This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/nv7YrBBjEqeVW-pRBpmKMzYYjNU.roa File: nv7YrBBjEqeVW-pRBpmKMzYYjNU.roa (raw, json) Hash identifier: kYPGaco3pxLDHifaSJV9n0xVBsh+iPQ3pvB3Ce36XNM= Subject key identifier: 9E:FE:D8:AC:10:63:12:A7:95:5B:EA:51:06:99:8A:33:36:18:8C:D5 Certificate issuer: /CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5 Certificate serial: 019B7E3815AE5EBCC04C0FC9C0F61F37B405 Authority key identifier: 84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/nv7YrBBjEqeVW-pRBpmKMzYYjNU.roa Signing time: Fri 02 Jan 2026 10:19:23 +0000 ROA not before: Fri 02 Jan 2026 10:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56335 IP address blocks: 147.78.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:15:ae:5e:bc:c0:4c:0f:c9:c0:f6:1f:37:b4:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5 Validity Not Before: Jan 2 10:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9efed8ac106312a7955bea5106998a3336188cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:61:6e:e6:e4:5b:36:97:1b:aa:19:da:29:12: 0d:df:fa:a8:1e:94:ff:ca:ec:6c:01:b0:5b:7b:28: 4b:89:0e:dd:81:aa:08:c0:10:45:93:63:ac:15:dd: 89:6f:38:ba:42:c3:a8:0d:3b:e5:b6:b0:50:84:b9: e1:6a:b7:dd:a3:53:3e:c7:e4:0e:fc:53:8a:57:a7: 21:7d:eb:2a:5b:0f:48:4a:a6:21:fa:5a:c6:94:3f: 49:b4:5f:fc:94:39:14:a2:e8:34:fd:4d:87:b6:e2: c5:52:b2:6b:5d:4d:66:48:a4:82:72:49:15:df:4d: 4b:ca:3d:a6:77:07:7c:6b:03:3c:ee:fe:67:26:2d: e8:1c:0a:62:4d:2b:7d:22:89:0e:06:c9:b8:35:bd: 2c:9a:bd:8a:86:e6:97:ba:77:86:69:c0:ef:df:2c: 96:dc:e4:32:27:b3:cd:b7:b5:70:e2:ae:89:c8:80: 76:62:12:3c:06:1b:dc:27:1d:a9:8a:a4:28:ee:c6: b7:24:a5:9f:9f:f0:98:0b:37:1c:28:66:87:fd:a6: c0:9f:ce:d2:fd:fd:45:0f:f4:7a:ee:05:86:86:d4: f0:96:d6:8c:65:d1:dd:49:5d:e9:ec:31:24:1c:60: 2a:88:a2:78:10:d9:71:c6:5b:60:2a:f4:0f:10:ed: ed:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:FE:D8:AC:10:63:12:A7:95:5B:EA:51:06:99:8A:33:36:18:8C:D5 X509v3 Authority Key Identifier: keyid:84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/nv7YrBBjEqeVW-pRBpmKMzYYjNU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.7.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:c6:ec:e6:47:59:78:d3:02:c8:58:b0:a2:1e:0b:f1:fa:0f: 58:e5:3b:c0:ae:a1:1a:17:f1:89:80:45:59:02:32:57:a7:23: c1:5b:20:46:4f:4f:dd:94:d5:39:0f:66:e3:59:aa:b8:a9:48: 22:32:44:ea:34:ff:01:f9:ee:a9:c4:41:f8:1e:9f:50:23:6b: b8:48:60:95:65:37:b4:a1:ac:48:46:d8:bf:fa:51:f5:8a:64: 38:9d:08:ab:e0:65:47:7b:72:5d:7c:45:43:59:bb:25:a5:00: 4b:3b:51:7f:3c:1f:5f:3a:a3:13:81:e6:8a:21:44:24:1b:fa: 5f:3b:84:c1:97:c1:cf:1a:80:47:7f:38:d8:0a:8a:6b:b0:31: 9a:51:dc:b0:01:74:85:df:ae:b2:5b:47:08:aa:8a:72:3f:74: 1c:fe:03:a9:41:5b:c7:06:c2:d1:8f:c2:71:14:6c:41:e6:90: fc:34:d9:9a:3f:cd:5d:cf:42:6f:de:8b:62:aa:4e:77:b0:09: cf:d4:05:53:7f:14:ef:a1:30:ae:1e:02:ce:1c:97:56:6b:f2: f8:9e:a0:d2:a6:7f:c3:36:93:fb:c7:1b:c6:0b:7c:17:75:8e: 1e:a2:2c:13:ee:6a:86:65:72:69:1c:44:f0:ef:27:2b:72:46: 6b:2d:35:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OBWuXrzATA/JwPYfN7QFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NDU4MmNhNzA0NzE3ZWIwYzk0YmU0ZDg5NDEzZjRiYzJk OGI4ZTUwHhcNMjYwMTAyMTAxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWZlZDhhYzEwNjMxMmE3OTU1YmVhNTEwNjk5OGEzMzM2MTg4Y2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WFu5uRbNpcbqhnaKRIN3/qoHpT/ yuxsAbBbeyhLiQ7dgaoIwBBFk2OsFd2Jbzi6QsOoDTvltrBQhLnharfdo1M+x+QO /FOKV6chfesqWw9ISqYh+lrGlD9JtF/8lDkUoug0/U2HtuLFUrJrXU1mSKSCckkV 301Lyj2mdwd8awM87v5nJi3oHApiTSt9IokOBsm4Nb0smr2KhuaXuneGacDv3yyW 3OQyJ7PNt7Vw4q6JyIB2YhI8BhvcJx2piqQo7sa3JKWfn/CYCzccKGaH/abAn87S /f1FD/R67gWGhtTwltaMZdHdSV3p7DEkHGAqiKJ4ENlxxltgKvQPEO3tLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ7+2KwQYxKnlVvqUQaZijM2GIzVMB8GA1UdIwQY MBaAFIRFgspwRxfrDJS+TYlBP0vC2LjlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEVXQ3luQkhGLXNNbEw1TmlVRV9TOExZdU9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83MzVlNDItYzYwOC00NmI2LThmNzAt ZjIzZjY2ZjhkMjQyLzEvbnY3WXJCQmpFcWVWVy1wUkJwbUtNellZak5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC83MzVlNDItYzYwOC00NmI2LThmNzAtZjIzZjY2ZjhkMjQy LzEvaEVXQ3luQkhGLXNNbEw1TmlVRV9TOExZdU9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk04HMA0G CSqGSIb3DQEBCwUAA4IBAQBOxuzmR1l40wLIWLCiHgvx+g9Y5TvArqEaF/GJgEVZ AjJXpyPBWyBGT0/dlNU5D2bjWaq4qUgiMkTqNP8B+e6pxEH4Hp9QI2u4SGCVZTe0 oaxIRti/+lH1imQ4nQir4GVHe3JdfEVDWbslpQBLO1F/PB9fOqMTgeaKIUQkG/pf O4TBl8HPGoBHfzjYCoprsDGaUdywAXSF366yW0cIqopyP3Qc/gOpQVvHBsLRj8Jx FGxB5pD8NNmaP81dz0Jv3otiqk53sAnP1AVTfxTvoTCuHgLOHJdWa/L4nqDSpn/D NpP7xxvGC3wXdY4eoiwT7mqGZXJpHETw7ycrckZrLTUS -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:10 2026 by rpki-client