This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/_Q4Z6jbF8NYTsaR27vIk58vSUlI.roa
File: _Q4Z6jbF8NYTsaR27vIk58vSUlI.roa (raw, json)
Hash identifier: 7qWyZfAO4daLpycwI/J3xaTZkHMp77aXgml30PjFR4w=
Subject key identifier: FD:0E:19:EA:36:C5:F0:D6:13:B1:A4:76:EE:F2:24:E7:CB:D2:52:52
Certificate issuer: /CN=1ba5167888397ff9caa844f554ff837cfdbf9722
Certificate serial: 019B7C8088B5D182BFBAA265FB3C9DD29114
Authority key identifier: 1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/_Q4Z6jbF8NYTsaR27vIk58vSUlI.roa
Signing time: Fri 02 Jan 2026 02:19:16 +0000
ROA not before: Fri 02 Jan 2026 02:19:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210298
IP address blocks: 185.44.200.0/22 maxlen: 22
185.44.200.0/23 maxlen: 23
185.44.202.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:88:b5:d1:82:bf:ba:a2:65:fb:3c:9d:d2:91:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba5167888397ff9caa844f554ff837cfdbf9722
Validity
Not Before: Jan 2 02:19:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd0e19ea36c5f0d613b1a476eef224e7cbd25252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c5:43:b3:1d:a0:e7:62:07:ca:ad:be:4e:b6:
22:9a:b0:9e:e0:24:4a:86:34:06:94:d5:ae:49:d3:
ac:7f:34:65:32:83:e4:78:fa:0f:c1:a5:bd:63:07:
e3:4f:e7:62:6f:10:2b:76:1f:e9:ca:c9:54:c1:92:
76:5f:69:c0:6b:d1:2d:9a:4a:47:85:6d:1a:a2:fc:
cc:9b:8f:4d:2d:73:56:45:59:00:2c:eb:db:10:4d:
ea:cc:1d:e5:c7:14:f4:47:de:d3:0e:b5:80:e1:68:
8d:d5:c2:d4:a3:6c:7f:3e:ba:aa:ba:64:a4:fb:fc:
99:44:91:c0:52:b8:91:89:12:cf:9c:35:23:19:07:
ef:64:86:9f:95:88:b7:66:70:df:bc:50:75:3a:bb:
35:d2:dd:5a:6a:67:06:2d:11:93:29:c4:bc:f8:01:
24:29:bb:0b:88:3b:69:20:11:22:ae:be:af:eb:43:
16:3b:8f:fd:64:24:ab:f7:08:6f:21:12:90:c1:dd:
40:67:1e:10:f3:b7:19:76:27:ca:76:9e:4f:03:95:
2c:1d:ba:5c:44:12:70:ba:c2:c4:1c:b5:8d:3e:e0:
3a:a1:24:b1:c7:b4:63:ab:b1:e0:ed:71:30:a5:31:
24:18:e3:c8:98:8b:e5:c5:17:e8:01:68:ec:ec:b1:
c1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0E:19:EA:36:C5:F0:D6:13:B1:A4:76:EE:F2:24:E7:CB:D2:52:52
X509v3 Authority Key Identifier:
keyid:1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/_Q4Z6jbF8NYTsaR27vIk58vSUlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.200.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:c2:b7:6b:9f:21:6b:40:ef:ca:9e:ca:68:4b:af:db:8c:17:
d4:87:5d:9a:22:98:7a:9a:72:25:92:33:8a:59:bb:5a:35:66:
00:fa:9a:59:7c:af:eb:e5:f4:79:ea:9d:ed:00:89:c7:a3:f9:
64:f8:ad:51:b9:2e:d2:84:14:4c:46:e1:98:e1:d5:ce:44:4e:
3a:0d:de:c9:6b:7b:48:8c:00:04:b8:38:20:a6:10:68:dd:dc:
d5:49:54:98:3b:30:38:72:09:90:c7:af:2a:aa:cc:8d:78:6b:
37:5c:9e:f7:45:82:8c:a3:fe:e2:cb:ec:46:20:03:06:34:fb:
06:1d:3c:00:9c:5b:a9:d7:98:c2:42:5e:18:6f:e1:f8:65:c4:
09:36:96:15:6b:12:66:e7:bc:51:06:c6:b7:8f:9f:7c:31:7c:
df:79:6b:f6:d2:cd:ab:cb:90:b9:69:3f:4f:8e:9e:e2:f6:2d:
f6:02:4b:9f:43:9b:74:14:ae:70:94:9b:f5:50:f3:98:a2:9b:
ec:ad:85:d4:88:1d:f1:1e:8a:48:e8:dd:94:b0:a1:e2:ec:63:
3f:9b:89:bf:dc:d3:b9:28:2b:e8:bb:e2:e7:bd:f5:96:56:ab:
c8:fd:ed:b8:61:59:fd:a6:3f:5c:a4:21:68:2d:c5:49:fa:56:
d7:b4:26:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:52:40 2026 by rpki-client