This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/gZ7MTQFKv9ESgTgqTjYn_BrscQA.roa File: gZ7MTQFKv9ESgTgqTjYn_BrscQA.roa (raw, json) Hash identifier: EHrl7z2+nheD4vZqxVwj5nQcr00mwqbj/IDfE3H4a9A= Subject key identifier: 81:9E:CC:4D:01:4A:BF:D1:12:81:38:2A:4E:36:27:FC:1A:EC:71:00 Certificate issuer: /CN=14a4ba50b468fceeac194627e98ba1f57deb4fc0 Certificate serial: 019B7911022A7690AAD6C44F1523E88D2B56 Authority key identifier: 14:A4:BA:50:B4:68:FC:EE:AC:19:46:27:E9:8B:A1:F5:7D:EB:4F:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/gZ7MTQFKv9ESgTgqTjYn_BrscQA.roa Signing time: Thu 01 Jan 2026 10:18:36 +0000 ROA not before: Thu 01 Jan 2026 10:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205579 IP address blocks: 185.30.248.0/22 maxlen: 22 185.30.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.crl rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft rsync://rpki.ripe.net/repository/DEFAULT/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:02:2a:76:90:aa:d6:c4:4f:15:23:e8:8d:2b:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14a4ba50b468fceeac194627e98ba1f57deb4fc0 Validity Not Before: Jan 1 10:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=819ecc4d014abfd11281382a4e3627fc1aec7100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:dc:e1:74:33:93:c1:2f:b9:0c:32:fa:73:55: bd:48:5d:89:b3:51:60:bf:f6:7c:98:32:1a:c6:1b: df:78:4e:b0:0a:17:73:1d:3d:34:63:2a:1e:70:00: 75:01:39:7a:0a:6d:7d:a8:4f:59:21:d4:57:bd:39: eb:76:93:ee:1b:a0:64:68:83:35:b9:64:9a:18:bb: ad:2b:2b:8b:91:8d:06:99:7e:03:dc:1a:35:e9:30: 94:45:20:52:91:f2:66:95:59:cb:53:71:37:b6:c2: c0:e6:75:93:75:74:83:c7:4c:97:8f:5e:e2:fc:50: 8a:f5:4e:34:f7:1f:ac:59:cc:87:61:8b:0e:b8:75: 99:38:97:cf:64:c9:ed:dd:2f:de:ed:b3:ab:16:dc: 7a:83:d8:da:59:28:08:05:5f:18:a8:e3:99:0b:d7: 5a:01:33:aa:1f:8a:f6:7e:53:9b:bb:d3:6c:f8:29: c4:3a:48:65:26:bf:b5:e0:a1:32:9e:13:f8:b5:0e: 9d:2c:6c:88:23:5c:81:06:cc:e6:4e:fb:4e:f2:bd: fb:66:38:9c:39:9a:fa:86:86:2f:3e:48:bb:7a:f8: ca:16:f0:04:2e:be:8d:cc:e8:bc:3d:0e:c2:9d:6b: 35:12:40:2e:5c:76:54:06:b0:cb:40:21:38:bf:9c: eb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:9E:CC:4D:01:4A:BF:D1:12:81:38:2A:4E:36:27:FC:1A:EC:71:00 X509v3 Authority Key Identifier: keyid:14:A4:BA:50:B4:68:FC:EE:AC:19:46:27:E9:8B:A1:F5:7D:EB:4F:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/gZ7MTQFKv9ESgTgqTjYn_BrscQA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.30.248.0/22 Signature Algorithm: sha256WithRSAEncryption 