This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/7wjZdZfOK--9J0iW5gkpY4jz3Vs.roa File: 7wjZdZfOK--9J0iW5gkpY4jz3Vs.roa (raw, json) Hash identifier: wQ+RvHew1IVetOV7JWzo86gEVS8H0+zXRGq3DJBrmWc= Subject key identifier: EF:08:D9:75:97:CE:2B:EF:BD:27:48:96:E6:09:29:63:88:F3:DD:5B Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Certificate serial: 019B7E380AD8BF45A49A6A14D38AFE05A3BA Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/7wjZdZfOK--9J0iW5gkpY4jz3Vs.roa Signing time: Fri 02 Jan 2026 10:19:20 +0000 ROA not before: Fri 02 Jan 2026 10:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61308 IP address blocks: 95.215.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:0a:d8:bf:45:a4:9a:6a:14:d3:8a:fe:05:a3:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Validity Not Before: Jan 2 10:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef08d97597ce2befbd274896e609296388f3dd5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cb:73:a3:29:00:fb:9f:80:a0:12:5f:9f:19: c7:12:f2:2c:c6:a9:67:9d:44:09:6e:df:44:2e:38: 67:2f:be:06:6c:c0:f1:a8:31:a4:d9:25:d1:d2:62: fe:df:5d:4b:fd:83:6e:6f:39:79:b9:06:22:12:89: aa:65:65:f5:42:8e:b1:fe:79:47:79:64:a1:b1:6f: 83:05:a7:8e:28:77:8a:00:79:14:88:69:99:54:97: 41:34:5e:25:c1:91:f1:bd:95:9d:41:4d:d1:be:f4: 47:c8:ac:66:5b:61:34:c1:db:0f:d1:b7:73:21:f8: 9e:f9:8d:f5:75:26:a3:91:d1:44:d1:bc:a4:0b:fa: af:6d:99:9d:1d:a3:9f:6f:5b:5e:db:aa:15:87:2e: 8b:c1:82:d6:ea:57:13:50:cb:df:e2:8d:8a:35:a0: e9:fc:0a:70:dd:8a:70:9b:5a:74:af:f4:db:65:8c: a1:fa:7a:92:89:34:07:20:eb:27:27:9b:97:f9:d0: 5e:48:8c:a2:64:b1:03:27:89:0b:f2:d7:2c:0b:73: 6b:8f:9f:22:7b:3c:f1:11:a5:4b:85:c0:da:0f:90: 4a:63:64:93:08:5c:fe:71:91:29:81:88:94:d8:a7: ef:36:fc:08:74:57:56:45:77:01:50:fe:02:dc:d7: 03:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:08:D9:75:97:CE:2B:EF:BD:27:48:96:E6:09:29:63:88:F3:DD:5B X509v3 Authority Key Identifier: keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/7wjZdZfOK--9J0iW5gkpY4jz3Vs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.215.109.0/24 Signature Algorithm: sha256WithRSAEncryption 57:f7:ca:d4:f0:17:c2:f5:71:95:10:2f:13:b8:72:2d:0f:95: 90:53:b3:9c:6e:a7:0c:a5:28:20:f0:f7:72:04:cf:8c:27:7d: 26:36:d0:21:d7:60:a4:22:82:4e:1c:17:0c:d5:6f:62:a9:90: e9:26:b2:1a:c9:1e:29:b9:2e:0a:bd:9d:0a:3d:ee:fe:54:6f: 08:69:7b:23:44:d9:9d:9b:aa:2b:fd:87:5c:23:85:2c:29:f5: d7:71:d0:b1:15:eb:bd:3f:e1:63:fa:4b:c9:72:6d:91:3c:77: b8:02:de:b4:8b:af:8c:59:9c:bd:5c:01:d5:02:c6:1c:e6:5a: db:18:43:22:8e:79:bf:0c:e1:bb:19:9f:7d:77:8e:7c:75:85: cf:76:4f:ce:06:e5:5b:64:5b:1b:b0:9b:73:87:ff:a2:7e:7b: 8d:da:de:ba:91:b6:20:6f:87:51:f5:b2:ad:5a:10:e0:80:8c: 32:a5:0b:7c:cc:75:ab:46:eb:4e:18:68:fe:38:9d:e7:f8:1a: 7f:43:ae:a7:53:38:52:d1:ff:55:eb:9f:a9:a5:53:1d:9d:ef: 1f:e5:f0:8e:87:97:e8:88:11:b4:24:d1:12:6b:7b:7e:95:71: 57:d1:87:5a:8a:61:ff:83:68:e8:3c:a1:a6:8f:d2:42:22:8d: 96:5a:f8:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OArYv0WkmmoU04r+BaO6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3 NzliYjEwHhcNMjYwMTAyMTAxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjA4ZDk3NTk3Y2UyYmVmYmQyNzQ4OTZlNjA5Mjk2Mzg4ZjNkZDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsstzoykA+5+AoBJfnxnHEvIsxqln nUQJbt9ELjhnL74GbMDxqDGk2SXR0mL+311L/YNubzl5uQYiEomqZWX1Qo6x/nlH eWShsW+DBaeOKHeKAHkUiGmZVJdBNF4lwZHxvZWdQU3RvvRHyKxmW2E0wdsP0bdz Ifie+Y31dSajkdFE0bykC/qvbZmdHaOfb1te26oVhy6LwYLW6lcTUMvf4o2KNaDp /Apw3Ypwm1p0r/TbZYyh+nqSiTQHIOsnJ5uX+dBeSIyiZLEDJ4kL8tcsC3Nrj58i ezzxEaVLhcDaD5BKY2STCFz+cZEpgYiU2KfvNvwIdFdWRXcBUP4C3NcDTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO8I2XWXzivvvSdIluYJKWOI891bMB8GA1UdIwQY MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt NmI0MzcyNjAyMDk2LzEvN3dqWmRaZk9LLS05SjBpVzVna3BZNGp6M1ZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2 LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX9dtMA0G CSqGSIb3DQEBCwUAA4IBAQBX98rU8BfC9XGVEC8TuHItD5WQU7OcbqcMpSgg8Pdy BM+MJ30mNtAh12CkIoJOHBcM1W9iqZDpJrIayR4puS4KvZ0KPe7+VG8IaXsjRNmd m6or/YdcI4UsKfXXcdCxFeu9P+Fj+kvJcm2RPHe4At60i6+MWZy9XAHVAsYc5lrb GEMijnm/DOG7GZ99d458dYXPdk/OBuVbZFsbsJtzh/+ifnuN2t66kbYgb4dR9bKt WhDggIwypQt8zHWrRutOGGj+OJ3n+Bp/Q66nUzhS0f9V65+ppVMdne8f5fCOh5fo iBG0JNESa3t+lXFX0YdaimH/g2joPKGmj9JCIo2WWvj/ -----END CERTIFICATE-----Generated at Tue Jan 20 17:19:13 2026 by rpki-client