This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/7OTQnzrbHyXo119EfPUpBJCKYHw.roa File: 7OTQnzrbHyXo119EfPUpBJCKYHw.roa (raw, json) Hash identifier: 2rynQETuFSP28J9DNP84gVl8Pw/3bThUsvE7hH2G5gw= Subject key identifier: EC:E4:D0:9F:3A:DB:1F:25:E8:D7:5F:44:7C:F5:29:04:90:8A:60:7C Certificate issuer: /CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9 Certificate serial: 019B7758B761F2908F7FFDCA348C1670D9B6 Authority key identifier: 8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/7OTQnzrbHyXo119EfPUpBJCKYHw.roa Signing time: Thu 01 Jan 2026 02:17:41 +0000 ROA not before: Thu 01 Jan 2026 02:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42000 IP address blocks: 185.99.68.0/22 maxlen: 22 2a00:1790::/29 maxlen: 29 2a00:1790:613::/48 maxlen: 48 2a00:1791::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:b7:61:f2:90:8f:7f:fd:ca:34:8c:16:70:d9:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9 Validity Not Before: Jan 1 02:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ece4d09f3adb1f25e8d75f447cf52904908a607c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f7:bd:0c:31:4d:ee:97:2e:17:69:eb:1d:78: db:ba:dc:fc:44:13:5c:ad:e0:fb:9b:9b:fb:e2:26: a0:a7:0b:bc:e4:33:ea:a1:c7:41:cb:f0:1e:98:23: ad:a3:f5:9b:0f:b8:95:ce:1c:52:82:8f:37:b1:36: 37:bd:31:76:17:f7:3c:ef:99:bc:6d:42:98:82:b5: 97:5a:34:53:7a:9d:dc:32:d4:61:fb:97:38:d0:dc: cd:99:e2:1a:fc:31:7d:8d:42:46:c1:f1:01:8a:38: 15:5e:fe:73:2d:c7:12:a2:e2:2c:f4:20:5f:69:ab: 82:9d:35:67:b0:26:4b:39:99:e1:93:9f:21:75:ba: 20:2f:c5:3e:09:10:6b:39:9b:70:48:30:e5:03:1b: 68:6a:f9:99:28:c1:16:0c:42:eb:a4:b3:ec:7a:76: 2c:1f:9d:d5:67:9c:1c:e1:1b:a8:d9:95:81:2e:22: 4d:70:c8:c1:56:53:3f:20:a4:91:11:1b:33:df:de: 40:0e:2c:c3:27:d3:aa:ea:4a:fd:3c:d9:a8:08:9a: 90:77:19:55:33:8e:b4:53:5c:5a:d4:ab:ae:0c:0e: a4:de:22:6c:2c:55:30:18:cc:b8:87:85:da:74:44: fa:88:54:9f:30:a2:9c:2c:3d:12:ae:b7:23:a2:ab: 09:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E4:D0:9F:3A:DB:1F:25:E8:D7:5F:44:7C:F5:29:04:90:8A:60:7C X509v3 Authority Key Identifier: keyid:8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/7OTQnzrbHyXo119EfPUpBJCKYHw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.99.68.0/22 IPv6: 2a00:1790::/29 Signature Algorithm: sha256WithRSAEncryption 46:46:0c:e7:dd:e0:2e:d6:92:45:e7:97:ac:bb:1e:f5:eb:32: 63:99:e3:1a:3a:e1:63:37:f7:ed:6c:83:90:08:e6:37:3e:63: 