This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/Q8i1GCNM8MeAVWMzMN-VkOcL5cc.roa File: Q8i1GCNM8MeAVWMzMN-VkOcL5cc.roa (raw, json) Hash identifier: /F4wQ4+WNm083+DT8dsb+mkUzic0vz1naKYXmlneu4s= Subject key identifier: 43:C8:B5:18:23:4C:F0:C7:80:55:63:33:30:DF:95:90:E7:0B:E5:C7 Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728 Certificate serial: 019B76EB7CD9D5E7A44D067AB43AE7EAF4BD Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/Q8i1GCNM8MeAVWMzMN-VkOcL5cc.roa Signing time: Thu 01 Jan 2026 00:18:22 +0000 ROA not before: Thu 01 Jan 2026 00:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203193 IP address blocks: 185.143.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7c:d9:d5:e7:a4:4d:06:7a:b4:3a:e7:ea:f4:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7844abef711c232c84f83c807a420af3804728 Validity Not Before: Jan 1 00:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43c8b518234cf0c78055633330df9590e70be5c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bb:e3:91:e4:b2:9e:9d:dd:c2:5d:b3:7e:48: 31:fd:48:f9:1a:ca:91:57:f6:bf:3a:47:20:b4:5e: c8:b7:cb:b8:b5:18:3c:14:a2:2f:38:65:ac:2d:e7: c2:76:18:81:d3:97:a1:2f:1b:38:70:fa:98:78:97: 77:07:3f:b7:fb:16:d8:71:f0:a2:12:79:d4:10:01: e7:69:b4:c9:46:f1:1e:57:46:3c:80:45:17:7a:c9: 44:0f:29:c1:d3:77:4c:3f:d0:29:f1:92:37:86:2b: 61:8b:3b:14:cc:0e:89:0f:84:a5:6a:53:9a:ab:94: af:24:d0:1d:dc:81:24:3e:c5:54:15:ee:3b:cc:af: 4c:4c:a7:02:fb:35:b5:2c:c6:45:f8:94:a9:0e:7d: 46:32:99:12:06:eb:b5:1b:4d:d4:16:cd:b4:67:3a: b4:df:53:c9:2c:27:82:5f:91:55:98:6c:4b:13:35: 05:fa:7b:e2:c8:bf:05:6e:44:cd:ab:4f:fe:a1:a1: a5:a3:61:2d:23:3a:74:d9:fb:0b:c6:52:7a:a1:b3: f8:91:ad:28:f1:48:87:c0:cb:cd:4c:49:48:76:f9: 15:3e:a3:8c:f8:73:39:e8:0a:d9:94:5a:5e:23:77: cd:2c:bf:66:d0:72:90:85:f5:13:e9:14:56:6c:e1: 14:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C8:B5:18:23:4C:F0:C7:80:55:63:33:30:DF:95:90:E7:0B:E5:C7 X509v3 Authority Key Identifier: keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/Q8i1GCNM8MeAVWMzMN-VkOcL5cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.143.4.0/22 Signature Algorithm: sha256WithRSAEncryption 76:ec:f9:5f:94:fa:95:ee:ca:9d:78:f4:1a:e5:73:21:22:b4: b5:32:5a:a6:b5:03:01:b6:45:5d:a1:ba:e1:4c:60:5d:3c:70: 19:7b:da:f1:d2:e1:d7:22:bd:51:ce:ba:b5:6c:91:1d:02:1d: 87:8d:6b:f5:06:2d:11:a9:7c:de:30:f8:d7:52:91:fd:6a:14: 5f:48:44:d1:2d:d2:80:1f:5d:3f:ea:76:4d:a1:7c:25:9f:09: 84:7d:84:38:f4:ca:0d:eb:63:4b:c6:bb:1f:b3:97:69:b5:8f: 44:e9:98:65:63:eb:bd:75:f3:ba:1c:89:09:fa:5a:d1:1b:65: 37:61:90:51:17:03:c7:8c:68:bc:92:b3:93:36:3d:af:a4:80: 3a:44:82:d7:4b:bc:58:86:11:0b:bd:4a:fb:73:da:ef:4e:0a: 14:81:d7:86:57:1c:a3:f1:1a:26:83:69:e2:df:d6:35:6a:dd: c0:57:9e:f1:e6:cb:21:77:b4:39:aa:4b:0b:63:3f:d7:96:36: 3d:c0:8b:e1:57:32:0d:e9:a1:d6:de:80:65:91:b0:db:a1:c0: 41:cf:9f:8b:7d:4c:a8:b8:14:bc:53:e1:c0:9c:10:68:ef:51: 3f:f5:82:6d:01:c5:2d:9e:34:2a:9e:c9:69:a6:b6:d3:f7:1a: 41:72:cc:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt263zZ1eekTQZ6tDrn6vS9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4 MDQ3MjgwHhcNMjYwMTAxMDAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2M4YjUxODIzNGNmMGM3ODA1NTYzMzMzMGRmOTU5MGU3MGJlNWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbvjkeSynp3dwl2zfkgx/Uj5GsqR V/a/OkcgtF7It8u4tRg8FKIvOGWsLefCdhiB05ehLxs4cPqYeJd3Bz+3+xbYcfCi EnnUEAHnabTJRvEeV0Y8gEUXeslEDynB03dMP9Ap8ZI3hithizsUzA6JD4SlalOa q5SvJNAd3IEkPsVUFe47zK9MTKcC+zW1LMZF+JSpDn1GMpkSBuu1G03UFs20Zzq0 31PJLCeCX5FVmGxLEzUF+nviyL8FbkTNq0/+oaGlo2EtIzp02fsLxlJ6obP4ka0o 8UiHwMvNTElIdvkVPqOM+HM56ArZlFpeI3fNLL9m0HKQhfUT6RRWbOEUNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEPItRgjTPDHgFVjMzDflZDnC+XHMB8GA1UdIwQY MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt ZGFiNmI4M2NmN2VjLzEvUThpMUdDTk04TWVBVldNek1OLVZrT2NMNWNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuY8EMA0G CSqGSIb3DQEBCwUAA4IBAQB27PlflPqV7sqdePQa5XMhIrS1MlqmtQMBtkVdobrh TGBdPHAZe9rx0uHXIr1Rzrq1bJEdAh2HjWv1Bi0RqXzeMPjXUpH9ahRfSETRLdKA H10/6nZNoXwlnwmEfYQ49MoN62NLxrsfs5dptY9E6ZhlY+u9dfO6HIkJ+lrRG2U3 YZBRFwPHjGi8krOTNj2vpIA6RILXS7xYhhELvUr7c9rvTgoUgdeGVxyj8Romg2ni 39Y1at3AV57x5sshd7Q5qksLYz/XljY9wIvhVzIN6aHW3oBlkbDbocBBz5+LfUyo uBS8U+HAnBBo71E/9YJtAcUtnjQqnslpprbT9xpBcsw0 -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:07 2026 by rpki-client