This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/77KGr-jWWnEf5X0Fk60T9XqPSLg.roa File: 77KGr-jWWnEf5X0Fk60T9XqPSLg.roa (raw, json) Hash identifier: +M5bEYeEO2YC5D8B5GtUZyIzSZI3N7hUGF3x/KpZoMQ= Subject key identifier: EF:B2:86:AF:E8:D6:5A:71:1F:E5:7D:05:93:AD:13:F5:7A:8F:48:B8 Certificate issuer: /CN=7c2ca9b9a9a19322799774e7a179f4aa72cc3741 Certificate serial: 019B7D5CBFD6353541C6E06B6897DBB35185 Authority key identifier: 7C:2C:A9:B9:A9:A1:93:22:79:97:74:E7:A1:79:F4:AA:72:CC:37:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/77KGr-jWWnEf5X0Fk60T9XqPSLg.roa Signing time: Fri 02 Jan 2026 06:19:49 +0000 ROA not before: Fri 02 Jan 2026 06:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49525 IP address blocks: 91.212.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 10:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:bf:d6:35:35:41:c6:e0:6b:68:97:db:b3:51:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c2ca9b9a9a19322799774e7a179f4aa72cc3741 Validity Not Before: Jan 2 06:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=efb286afe8d65a711fe57d0593ad13f57a8f48b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:84:e7:72:1b:5c:8d:f6:00:ea:13:c4:37:f6: 3f:61:0d:49:7e:5f:05:24:71:5c:b9:b5:b8:78:4c: 2c:97:1b:cb:3b:5c:fb:9a:d8:e1:a9:4e:52:3b:55: 92:66:27:33:ef:cc:5d:91:e4:72:4a:9d:33:d7:06: 41:4e:ad:e6:81:3d:98:ab:98:ab:e7:e8:01:8a:7c: 3a:16:21:0f:61:65:e5:41:87:2f:e3:9f:61:3b:c7: d2:6c:07:5d:bf:a9:d6:04:84:f8:5c:c0:47:c5:a9: e9:3e:de:3d:f3:12:7c:fb:ee:65:36:00:da:57:e7: d0:72:c6:73:d8:4c:10:41:4c:18:42:f8:97:2c:43: ca:b4:8f:45:c8:64:bf:63:c6:c8:95:b5:77:d5:58: 82:60:35:43:1d:c1:e5:94:53:c6:8c:74:3f:16:ca: ce:94:9f:12:6a:f3:d0:8d:aa:40:d6:07:bf:2b:15: 0e:a0:0d:52:f1:6e:ad:de:38:f0:4f:47:b8:90:03: e3:62:cd:b5:34:30:21:f8:77:0a:9e:5c:ec:ba:2f: 8f:36:4f:d9:ff:06:23:c9:10:8a:ad:e7:fc:27:78: ce:5c:0e:61:a3:43:27:ec:c6:56:11:f8:46:fa:42: f3:0f:b4:4e:dd:e3:06:89:ae:d2:06:c4:90:73:db: ee:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B2:86:AF:E8:D6:5A:71:1F:E5:7D:05:93:AD:13:F5:7A:8F:48:B8 X509v3 Authority Key Identifier: keyid:7C:2C:A9:B9:A9:A1:93:22:79:97:74:E7:A1:79:F4:AA:72:CC:37:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/77KGr-jWWnEf5X0Fk60T9XqPSLg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.234.0/24 Signature Algorithm: sha256WithRSAEncryption 73:e8:55:0b:07:63:16:5e:bd:99:60:2f:73:c6:92:28:b8:5c: 