This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/0P7uN4tvEIayKbjzLDxjuMY6fB4.roa File: 0P7uN4tvEIayKbjzLDxjuMY6fB4.roa (raw, json) Hash identifier: D76OIMLLfFy5FtZGfX5Tk3VMAoafB+zBwfrTHH9d6Ao= Subject key identifier: D0:FE:EE:37:8B:6F:10:86:B2:29:B8:F3:2C:3C:63:B8:C6:3A:7C:1E Certificate issuer: /CN=66b078ded3759230ca2e1a3be906638d1306b908 Certificate serial: 019B7CEDC38ABC9258C8909EF9B4016E0A89 Authority key identifier: 66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/0P7uN4tvEIayKbjzLDxjuMY6fB4.roa Signing time: Fri 02 Jan 2026 04:18:35 +0000 ROA not before: Fri 02 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51400 IP address blocks: 77.87.240.0/21 maxlen: 24 2001:67c:2190::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:c3:8a:bc:92:58:c8:90:9e:f9:b4:01:6e:0a:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66b078ded3759230ca2e1a3be906638d1306b908 Validity Not Before: Jan 2 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0feee378b6f1086b229b8f32c3c63b8c63a7c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:86:1f:e6:01:36:dc:14:ab:65:6c:fe:d9:5d: f5:1b:82:c6:72:6b:88:80:93:f8:b9:6c:a0:e3:78: 41:81:85:94:e2:ef:0e:71:2f:2c:65:dd:52:ce:92: e5:a6:c7:a1:5e:4a:66:22:d8:ff:bd:39:ed:aa:54: 14:91:0e:dc:2f:3a:86:ae:1f:bb:ab:19:81:e7:7b: 83:d2:ed:23:b1:06:ee:10:27:8f:ad:17:c7:34:b9: 6a:a6:64:03:50:76:61:fe:e9:e6:a7:1d:e4:04:65: b9:07:e8:2d:4f:81:b5:7a:cb:b0:d7:d8:a6:f5:71: 79:8c:9d:43:64:e2:eb:49:b0:0e:89:c2:92:79:6e: ef:8b:c2:e1:5f:03:a4:0e:f9:b3:1d:b8:69:64:12: 6c:d8:ac:bc:23:b1:2e:3d:bd:0d:e1:61:de:6b:bd: 65:a0:67:b9:19:32:68:ee:10:5b:79:90:58:0b:7b: fc:7c:18:14:fc:16:b0:2f:6c:cb:e2:cf:cf:15:ac: bd:af:7d:0f:3e:c8:98:16:83:cd:03:58:4f:7e:c3: 8c:6d:64:29:66:3e:ea:0b:15:c1:01:a5:d9:eb:9b: e9:5f:3e:af:a3:55:60:33:8b:87:d0:c7:29:44:d2: 96:79:ea:0d:4a:b6:59:2d:0f:2f:e1:a0:df:63:db: 00:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:FE:EE:37:8B:6F:10:86:B2:29:B8:F3:2C:3C:63:B8:C6:3A:7C:1E X509v3 Authority Key Identifier: keyid:66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/0P7uN4tvEIayKbjzLDxjuMY6fB4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.87.240.0/21 IPv6: 2001:67c:2190::/48 Signature Algorithm: sha256WithRSAEncryption 0f:a2:af:b6:0f:02:6f:2e:59:e6:22:05:9a:af:bf:4b:38:f1: 39:b2:bb:ec:dc:78:48:bb:2d:79:48:bd:ad:70:81:bf:68:d3: 76:6a:0c:9f:f1:37:f3:e2:f6:0f:b6:4d:85:34:09:fc:ee:66: