This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/07j9_n6AVXDopfWR8BaInw48NMc.roa File: 07j9_n6AVXDopfWR8BaInw48NMc.roa (raw, json) Hash identifier: WakDlcBYUCEpu1IOY+fCJocQGM48pGFR8nk3j6rRYQM= Subject key identifier: D3:B8:FD:FE:7E:80:55:70:E8:A5:F5:91:F0:16:88:9F:0E:3C:34:C7 Certificate issuer: /CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8 Certificate serial: 019B7F85105E438053A3F9CC34668AA090A7 Authority key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/07j9_n6AVXDopfWR8BaInw48NMc.roa Signing time: Fri 02 Jan 2026 16:23:05 +0000 ROA not before: Fri 02 Jan 2026 16:23:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203 IP address blocks: 195.66.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:10:5e:43:80:53:a3:f9:cc:34:66:8a:a0:90:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8 Validity Not Before: Jan 2 16:23:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3b8fdfe7e805570e8a5f591f016889f0e3c34c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5f:e2:f2:e1:f4:88:42:e2:20:6f:79:4d:d2: 00:c6:03:66:c2:1b:f8:38:b8:19:68:fb:90:c5:55: 64:ff:d7:b3:52:3e:02:49:27:c2:0e:ae:09:1e:6b: 2b:cc:8c:5b:2a:9d:58:a7:92:f4:3b:4a:a4:6b:ca: 7f:bb:ce:ae:2c:de:8e:26:96:1d:bb:57:88:fa:ec: 61:93:7e:a0:d4:e6:dd:7e:93:31:3b:1f:96:55:a1: b9:14:36:3c:7f:08:8e:39:c1:a0:a3:2d:11:da:a7: 8e:e8:ca:8b:52:50:1e:ba:7f:b8:84:9f:a3:c0:42: 96:40:89:91:7a:da:35:36:03:47:46:5a:3f:f1:1d: 04:f5:42:23:99:5d:05:1a:29:b1:d8:46:da:4c:8b: 79:bf:db:0e:7f:85:ec:f4:5a:3f:64:56:0d:cc:50: db:21:3c:c2:03:b3:94:97:a2:bb:55:8d:35:35:a9: 33:e7:31:7b:d4:e3:6d:2d:50:10:11:cd:c4:65:4f: 2f:67:01:ca:9f:07:c9:d2:55:96:1d:5d:2d:74:89: a4:83:77:dc:4e:ac:4e:e4:44:f2:44:d2:40:e0:a0: 45:b7:43:da:4b:43:33:b4:6b:f2:0a:08:80:f4:05: 9e:c0:2e:d1:21:7e:7d:56:15:ae:a7:43:84:df:cd: 71:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B8:FD:FE:7E:80:55:70:E8:A5:F5:91:F0:16:88:9F:0E:3C:34:C7 X509v3 Authority Key Identifier: keyid:F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/07j9_n6AVXDopfWR8BaInw48NMc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.66.107.0/24 Signature Algorithm: sha256WithRSAEncryption a6:e3:95:93:97:7c:51:5b:0e:12:aa:a7:60:42:29:7c:a1:ab: 04:3e:7b:82:d5:90:10:76:d4:23:fd:c2:de:8d:8b:2e:06:32: 93:77:d4:3b:ef:96:99:6c:55:31:bc:e5:b6:27:42:58:71:ab: 0c:cb:51:5e:08:0d:8e:fb:b3:c8:58:6e:7e:f8:9c:36:10:a3: f1:2b:f3:a2:cf:a1:61:ca:bc:78:4d:7f:49:d6:3f:31:0b:fa: 5f:d1:0a:c3:26:42:84:57:9b:10:a3:4a:40:c3:b4:c5:9e:14: 3d:45:a2:56:ae:2f:f0:a8:5f:c9:19:9e:2d:17:ed:62:3b:7d: 35:cf:a6:db:1d:7a:1e:5b:f5:13:d2:05:70:14:83:35:81:a1: 8d:a2:81:67:38:72:5d:0c:ab:8c:c4:1f:ef:e1:ef:da:de:fe: d6:cb:22:24:4f:d3:40:ea:52:99:bc:a9:80:71:06:8a:f5:8e: 25:5d:1b:49:08:ce:7b:22:c9:36:39:0a:8a:b2:f4:e9:5d:dc: 73:78:c7:e7:69:ae:ec:d4:0b:f1:b3:5f:e5:f6:54:ce:5d:c3: 3a:94:ed:b1:a6:b4:45:90:45:f6:71:cd:d9:9c:a8:3c:34:09: b1:0a:e5:69:72:09:66:9e:2c:79:22:0c:32:51:85:c4:37:18: da:3a:9b:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hRBeQ4BTo/nMNGaKoJCnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxOTkxOGVkMjE5ZTdkM2Q5MjI3MzdlY2RjNzMxZjBjYTYw YTY4YjgwHhcNMjYwMTAyMTYyMzA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2I4ZmRmZTdlODA1NTcwZThhNWY1OTFmMDE2ODg5ZjBlM2MzNGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzl/i8uH0iELiIG95TdIAxgNmwhv4 OLgZaPuQxVVk/9ezUj4CSSfCDq4JHmsrzIxbKp1Yp5L0O0qka8p/u86uLN6OJpYd u1eI+uxhk36g1ObdfpMxOx+WVaG5FDY8fwiOOcGgoy0R2qeO6MqLUlAeun+4hJ+j wEKWQImReto1NgNHRlo/8R0E9UIjmV0FGimx2EbaTIt5v9sOf4Xs9Fo/ZFYNzFDb ITzCA7OUl6K7VY01Nakz5zF71ONtLVAQEc3EZU8vZwHKnwfJ0lWWHV0tdImkg3fc TqxO5ETyRNJA4KBFt0PaS0MztGvyCgiA9AWewC7RIX59VhWup0OE381xhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNO4/f5+gFVw6KX1kfAWiJ8OPDTHMB8GA1UdIwQY MBaAFPGZGO0hnn09kic37NxzHwymCmi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82MmIwOTgtNTY4ZC00ODcyLWEwMzIt MzEzZWZlYjBiMTlkLzEvMDdqOV9uNkFWWERvcGZXUjhCYUludzQ4Tk1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS82MmIwOTgtNTY4ZC00ODcyLWEwMzItMzEzZWZlYjBiMTlk LzEvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0JrMA0G CSqGSIb3DQEBCwUAA4IBAQCm45WTl3xRWw4SqqdgQil8oasEPnuC1ZAQdtQj/cLe jYsuBjKTd9Q775aZbFUxvOW2J0JYcasMy1FeCA2O+7PIWG5++Jw2EKPxK/Oiz6Fh yrx4TX9J1j8xC/pf0QrDJkKEV5sQo0pAw7TFnhQ9RaJWri/wqF/JGZ4tF+1iO301 z6bbHXoeW/UT0gVwFIM1gaGNooFnOHJdDKuMxB/v4e/a3v7WyyIkT9NA6lKZvKmA cQaK9Y4lXRtJCM57Isk2OQqKsvTpXdxzeMfnaa7s1Avxs1/l9lTOXcM6lO2xprRF kEX2cc3ZnKg8NAmxCuVpcglmnix5IgwyUYXENxjaOpsb -----END CERTIFICATE-----Generated at Thu Jan 22 09:48:32 2026 by rpki-client