdWlZZmxzd0xOd2t2ZG5iUC1nOGhFay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCBoQYIKwYBBQUHAQcBAf8EgZEwgY4wdgQCAAEwcDAMAwQH TVqAAwQATVqCMAwDBAJNWoQDBABNWoYDBAFNWogwDAMEAE1aiwMEAE1ajDAMAwQA TVqPAwQATVqQMAwDBAFNWpIDBABNWpQDBABNWpwDBABNWrwDBADV0YEDBADV0YoD BADV0Y8DBAHV0ZwwFAQCAAIwDgMFACoEKcIDBQAqBCnHMA0GCSqGSIb3DQEBCwUA A4IBAQB4Rz83A96bz/hbu7KGSKXJyZ8TvSVi2fMizoW+iSdoq/OozAIf+tGInPXS 6JVrGUBVDce+ThkXbUa7gcmpIyr5rmZXI60wdq7KZV1hnyIUou7LlpoV1Dy8gM3U gdPnicMVN/Lq9Y0JmAbsq0UNIrjyTc8lcNRB2XXYrRMUH1dml3B0FKsaydRe2sds BRh1UJEauDk6MmVDDPly28IuGUqXuxsplS+l7fMcwqbhzyEN2r1e1HhIUbMdkLUX fetxZwdoPJ1n60Aj51QX60dAXeKYmA2Zq9RwB2mfZdZ/Oft7z0mAAfq7Uq8uLK+F 2gl5KhGw7l/ln/GIqzSfMMVYmFMB -----END CERTIFICATE-----Generated at Sat Dec 20 03:21:06 2025 by rpki-client