This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/7Nw66k4HGDgniHjPpIYuFlo7wts.roa File: 7Nw66k4HGDgniHjPpIYuFlo7wts.roa (raw, json) Hash identifier: xkBwde/whvV3zzujO/2yU/8uxz1ZIVTTivP0Kf+ua7o= Subject key identifier: EC:DC:3A:EA:4E:07:18:38:27:88:78:CF:A4:86:2E:16:5A:3B:C2:DB Certificate issuer: /CN=36cc494c4a934bbb3cf46ba5824d6666c8947a2f Certificate serial: 019B7F851AE680B722C0C7C7B0377049F873 Authority key identifier: 36:CC:49:4C:4A:93:4B:BB:3C:F4:6B:A5:82:4D:66:66:C8:94:7A:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/7Nw66k4HGDgniHjPpIYuFlo7wts.roa Signing time: Fri 02 Jan 2026 16:23:08 +0000 ROA not before: Fri 02 Jan 2026 16:23:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206615 IP address blocks: 77.247.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:1a:e6:80:b7:22:c0:c7:c7:b0:37:70:49:f8:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36cc494c4a934bbb3cf46ba5824d6666c8947a2f Validity Not Before: Jan 2 16:23:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ecdc3aea4e071838278878cfa4862e165a3bc2db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:62:f6:22:2d:b4:64:07:2c:b7:24:f9:a2:c0: d5:17:ab:69:14:f3:a8:08:94:74:82:6d:4d:bf:71: 0b:d5:98:1e:5d:eb:a9:85:b6:09:d5:d5:29:93:28: 26:ab:ef:d4:42:00:0f:f6:a4:cc:d0:39:5a:19:01: 45:7b:8b:37:32:47:83:88:d6:4f:43:ef:8c:38:a2: d9:eb:ee:09:20:e6:43:48:ef:95:4f:c2:e1:64:0b: 5c:49:ed:1f:27:45:e7:27:94:c0:d2:ed:2c:f8:28: fe:cb:74:6f:56:cf:1e:d7:65:d0:51:5f:27:9b:1e: 1f:39:38:6e:60:67:06:26:1a:29:6f:60:43:ff:4a: d2:8f:f6:52:dc:8b:b8:91:3d:79:91:df:c9:3b:77: 67:0a:41:73:e8:98:c7:3b:ad:c3:05:ca:01:95:29: 24:16:0a:be:8a:a6:fc:ea:60:e3:4d:70:ab:d7:67: 17:6c:2f:02:bd:98:c6:b6:97:5c:ac:43:9f:56:4c: c4:cb:28:bd:49:e3:d6:fd:ec:74:3e:26:b7:09:5f: ac:3d:11:04:3a:28:21:17:9a:b8:56:21:74:64:7d: 3a:8b:22:58:f3:63:9c:e6:91:80:a4:16:a5:b3:21: 7f:74:fa:46:37:67:65:16:34:f1:12:f6:6f:41:f2: e6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:DC:3A:EA:4E:07:18:38:27:88:78:CF:A4:86:2E:16:5A:3B:C2:DB X509v3 Authority Key Identifier: keyid:36:CC:49:4C:4A:93:4B:BB:3C:F4:6B:A5:82:4D:66:66:C8:94:7A:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/7Nw66k4HGDgniHjPpIYuFlo7wts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.247.199.0/24 Signature Algorithm: sha256WithRSAEncryption 08:da:82:c0:50:5e:27:90:56:92:6f:e2:c4:52:8d:44:f2:d1: ac:01:b3:2c:2d:e4:d3:1f:d9:0c:76:fc:e4:41:5f:29:f9:6e: 