This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/A7CQTr5pBgBzIdzy1eaJ3Q65E7g.roa File: A7CQTr5pBgBzIdzy1eaJ3Q65E7g.roa (raw, json) Hash identifier: SCCyAlxlyBAjRTD3ubr+rnpQzQMC0C+nrznDyncGUqc= Subject key identifier: 03:B0:90:4E:BE:69:06:00:73:21:DC:F2:D5:E6:89:DD:0E:B9:13:B8 Certificate issuer: /CN=23f210bc1534badc08ff947d99350471193531b3 Certificate serial: 019B797ECFD1016A3DC86974F58F7B241C4C Authority key identifier: 23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/A7CQTr5pBgBzIdzy1eaJ3Q65E7g.roa Signing time: Thu 01 Jan 2026 12:18:32 +0000 ROA not before: Thu 01 Jan 2026 12:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205877 IP address blocks: 185.203.168.0/24 maxlen: 24 185.203.169.0/24 maxlen: 24 185.203.170.0/24 maxlen: 24 185.203.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:cf:d1:01:6a:3d:c8:69:74:f5:8f:7b:24:1c:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23f210bc1534badc08ff947d99350471193531b3 Validity Not Before: Jan 1 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03b0904ebe6906007321dcf2d5e689dd0eb913b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a7:3a:6b:95:60:4e:49:cc:4a:42:fa:9d:15: c5:5f:fd:2d:b3:5d:f0:90:ec:b8:9e:91:05:c6:c7: 24:f7:fd:02:8d:7c:29:f2:8a:1b:36:06:52:c1:5c: 4a:8e:bd:63:4e:c3:5c:ae:e1:dd:ba:68:e4:3a:a0: 77:3f:23:d4:80:28:bb:29:07:27:62:0a:f2:d9:88: c7:24:31:19:46:a4:a4:a4:a0:92:12:38:89:18:2f: c2:9a:14:73:ec:8a:9c:27:56:1f:1f:ee:91:8e:9e: 42:c2:0e:bb:dc:36:5a:f6:d3:89:f3:1d:d9:7d:a4: 1f:4a:b2:82:54:ef:ea:be:9b:b2:68:b4:10:33:cd: 13:9d:6b:31:79:c6:51:23:6b:bb:a5:d6:d5:8e:bc: 2b:3b:67:3e:0a:4b:35:b6:07:64:b9:ce:68:e3:4c: 4a:4b:52:0a:7b:d5:06:79:09:da:41:95:f5:8a:8d: 0e:84:36:80:e7:0d:51:97:e8:9f:b8:7f:ba:ca:2c: 70:45:9d:1f:9c:12:6a:aa:04:ae:fe:ee:dd:58:e9: de:a6:e7:bc:d3:f5:a6:8b:e0:cb:ea:0f:5f:6e:a5: d3:11:d2:6d:56:7f:36:a0:cd:34:08:3d:89:3d:c0: 43:23:ab:08:c7:49:5f:94:aa:16:2d:74:ce:5c:ce: 6b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B0:90:4E:BE:69:06:00:73:21:DC:F2:D5:E6:89:DD:0E:B9:13:B8 X509v3 Authority Key Identifier: keyid:23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/A7CQTr5pBgBzIdzy1eaJ3Q65E7g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.203.168.0/22 Signature Algorithm: sha256WithRSAEncryption 58:4e:02:9b:87:57:e8:3f:fd:92:79:cd:84:00:4a:c6:f2:ec: 87:79:bd:32:c5:18:29:e4:65:fa:e9:63:69:2c:24:39:86:97: c5:83:5d:a2:6b:c5:0e:cb:69:62:0c:a9:64:43:62:4b:62:ef: 04:d1:e4:7b:3c:60:d7:f1:b2:7d:24:a0:16:33:fe:e8:55:0b: 7d:7c:d7:7c:60:3a:68:66:75:1a:ec:60:65:f8:dd:f9:32:c9: d7:cd:3e:fa:1a:7c:40:18:01:06:17:95:c4:e5:fb:c6:1b:ec: db:02:5d:d3:52:95:94:dd:c6:c3:12:45:c7:2c:97:b2:a9:82: dd:b1:1b:06:92:ac:29:b1:20:51:9e:24:cc:a2:3c:31:2f:bd: ac:6b:af:04:a4:ed:64:41:f5:72:85:60:f6:f2:08:ef:9c:94: 1e:84:6d:ad:35:2b:d7:ca:3a:89:06:f2:9c:e5:bd:e7:52:ed: b6:48:a4:d7:c5:bd:b8:fb:39:de:37:88:db:a9:41:8d:23:28: 6d:10:cc:32:e1:27:01:54:8b:52:bb:b9:d0:18:e3:7e:17:84: 03:20:09:0a:2d:c4:02:d6:c0:44:95:ee:a3:72:38:00:6d:08: 54:94:ed:69:64:09:f2:01:89:2e:59:51:c7:0b:17:4e:f5:cf: 0a:ed:6a:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fs/RAWo9yGl09Y97JBxMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZjIxMGJjMTUzNGJhZGMwOGZmOTQ3ZDk5MzUwNDcxMTkz NTMxYjMwHhcNMjYwMTAxMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2IwOTA0ZWJlNjkwNjAwNzMyMWRjZjJkNWU2ODlkZDBlYjkxM2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKc6a5VgTknMSkL6nRXFX/0ts13w kOy4npEFxsck9/0CjXwp8oobNgZSwVxKjr1jTsNcruHdumjkOqB3PyPUgCi7KQcn Ygry2YjHJDEZRqSkpKCSEjiJGC/CmhRz7IqcJ1YfH+6Rjp5Cwg673DZa9tOJ8x3Z faQfSrKCVO/qvpuyaLQQM80TnWsxecZRI2u7pdbVjrwrO2c+Cks1tgdkuc5o40xK S1IKe9UGeQnaQZX1io0OhDaA5w1Rl+ifuH+6yixwRZ0fnBJqqgSu/u7dWOnepue8 0/Wmi+DL6g9fbqXTEdJtVn82oM00CD2JPcBDI6sIx0lflKoWLXTOXM5rlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAOwkE6+aQYAcyHc8tXmid0OuRO4MB8GA1UdIwQY MBaAFCPyELwVNLrcCP+UfZk1BHEZNTGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSV9JUXZCVTB1dHdJXzVSOW1UVUVjUmsxTWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi80YTY3ZjEtNzQyYi00MWUzLWE2MGYt MTEzNjNhMmJjZmFiLzEvQTdDUVRyNXBCZ0J6SWR6eTFlYUozUTY1RTdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi80YTY3ZjEtNzQyYi00MWUzLWE2MGYtMTEzNjNhMmJjZmFi LzEvSV9JUXZCVTB1dHdJXzVSOW1UVUVjUmsxTWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucuoMA0G CSqGSIb3DQEBCwUAA4IBAQBYTgKbh1foP/2Sec2EAErG8uyHeb0yxRgp5GX66WNp LCQ5hpfFg12ia8UOy2liDKlkQ2JLYu8E0eR7PGDX8bJ9JKAWM/7oVQt9fNd8YDpo ZnUa7GBl+N35MsnXzT76GnxAGAEGF5XE5fvGG+zbAl3TUpWU3cbDEkXHLJeyqYLd sRsGkqwpsSBRniTMojwxL72sa68EpO1kQfVyhWD28gjvnJQehG2tNSvXyjqJBvKc 5b3nUu22SKTXxb24+zneN4jbqUGNIyhtEMwy4ScBVItSu7nQGON+F4QDIAkKLcQC 1sBEle6jcjgAbQhUlO1pZAnyAYkuWVHHCxdO9c8K7WpU -----END CERTIFICATE-----Generated at Tue Jan 27 05:41:59 2026 by rpki-client