This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/vvf88GgWIXzkz27KzReib56wTnw.roa File: vvf88GgWIXzkz27KzReib56wTnw.roa (raw, json) Hash identifier: mexIXafPODNJ/VdJ+Am5z5IEHLOmDpbTiyu+ASbiaXg= Subject key identifier: BE:F7:FC:F0:68:16:21:7C:E4:CF:6E:CA:CD:17:A2:6F:9E:B0:4E:7C Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019AE9EFAC254400160FEF3AAA04CC48555A Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/vvf88GgWIXzkz27KzReib56wTnw.roa Signing time: Thu 04 Dec 2025 15:16:29 +0000 ROA not before: Thu 04 Dec 2025 15:16:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42821 IP address blocks: 77.90.128.0/24 maxlen: 24 77.90.129.0/24 maxlen: 24 77.90.130.0/24 maxlen: 24 77.90.132.0/24 maxlen: 24 77.90.133.0/24 maxlen: 24 77.90.134.0/24 maxlen: 24 77.90.136.0/24 maxlen: 24 77.90.137.0/24 maxlen: 24 77.90.139.0/24 maxlen: 24 77.90.140.0/24 maxlen: 24 77.90.143.0/24 maxlen: 24 77.90.144.0/24 maxlen: 24 77.90.146.0/24 maxlen: 24 77.90.147.0/24 maxlen: 24 77.90.156.0/24 maxlen: 24 77.90.188.0/24 maxlen: 24 213.209.138.0/24 maxlen: 24 2a04:29c2::/32 maxlen: 32 2a04:29c7::/32 maxlen: 32 2a04:29c7:1280:24::/64 maxlen: 64 2a04:29c7:1280:27::/64 maxlen: 64 2a04:29c7:1290:24::/64 maxlen: 64 2a04:29c7:1300:24::/64 maxlen: 64 2a04:29c7:1371:6027::/64 maxlen: 64 2a04:29c7:1420::/48 maxlen: 48 2a04:29c7:1880:24::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:ef:ac:25:44:00:16:0f:ef:3a:aa:04:cc:48:55:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Dec 4 15:16:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bef7fcf06816217ce4cf6ecacd17a26f9eb04e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:86:fb:7c:62:71:99:aa:7b:fa:fa:1b:bb:2d: 88:a3:fe:0a:3c:3a:63:40:e2:bc:ee:b0:b4:f9:88: 46:ec:53:db:01:01:0e:12:c8:b6:40:f8:c5:ee:8f: 0b:15:a7:f1:b4:9b:7f:f7:a3:60:14:c9:12:ae:0b: fd:0f:49:7d:0b:24:47:47:b4:19:77:e1:8f:1f:41: 6e:e7:1e:19:40:52:4b:53:b9:40:9d:1b:6e:28:ea: 82:fd:e4:93:04:51:77:e2:61:a1:e0:58:81:8e:4d: d3:d4:e5:77:12:e1:1b:a5:6c:42:d9:e0:5e:0e:50: fd:5a:67:58:18:26:c9:a8:ab:97:f8:ea:34:10:83: 82:91:da:fa:b5:ec:15:b4:66:2c:34:71:ed:c6:8e: bb:07:8c:97:87:fb:73:0d:ae:41:7f:2f:53:a5:33: ee:21:6b:10:38:a4:eb:79:0b:8c:63:e7:4f:cf:4f: c3:b5:39:77:03:8a:3d:40:b1:30:75:03:5f:f4:65: 29:80:e6:9d:a5:0c:1f:fa:d0:de:38:c0:c9:ff:b2: 00:20:74:82:11:8c:d6:c2:db:76:6a:26:63:38:38: 2b:da:58:2e:37:8b:ae:d5:75:85:6d:61:ee:28:49: 4a:df:6f:0a:2b:ce:c4:81:63:39:b3:e2:04:1a:95: 34:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F7:FC:F0:68:16:21:7C:E4:CF:6E:CA:CD:17:A2:6F:9E:B0:4E:7C