2e:85:74:ea:e6:c6:26:fe:ab:51:36:a2:40:01:16:52:10:b7: 02:3b:89:1c:16:4a:7b:90:d5:74:99:c9:0d:ff:18:f2:fa:e2: 01:a2:c0:7d:7c:8b:68:e4:ff:79:d6:32:91:58:5f:ec:7c:27: 92:ac:d7:f2:8e:7c:01:d0:e5:24:a7:c9:3b:47:bf:f4:a8:85: 19:9b:49:67:b6:ae:05:0e:b6:cf:2c:56:55:1e:2d:e2:75:dc: 34:a1:19:98:ca:4d:fa:04:65:e3:2f:5f:ed:01:37:54:6c:1c: 62:f3:8e:8f:22:4c:9d:14:2d:1c:02:8e:7a:fc:9f:24:8e:f4: 3d:d9:e5:ac:e3:44:a2:bf:4e:ed:1a:b1:ca:f7:90:40:24:aa: 0b:bf:a8:73:47:5b:33:a7:93:0b:b1:eb:79:b7:45:38:73:93: c2:a3:0e:76:d8:bd:70:c9:de:0f:70:d6:9d:ad:7d:03:ef:47: d3:fe:c5:dd:36:f1:17:26:f3:7a:5c:11:df:a4:d9:cb:ae:14: ed:86:6e:08:36:fd:ac:87:32:f8:7f:33:6a:e0:0d:bf:58:de: a1:d8:c4:3a:87:67:e0:5b:b4:fd:5e:9b:b7:44:53:37:86:53: 02:60:85:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XL/WNTVBxuBraJfbs1GFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMmNhOWI5YTlhMTkzMjI3OTk3NzRlN2ExNzlmNGFhNzJj YzM3NDEwHhcNMjYwMTAyMDYxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmIyODZhZmU4ZDY1YTcxMWZlNTdkMDU5M2FkMTNmNTdhOGY0OGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YTnchtcjfYA6hPEN/Y/YQ1Jfl8F JHFcubW4eEwslxvLO1z7mtjhqU5SO1WSZicz78xdkeRySp0z1wZBTq3mgT2Yq5ir 5+gBinw6FiEPYWXlQYcv459hO8fSbAddv6nWBIT4XMBHxanpPt498xJ8++5lNgDa V+fQcsZz2EwQQUwYQviXLEPKtI9FyGS/Y8bIlbV31ViCYDVDHcHllFPGjHQ/FsrO lJ8SavPQjapA1ge/KxUOoA1S8W6t3jjwT0e4kAPjYs21NDAh+HcKnlzsui+PNk/Z /wYjyRCKref8J3jOXA5ho0Mn7MZWEfhG+kLzD7RO3eMGia7SBsSQc9vu/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO+yhq/o1lpxH+V9BZOtE/V6j0i4MB8GA1UdIwQY MBaAFHwsqbmpoZMieZd056F59KpyzDdBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkN5cHVhbWhreUo1bDNUbm9YbjBxbkxNTjBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS81MzQ2ZWMtNDUwYS00ZmUyLWJlNjQt ZTRjYzA0NWFiOWZmLzEvNzdLR3ItaldXbkVmNVgwRms2MFQ5WHFQU0xnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS81MzQ2ZWMtNDUwYS00ZmUyLWJlNjQtZTRjYzA0NWFiOWZm LzEvZkN5cHVhbWhreUo1bDNUbm9YbjBxbkxNTjBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9TqMA0G CSqGSIb3DQEBCwUAA4IBAQBz6FULB2MWXr2ZYC9zxpIouFwuhXTq5sYm/qtRNqJA ARZSELcCO4kcFkp7kNV0mckN/xjy+uIBosB9fIto5P951jKRWF/sfCeSrNfyjnwB 0OUkp8k7R7/0qIUZm0lntq4FDrbPLFZVHi3iddw0oRmYyk36BGXjL1/tATdUbBxi 846PIkydFC0cAo56/J8kjvQ92eWs40Siv07tGrHK95BAJKoLv6hzR1szp5MLset5 t0U4c5PCow522L1wyd4PcNadrX0D70fT/sXdNvEXJvN6XBHfpNnLrhTthm4INv2s hzL4fzNq4A2/WN6h2MQ6h2fgW7T9Xpu3RFM3hlMCYIV0 -----END CERTIFICATE-----Generated at Tue Jan 13 14:37:30 2026 by rpki-client