This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/98ygSkK-1Ztw7Q-MRFc_SpdR9Co.roa File: 98ygSkK-1Ztw7Q-MRFc_SpdR9Co.roa (raw, json) Hash identifier: 0au9RALDzOJkPfyVu6dInrBQ1yun08eIF9gTvZfdo5Y= Subject key identifier: F7:CC:A0:4A:42:BE:D5:9B:70:ED:0F:8C:44:57:3F:4A:97:51:F4:2A Certificate issuer: /CN=26425863c309f2655b884c1600394c4338e7fb41 Certificate serial: 019B7E39149B14E8FA55CAE7BBAA23290497 Authority key identifier: 26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/98ygSkK-1Ztw7Q-MRFc_SpdR9Co.roa Signing time: Fri 02 Jan 2026 10:20:28 +0000 ROA not before: Fri 02 Jan 2026 10:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210511 IP address blocks: 109.107.154.0/24 maxlen: 24 195.60.172.0/24 maxlen: 24 195.60.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:14:9b:14:e8:fa:55:ca:e7:bb:aa:23:29:04:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26425863c309f2655b884c1600394c4338e7fb41 Validity Not Before: Jan 2 10:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7cca04a42bed59b70ed0f8c44573f4a9751f42a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ea:4b:91:6a:b6:72:27:89:2f:5c:4d:36:c2: 6c:c1:f3:e1:2f:73:35:b0:ac:e5:75:b3:09:8c:12: ad:4f:fa:4b:d2:0d:1d:44:fc:28:38:91:84:fa:0e: b7:6f:a0:2b:59:1f:e6:ac:d5:99:57:d2:f5:0a:53: 8c:75:f2:37:6d:48:9e:d6:c9:c9:4b:9e:52:f2:e6: f8:e3:35:6b:d4:b5:9a:96:7b:06:26:35:14:2c:f7: 3f:7e:97:ea:04:aa:0f:9f:39:2a:c3:03:b2:83:02: f7:4f:75:19:a4:46:8d:f3:8b:89:6f:f6:ba:e8:f1: fb:6e:30:18:14:1a:64:c8:b6:da:f5:3d:01:0d:0a: 07:45:74:9a:3f:8b:19:26:b6:59:28:15:f2:9c:e3: fa:cb:f8:a9:2e:c4:07:85:e7:61:d4:c7:55:59:ff: 5f:e4:04:31:a1:28:af:05:ed:c5:25:7a:a4:b9:33: 3f:b3:0e:c2:4e:54:6f:8c:e7:2f:57:53:5c:0c:c8: 95:72:f1:c0:99:85:f5:b0:1b:02:2e:c6:29:ef:85: 7a:24:6e:c3:67:6d:89:96:01:7a:24:45:7d:d9:22: df:6f:d5:71:04:0e:2e:ee:97:25:37:d0:d0:41:7a: af:be:31:79:c7:d5:0c:83:b8:38:da:af:ee:b7:1e: 1d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CC:A0:4A:42:BE:D5:9B:70:ED:0F:8C:44:57:3F:4A:97:51:F4:2A X509v3 Authority Key Identifier: keyid:26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/98ygSkK-1Ztw7Q-MRFc_SpdR9Co.