4d:bd:c9:0f:8c:41:f1:91:bb:fc:52:97:db:fb:28:15:c1:c9: 9c:0d:17:a5:25:a0:9b:a7:0a:db:96:74:50:7b:f6:fb:70:d1: 4b:c1:19:83:95:d2:c5:3f:88:9f:76:85:c0:d7:57:27:88:93: d9:1a:aa:12:94:9f:15:ce:ba:34:72:20:ff:f3:ac:d7:aa:aa: 23:12:f1:c1:02:e2:e3:7e:a2:48:b6:5a:2e:2b:4f:49:24:ae: 71:d5:23:97:ea:20:67:d6:9b:64:ec:d4:59:0c:bd:07:54:6d: 0d:ac:77:09:97:2e:4a:01:31:c0:1c:5c:bc:78:b9:e0:74:7e: 5a:23:47:5d:b1:85:ac:5a:95:a0:75:29:b1:a8:fd:75:90:aa: 9d:a4:fe:9d:07:9e:ff:fd:be:60:22:e3:ab:c5:3a:3e:3a:b6: e0:d1:c2:5f:c9:d3:13:86:b7:e6:25:36:4c:25:1c:b7:84:c0: 3e:b0:fe:10:50:68:7a:e3:b8:9e:4b:f7:aa:57:00:74:9e:14: 33:5d:36:5e:2c:0f:f8:1d:4d:9f:0d:be:66:86:3d:3d:e1:6f: 7c:c5:fd:2f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WLdh8pCPf/3KNIwWcNm2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYmM3ZjE3MDdiNmQwYjIyYmNkODE4MGY0ZmJiMWI2M2Vm Yzk5ZjkwHhcNMjYwMTAxMDIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2U0ZDA5ZjNhZGIxZjI1ZThkNzVmNDQ3Y2Y1MjkwNDkwOGE2MDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfe9DDFN7pcuF2nrHXjbutz8RBNc reD7m5v74iagpwu85DPqocdBy/AemCOto/WbD7iVzhxSgo83sTY3vTF2F/c875m8 bUKYgrWXWjRTep3cMtRh+5c40NzNmeIa/DF9jUJGwfEBijgVXv5zLccSouIs9CBf aauCnTVnsCZLOZnhk58hdbogL8U+CRBrOZtwSDDlAxtoavmZKMEWDELrpLPsenYs H53VZ5wc4Ruo2ZWBLiJNcMjBVlM/IKSRERsz395ADizDJ9Oq6kr9PNmoCJqQdxlV M460U1xa1KuuDA6k3iJsLFUwGMy4h4XadET6iFSfMKKcLD0SrrcjoqsJgwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOzk0J862x8l6NdfRHz1KQSQimB8MB8GA1UdIwQY MBaAFI+8fxcHttCyK82BgPT7sbY+/Jn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajd4X0Z3ZTIwTElyellHQTlQdXh0ajc4bWZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS85MzU1ZWYtZTBiZi00YzYzLTk5YTct Nzg1MjIwNjIxM2UwLzEvN09UUW56cmJIeVhvMTE5RWZQVXBCSkNLWUh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS85MzU1ZWYtZTBiZi00YzYzLTk5YTctNzg1MjIwNjIxM2Uw LzEvajd4X0Z3ZTIwTElyellHQTlQdXh0ajc4bWZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWNEMA0E AgACMAcDBQMqABeQMA0GCSqGSIb3DQEBCwUAA4IBAQBGRgzn3eAu1pJF55esux71 6zJjmeMaOuFjN/ftbIOQCOY3PmNNvckPjEHxkbv8Upfb+ygVwcmcDRelJaCbpwrb lnRQe/b7cNFLwRmDldLFP4ifdoXA11cniJPZGqoSlJ8Vzro0ciD/86zXqqojEvHB AuLjfqJItlouK09JJK5x1SOX6iBn1ptk7NRZDL0HVG0NrHcJly5KATHAHFy8eLng dH5aI0ddsYWsWpWgdSmxqP11kKqdpP6dB57//b5gIuOrxTo+Orbg0cJfydMThrfm JTZMJRy3hMA+sP4QUGh647ieS/eqVwB0nhQzXTZeLA/4HU2fDb5mhj094W98xf0v -----END CERTIFICATE-----Generated at Mon Jan 26 01:02:13 2026 by rpki-client