e0:3a:b8:b6:fb:ca:20:83:5d:c8:bc:1a:f6:b1:35:0e:27:c1: b5:20:ec:b8:f3:d9:e5:64:e5:fc:b7:0c:fd:c4:9b:00:fa:b5: 20:1f:e1:24:85:5a:bd:4e:c5:fa:2b:99:6e:a3:00:11:3d:0a: 8f:4b:ac:ef:ef:a7:f1:45:4b:9a:ce:b4:bd:4a:84:4f:4c:57: f9:ba:54:2a:a7:3e:9e:7a:dd:89:ff:3e:e6:01:f9:1a:c8:ca: c8:88:8d:d6:4e:f3:dc:74:3d:4c:82:18:bb:9f:1f:ab:6f:33: f0:01:16:dc:7a:98:d6:09:fd:90:b1:80:e6:42:1e:dc:2d:4e: e8:d5:00:d3:22:cc:00:d2:f0:31:83:fa:75:10:18:3b:23:99: a2:8c:7d:0d:c8:a6:85:1c:c8:f0:53:54:23:a3:85:54:96:22: 2a:bb:47:a4:bc:4f:40:41:b1:07:ba:59:e2:89:2b:69:c8:8b: f6:ff:21:db:bc:88:7e:98:96:b8:23:49:ce:95:1e:09:66:1c: 4a:e6:fb:0c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt87cOKvJJYyJCe+bQBbgqJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2YjA3OGRlZDM3NTkyMzBjYTJlMWEzYmU5MDY2MzhkMTMw NmI5MDgwHhcNMjYwMTAyMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGZlZWUzNzhiNmYxMDg2YjIyOWI4ZjMyYzNjNjNiOGM2M2E3YzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIYf5gE23BSrZWz+2V31G4LGcmuI gJP4uWyg43hBgYWU4u8OcS8sZd1SzpLlpsehXkpmItj/vTntqlQUkQ7cLzqGrh+7 qxmB53uD0u0jsQbuECePrRfHNLlqpmQDUHZh/unmpx3kBGW5B+gtT4G1esuw19im 9XF5jJ1DZOLrSbAOicKSeW7vi8LhXwOkDvmzHbhpZBJs2Ky8I7EuPb0N4WHea71l oGe5GTJo7hBbeZBYC3v8fBgU/BawL2zL4s/PFay9r30PPsiYFoPNA1hPfsOMbWQp Zj7qCxXBAaXZ65vpXz6vo1VgM4uH0McpRNKWeeoNSrZZLQ8v4aDfY9sA2QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFND+7jeLbxCGsim48yw8Y7jGOnweMB8GA1UdIwQY MBaAFGaweN7TdZIwyi4aO+kGY40TBrkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnJCNDN0TjFrakRLTGhvNzZRWmpqUk1HdVFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC83NjM1OTItYTQ4MC00NDRmLWE4ODEt NDAyZTYyYzU0ZDMyLzEvMFA3dU40dHZFSWF5S2JqekxEeGp1TVk2ZkI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC83NjM1OTItYTQ4MC00NDRmLWE4ODEtNDAyZTYyYzU0ZDMy LzEvWnJCNDN0TjFrakRLTGhvNzZRWmpqUk1HdVFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDTVfwMA8E AgACMAkDBwAgAQZ8IZAwDQYJKoZIhvcNAQELBQADggEBAA+ir7YPAm8uWeYiBZqv v0s48Tmyu+zceEi7LXlIva1wgb9o03ZqDJ/xN/Pi9g+2TYU0CfzuZuA6uLb7yiCD Xci8GvaxNQ4nwbUg7Ljz2eVk5fy3DP3EmwD6tSAf4SSFWr1OxformW6jABE9Co9L rO/vp/FFS5rOtL1KhE9MV/m6VCqnPp563Yn/PuYB+RrIysiIjdZO89x0PUyCGLuf H6tvM/ABFtx6mNYJ/ZCxgOZCHtwtTujVANMizADS8DGD+nUQGDsjmaKMfQ3IpoUc yPBTVCOjhVSWIiq7R6S8T0BBsQe6WeKJK2nIi/b/Idu8iH6YlrgjSc6VHglmHErm +ww= -----END CERTIFICATE-----Generated at Mon Feb 9 20:11:12 2026 by rpki-client