This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/F-MQ4_q16IIp-IO6Aj9rbXh6FAg.roa File: F-MQ4_q16IIp-IO6Aj9rbXh6FAg.roa (raw, json) Hash identifier: O9ss77MomSSt907FsLWzdFo2wbDsc9Vaw/c7NY0bUPI= Subject key identifier: 17:E3:10:E3:FA:B5:E8:82:29:F8:83:BA:02:3F:6B:6D:78:7A:14:08 Certificate issuer: /CN=7e8e09724f472e76689c61dca60a7c641f2ac8f9 Certificate serial: 019BE0A1AC3F4C69BE76269FF7A44D62567E Authority key identifier: 7E:8E:09:72:4F:47:2E:76:68:9C:61:DC:A6:0A:7C:64:1F:2A:C8:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/F-MQ4_q16IIp-IO6Aj9rbXh6FAg.roa Signing time: Wed 21 Jan 2026 12:57:30 +0000 ROA not before: Wed 21 Jan 2026 12:57:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205005 IP address blocks: 185.2.144.0/23 maxlen: 23 185.121.208.0/22 maxlen: 22 2a00:1be7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:a1:ac:3f:4c:69:be:76:26:9f:f7:a4:4d:62:56:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e8e09724f472e76689c61dca60a7c641f2ac8f9 Validity Not Before: Jan 21 12:57:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17e310e3fab5e88229f883ba023f6b6d787a1408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:db:4f:df:45:f7:2a:32:0d:18:f6:c1:05:b0: 0b:7c:08:c4:2f:74:fe:f6:5b:48:fb:55:26:f1:c9: 59:79:a7:17:34:b1:0c:a8:82:1f:33:3c:71:6e:b7: fa:02:c8:1b:f2:31:7a:ff:78:b0:9c:33:c3:d7:ab: 75:34:2c:01:2e:9c:44:01:e0:a0:7a:82:d9:0a:31: 54:6c:a2:b7:27:c3:22:95:f8:c9:ed:ca:81:fb:fe: 82:b1:3a:6f:4b:2a:49:36:88:07:4e:0e:72:78:3b: fc:e7:49:ac:d2:60:ee:25:17:f1:c7:d3:e4:ed:3e: af:35:bb:cb:2b:0f:cf:43:8d:84:db:80:52:6b:78: 49:4e:9f:1d:ee:09:e0:6c:b8:20:88:77:f6:16:e3: bf:68:7c:7c:1a:29:a1:a1:64:65:59:02:aa:a3:f8: 30:ad:78:23:1c:5b:22:ac:a7:57:70:8c:90:2f:4a: 2f:f2:4f:28:e4:03:06:b6:a3:ba:a9:61:f1:16:dd: 31:73:59:b8:15:e6:0a:9d:68:5d:51:e6:4a:c6:32: 60:21:ed:f5:a6:eb:b8:46:a2:8f:e1:0d:dc:1e:aa: a4:90:30:f6:b0:61:5d:0d:4d:a2:97:04:af:cc:2c: 32:30:51:d0:78:33:a2:71:c6:8f:59:fd:24:76:bd: 9a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E3:10:E3:FA:B5:E8:82:29:F8:83:BA:02:3F:6B:6D:78:7A:14:08 X509v3 Authority Key Identifier: keyid:7E:8E:09:72:4F:47:2E:76:68:9C:61:DC:A6:0A:7C:64:1F:2A:C8:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/F-MQ4_q16IIp-IO6Aj9rbXh6FAg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.2.144.0/23 185.121.208.0/22 IPv6: 2a00:1be7::/32 Signature Algorithm: sha256WithRSAEncryption 3c:ad:5e:cd:a9:93:04:d4:49:91:07:24:ba:16:46:57:e1:1a: 