This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/E628OGnKWXsWV6h8__lmYOw0VuQ.roa File: E628OGnKWXsWV6h8__lmYOw0VuQ.roa (raw, json) Hash identifier: 0Qyyg2JckxtcQsRmrYcG0CbwVr4IoeBXt3vaGkjRMF4= Subject key identifier: 13:AD:BC:38:69:CA:59:7B:16:57:A8:7C:FF:F9:66:60:EC:34:56:E4 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019AE9F3551C8602F897EA73537171D6EDFD Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/E628OGnKWXsWV6h8__lmYOw0VuQ.roa Signing time: Thu 04 Dec 2025 15:20:29 +0000 ROA not before: Thu 04 Dec 2025 15:20:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 2914 IP address blocks: 77.90.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:f3:55:1c:86:02:f8:97:ea:73:53:71:71:d6:ed:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Dec 4 15:20:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=13adbc3869ca597b1657a87cfff96660ec3456e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f9:07:52:cb:f8:5b:1f:77:83:df:59:6e:69: 4c:7f:85:7d:50:f4:95:4a:39:76:a8:3b:ec:cb:2c: 8c:1a:87:dc:b9:1f:bf:19:fd:4a:83:a8:61:94:9b: 72:b0:93:64:6d:85:9c:b2:5b:58:f3:dc:d3:23:e3: a8:22:ac:6d:2d:79:7b:e5:aa:41:12:5e:bc:09:d0: 00:b3:2f:e8:17:f4:11:8f:c4:b9:ff:4e:e5:0a:19: fe:94:a0:04:04:77:95:c9:6e:16:b3:8b:ca:90:ad: 21:1f:87:92:d5:34:33:8e:b7:52:c7:85:4f:1a:46: bb:be:db:5b:33:60:62:77:97:4e:52:d3:31:aa:83: 18:83:ac:d9:7c:95:ac:c2:ea:2e:55:d1:d1:61:ed: a8:3e:d4:e5:a0:3b:cb:c2:f0:a7:1a:87:60:bf:ca: 7b:c3:34:c2:f7:ad:2d:b3:91:bf:0a:34:b5:c9:53: 8d:26:bc:4c:4f:c0:8b:cc:5c:8e:fb:20:3e:1c:9e: 78:fe:6a:16:12:c4:1a:b8:80:ef:e4:5b:b5:32:3e: f7:f9:ba:9d:9e:b0:ba:78:db:80:46:50:3e:cc:33: 05:6e:32:2f:b2:00:45:bf:40:14:87:3a:b4:cb:18: 9e:a6:69:72:be:0d:a7:31:9e:85:f8:f8:fb:29:1d: ff:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AD:BC:38:69:CA:59:7B:16:57:A8:7C:FF:F9:66:60:EC:34:56:E4 X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/E628OGnKWXsWV6h8__lmYOw0VuQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.142.0/24 Signature Algorithm: sha256WithRSAEncryption 93:95:da:a6:af:fc:ea:4f:a9:06:00:7f:8c:d2:f9:73:1f:0a: de:d6:9b:10:38:a5:19:7a:75:0a:5f:1e:d5:aa:45:82:72:f8: 48:4b:82:c2:ef:15:0b:3a:4c:17:10:0e:34:5a:55:25:ec:4c: 08:66:db:03:87:f2:72:1b:18:b9:83:a7:58:18:93:8e:b0:83: d1:5b:3f:c6:60:88:cc:9d:8a:3e:d9:9a:f0:77:df:62:f0:fe: f5:6e:c0:8e:37:b2:27:b0:35:0c:31:99:70:17:d6:0f:27:7a: 95:83:ad:b0:a2:b3:d1:65:11:a6:78:35:a2:2c:a1:de:3d:5b: 7b:39:93:ad:b3:02:3b:65:02:2e:6c:9b:78:e5:dc:e3:46:d1: 08:f4:a4:da:84:93:a1:d9:23:a7:e4:60:d4:ec:a1:dd:ac:a5: 47:73:19:a0:4a:55:26:79:df:ec:72:47:54:72:f1:a0:a2:e5: a8:34:62:fa:b6:ce:22:da:d8:a4:75:6d:9f:21:5f:df:dd:d2: bb:f7:35:2f:4d:84:de:74:d9:bc:cc:07:a7:41:52:0e:92:78: 90:d5:e3:ad:ed:d2:57:05:9e:8e:75:aa:ec:a9:e3:c5:27:0d: 9b:d9:8c:cf:99:e3:67:65:b2:8f:cb:b7:c6:dd:2a:0b:f1:c7: 11:19:65:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrp81UchgL4l+pzU3Fx1u39MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjUxMjA0MTUyMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2FkYmMzODY5Y2E1OTdiMTY1N2E4N2NmZmY5NjY2MGVjMzQ1NmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/kHUsv4Wx93g99ZbmlMf4V9UPSV Sjl2qDvsyyyMGofcuR+/Gf1Kg6hhlJtysJNkbYWcsltY89zTI+OoIqxtLXl75apB El68CdAAsy/oF/QRj8S5/07lChn+lKAEBHeVyW4Ws4vKkK0hH4eS1TQzjrdSx4VP Gka7vttbM2Bid5dOUtMxqoMYg6zZfJWswuouVdHRYe2oPtTloDvLwvCnGodgv8p7 wzTC960ts5G/CjS1yVONJrxMT8CLzFyO+yA+HJ54/moWEsQauIDv5Fu1Mj73+bqd nrC6eNuARlA+zDMFbjIvsgBFv0AUhzq0yxiepmlyvg2nMZ6F+Pj7KR3/HwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBOtvDhpyll7FleofP/5ZmDsNFbkMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvRTYyOE9HbktXWHNXVjZoOF9fbG1ZT3cwVnVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVqOMA0G CSqGSIb3DQEBCwUAA4IBAQCTldqmr/zqT6kGAH+M0vlzHwre1psQOKUZenUKXx7V qkWCcvhIS4LC7xULOkwXEA40WlUl7EwIZtsDh/JyGxi5g6dYGJOOsIPRWz/GYIjM nYo+2Zrwd99i8P71bsCON7InsDUMMZlwF9YPJ3qVg62worPRZRGmeDWiLKHePVt7 OZOtswI7ZQIubJt45dzjRtEI9KTahJOh2SOn5GDU7KHdrKVHcxmgSlUmed/sckdU cvGgouWoNGL6ts4i2tikdW2fIV/f3dK79zUvTYTedNm8zAenQVIOkniQ1eOt7dJX BZ6OdarsqePFJw2b2YzPmeNnZbKPy7fG3SoL8ccRGWVA -----END CERTIFICATE-----Generated at Sat Dec 6 08:50:43 2025 by rpki-client