This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/yB_7VO5rPbAONcRc18u2AvGeMTg.roa File: yB_7VO5rPbAONcRc18u2AvGeMTg.roa (raw, json) Hash identifier: WAhzQ4ToOI7lfDJuUseqshb9WMveM+eX5SGLrHY0JqQ= Subject key identifier: C8:1F:FB:54:EE:6B:3D:B0:0E:35:C4:5C:D7:CB:B6:02:F1:9E:31:38 Certificate issuer: /CN=ef0294479459182459c15d8ca010a8a7f47f80c8 Certificate serial: 019B7C11A9854239EE18EA22423074A9C295 Authority key identifier: EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/yB_7VO5rPbAONcRc18u2AvGeMTg.roa Signing time: Fri 02 Jan 2026 00:18:10 +0000 ROA not before: Fri 02 Jan 2026 00:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42320 IP address blocks: 77.72.112.0/21 maxlen: 21 77.72.112.0/24 maxlen: 24 77.72.116.0/24 maxlen: 24 77.72.117.0/24 maxlen: 24 77.72.118.0/24 maxlen: 24 77.72.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:a9:85:42:39:ee:18:ea:22:42:30:74:a9:c2:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef0294479459182459c15d8ca010a8a7f47f80c8 Validity Not Before: Jan 2 00:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c81ffb54ee6b3db00e35c45cd7cbb602f19e3138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:08:71:83:27:ad:43:e6:30:c1:8f:ab:4c:bb: df:45:46:b8:5b:b7:e9:81:d1:0a:29:90:97:2d:bd: ab:2f:36:09:51:a6:f8:81:ee:f3:a9:c7:be:70:79: fa:b1:b1:74:21:58:05:7d:2d:71:ef:f0:10:fe:98: e9:c2:5e:3f:39:13:be:4c:af:63:48:a8:e6:a8:7b: 0a:7a:af:b9:6d:b8:9c:39:fb:5a:6a:a5:71:c5:b3: c5:41:8d:10:b2:93:ca:e7:48:91:20:06:df:a2:b8: 34:10:2b:f4:76:13:d1:85:d2:a5:7b:a9:15:66:67: ea:1e:05:dc:46:6c:ee:d0:f6:58:0b:93:3c:63:7b: 1b:43:c2:dc:e0:a9:66:dd:e9:f9:15:c2:86:d1:a6: 9b:1e:da:b3:52:c7:8b:85:8a:a0:67:f3:48:1a:ba: 2b:b1:f0:69:89:28:ee:db:d0:cc:c3:11:92:6e:88: d5:02:3d:d0:27:5b:ae:3b:dd:36:d4:90:e2:ba:0f: e4:86:f2:83:10:c5:1c:6a:69:98:c8:be:b9:6f:16: 7a:b0:62:67:b1:30:e9:0a:b2:0d:d5:f8:a1:eb:95: de:22:b4:5c:e8:b5:a3:93:1c:ea:9f:92:70:bc:54: 8c:a1:66:86:4d:2f:0e:85:1e:a0:e9:7a:40:e7:99: 91:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:1F:FB:54:EE:6B:3D:B0:0E:35:C4:5C:D7:CB:B6:02:F1:9E:31:38 X509v3 Authority Key Identifier: keyid:EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/yB_7VO5rPbAONcRc18u2AvGeMTg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.72.112.0/21 Signature Algorithm: sha256WithRSAEncryption 81:4e:82:e2:3c:cb:26:17:a8:e3:fc:54:4b:49:e4:db:13:00: 2e:92:20:66:c8:83:3d:b1:4d:37:45:3e:d0:3e:3f:43:36:f9: da:d3:93:54:3e:d6:15:e6:a9:c6:60:8a:1e:37:f7:1c:37:48: 37:02:88:74:e2:fa:25:fa:61:31:60:ca:81:56:a2:95:5e:2d: 52:68:d5:76:2d:3b:a1:15:fe:37:4c:ef:0c:19:3b:a7:01:49: 4a:d1:aa:5e:f7:91:7f:86:7b:d6:40:c6:c2:ca:fc:b4:a8:11: 8c:e1:e2:6f:26:d4:9f:13:b0:fc:56:e6:81:38:a8:bb:1d:41: a5:61:64:52:91:6f:de:7a:0a:0c:91:e9:01:69:57:e4:ad:74: 86:f2:bf:0c:29:9c:bc:06:f1:74:f0:64:96:45:44:89:9e:69: 60:7d:a7:8c:92:06:9d:72:1d:48:e4:20:74:6a:10:ca:db:cd: d7:d1:dc:43:d1:1d:75:6c:c3:7f:f4:62:a4:58:12:d4:6a:4b: 06:ad:e9:e6:c3:5b:a3:ef:a1:2a:2f:3e:ae:c0:fa:25:c8:95: e6:8c:cb:c1:8d:79:3c:5b:e8:ff:22:2c:1d:3b:6a:1b:22:0e: 63:3c:2b:47:72:e5:9f:a5:f0:e1:72:7d:72:26:13:7b:4f:f6: 6d:a6:7d:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EamFQjnuGOoiQjB0qcKVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMDI5NDQ3OTQ1OTE4MjQ1OWMxNWQ4Y2EwMTBhOGE3ZjQ3 ZjgwYzgwHhcNMjYwMTAyMDAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODFmZmI1NGVlNmIzZGIwMGUzNWM0NWNkN2NiYjYwMmYxOWUzMTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxghxgyetQ+YwwY+rTLvfRUa4W7fp gdEKKZCXLb2rLzYJUab4ge7zqce+cHn6sbF0IVgFfS1x7/AQ/pjpwl4/ORO+TK9j SKjmqHsKeq+5bbicOftaaqVxxbPFQY0QspPK50iRIAbforg0ECv0dhPRhdKle6kV ZmfqHgXcRmzu0PZYC5M8Y3sbQ8Lc4Klm3en5FcKG0aabHtqzUseLhYqgZ/NIGror sfBpiSju29DMwxGSbojVAj3QJ1uuO9021JDiug/khvKDEMUcammYyL65bxZ6sGJn sTDpCrIN1fih65XeIrRc6LWjkxzqn5JwvFSMoWaGTS8OhR6g6XpA55mRCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMgf+1Tuaz2wDjXEXNfLtgLxnjE4MB8GA1UdIwQY MBaAFO8ClEeUWRgkWcFdjKAQqKf0f4DIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3dLVVI1UlpHQ1Jad1YyTW9CQ29wX1JfZ01nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81YmNlNDYtY2M5Yi00ODNmLWI5NDAt MDQ3YmEwZTYyZGU0LzEveUJfN1ZPNXJQYkFPTmNSYzE4dTJBdkdlTVRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS81YmNlNDYtY2M5Yi00ODNmLWI5NDAtMDQ3YmEwZTYyZGU0 LzEvN3dLVVI1UlpHQ1Jad1YyTW9CQ29wX1JfZ01nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTUhwMA0G CSqGSIb3DQEBCwUAA4IBAQCBToLiPMsmF6jj/FRLSeTbEwAukiBmyIM9sU03RT7Q Pj9DNvna05NUPtYV5qnGYIoeN/ccN0g3Aoh04vol+mExYMqBVqKVXi1SaNV2LTuh Ff43TO8MGTunAUlK0ape95F/hnvWQMbCyvy0qBGM4eJvJtSfE7D8VuaBOKi7HUGl YWRSkW/eegoMkekBaVfkrXSG8r8MKZy8BvF08GSWRUSJnmlgfaeMkgadch1I5CB0 ahDK283X0dxD0R11bMN/9GKkWBLUaksGrenmw1uj76EqLz6uwPolyJXmjMvBjXk8 W+j/IiwdO2obIg5jPCtHcuWfpfDhcn1yJhN7T/Ztpn1n -----END CERTIFICATE-----Generated at Tue Feb 10 01:13:16 2026 by rpki-client