X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/vvf88GgWIXzkz27KzReib56wTnw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.128.0-77.90.130.255 77.90.132.0-77.90.134.255 77.90.136.0/23 77.90.139.0-77.90.140.255 77.90.143.0-77.90.144.255 77.90.146.0/23 77.90.156.0/24 77.90.188.0/24 213.209.138.0/24 IPv6: 2a04:29c2::/32 2a04:29c7::/32 Signature Algorithm: sha256WithRSAEncryption ac:a4:5d:82:2d:fc:18:6d:5c:24:11:e9:15:58:fb:5a:3b:64: 68:df:11:0b:de:e4:de:fb:4e:2d:f7:4b:5c:fc:ec:d3:df:67: bc:00:80:64:da:20:b7:fe:8c:85:a0:29:c8:5d:68:e1:c7:39: 7c:cb:46:e3:12:6b:9c:7c:db:43:fb:0c:c8:fe:10:bb:52:5c: 36:20:c7:f1:c3:d5:5a:87:21:89:e3:58:fc:e4:81:8e:8f:f5: f8:ea:26:ff:f4:ed:a0:d8:ec:03:0d:37:c9:bb:ef:91:01:0b: 79:51:23:3e:28:0e:67:f6:ad:6b:88:e3:22:c4:c4:76:22:7b: f8:8f:ef:1c:35:86:60:ea:ad:d9:d1:44:a4:e4:14:f3:8f:09: 09:6f:a7:3b:83:b9:1b:3b:72:1e:4b:84:9f:3d:34:ad:5a:fb: ad:68:70:61:7d:ca:2f:eb:e4:ab:fb:1e:2d:4c:93:81:e7:eb: 25:a1:bb:4b:c1:c6:9f:fc:63:26:a7:71:40:90:04:e0:89:25: 1e:4d:74:3f:63:39:08:6e:31:29:42:67:b4:c2:b7:8a:35:c5: 9c:0b:cb:98:7c:04:0f:79:a5:7c:ad:51:63:2d:31:1c:97:8b: a2:72:c3:ec:0f:28:f1:14:dd:69:98:dd:4e:7f:77:9f:6b:fb: 8e:44:c1:48 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgISAZrp76wlRAAWD+86qgTMSFVaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjUxMjA0MTUxNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWY3ZmNmMDY4MTYyMTdjZTRjZjZlY2FjZDE3YTI2ZjllYjA0ZTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54b7fGJxmap7+vobuy2Io/4KPDpj QOK87rC0+YhG7FPbAQEOEsi2QPjF7o8LFafxtJt/96NgFMkSrgv9D0l9CyRHR7QZ d+GPH0Fu5x4ZQFJLU7lAnRtuKOqC/eSTBFF34mGh4FiBjk3T1OV3EuEbpWxC2eBe DlD9WmdYGCbJqKuX+Oo0EIOCkdr6tewVtGYsNHHtxo67B4yXh/tzDa5Bfy9TpTPu IWsQOKTreQuMY+dPz0/DtTl3A4o9QLEwdQNf9GUpgOadpQwf+tDeOMDJ/7IAIHSC EYzWwtt2aiZjODgr2lguN4uu1XWFbWHuKElK328KK87EgWM5s+IEGpU09wIDAQAB o4ICcDCCAmwwHQYDVR0OBBYEFL73/PBoFiF85M9uys0Xom+esE58MB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvdnZmODhHZ1dJWHprejI3S3pSZWliNTZ3VG53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwXAQCAAEwVjAMAwQHTVqA AwQATVqCMAwDBAJNWoQDBABNWoYDBAFNWogwDAMEAE1aiwMEAE1ajDAMAwQATVqP AwQATVqQAwQBTVqSAwQATVqcAwQATVq8AwQA1dGKMBQEAgACMA4DBQAqBCnCAwUA KgQpxzANBgkqhkiG9w0BAQsFAAOCAQEArKRdgi38GG1cJBHpFVj7WjtkaN8RC97k 3vtOLfdLXPzs099nvACAZNogt/6MhaApyF1o4cc5fMtG4xJrnHzbQ/sMyP4Qu1Jc NiDH8cPVWochieNY/OSBjo/1+Oom//TtoNjsAw03ybvvkQELeVEjPigOZ/ata4jj IsTEdiJ7+I/vHDWGYOqt2dFEpOQU848JCW+nO4O5GztyHkuEnz00rVr7rWhwYX3K L+vkq/seLUyTgefrJaG7S8HGn/xjJqdxQJAE4IklHk10P2M5CG4xKUJntMK3ijXF nAvLmHwED3mlfK1RYy0xHJeLonLD7A8o8RTdaZjdTn93n2v7jkTBSA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:50:42 2025 by rpki-client