This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/RR77_TZWFm2zN09tkZTb-aJWQ-g.roa File: RR77_TZWFm2zN09tkZTb-aJWQ-g.roa (raw, json) Hash identifier: cAzRaMhGElLRCS7w5moSCJqvr37/rS0oJQ36ENwyvTc= Subject key identifier: 45:1E:FB:FD:36:56:16:6D:B3:37:4F:6D:91:94:DB:F9:A2:56:43:E8 Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224 Certificate serial: 019B7B36A66A3A43362F6F9854002BA98017 Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/RR77_TZWFm2zN09tkZTb-aJWQ-g.roa Signing time: Thu 01 Jan 2026 20:18:57 +0000 ROA not before: Thu 01 Jan 2026 20:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201933 IP address blocks: 45.90.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a6:6a:3a:43:36:2f:6f:98:54:00:2b:a9:80:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d64134faa746293c0384edac0371950f3b224 Validity Not Before: Jan 1 20:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=451efbfd3656166db3374f6d9194dbf9a25643e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6b:35:8e:04:63:ec:d7:c3:df:09:65:94:f6: 9f:e8:ca:91:7e:6c:86:55:84:f3:18:6e:6c:ab:68: 32:57:8c:15:c7:4e:b3:a2:cc:0d:5c:db:b2:e5:85: e1:d1:8e:86:09:5e:77:d1:b0:07:a7:7a:49:db:7a: 9c:7b:fc:98:c0:01:d9:6a:3d:2f:d7:fe:e4:c5:21: f4:d3:3e:1f:56:56:e0:72:f6:f1:bc:ac:9b:7a:f9: b1:d1:cd:40:26:3f:1e:7d:30:c1:67:ea:bd:7c:0c: e7:b4:47:16:55:df:33:3b:28:06:d7:a2:11:64:fb: ad:2a:54:cb:f1:39:af:09:0f:8e:e0:04:4d:5b:85: ed:e7:75:c7:ec:b7:d6:c9:42:2b:ea:ea:99:5a:64: 52:d4:16:a1:e5:ac:2b:5c:73:d7:c5:2a:3c:1a:c9: 67:ce:87:7b:ea:db:7e:74:7d:c0:70:e8:32:8f:c2: 49:5a:c9:c8:5f:f3:79:95:70:0e:80:f7:e6:4b:59: 17:68:3a:1c:85:1a:12:c3:cd:b1:db:5e:a9:6f:09: 04:a9:dc:57:b9:a1:1f:d2:60:70:a9:7b:64:18:a0: 3f:36:f4:f9:f4:78:dc:ff:f3:98:ba:a2:65:75:2e: a0:ac:dc:4b:31:f3:42:f5:97:2f:23:22:a0:93:3d: b6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:1E:FB:FD:36:56:16:6D:B3:37:4F:6D:91:94:DB:F9:A2:56:43:E8 X509v3 Authority Key Identifier: keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/RR77_TZWFm2zN09tkZTb-aJWQ-g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.42.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:b3:32:79:cc:be:80:e0:c9:f3:e2:66:8e:7b:d9:33:dd:2f: 63:7f:8b:ec:c0:5f:ab:1e:5a:82:09:4d:17:0e:91:10:6a:74: 55:a2:44:64:e1:32:0d:8e:6b:10:1a:f4:5e:59:0c:1d:a6:57: 6b:6c:ec:ea:eb:ad:09:9a:20:88:ee:d2:94:f4:05:d2:d2:c6: a0:bd:bb:4b:6b:13:24:0d:b0:e0:74:11:f2:f9:7e:94:d2:1f: c7:4e:6f:b9:4d:fe:32:00:d6:74:93:20:29:0e:a1:9a:d2:05: b0:36:79:c6:b3:9b:2c:91:b6:01:e0:7c:df:70:c9:76:c2:5c: ea:6a:ea:c8:8c:84:c3:e0:5d:5e:3a:80:70:22:e3:51:46:47: 6d:89:eb:52:ea:52:d7:03:ec:28:e5:b7:0f:34:c1:80:03:86: 16:c9:c7:4b:45:47:b6:ce:54:18:70:3f:34:61:78:ab:c2:56: 56:9c:b1:39:3c:20:1d:be:83:a8:a3:71:e3:c7:c5:c0:51:cd: 9c:6d:ab:c9:77:cf:0a:4d:5d:5f:c3:cc:a0:b3:a6:cb:78:64: d5:84:eb:ef:2d:a1:ce:e5:1c:b3:27:03:6d:da:98:11:ee:64: 00:98:c1:c3:c1:aa:22:e6:a5:ef:21:1c:8b:bd:e4:1e:f4:e9: 81:e3:b0:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NqZqOkM2L2+YVAArqYAXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNmQ2NDEzNGZhYTc0NjI5M2MwMzg0ZWRhYzAzNzE5NTBm M2IyMjQwHhcNMjYwMTAxMjAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTFlZmJmZDM2NTYxNjZkYjMzNzRmNmQ5MTk0ZGJmOWEyNTY0M2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWs1jgRj7NfD3wlllPaf6MqRfmyG VYTzGG5sq2gyV4wVx06zoswNXNuy5YXh0Y6GCV530bAHp3pJ23qce/yYwAHZaj0v 1/7kxSH00z4fVlbgcvbxvKybevmx0c1AJj8efTDBZ+q9fAzntEcWVd8zOygG16IR ZPutKlTL8TmvCQ+O4ARNW4Xt53XH7LfWyUIr6uqZWmRS1Bah5awrXHPXxSo8Gsln zod76tt+dH3AcOgyj8JJWsnIX/N5lXAOgPfmS1kXaDochRoSw82x216pbwkEqdxX uaEf0mBwqXtkGKA/NvT59Hjc//OYuqJldS6grNxLMfNC9ZcvIyKgkz224QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEUe+/02VhZtszdPbZGU2/miVkPoMB8GA1UdIwQY MBaAFHBtZBNPqnRik8A4TtrANxlQ87IkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0cxa0UwLXFkR0tUd0RoTzJzQTNHVkR6c2lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zMjk4ZTMtOWE1MC00Y2ZiLTg0ZTYt ZDEzN2FkZTE2NmQxLzEvUlI3N19UWldGbTJ6TjA5dGtaVGItYUpXUS1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8zMjk4ZTMtOWE1MC00Y2ZiLTg0ZTYtZDEzN2FkZTE2NmQx LzEvY0cxa0UwLXFkR0tUd0RoTzJzQTNHVkR6c2lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVoqMA0G CSqGSIb3DQEBCwUAA4IBAQBOszJ5zL6A4Mnz4maOe9kz3S9jf4vswF+rHlqCCU0X DpEQanRVokRk4TINjmsQGvReWQwdpldrbOzq660JmiCI7tKU9AXS0sagvbtLaxMk DbDgdBHy+X6U0h/HTm+5Tf4yANZ0kyApDqGa0gWwNnnGs5sskbYB4HzfcMl2wlzq aurIjITD4F1eOoBwIuNRRkdtietS6lLXA+wo5bcPNMGAA4YWycdLRUe2zlQYcD80 YXirwlZWnLE5PCAdvoOoo3Hjx8XAUc2cbavJd88KTV1fw8ygs6bLeGTVhOvvLaHO 5RyzJwNt2pgR7mQAmMHDwaoi5qXvIRyLveQe9OmB47CZ -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:34 2026 by rpki-client