This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/tG8ZG_dCQOkYNHsjd01rJ4jtgF8.roa File: tG8ZG_dCQOkYNHsjd01rJ4jtgF8.roa (raw, json) Hash identifier: TPv62uZMhjn9awPA5VdIoi2Udqm+OYn/wfPIL+U47B8= Subject key identifier: B4:6F:19:1B:F7:42:40:E9:18:34:7B:23:77:4D:6B:27:88:ED:80:5F Certificate issuer: /CN=344fdad10ee55b3282a64246a41dc61a8922d25d Certificate serial: 019B7758D790EA497C24C681308E8080BF7E Authority key identifier: 34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/tG8ZG_dCQOkYNHsjd01rJ4jtgF8.roa Signing time: Thu 01 Jan 2026 02:17:49 +0000 ROA not before: Thu 01 Jan 2026 02:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43395 IP address blocks: 185.145.184.0/22 maxlen: 22 185.186.48.0/24 maxlen: 24 185.186.49.0/24 maxlen: 24 185.186.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d7:90:ea:49:7c:24:c6:81:30:8e:80:80:bf:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=344fdad10ee55b3282a64246a41dc61a8922d25d Validity Not Before: Jan 1 02:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b46f191bf74240e918347b23774d6b2788ed805f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:61:c1:53:01:5e:1a:ce:ff:f4:2e:6c:b1:2d: 56:86:35:ee:3d:e0:1d:83:e5:58:bd:c9:79:bd:8e: 92:2e:1a:58:a3:63:22:5c:9f:d7:16:61:a2:79:ae: 13:c4:10:e4:9f:de:3a:72:39:dc:92:71:fa:f6:a0: e2:21:72:30:4f:8f:7e:e3:52:39:02:aa:85:0e:8f: 2d:d2:c1:25:5f:13:d9:55:76:96:c7:c2:1e:82:a5: 0f:e1:d1:0f:1c:ae:41:59:01:97:7f:9a:7a:d1:37: 17:f2:cc:bf:76:0a:f2:c5:fe:75:1d:30:48:1a:32: 4e:89:22:50:9a:7e:fd:58:34:b8:d4:21:11:e1:07: 89:af:e0:29:a2:8a:87:03:60:fb:fb:85:cd:27:1d: d1:8e:0d:48:79:44:d7:2e:b7:9a:e0:87:3c:cc:8e: 04:0f:47:7a:e5:f3:ee:87:ba:1a:a3:ef:82:66:fe: 11:76:d5:0c:dd:c9:71:8f:5e:2b:4e:6f:2a:d4:8a: 42:7c:1a:c0:d8:a7:77:3b:11:52:b9:b8:9e:ac:75: f5:7b:59:2b:ab:1b:52:81:1b:85:e9:26:00:47:8c: 7f:31:a0:94:05:f8:c8:74:68:67:b9:bf:5a:1c:b7: 35:4b:68:ad:8c:c3:f4:56:51:89:7f:4f:39:4d:b6: 86:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:6F:19:1B:F7:42:40:E9:18:34:7B:23:77:4D:6B:27:88:ED:80:5F X509v3 Authority Key Identifier: keyid:34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/tG8ZG_dCQOkYNHsjd01rJ4jtgF8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.145.184.0/22 185.186.48.0-185.186.50.255 Signature Algorithm: sha256WithRSAEncryption 5f:3c:f3:63:39:60:74:95:8c:64:29:e1:1b:b1:a8:a3:2a:a7: 4f:4c:ea:ec:36:e6:5e:3e:07:b1:a5:80:f6:c2:2e:24:8f:8f: a1:40:a5:20:4d:be:c4:46:6a:bb:9d:81:63:3c:0a:a7:91:b1: 2e:83:b2:eb:b6:ce:32:8c:f0:17:8a:5f:a2:1e:ea:6d:58:a5: 12:9b:7d:4b:c4:a6:dd:3d:00:cb:86:5a:65:ad:a1:dd:2a:ce: 35:00:df:20:4e:ff:f0:16:68:79:d8:c1:a7:62:85:8b:69:80: 9e:bd:f5:cb:ed:6b:58:b2:7f:32:ac:ad:c1:cf:d7:e3:da:76: 1d:6c:c7:3c:94:63:1c:5e:24:9b:9d:b8:40:19:ac:24:b9:36: 69:10:55:8c:b7:0b:67:a7:d5:f9:ed:80:70:94:d8:7a:b4:e5: 27:58:09:bb:6b:52:10:be:36:33:b2:05:39:64:94:8e:7d:f0: 6a:5b:c3:85:a8:59:92:79:b3:3b:e0:77:b4:98:e4:88:21:ee: 19:e2:8a:ec:8b:6f:62:01:ea:28:a3:58:32:af:5f:57:a3:b6: f2:9b:b5:81:bd:93:7b:c7:8f:e2:06:a0:12:54:e3:1b:75:19: b4:b9:4b:b3:2c:33:08:b1:0d:07:cc:b0:7b:3c:8d:2d:12:ea: 24:b2:db:88 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt3WNeQ6kl8JMaBMI6AgL9+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NGZkYWQxMGVlNTViMzI4MmE2NDI0NmE0MWRjNjFhODky MmQyNWQwHhcNMjYwMTAxMDIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDZmMTkxYmY3NDI0MGU5MTgzNDdiMjM3NzRkNmIyNzg4ZWQ4MDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GHBUwFeGs7/9C5ssS1WhjXuPeAd g+VYvcl5vY6SLhpYo2MiXJ/XFmGiea4TxBDkn946cjncknH69qDiIXIwT49+41I5 AqqFDo8t0sElXxPZVXaWx8IegqUP4dEPHK5BWQGXf5p60TcX8sy/dgryxf51HTBI GjJOiSJQmn79WDS41CER4QeJr+ApooqHA2D7+4XNJx3Rjg1IeUTXLrea4Ic8zI4E D0d65fPuh7oao++CZv4RdtUM3clxj14rTm8q1IpCfBrA2Kd3OxFSubierHX1e1kr qxtSgRuF6SYAR4x/MaCUBfjIdGhnub9aHLc1S2itjMP0VlGJf085TbaG8QIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFLRvGRv3QkDpGDR7I3dNayeI7YBfMB8GA1UdIwQY MBaAFDRP2tEO5VsygqZCRqQdxhqJItJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkVfYTBRN2xXektDcGtKR3BCM0dHb2tpMGwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wNjc2MzAtMzA2ZS00YzM3LThiY2Mt NGYwMjFjNzNlZjc0LzEvdEc4WkdfZENRT2tZTkhzamQwMXJKNGp0Z0Y4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8wNjc2MzAtMzA2ZS00YzM3LThiY2MtNGYwMjFjNzNlZjc0 LzEvTkVfYTBRN2xXektDcGtKR3BCM0dHb2tpMGwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCuZG4MAwD BAS5ujADBAC5ujIwDQYJKoZIhvcNAQELBQADggEBAF8882M5YHSVjGQp4RuxqKMq p09M6uw25l4+B7GlgPbCLiSPj6FApSBNvsRGarudgWM8CqeRsS6Dsuu2zjKM8BeK X6Ie6m1YpRKbfUvEpt09AMuGWmWtod0qzjUA3yBO//AWaHnYwadihYtpgJ699cvt a1iyfzKsrcHP1+Padh1sxzyUYxxeJJuduEAZrCS5NmkQVYy3C2en1fntgHCU2Hq0 5SdYCbtrUhC+NjOyBTlklI598Gpbw4WoWZJ5szvgd7SY5Igh7hniiuyLb2IB6iij WDKvX1ejtvKbtYG9k3vHj+IGoBJU4xt1GbS5S7MsMwixDQfMsHs8jS0S6iSy24g= -----END CERTIFICATE-----Generated at Mon Jan 26 07:10:03 2026 by rpki-client