This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/Q8cZP7Mw_-w6-Le7I_oZBELBZgo.roa File: Q8cZP7Mw_-w6-Le7I_oZBELBZgo.roa (raw, json) Hash identifier: JsbdMsgNcpZtlFUpehZGZOmDsBEuV8h9IP/Mq8FrzkA= Subject key identifier: 43:C7:19:3F:B3:30:FF:EC:3A:F8:B7:BB:23:FA:19:04:42:C1:66:0A Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5 Certificate serial: 019B7834391E129E5C054FA2C3C5EDE6288E Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/Q8cZP7Mw_-w6-Le7I_oZBELBZgo.roa Signing time: Thu 01 Jan 2026 06:17:26 +0000 ROA not before: Thu 01 Jan 2026 06:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15924 IP address blocks: 185.22.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:39:1e:12:9e:5c:05:4f:a2:c3:c5:ed:e6:28:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5 Validity Not Before: Jan 1 06:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43c7193fb330ffec3af8b7bb23fa190442c1660a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:40:a1:ae:f7:7c:50:91:a3:66:27:3d:c3:18: 74:03:11:5e:53:e7:96:98:34:41:f6:03:65:c2:af: 36:0c:8b:a8:cd:a7:a9:84:ba:96:d8:41:10:a3:5a: c2:9a:3d:98:95:db:82:ee:fe:a0:4f:d5:d3:ad:c8: 85:c5:c5:00:fc:2c:9d:9a:b4:5a:ce:f8:a2:6a:0c: 52:6f:ab:ec:a2:93:c9:25:b2:3b:0c:39:ac:2e:0c: 33:57:20:f1:5b:39:93:f6:57:b6:31:4f:c5:e7:f8: 55:9c:e2:b3:ad:a0:2a:97:5c:a6:3b:d2:e6:ad:e1: 48:ac:d4:c1:7d:4d:4b:86:04:19:50:0e:6d:e9:5c: 7c:ba:1b:8c:ec:81:2d:13:a3:7b:9b:13:a0:cb:d9: dc:6a:d3:d4:a1:eb:36:38:bb:b9:23:8e:4a:d3:47: 98:1a:04:00:18:fb:f1:70:4f:71:7b:95:94:60:9f: fe:1a:2d:e5:12:58:2e:dd:13:60:10:0a:ec:05:ec: fb:5a:2d:e0:c1:dc:42:90:b1:85:ac:2c:c9:ee:5a: ac:a5:30:25:6c:d4:be:98:56:7b:f7:cb:04:5b:1c: 02:c7:5c:e9:0b:ca:83:cb:66:a0:eb:4f:3a:b0:b5: cc:ee:fc:af:e2:01:fa:bb:ac:a8:c1:eb:7d:cb:b1: 60:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C7:19:3F:B3:30:FF:EC:3A:F8:B7:BB:23:FA:19:04:42:C1:66:0A X509v3 Authority Key Identifier: keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/Q8cZP7Mw_-w6-Le7I_oZBELBZgo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.22.230.0/24 Signature Algorithm: sha256WithRSAEncryption 27:0d:3f:fc:75:39:fb:aa:46:af:66:93:fd:fc:19:df:fd:67: 4d:37:e7:c8:63:c8:f9:01:ab:17:02:f6:42:18:c6:f4:82:d1: 72:49:7c:35:08:d9:47:a1:0d:fb:b3:1c:8f:a4:85:65:6e:bf: a8:77:33:0d:ca:c6:13:36:db:e3:39:f7:ad:7a:6b:bb:70:74: 6d:01:b3:31:30:9c:fb:c2:a3:31:76:99:2f:19:8b:b0:c6:d2: a0:56:bf:1e:a7:da:2d:75:58:ae:cd:aa:3f:14:a0:2a:9b:a4: 2b:e3:53:f1:41:56:d9:7f:76:34:23:1b:7d:db:4f:f3:6c:2c: 6b:9a:c6:49:18:e5:4e:c2:4b:2c:29:89:3b:35:16:ef:18:78: 56:83:11:51:47:5d:ee:09:6d:10:1e:ab:e2:a2:c4:43:78:9b: 58:be:41:a5:59:69:a1:33:05:a6:f2:44:3f:39:70:64:8b:f3: dd:13:57:f5:f6:9d:c1:76:e3:1a:53:31:04:39:d2:c8:cd:50: af:14:9a:55:fb:7f:06:d0:38:14:18:c8:8b:fc:dc:77:4e:3d: d4:5e:03:ba:c7:01:28:d4:5f:84:b8:7f:bf:d1:2b:5b:8b:a1: f9:64:6f:b2:9e:bc:d9:9b:df:8c:5a:8c:8f:5f:3b:ef:25:90: e9:d7:b0:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NDkeEp5cBU+iw8Xt5iiOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZjkzMGUyM2IwOGExNWNjZDRkYzlhYjE4MjljNjA3ZmVk ZGU4YTUwHhcNMjYwMTAxMDYxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2M3MTkzZmIzMzBmZmVjM2FmOGI3YmIyM2ZhMTkwNDQyYzE2NjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUChrvd8UJGjZic9wxh0AxFeU+eW mDRB9gNlwq82DIuozaephLqW2EEQo1rCmj2YlduC7v6gT9XTrciFxcUA/CydmrRa zviiagxSb6vsopPJJbI7DDmsLgwzVyDxWzmT9le2MU/F5/hVnOKzraAql1ymO9Lm reFIrNTBfU1LhgQZUA5t6Vx8uhuM7IEtE6N7mxOgy9ncatPUoes2OLu5I45K00eY GgQAGPvxcE9xe5WUYJ/+Gi3lElgu3RNgEArsBez7Wi3gwdxCkLGFrCzJ7lqspTAl bNS+mFZ798sEWxwCx1zpC8qDy2ag6086sLXM7vyv4gH6u6yowet9y7FgBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEPHGT+zMP/sOvi3uyP6GQRCwWYKMB8GA1UdIwQY MBaAFPH5MOI7CKFczU3Jqxgpxgf+3eilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGZrdzRqc0lvVnpOVGNtckdDbkdCXzdkNktVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lYTEyOGMtYTA5ZC00MGU4LWJiMTEt YWVhNzE0ZWM1MTEzLzEvUThjWlA3TXdfLXc2LUxlN0lfb1pCRUxCWmdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9lYTEyOGMtYTA5ZC00MGU4LWJiMTEtYWVhNzE0ZWM1MTEz LzEvOGZrdzRqc0lvVnpOVGNtckdDbkdCXzdkNktVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRbmMA0G CSqGSIb3DQEBCwUAA4IBAQAnDT/8dTn7qkavZpP9/Bnf/WdNN+fIY8j5AasXAvZC GMb0gtFySXw1CNlHoQ37sxyPpIVlbr+odzMNysYTNtvjOfetemu7cHRtAbMxMJz7 wqMxdpkvGYuwxtKgVr8ep9otdViuzao/FKAqm6Qr41PxQVbZf3Y0Ixt920/zbCxr msZJGOVOwkssKYk7NRbvGHhWgxFRR13uCW0QHqviosRDeJtYvkGlWWmhMwWm8kQ/ OXBki/PdE1f19p3BduMaUzEEOdLIzVCvFJpV+38G0DgUGMiL/Nx3Tj3UXgO6xwEo 1F+EuH+/0Stbi6H5ZG+ynrzZm9+MWoyPXzvvJZDp17DE -----END CERTIFICATE-----Generated at Fri Jan 2 20:00:14 2026 by rpki-client