07:81:7e:7e:04:b7:2f:16:ff:53:78:cb:dc:c0:d6:fd:99:6c: 99:80:1d:a7:cc:2c:52:69:ae:89:a8:26:51:08:eb:ca:db:99: c7:af:98:d9:cf:62:5d:bd:ba:ad:9d:59:3c:06:11:f5:e9:31: 77:74:df:21:90:49:b3:9b:b6:f3:2a:3d:93:d0:0e:fa:5e:90: ca:b6:1e:75:a8:5a:4f:32:56:ee:ec:ef:c1:c8:7c:fb:33:8e: 6e:e0:ff:0a:8b:e9:38:4a:08:0c:a4:99:e2:5b:72:f6:87:83: 04:c9:ec:87:a1:1c:7c:79:d1:aa:7f:0b:db:6b:86:6b:0e:e6: f1:75:40:5b:47:1a:e7:bc:a7:b9:bb:79:28:49:f8:6f:98:1a: b3:7d:36:c9:71:99:91:58:11:5c:47:ce:d8:99:72:35:94:11: 66:d5:db:87:d7:bb:bf:89:d4:a6:71:61:76:1c:bc:30:df:d5: c1:7a:e0:f8:20:89:09:27:18:30:7b:39:9b:b3:f9:9f:58:60: 33:94:8a:52:67:1b:b6:80:05:7f:4c:5a:ee:fb:90:33:61:18: f3:93:c5:ea:31:5d:1e:9e:ff:d5:17:7e:32:eb:a3:60:d2:70: 33:c4:9f:43:fb:2a:a0:70:23:36:54:aa:7b:3e:fe:0c:ef:59: 4a:bf:73:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EQIqdpCq1sRPFSPojStWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YTRiYTUwYjQ2OGZjZWVhYzE5NDYyN2U5OGJhMWY1N2Rl YjRmYzAwHhcNMjYwMTAxMTAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTllY2M0ZDAxNGFiZmQxMTI4MTM4MmE0ZTM2MjdmYzFhZWM3MTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59zhdDOTwS+5DDL6c1W9SF2Js1Fg v/Z8mDIaxhvfeE6wChdzHT00YyoecAB1ATl6Cm19qE9ZIdRXvTnrdpPuG6BkaIM1 uWSaGLutKyuLkY0GmX4D3Bo16TCURSBSkfJmlVnLU3E3tsLA5nWTdXSDx0yXj17i /FCK9U409x+sWcyHYYsOuHWZOJfPZMnt3S/e7bOrFtx6g9jaWSgIBV8YqOOZC9da ATOqH4r2flObu9Ns+CnEOkhlJr+14KEynhP4tQ6dLGyII1yBBszmTvtO8r37Zjic OZr6hoYvPki7evjKFvAELr6NzOi8PQ7CnWs1EkAuXHZUBrDLQCE4v5zr5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIGezE0BSr/REoE4Kk42J/wa7HEAMB8GA1UdIwQY MBaAFBSkulC0aPzurBlGJ+mLofV960/AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRktTNlVMUm9fTzZzR1VZbjZZdWg5WDNyVDhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hOGQ0YWItZGM5Ni00YzljLWFmNDgt YTBkNDhkMGQ3NDYxLzEvZ1o3TVRRRkt2OUVTZ1RncVRqWW5fQnJzY1FBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9hOGQ0YWItZGM5Ni00YzljLWFmNDgtYTBkNDhkMGQ3NDYx LzEvRktTNlVMUm9fTzZzR1VZbjZZdWg5WDNyVDhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuR74MA0G CSqGSIb3DQEBCwUAA4IBAQAHgX5+BLcvFv9TeMvcwNb9mWyZgB2nzCxSaa6JqCZR COvK25nHr5jZz2JdvbqtnVk8BhH16TF3dN8hkEmzm7bzKj2T0A76XpDKth51qFpP Mlbu7O/ByHz7M45u4P8Ki+k4SggMpJniW3L2h4MEyeyHoRx8edGqfwvba4ZrDubx dUBbRxrnvKe5u3koSfhvmBqzfTbJcZmRWBFcR87YmXI1lBFm1duH17u/idSmcWF2 HLww39XBeuD4IIkJJxgwezmbs/mfWGAzlIpSZxu2gAV/TFru+5AzYRjzk8XqMV0e nv/VF34y66Ng0nAzxJ9D+yqgcCM2VKp7Pv4M71lKv3No -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:45 2026 by rpki-client