8d:3a:1e:60:e6:dc:5a:1e:ea:1c:52:74:b9:b6:2e:52:db:c7: 16:78:db:e3:5d:99:d0:99:af:2a:5b:b6:f9:ca:13:8c:27:bc: e7:49:54:9d:d5:c9:92:b8:5c:8c:75:1f:0e:b0:d8:48:ad:5f: 52:d1:fa:1e:7e:c0:32:c6:78:cc:6e:67:e3:5e:6b:3d:87:b8: f0:66:69:30:b6:2d:38:e7:36:0e:7a:53:98:d9:08:a0:94:a9: ca:9e:2b:c1:03:29:fc:c1:66:52:1e:48:d5:e1:cf:3b:65:ff: aa:ea:fc:11:ea:b2:6e:9b:29:48:89:1c:74:84:a7:b8:4e:d7: 2b:5b:5e:f6:46:ac:8b:03:b4:69:d4:19:fb:89:df:23:78:0c: ec:f5:ce:2a:19:de:eb:43:c5:67:4a:fb:d7:17:64:2b:15:e4: 7a:c5:f0:c7:aa:10:65:48:06:27:31:25:5d:b8:33:84:49:2f: da:88:a1:bb:ca:3b:8e:74:a8:74:65:65:07:3e:f6:48:06:5a: 80:54:78:3c:15:de:06:9e:3f:23:90:09:23:7b:74:8f:b4:43: 0d:55:ea:af:46:68:98:7e:31:c9:97:47:55:ec:be:b7:87:d7: 37:c4:af:99 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZvgoaw/TGm+diaf96RNYlZ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlOGUwOTcyNGY0NzJlNzY2ODljNjFkY2E2MGE3YzY0MWYy YWM4ZjkwHhcNMjYwMTIxMTI1NzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2UzMTBlM2ZhYjVlODgyMjlmODgzYmEwMjNmNmI2ZDc4N2ExNDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ttP30X3KjINGPbBBbALfAjEL3T+ 9ltI+1Um8clZeacXNLEMqIIfMzxxbrf6Asgb8jF6/3iwnDPD16t1NCwBLpxEAeCg eoLZCjFUbKK3J8MilfjJ7cqB+/6CsTpvSypJNogHTg5yeDv850ms0mDuJRfxx9Pk 7T6vNbvLKw/PQ42E24BSa3hJTp8d7gngbLggiHf2FuO/aHx8GimhoWRlWQKqo/gw rXgjHFsirKdXcIyQL0ov8k8o5AMGtqO6qWHxFt0xc1m4FeYKnWhdUeZKxjJgIe31 puu4RqKP4Q3cHqqkkDD2sGFdDU2ilwSvzCwyMFHQeDOiccaPWf0kdr2anwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBfjEOP6teiCKfiDugI/a214ehQIMB8GA1UdIwQY MBaAFH6OCXJPRy52aJxh3KYKfGQfKsj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZm80SmNrOUhMblpvbkdIY3BncDhaQjhxeVBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9kZGMyN2MtNzkzNy00NTYwLWJlMjIt ZGNiNWZiMzNjMTc4LzEvRi1NUTRfcTE2SUlwLUlPNkFqOXJiWGg2RkFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9kZGMyN2MtNzkzNy00NTYwLWJlMjItZGNiNWZiMzNjMTc4 LzEvZm80SmNrOUhMblpvbkdIY3BncDhaQjhxeVBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBuQKQAwQC uXnQMA0EAgACMAcDBQAqABvnMA0GCSqGSIb3DQEBCwUAA4IBAQA8rV7NqZME1EmR ByS6FkZX4RqNOh5g5txaHuocUnS5ti5S28cWeNvjXZnQma8qW7b5yhOMJ7znSVSd 1cmSuFyMdR8OsNhIrV9S0foefsAyxnjMbmfjXms9h7jwZmkwti045zYOelOY2Qig lKnKnivBAyn8wWZSHkjV4c87Zf+q6vwR6rJumylIiRx0hKe4TtcrW172RqyLA7Rp 1Bn7id8jeAzs9c4qGd7rQ8VnSvvXF2QrFeR6xfDHqhBlSAYnMSVduDOESS/aiKG7 yjuOdKh0ZWUHPvZIBlqAVHg8Fd4Gnj8jkAkje3SPtEMNVeqvRmiYfjHJl0dV7L63 h9c3xK+Z -----END CERTIFICATE-----Generated at Mon Jan 26 15:17:42 2026 by rpki-client