This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/1-q-fuZBo0laxVeBX6NwpVLainfk.roa File: 1-q-fuZBo0laxVeBX6NwpVLainfk.roa (raw, json) Hash identifier: GcGILGkicFW1BhS8ux6XwCmaky0PHjEEL1j6XCYq2ko= Subject key identifier: FA:AF:9F:B9:90:68:D2:56:B1:55:E0:57:E8:DC:29:54:B6:A2:9D:F9 Certificate issuer: /CN=133f456d2b82cc6d80b7b1ac571b4787f1569b60 Certificate serial: 019B7AC780B8571A63937779F352FB0EED70 Authority key identifier: 13:3F:45:6D:2B:82:CC:6D:80:B7:B1:AC:57:1B:47:87:F1:56:9B:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/1-q-fuZBo0laxVeBX6NwpVLainfk.roa Signing time: Thu 01 Jan 2026 18:17:33 +0000 ROA not before: Thu 01 Jan 2026 18:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210585 IP address blocks: 185.23.208.0/24 maxlen: 24 185.23.209.0/24 maxlen: 24 185.23.210.0/24 maxlen: 24 185.23.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.crl rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft rsync://rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:80:b8:57:1a:63:93:77:79:f3:52:fb:0e:ed:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=133f456d2b82cc6d80b7b1ac571b4787f1569b60 Validity Not Before: Jan 1 18:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=faaf9fb99068d256b155e057e8dc2954b6a29df9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:55:d7:a3:78:e8:8d:2f:7b:f4:76:00:50:2b: 08:ee:ee:82:41:f0:b5:f8:d4:8e:a7:bf:ce:b9:94: 92:f1:90:3f:e6:ee:c4:57:27:85:9c:4e:2d:ff:d6: d1:67:ff:9b:92:a3:1f:c3:00:b0:d4:79:ad:61:eb: b1:37:db:b3:23:95:83:1f:df:62:82:95:ce:4f:e3: 06:02:17:e1:a7:bf:86:48:3e:72:a2:39:d1:ee:33: 7a:cf:28:b8:eb:2e:8c:6b:5c:ca:96:7e:70:45:d2: 8e:52:c3:4c:35:86:21:48:e7:01:e5:32:53:b6:ae: a8:32:16:e8:34:7a:4d:18:5c:9f:07:cf:8a:67:41: 80:ef:de:de:99:1f:f3:f2:3c:50:b0:55:43:59:2d: 4e:a7:e9:2f:48:43:81:88:2b:11:d9:06:76:19:be: d8:4c:29:12:60:b4:c1:14:6c:e4:59:39:ed:dd:ca: b0:65:78:56:e0:8c:d5:a5:4d:06:a1:c0:dc:30:d5: 79:b3:df:95:6b:15:f1:d4:dc:0d:8d:de:a9:e4:b7: fa:69:99:8a:51:24:36:0a:42:8e:c0:10:1a:db:89: fa:75:c0:bd:32:1e:78:2f:6c:38:c5:6a:90:62:25: e6:e8:92:4d:b7:3a:81:b0:54:23:22:24:a7:7b:fa: 7d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AF:9F:B9:90:68:D2:56:B1:55:E0:57:E8:DC:29:54:B6:A2:9D:F9 X509v3 Authority Key Identifier: keyid:13:3F:45:6D:2B:82:CC:6D:80:B7:B1:AC:57:1B:47:87:F1:56:9B:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/1-q-fuZBo0laxVeBX6NwpVLainfk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.23.208.0/22 Signature Algorithm: sha256WithRSAEncryption