This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/Q8ZJJ74q6bMVlfcvJJudps61QXo.roa File: Q8ZJJ74q6bMVlfcvJJudps61QXo.roa (raw, json) Hash identifier: 3ZMgLTga1etNt6/GjM7UgVlhZAFMLoY4B0xB96tmQlk= Subject key identifier: 43:C6:49:27:BE:2A:E9:B3:15:95:F7:2F:24:9B:9D:A6:CE:B5:41:7A Certificate issuer: /CN=cd7ee4b0327996304cf18a128e2655780c9d6b9b Certificate serial: 019B7835302A14679FE2AB4F5680AF69B97E Authority key identifier: CD:7E:E4:B0:32:79:96:30:4C:F1:8A:12:8E:26:55:78:0C:9D:6B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/Q8ZJJ74q6bMVlfcvJJudps61QXo.roa Signing time: Thu 01 Jan 2026 06:18:30 +0000 ROA not before: Thu 01 Jan 2026 06:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48727 IP address blocks: 185.124.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:30:2a:14:67:9f:e2:ab:4f:56:80:af:69:b9:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7ee4b0327996304cf18a128e2655780c9d6b9b Validity Not Before: Jan 1 06:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43c64927be2ae9b31595f72f249b9da6ceb5417a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3a:30:cb:d6:e9:e8:5d:bf:5b:7a:6c:f3:9b: 48:ee:b4:4e:cf:c9:b6:9e:68:5f:62:5d:63:f3:98: 85:d3:24:e8:0a:3b:bc:fc:36:13:47:a4:38:d2:cf: 92:98:e8:21:1b:e6:84:aa:4e:99:7b:0c:6c:8f:da: 5a:34:6e:3c:94:b5:47:13:dc:91:6a:a4:9d:89:7c: e0:ec:12:64:e5:8b:bb:41:a4:f2:b7:96:4e:ff:d2: bc:b0:4b:33:01:4c:1a:61:82:1b:75:77:aa:06:95: 2e:d1:13:1b:3f:3b:d3:82:f4:cc:14:69:2a:14:09: e8:0c:a7:f0:93:60:d5:2d:80:65:45:18:fc:34:b7: 46:82:73:de:85:39:e9:e7:0e:21:e3:20:a5:8a:b7: 96:85:ca:0d:6c:77:11:bf:46:94:19:ca:dc:64:d9: e8:2b:95:47:0e:8e:91:f9:ae:38:51:f2:85:f0:a7: ce:88:4a:99:00:10:ec:f0:7f:92:43:5a:88:a8:2e: 9d:75:68:01:2c:c2:cf:89:25:62:bb:d2:13:29:cd: bf:81:55:a0:17:bb:97:3f:ca:cb:f6:f7:cd:55:4c: 64:4a:bd:44:e1:09:e7:75:c9:c0:6b:2a:b7:88:5d: 01:08:94:0d:24:2c:d2:e1:81:65:14:08:f5:72:6c: e6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C6:49:27:BE:2A:E9:B3:15:95:F7:2F:24:9B:9D:A6:CE:B5:41:7A X509v3 Authority Key Identifier: keyid:CD:7E:E4:B0:32:79:96:30:4C:F1:8A:12:8E:26:55:78:0C:9D:6B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/Q8ZJJ74q6bMVlfcvJJudps61QXo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.124.128.0/22 Signature Algorithm: sha256WithRSAEncryption 79:41:59:25:e8:cd:05:82:d3:ac:9d:11:ed:af:ec:08:55:48: 33:ac:56:0d:34:bf:80:13:cc:3c:0d:81:3b:89:73:56:13:4a: a3:4c:08:3d:7b:31:7b:59:ee:00:06:e2:64:e2:43:11:cf:6f: 36:54:bc:9b:22:18:66:ae:dc:81:39:c5:f5:02:46:0f:07:37: db:df:6f:67:20:8a:ab:5d:39:22:aa:7c:fa:56:d2:6f:47:df: 5f:32:8f:ca:34:55:42:a6:ac:48:d4:cd:24:d3:8b:08:4d:01: 4c:ab:33:9c:71:a5:1a:3f:7e:17:34:43:e9:4c:7b:e6:57:c5: e0:a6:e3:79:aa:fe:c1:b4:ab:77:f8:63:00:0e:64:3a:6f:3d: c9:ee:33:02:ea:30:05:22:f5:eb:9f:8b:38:b7:60:be:e3:a1: dd:cf:60:01:8d:2c:2c:d6:87:0f:fd:b7:15:ae:2a:7e:59:6a: 23:b6:97:c6:11:2d:fc:01:e4:64:56:f0:ca:22:1b:a0:c5:39: ff:9a:d4:23:c6:9a:5d:30:64:ff:40:f0:bc:e5:bf:79:88:8a: 78:e1:b5:32:84:d4:bd:dd:70:09:82:5c:80:15:49:64:8b:7c: 1a:05:59:a9:8c:d0:c7:e7:8b:d1:80:d2:d3:3b:41:33:89:69: 46:34:81:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NTAqFGef4qtPVoCvabl+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkN2VlNGIwMzI3OTk2MzA0Y2YxOGExMjhlMjY1NTc4MGM5 ZDZiOWIwHhcNMjYwMTAxMDYxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2M2NDkyN2JlMmFlOWIzMTU5NWY3MmYyNDliOWRhNmNlYjU0MTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjowy9bp6F2/W3ps85tI7rROz8m2 nmhfYl1j85iF0yToCju8/DYTR6Q40s+SmOghG+aEqk6Zewxsj9paNG48lLVHE9yR aqSdiXzg7BJk5Yu7QaTyt5ZO/9K8sEszAUwaYYIbdXeqBpUu0RMbPzvTgvTMFGkq FAnoDKfwk2DVLYBlRRj8NLdGgnPehTnp5w4h4yClireWhcoNbHcRv0aUGcrcZNno K5VHDo6R+a44UfKF8KfOiEqZABDs8H+SQ1qIqC6ddWgBLMLPiSViu9ITKc2/gVWg F7uXP8rL9vfNVUxkSr1E4QnndcnAayq3iF0BCJQNJCzS4YFlFAj1cmzmhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEPGSSe+KumzFZX3LySbnabOtUF6MB8GA1UdIwQY MBaAFM1+5LAyeZYwTPGKEo4mVXgMnWubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelg3a3NESjVsakJNOFlvU2ppWlZlQXlkYTVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9lY2FlYjMtZjQyZi00YmFjLWE0OWUt MjQyZmZkYWEyNjcwLzEvUThaSko3NHE2Yk1WbGZjdkpKdWRwczYxUVhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9lY2FlYjMtZjQyZi00YmFjLWE0OWUtMjQyZmZkYWEyNjcw LzEvelg3a3NESjVsakJNOFlvU2ppWlZlQXlkYTVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXyAMA0G CSqGSIb3DQEBCwUAA4IBAQB5QVkl6M0FgtOsnRHtr+wIVUgzrFYNNL+AE8w8DYE7 iXNWE0qjTAg9ezF7We4ABuJk4kMRz282VLybIhhmrtyBOcX1AkYPBzfb329nIIqr XTkiqnz6VtJvR99fMo/KNFVCpqxI1M0k04sITQFMqzOccaUaP34XNEPpTHvmV8Xg puN5qv7BtKt3+GMADmQ6bz3J7jMC6jAFIvXrn4s4t2C+46Hdz2ABjSws1ocP/bcV rip+WWojtpfGES38AeRkVvDKIhugxTn/mtQjxppdMGT/QPC85b95iIp44bUyhNS9 3XAJglyAFUlki3waBVmpjNDH54vRgNLTO0EziWlGNIHT -----END CERTIFICATE-----Generated at Mon Feb 9 22:22:39 2026 by rpki-client