This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/7WH7MNjgKQECpcfeO5Kiimb7Df0.roa File: 7WH7MNjgKQECpcfeO5Kiimb7Df0.roa (raw, json) Hash identifier: Jicb2Ne1P8KiYy+rp1J4QMe3h0nRexvVyWXvg4N4jbE= Subject key identifier: ED:61:FB:30:D8:E0:29:01:02:A5:C7:DE:3B:92:A2:8A:66:FB:0D:FD Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Certificate serial: 019B77C7724622EC0F14ACF98282B739BEAA Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/7WH7MNjgKQECpcfeO5Kiimb7Df0.roa Signing time: Thu 01 Jan 2026 04:18:38 +0000 ROA not before: Thu 01 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58061 IP address blocks: 91.147.121.0/24 maxlen: 24 212.116.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:72:46:22:ec:0f:14:ac:f9:82:82:b7:39:be:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Validity Not Before: Jan 1 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed61fb30d8e0290102a5c7de3b92a28a66fb0dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:13:19:1d:39:fc:7a:2f:7d:cf:0f:4a:5f:cf: c9:26:63:ea:d7:24:54:c3:93:92:73:b3:9b:a6:15: 22:d7:aa:2d:1e:c5:4b:59:68:1b:08:15:88:ad:5c: 10:e0:9b:ec:98:9e:61:b2:18:4e:6a:ac:32:92:12: bc:27:76:2d:16:2e:2e:71:99:d9:51:fe:89:02:ef: 7c:4c:ff:fd:9c:8c:4c:f8:35:23:e1:3e:3a:fd:22: be:7b:5e:4d:26:c1:79:78:c0:ee:07:3f:bc:6e:5e: 6b:71:81:b7:94:3a:bd:1a:cc:29:b9:34:df:c4:d5: 3f:f8:eb:d3:3e:9e:1e:7a:c7:80:40:4e:4b:08:1c: b0:59:99:20:29:5f:d3:bb:15:36:df:bd:c6:ec:f7: cc:03:82:41:c8:c9:3c:8d:9c:36:00:23:e7:cf:42: 76:58:4a:9d:7d:81:6f:64:41:58:31:f0:2b:b8:46: 38:34:c2:f6:d1:33:6b:ce:54:ed:8c:2b:e7:65:a2: 31:2a:20:88:71:b5:e2:21:d3:6e:3d:31:a4:64:65: f6:1c:3d:81:07:db:7d:db:06:f7:c1:1e:59:d0:f1: fc:56:7e:36:8c:8f:20:4b:70:f2:3e:9b:a3:95:ef: e5:84:53:65:9c:d3:c3:66:b9:63:55:80:48:94:01: 95:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:61:FB:30:D8:E0:29:01:02:A5:C7:DE:3B:92:A2:8A:66:FB:0D:FD X509v3 Authority Key Identifier: keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/7WH7MNjgKQECpcfeO5Kiimb7Df0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.147.121.0/24 212.116.242.0/24 Signature Algorithm: sha256WithRSAEncryption 18:b2:75:00:b7:2b:f2:f5:3b:0a:3f:38:85:a6:6e:8d:92:cf: e8:d2:90:5b:20:00:02:9c:2c:4f:3a:1c:ca:43:b0:31:02:50: 53:16:17:9f:a2:f8:c5:6d:e1:b7:93:c7:b4:fc:d0:72:85:f0: f1:15:69:e0:87:19:0e:a9:ea:0f:cf:2d:29:83:d2:d5:37:02: e0:81:91:d5:20:c1:75:ce:fa:a6:d8:9b:45:a4:be:c6:be:1a: 23:74:ea:4c:c1:7c:46:9c:c2:8c:7d:10:18:e8:6c:9e:1d:ee: a9:bd:dc:10:6b:69:78:86:21:eb:59:ba:4b:0d:f1:b9:a1:51: 11:97:4f:d3:61:4d:1a:4e:7f:17:7b:14:b5:2a:f4:30:37:25: a3:1b:d5:c0:b9:9d:7a:ac:91:c6:d7:d1:72:7e:d7:05:33:10: ef:28:e1:85:d6:38:26:17:f9:b0:61:50:35:b6:21:31:d2:29: fe:be:aa:2c:ad:c3:83:bc:28:ff:05:4c:3c:15:40:63:84:1b: 96:77:67:ab:09:b9:17:58:55:c2:33:62:e3:cd:af:12:d1:84: a1:70:42:0a:c8:30:c7:31:ac:8a:29:72:64:3a:77:32:a6:ab: a9:a6:98:b1:55:1b:cd:8c:44:fd:be:fc:a6:48:a6:9b:75:17: 23:c7:f5:09 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x3JGIuwPFKz5goK3Ob6qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi ZTAwNWQwHhcNMjYwMTAxMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDYxZmIzMGQ4ZTAyOTAxMDJhNWM3ZGUzYjkyYTI4YTY2ZmIwZGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hMZHTn8ei99zw9KX8/JJmPq1yRU w5OSc7ObphUi16otHsVLWWgbCBWIrVwQ4JvsmJ5hshhOaqwykhK8J3YtFi4ucZnZ Uf6JAu98TP/9nIxM+DUj4T46/SK+e15NJsF5eMDuBz+8bl5rcYG3lDq9GswpuTTf xNU/+OvTPp4eeseAQE5LCBywWZkgKV/TuxU2373G7PfMA4JByMk8jZw2ACPnz0J2 WEqdfYFvZEFYMfAruEY4NML20TNrzlTtjCvnZaIxKiCIcbXiIdNuPTGkZGX2HD2B B9t92wb3wR5Z0PH8Vn42jI8gS3DyPpujle/lhFNlnNPDZrljVYBIlAGVFwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFO1h+zDY4CkBAqXH3juSoopm+w39MB8GA1UdIwQY MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt ZTEyYjE2NDIxNWI5LzEvN1dIN01OamdLUUVDcGNmZU81S2lpbWI3RGYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5 LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW5N5AwQA 1HTyMA0GCSqGSIb3DQEBCwUAA4IBAQAYsnUAtyvy9TsKPziFpm6Nks/o0pBbIAAC nCxPOhzKQ7AxAlBTFhefovjFbeG3k8e0/NByhfDxFWnghxkOqeoPzy0pg9LVNwLg gZHVIMF1zvqm2JtFpL7GvhojdOpMwXxGnMKMfRAY6GyeHe6pvdwQa2l4hiHrWbpL DfG5oVERl0/TYU0aTn8XexS1KvQwNyWjG9XAuZ16rJHG19FyftcFMxDvKOGF1jgm F/mwYVA1tiEx0in+vqosrcODvCj/BUw8FUBjhBuWd2erCbkXWFXCM2Ljza8S0YSh cEIKyDDHMayKKXJkOncypqupppixVRvNjET9vvymSKabdRcjx/UJ -----END CERTIFICATE-----Generated at Thu Jan 22 21:37:57 2026 by rpki-client