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.107.154.0/24 195.60.172.0/23 Signature Algorithm: sha256WithRSAEncryption 57:2a:3d:4f:6f:40:8d:b1:1e:66:c3:a2:b7:6a:af:7f:d4:f8: 58:d1:c7:e4:2b:8b:90:f1:a5:eb:3e:4d:dc:de:3f:e3:16:a2: 77:a4:b3:ce:d4:4d:81:8d:70:74:a7:e3:0d:73:5d:fb:c6:1f: fd:64:ac:3e:bb:51:12:7a:13:25:18:37:96:72:b3:fa:84:2d: b3:67:fc:47:88:60:d8:21:e8:f0:3c:a2:4c:f2:0d:5c:a9:55: b4:ff:cf:53:47:fb:f2:2c:ee:e3:13:8c:2a:a7:84:b6:26:1a: 41:09:6a:77:aa:13:82:6b:df:76:55:e1:17:29:29:23:c3:95: 26:b4:0d:3c:90:cf:2c:aa:ac:6e:d5:83:9f:9c:f8:75:29:01: 69:58:4d:6c:1c:99:a6:61:14:5e:51:30:db:e8:b2:ef:b6:63: 3f:e5:19:ec:46:1a:fb:0a:6e:50:df:11:90:03:9a:5b:c2:91: 7b:ea:59:b7:af:73:bd:da:1f:9e:c2:03:2c:66:a0:9d:26:80: 49:88:2a:4b:aa:20:94:57:bc:5a:7e:d8:cd:e3:d2:37:9f:21: 5c:98:12:05:e3:e1:c3:1a:5b:fd:e8:28:f1:32:c8:a8:67:49: aa:55:a7:f4:d8:67:d5:43:7e:e1:1d:9c:a0:5c:63:86:01:af: 45:c0:99:a9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+ORSbFOj6Vcrnu6ojKQSXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NDI1ODYzYzMwOWYyNjU1Yjg4NGMxNjAwMzk0YzQzMzhl N2ZiNDEwHhcNMjYwMTAyMTAyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2NjYTA0YTQyYmVkNTliNzBlZDBmOGM0NDU3M2Y0YTk3NTFmNDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOpLkWq2cieJL1xNNsJswfPhL3M1 sKzldbMJjBKtT/pL0g0dRPwoOJGE+g63b6ArWR/mrNWZV9L1ClOMdfI3bUie1snJ S55S8ub44zVr1LWalnsGJjUULPc/fpfqBKoPnzkqwwOygwL3T3UZpEaN84uJb/a6 6PH7bjAYFBpkyLba9T0BDQoHRXSaP4sZJrZZKBXynOP6y/ipLsQHhedh1MdVWf9f 5AQxoSivBe3FJXqkuTM/sw7CTlRvjOcvV1NcDMiVcvHAmYX1sBsCLsYp74V6JG7D Z22JlgF6JEV92SLfb9VxBA4u7pclN9DQQXqvvjF5x9UMg7g42q/utx4dBQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPfMoEpCvtWbcO0PjERXP0qXUfQqMB8GA1UdIwQY MBaAFCZCWGPDCfJlW4hMFgA5TEM45/tBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmtKWVk4TUo4bVZiaUV3V0FEbE1RempuLTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9mMTBlMGUtMTZjYS00OGIwLWFiZGMt YzE0ZjZiYTI1Y2IwLzEvOTh5Z1NrSy0xWnR3N1EtTVJGY19TcGRSOUNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9mMTBlMGUtMTZjYS00OGIwLWFiZGMtYzE0ZjZiYTI1Y2Iw LzEvSmtKWVk4TUo4bVZiaUV3V0FEbE1RempuLTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbWuaAwQB wzysMA0GCSqGSIb3DQEBCwUAA4IBAQBXKj1Pb0CNsR5mw6K3aq9/1PhY0cfkK4uQ 8aXrPk3c3j/jFqJ3pLPO1E2BjXB0p+MNc137xh/9ZKw+u1ESehMlGDeWcrP6hC2z Z/xHiGDYIejwPKJM8g1cqVW0/89TR/vyLO7jE4wqp4S2JhpBCWp3qhOCa992VeEX KSkjw5UmtA08kM8sqqxu1YOfnPh1KQFpWE1sHJmmYRReUTDb6LLvtmM/5RnsRhr7 Cm5Q3xGQA5pbwpF76lm3r3O92h+ewgMsZqCdJoBJiCpLqiCUV7xaftjN49I3nyFc mBIF4+HDGlv96CjxMsioZ0mqVaf02GfVQ37hHZygXGOGAa9FwJmp -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:37 2026 by rpki-client