This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/7j99n4d6ANqzBKZIb7AtbN16HNM.roa File: 7j99n4d6ANqzBKZIb7AtbN16HNM.roa (raw, json) Hash identifier: rlAo1p9sV9yO7tsi280DXkwJRnsLW38pb6gpoEvvu7w= Subject key identifier: EE:3F:7D:9F:87:7A:00:DA:B3:04:A6:48:6F:B0:2D:6C:DD:7A:1C:D3 Certificate issuer: /CN=43c16595966afb0bacf1d7937f245d6a052221a3 Certificate serial: 019B7E38ABED5F0AD968AECCBC36F5E35D39 Authority key identifier: 43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/7j99n4d6ANqzBKZIb7AtbN16HNM.roa Signing time: Fri 02 Jan 2026 10:20:01 +0000 ROA not before: Fri 02 Jan 2026 10:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60542 IP address blocks: 194.50.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ab:ed:5f:0a:d9:68:ae:cc:bc:36:f5:e3:5d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43c16595966afb0bacf1d7937f245d6a052221a3 Validity Not Before: Jan 2 10:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee3f7d9f877a00dab304a6486fb02d6cdd7a1cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ca:7c:c5:d1:6d:09:7e:b3:db:2d:c5:a7:fd: 51:68:c0:51:72:78:ec:61:10:ec:9e:43:02:a3:5e: b8:b4:d2:33:76:7f:64:d3:d2:9e:9c:fd:11:c5:09: 14:8c:d2:ff:d7:33:11:5e:16:2e:6f:26:74:07:0f: 1a:aa:8e:e3:0e:a1:3e:7c:a2:a3:c3:c6:fe:85:e0: 95:e6:37:9b:54:77:28:c1:9c:5f:7c:6e:40:6e:8b: 3e:c0:0c:cc:ce:11:64:f4:52:8e:4f:79:0f:58:cf: b5:c7:2c:2c:fc:2f:21:59:bf:76:b2:59:cf:dc:42: 67:07:d9:14:9e:3b:10:d0:c5:e8:9d:f0:ec:ac:53: 31:8f:4d:8c:0d:ce:03:f0:e8:7d:7d:1d:c1:8c:e8: 62:59:a9:3d:9e:23:cf:12:f2:cf:4c:79:ce:9e:af: 46:a8:d3:92:be:44:9a:5e:2b:dd:55:65:af:ba:b1: e1:f7:4a:c0:e6:85:ea:16:61:1b:0f:5f:fc:5b:ca: 4d:72:c8:6d:88:39:26:0a:46:17:a9:80:82:5c:b6: 68:64:57:87:79:cd:bc:04:4d:32:56:13:21:f1:5f: 13:da:fb:9a:e0:13:21:ef:dd:34:b4:3c:dc:7a:43: e8:1e:c2:21:1f:a8:61:5b:10:6f:21:25:34:8d:4d: 16:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:3F:7D:9F:87:7A:00:DA:B3:04:A6:48:6F:B0:2D:6C:DD:7A:1C:D3 X509v3 Authority Key Identifier: keyid:43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/7j99n4d6ANqzBKZIb7AtbN16HNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.197.0/24 Signature Algorithm: sha256WithRSAEncryption 88:70:be:66:3a:a7:79:8e:c7:cd:a4:c0:e4:cd:f6:cc:81:c8: 53:3c:04:c9:e4:4d:02:06:d0:76:81:15:88:d8:e1:ab:db:e4: e5:77:20:6b:40:39:a7:bc:53:02:cf:b0:93:92:ff:9b:23:74: e3:9a:f0:f2:a7:ff:18:8c:f0:7f:20:a9:d7:ed:4e:fa:2c:36: b0:18:6e:97:c8:43:39:e0:41:a3:48:75:ba:e2:54:09:d9:67: 9c:48:1f:41:d8:16:22:a8:50:ed:11:b7:ef:da:37:e6:3f:be: f8:4d:b3:bb:24:e0:56:e5:e4:02:64:d8:c9:36:16:60:08:69: 88:7b:0f:e5:a6:a2:eb:78:a4:2a:0c:a9:e7:33:7e:45:11:02: 0d:08:4a:52:37:2c:b5:41:e4:d9:a5:78:87:00:a1:1b:9a:31: e4:f1:6d:8d:f3:57:1b:c6:1b:5e:f5:05:53:e4:11:fc:e8:31: 9e:07:a4:37:a0:d4:b5:ba:00:4c:09:6d:b6:fc:e2:ea:3a:b2: f8:2d:5e:a3:56:7c:77:7a:6b:3c:65:e5:7a:d4:a1:7d:31:64: e3:80:da:46:56:e9:ca:16:e8:c1:d9:31:80:c3:a3:ea:64:0d: c4:70:f3:15:8c:d4:fd:8f:d3:79:e1:64:8d:aa:f6:4d:32:c6: 44:e7:9d:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OKvtXwrZaK7MvDb14105MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYzE2NTk1OTY2YWZiMGJhY2YxZDc5MzdmMjQ1ZDZhMDUy MjIxYTMwHhcNMjYwMTAyMTAyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTNmN2Q5Zjg3N2EwMGRhYjMwNGE2NDg2ZmIwMmQ2Y2RkN2ExY2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcp8xdFtCX6z2y3Fp/1RaMBRcnjs YRDsnkMCo164tNIzdn9k09KenP0RxQkUjNL/1zMRXhYubyZ0Bw8aqo7jDqE+fKKj w8b+heCV5jebVHcowZxffG5Abos+wAzMzhFk9FKOT3kPWM+1xyws/C8hWb92slnP 3EJnB9kUnjsQ0MXonfDsrFMxj02MDc4D8Oh9fR3BjOhiWak9niPPEvLPTHnOnq9G qNOSvkSaXivdVWWvurHh90rA5oXqFmEbD1/8W8pNcshtiDkmCkYXqYCCXLZoZFeH ec28BE0yVhMh8V8T2vua4BMh7900tDzcekPoHsIhH6hhWxBvISU0jU0WgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO4/fZ+HegDaswSmSG+wLWzdehzTMB8GA1UdIwQY MBaAFEPBZZWWavsLrPHXk38kXWoFIiGjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUThGbGxaWnEtd3VzOGRlVGZ5UmRhZ1VpSWFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kOTI5MTktOTYyYi00NDhkLTk4ZGIt NTk5MGVhNThlMDMwLzEvN2o5OW40ZDZBTnF6QktaSWI3QXRiTjE2SE5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9kOTI5MTktOTYyYi00NDhkLTk4ZGItNTk5MGVhNThlMDMw LzEvUThGbGxaWnEtd3VzOGRlVGZ5UmRhZ1VpSWFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjLFMA0G CSqGSIb3DQEBCwUAA4IBAQCIcL5mOqd5jsfNpMDkzfbMgchTPATJ5E0CBtB2gRWI 2OGr2+TldyBrQDmnvFMCz7CTkv+bI3TjmvDyp/8YjPB/IKnX7U76LDawGG6XyEM5 4EGjSHW64lQJ2WecSB9B2BYiqFDtEbfv2jfmP774TbO7JOBW5eQCZNjJNhZgCGmI ew/lpqLreKQqDKnnM35FEQINCEpSNyy1QeTZpXiHAKEbmjHk8W2N81cbxhte9QVT 5BH86DGeB6Q3oNS1ugBMCW22/OLqOrL4LV6jVnx3ems8ZeV61KF9MWTjgNpGVunK FujB2TGAw6PqZA3EcPMVjNT9j9N54WSNqvZNMsZE5520 -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:06 2026 by rpki-client