af:c8:48:a8:cc:c2:18:1b:e5:75:d6:1a:cb:36:89:28:e9:54: 26:5e:b9:10:73:c8:2b:2a:e5:51:c6:76:87:ee:f6:5b:70:9e: 53:a0:be:81:1a:4f:41:2b:ff:74:4d:83:29:8e:6c:fd:df:15: 48:c0:91:8c:d6:7a:a1:fa:f7:d2:f6:ae:8f:4e:f9:5d:6b:ea: c6:9a:da:de:ce:9e:a9:91:54:46:c0:22:09:e4:1e:0f:81:15: fe:6e:ac:a4:a8:0a:4e:9c:09:08:2a:40:2d:50:3b:2a:ed:cb: f5:5b:93:dd:07:39:f9:19:d7:4d:1d:39:7a:57:57:41:84:66: 8b:87:73:d2:0f:60:04:aa:a2:24:23:b0:a3:49:f2:94:7d:d7: 26:d1:37:b7:3b:6d:33:93:d1:b6:4e:36:e0:19:a7:74:0a:c6: b5:72:6f:ce:f4:db:f3:30:5d:dd:1b:c7:20:16:d1:76:0f:07: 3b:a4:00:29:39:9e:94:97:5d:b0:81:00:6b:bb:d7:bb:d6:43: 72:93:cc:89:7d:95:33:64:56:52:26:c5:ff:f6:9e:28:ef:12: e4:59:21:4c:03:8e:81:26:66:8e:11:d9:ed:8e:34:ce:e8:7f: 7b:fe:fa:77:cc:9a:13:79:09:ea:94:01:e0:72:ac:09:04:a8: ce:5e:f1:71 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6x4C4Vxpjk3d581L7Du1wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzM2Y0NTZkMmI4MmNjNmQ4MGI3YjFhYzU3MWI0Nzg3ZjE1 NjliNjAwHhcNMjYwMTAxMTgxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWFmOWZiOTkwNjhkMjU2YjE1NWUwNTdlOGRjMjk1NGI2YTI5ZGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFXXo3jojS979HYAUCsI7u6CQfC1 +NSOp7/OuZSS8ZA/5u7EVyeFnE4t/9bRZ/+bkqMfwwCw1HmtYeuxN9uzI5WDH99i gpXOT+MGAhfhp7+GSD5yojnR7jN6zyi46y6Ma1zKln5wRdKOUsNMNYYhSOcB5TJT tq6oMhboNHpNGFyfB8+KZ0GA797emR/z8jxQsFVDWS1Op+kvSEOBiCsR2QZ2Gb7Y TCkSYLTBFGzkWTnt3cqwZXhW4IzVpU0GocDcMNV5s9+VaxXx1NwNjd6p5Lf6aZmK USQ2CkKOwBAa24n6dcC9Mh54L2w4xWqQYiXm6JJNtzqBsFQjIiSne/p9TQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPqvn7mQaNJWsVXgV+jcKVS2op35MB8GA1UdIwQY MBaAFBM/RW0rgsxtgLexrFcbR4fxVptgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXo5RmJTdUN6RzJBdDdHc1Z4dEhoX0ZXbTJBLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9kMDAyMTAtZDY4NS00OGIyLThlNTMt YmIyZmRjYTc4MjQ1LzEvMS1xLWZ1WkJvMGxheFZlQlg2TndwVkxhaW5may5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTEvZDAwMjEwLWQ2ODUtNDhiMi04ZTUzLWJiMmZkY2E3ODI0 NS8xL0V6OUZiU3VDekcyQXQ3R3NWeHRIaF9GV20yQS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArkX0DAN BgkqhkiG9w0BAQsFAAOCAQEAr8hIqMzCGBvlddYayzaJKOlUJl65EHPIKyrlUcZ2 h+72W3CeU6C+gRpPQSv/dE2DKY5s/d8VSMCRjNZ6ofr30vauj075XWvqxpra3s6e qZFURsAiCeQeD4EV/m6spKgKTpwJCCpALVA7Ku3L9VuT3Qc5+RnXTR05eldXQYRm i4dz0g9gBKqiJCOwo0nylH3XJtE3tzttM5PRtk424BmndArGtXJvzvTb8zBd3RvH IBbRdg8HO6QAKTmelJddsIEAa7vXu9ZDcpPMiX2VM2RWUibF//aeKO8S5FkhTAOO gSZmjhHZ7Y40zuh/e/76d8yaE3kJ6pQB4HKsCQSozl7xcQ== -----END CERTIFICATE-----Generated at Tue Feb 10 06:28:40 2026 by rpki-client