This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/8nT5rb3UrAJDsICwRbRykN-JOS0.roa File: 8nT5rb3UrAJDsICwRbRykN-JOS0.roa (raw, json) Hash identifier: DT7HhfSPZrLtcCVQk42JiiDF/rCVVpx9BUd5IvtgTOU= Subject key identifier: F2:74:F9:AD:BD:D4:AC:02:43:B0:80:B0:45:B4:72:90:DF:89:39:2D Certificate issuer: /CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a Certificate serial: 019B7F13949754BC6E9DBC27E9696794C884 Authority key identifier: C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/8nT5rb3UrAJDsICwRbRykN-JOS0.roa Signing time: Fri 02 Jan 2026 14:19:08 +0000 ROA not before: Fri 02 Jan 2026 14:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39568 IP address blocks: 185.230.204.0/22 maxlen: 22 185.230.204.0/24 maxlen: 24 185.230.205.0/24 maxlen: 24 185.230.206.0/24 maxlen: 24 185.230.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:94:97:54:bc:6e:9d:bc:27:e9:69:67:94:c8:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a Validity Not Before: Jan 2 14:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f274f9adbdd4ac0243b080b045b47290df89392d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1c:59:50:74:a7:0d:44:58:79:91:29:32:d1: 72:a0:d7:d7:23:5f:55:05:cb:6f:37:be:8d:38:9b: 45:69:ba:83:67:fc:6a:c3:42:48:5f:57:ca:ac:eb: 3e:37:82:60:79:60:88:9f:79:12:a2:6d:2d:30:b2: e7:14:80:d4:7a:78:75:42:70:a7:71:1d:01:a5:86: 45:9a:3a:fb:6d:65:dc:12:0c:e3:be:82:a4:b9:bb: b3:a7:09:7c:5d:e7:92:02:a1:d2:8f:ec:7c:e6:1d: 62:77:93:29:3c:76:49:ef:a3:26:cd:15:a2:ff:db: 56:6b:3c:c1:46:f8:2f:a8:8a:bb:61:46:b0:6c:84: 42:5f:fc:a7:78:06:80:08:7e:e7:2a:8f:3c:be:16: 05:8a:69:11:1e:1a:29:e2:01:13:cc:c4:f6:54:66: 8f:5c:f2:4c:32:53:c4:63:3b:57:99:41:4d:bb:9f: 3a:ba:41:47:b9:33:9d:13:18:b0:14:bb:93:bb:75: 1b:3d:10:ae:f1:76:6a:df:2c:8e:c7:98:bb:1e:87: 43:65:17:20:d5:d0:05:04:74:8a:ef:5d:d4:1f:b1: de:c8:5b:81:02:94:b8:79:50:e1:dc:4f:32:ef:62: 37:fb:96:fb:50:72:b6:d9:e4:a4:a1:66:cc:2f:33: 33:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:74:F9:AD:BD:D4:AC:02:43:B0:80:B0:45:B4:72:90:DF:89:39:2D X509v3 Authority Key Identifier: keyid:C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/8nT5rb3UrAJDsICwRbRykN-JOS0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.230.204.0/22 Signature Algorithm: sha256WithRSAEncryption c8:ce:0e:87:67:de:55:4b:7f:fd:49:de:94:04:f0:79:17:50: 33:db:74:a0:ea:fe:5e:a7:11:d7:23:b4:51:27:f7:63:95:4e: 6c:9f:6c:9e:00:ad:bf:e8:14:f0:02:32:97:78:bd:6e:02:a7: a3:c1:8b:ab:64:9f:8a:21:d3:e4:82:2f:6d:c1:96:06:09:b8: 7d:ee:5a:4a:a7:b5:9f:db:a2:4f:08:bb:03:ca:d0:f5:66:df: b1:94:38:13:b2:3a:03:da:61:92:24:35:e1:1a:40:d8:45:34: 64:f0:f9:8b:23:f4:32:0f:03:13:08:ea:f9:08:33:1d:20:a8: c3:22:38:d7:1f:40:28:f7:b3:6d:04:e2:eb:ad:20:76:17:4c: 8a:ec:70:c8:80:57:5a:bd:42:a5:b9:e8:e3:62:38:d4:f4:9d: a9:8f:38:5b:00:cb:ae:a5:72:44:9e:e6:8a:a3:fe:b1:01:71: 42:39:ab:fb:45:cb:85:49:9b:95:8b:ee:af:55:22:ef:91:45: 20:6a:fd:8d:fe:65:b9:fc:89:b3:4b:4b:13:a1:5e:de:9d:c4: 22:b8:d7:95:f5:1b:e4:e1:19:17:b6:4f:9c:63:22:b4:49:fc: 14:40:73:18:73:1b:97:50:17:06:39:c9:b0:64:19:64:0d:4f: 30:78:93:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E5SXVLxunbwn6WlnlMiEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZmEzY2FkY2E0ZTEzMWEwZmJlMWI5ZTQwZGJhMzgzODMz Y2Y0OGEwHhcNMjYwMTAyMTQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjc0ZjlhZGJkZDRhYzAyNDNiMDgwYjA0NWI0NzI5MGRmODkzOTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BxZUHSnDURYeZEpMtFyoNfXI19V BctvN76NOJtFabqDZ/xqw0JIX1fKrOs+N4JgeWCIn3kSom0tMLLnFIDUenh1QnCn cR0BpYZFmjr7bWXcEgzjvoKkubuzpwl8XeeSAqHSj+x85h1id5MpPHZJ76MmzRWi /9tWazzBRvgvqIq7YUawbIRCX/yneAaACH7nKo88vhYFimkRHhop4gETzMT2VGaP XPJMMlPEYztXmUFNu586ukFHuTOdExiwFLuTu3UbPRCu8XZq3yyOx5i7HodDZRcg 1dAFBHSK713UH7HeyFuBApS4eVDh3E8y72I3+5b7UHK22eSkoWbMLzMzmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPJ0+a291KwCQ7CAsEW0cpDfiTktMB8GA1UdIwQY MBaAFMf6PK3KThMaD74bnkDbo4ODPPSKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveF9vOHJjcE9FeG9Qdmh1ZVFOdWpnNE04OUlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9iNzI1OTItNTk2MS00YzVlLWEyMGYt ZjFkNDU2ODY5Zjk3LzEvOG5UNXJiM1VyQUpEc0lDd1JiUnlrTi1KT1MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9iNzI1OTItNTk2MS00YzVlLWEyMGYtZjFkNDU2ODY5Zjk3 LzEveF9vOHJjcE9FeG9Qdmh1ZVFOdWpnNE04OUlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuebMMA0G CSqGSIb3DQEBCwUAA4IBAQDIzg6HZ95VS3/9Sd6UBPB5F1Az23Sg6v5epxHXI7RR J/djlU5sn2yeAK2/6BTwAjKXeL1uAqejwYurZJ+KIdPkgi9twZYGCbh97lpKp7Wf 26JPCLsDytD1Zt+xlDgTsjoD2mGSJDXhGkDYRTRk8PmLI/QyDwMTCOr5CDMdIKjD IjjXH0Ao97NtBOLrrSB2F0yK7HDIgFdavUKluejjYjjU9J2pjzhbAMuupXJEnuaK o/6xAXFCOav7RcuFSZuVi+6vVSLvkUUgav2N/mW5/ImzS0sToV7encQiuNeV9Rvk 4RkXtk+cYyK0SfwUQHMYcxuXUBcGOcmwZBlkDU8weJNg -----END CERTIFICATE-----Generated at Mon Jan 26 05:32:05 2026 by rpki-client