58:9c:17:1e:28:bd:2d:33:48:9b:ea:43:f7:e7:02:7b:dd:3b: 8b:5d:3c:ca:4c:8c:18:17:db:1d:76:64:41:ca:7a:52:d8:b0: 34:98:76:71:4e:30:4d:75:48:a0:40:f4:00:22:c9:6b:1e:08: 67:63:7a:3a:6f:44:54:d5:73:c0:69:8a:4d:94:e4:80:c0:97: 49:49:5b:34:d1:99:6c:83:05:43:a5:9f:55:a5:10:02:13:f6: fa:7d:15:7c:5a:2b:b7:54:a3:e3:bc:0f:45:e1:13:ca:43:5f: 87:33:b9:db:b5:57:73:6b:99:70:2e:bf:00:bf:8a:bf:6f:58: 9b:9b:3d:59:cd:3d:39:2f:7a:3c:9f:db:5c:8f:e1:c5:ed:a7: 2d:5a:19:7d:92:c6:06:56:75:e1:8d:f0:d7:ba:7f:9c:ae:d2: 65:aa:21:93:91:d7:45:d4:3c:1a:32:c1:dc:a9:9e:cc:ed:5e: 6a:c0:2c:f0:37:31:21:01:dc:d4:a7:4f:04:5c:fd:d3:5b:64: 8c:83:4c:76:c2:4d:db:20:66:8a:9d:fd:09:da:97:69:58:28: ca:d0:f9:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hRrmgLciwMfHsDdwSfhzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Y2M0OTRjNGE5MzRiYmIzY2Y0NmJhNTgyNGQ2NjY2Yzg5 NDdhMmYwHhcNMjYwMTAyMTYyMzA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2RjM2FlYTRlMDcxODM4Mjc4ODc4Y2ZhNDg2MmUxNjVhM2JjMmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmL2Ii20ZAcstyT5osDVF6tpFPOo CJR0gm1Nv3EL1ZgeXeuphbYJ1dUpkygmq+/UQgAP9qTM0DlaGQFFe4s3MkeDiNZP Q++MOKLZ6+4JIOZDSO+VT8LhZAtcSe0fJ0XnJ5TA0u0s+Cj+y3RvVs8e12XQUV8n mx4fOThuYGcGJhopb2BD/0rSj/ZS3Iu4kT15kd/JO3dnCkFz6JjHO63DBcoBlSkk Fgq+iqb86mDjTXCr12cXbC8CvZjGtpdcrEOfVkzEyyi9SePW/ex0Pia3CV+sPREE OighF5q4ViF0ZH06iyJY82Oc5pGApBalsyF/dPpGN2dlFjTxEvZvQfLmkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOzcOupOBxg4J4h4z6SGLhZaO8LbMB8GA1UdIwQY MBaAFDbMSUxKk0u7PPRrpYJNZmbIlHovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnN4SlRFcVRTN3M4OUd1bGdrMW1ac2lVZWk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83YTkwMDQtZTRkOS00ZjU0LTk5Mjgt YjljODE2OTY1YTA0LzEvN053NjZrNEhHRGduaUhqUHBJWXVGbG83d3RzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS83YTkwMDQtZTRkOS00ZjU0LTk5MjgtYjljODE2OTY1YTA0 LzEvTnN4SlRFcVRTN3M4OUd1bGdrMW1ac2lVZWk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATffHMA0G CSqGSIb3DQEBCwUAA4IBAQAI2oLAUF4nkFaSb+LEUo1E8tGsAbMsLeTTH9kMdvzk QV8p+W5YnBceKL0tM0ib6kP35wJ73TuLXTzKTIwYF9sddmRBynpS2LA0mHZxTjBN dUigQPQAIslrHghnY3o6b0RU1XPAaYpNlOSAwJdJSVs00ZlsgwVDpZ9VpRACE/b6 fRV8Wiu3VKPjvA9F4RPKQ1+HM7nbtVdza5lwLr8Av4q/b1ibmz1ZzT05L3o8n9tc j+HF7actWhl9ksYGVnXhjfDXun+crtJlqiGTkddF1DwaMsHcqZ7M7V5qwCzwNzEh AdzUp08EXP3TW2SMg0x2wk3bIGaKnf0J2pdpWCjK0Ply -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:30 2026 by rpki-client