This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/8kiAQtkav2NHfFCJtiBA0ERhqIA.roa File: 8kiAQtkav2NHfFCJtiBA0ERhqIA.roa (raw, json) Hash identifier: F/EijD7R25vjZwA9wYF9LplNamhupuIHanpPILz4ls0= Subject key identifier: F2:48:80:42:D9:1A:BF:63:47:7C:50:89:B6:20:40:D0:44:61:A8:80 Certificate issuer: /CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e Certificate serial: 019B78351AE672157BCBE1FE2F037C34DB41 Authority key identifier: 3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/8kiAQtkav2NHfFCJtiBA0ERhqIA.roa Signing time: Thu 01 Jan 2026 06:18:24 +0000 ROA not before: Thu 01 Jan 2026 06:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49788 IP address blocks: 185.30.224.0/22 maxlen: 22 2a04:45c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:1a:e6:72:15:7b:cb:e1:fe:2f:03:7c:34:db:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e Validity Not Before: Jan 1 06:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2488042d91abf63477c5089b62040d04461a880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7d:95:f8:c9:4d:2a:c5:fc:a4:cc:1b:a3:ab: ec:59:09:7a:64:ba:c2:a9:65:72:d2:24:17:c2:cf: c9:62:b2:37:34:96:ca:97:57:38:dd:1c:99:ad:81: 14:47:a3:a3:82:6a:b8:60:d3:05:fd:57:86:39:4e: f3:dd:88:56:70:78:34:25:cf:a6:73:e5:ca:28:c0: 0a:9b:ee:5e:19:a1:6d:71:37:0b:66:f5:f2:34:d5: c4:73:86:61:64:93:f2:9f:89:de:da:f1:d1:dc:40: 5d:0d:0d:e2:04:08:95:3b:94:37:3b:51:8a:2c:b3: d7:fd:0c:01:3c:01:c8:18:ba:84:64:f3:64:71:c7: f0:96:b7:a4:9a:b3:58:01:b6:be:6a:f6:4f:bd:e4: 59:3a:8d:25:d8:e4:ba:b7:4f:cd:c1:a1:c7:37:ac: d6:fa:df:32:34:b8:be:3a:09:58:f2:7a:8f:a5:02: 89:d4:d0:9a:a1:57:86:72:24:90:3d:e0:f7:51:82: 57:49:59:ed:c6:99:1b:d3:d7:c8:ea:99:05:ba:9c: 5b:f9:81:96:0c:70:86:a8:8b:be:0a:6b:cc:97:7b: 7f:2b:78:bf:64:56:20:b7:a9:aa:25:8c:b0:78:37: 7c:31:86:b4:3a:c8:c6:7f:25:7b:d5:2a:91:1c:21: f3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:48:80:42:D9:1A:BF:63:47:7C:50:89:B6:20:40:D0:44:61:A8:80 X509v3 Authority Key Identifier: keyid:3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/8kiAQtkav2NHfFCJtiBA0ERhqIA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.30.224.0/22 IPv6: 2a04:45c0::/29 Signature Algorithm: sha256WithRSAEncryption 55:e0:d0:2c:4c:db:16:91:eb:41:81:ac:98:04:3c:f0:e7:ca: 1b:0f:27:48:b2:0b:23:45:97:ea:40:4f:92:70:3b:71:b6:0b: 0f:6b:15:7b:e1:6a:d1:d1:4a:5e:b4:49:7b:2d:2d:f7:de:60: 34:61:a7:3b:67:99:b3:02:1c:5a:73:ff:64:7b:a6:23:c8:c8: 96:58:71:6a:09:1a:b4:dc:9f:d8:f1:b3:21:82:af:58:14:55: 28:09:6c:cc:f4:87:f6:82:be:a6:e3:f1:85:ca:e1:b6:14:80: d4:f3:29:c9:f2:12:9a:0c:92:1e:c6:43:28:ff:a2:e1:51:b3: 2a:92:68:69:12:14:6e:24:ed:a3:54:c5:53:11:ff:ad:8a:b4: 05:84:dc:65:a8:6a:a2:f5:78:97:e6:3e:79:ca:0e:90:e7:e7: e1:3b:19:13:d3:d1:7b:9e:e6:ed:60:88:cd:2a:95:aa:e7:62: ef:33:69:32:d4:5b:e1:24:d1:5d:0c:21:28:17:5d:2a:df:1b: f0:cf:21:f5:2e:aa:70:ee:80:d3:dd:87:57:68:ec:0f:9b:d1: 92:89:ef:56:c9:64:9f:1a:68:b1:52:e2:48:f9:75:a2:dd:19: 8a:3d:2d:92:a1:cd:6f:39:99:27:11:7c:ff:0a:b5:a1:8c:4a: a0:16:ed:2d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NRrmchV7y+H+LwN8NNtBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMWFlMTViZTg2ZWIwYzRkOWE3NjRjYzdhOGY2NTk5NWJm OGM5MGUwHhcNMjYwMTAxMDYxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjQ4ODA0MmQ5MWFiZjYzNDc3YzUwODliNjIwNDBkMDQ0NjFhODgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH2V+MlNKsX8pMwbo6vsWQl6ZLrC qWVy0iQXws/JYrI3NJbKl1c43RyZrYEUR6Ojgmq4YNMF/VeGOU7z3YhWcHg0Jc+m c+XKKMAKm+5eGaFtcTcLZvXyNNXEc4ZhZJPyn4ne2vHR3EBdDQ3iBAiVO5Q3O1GK LLPX/QwBPAHIGLqEZPNkccfwlrekmrNYAba+avZPveRZOo0l2OS6t0/NwaHHN6zW +t8yNLi+OglY8nqPpQKJ1NCaoVeGciSQPeD3UYJXSVntxpkb09fI6pkFupxb+YGW DHCGqIu+CmvMl3t/K3i/ZFYgt6mqJYyweDd8MYa0OsjGfyV71SqRHCHzKQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPJIgELZGr9jR3xQibYgQNBEYaiAMB8GA1UdIwQY MBaAFD4a4VvobrDE2adkzHqPZZlb+MkOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGhyaFctaHVzTVRacDJUTWVvOWxtVnY0eVE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83M2YyM2EtZTk3Ny00MWMzLTkyMmQt YjI3YzM0MTI0MjZhLzEvOGtpQVF0a2F2Mk5IZkZDSnRpQkEwRVJocUlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC83M2YyM2EtZTk3Ny00MWMzLTkyMmQtYjI3YzM0MTI0MjZh LzEvUGhyaFctaHVzTVRacDJUTWVvOWxtVnY0eVE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuR7gMA0E AgACMAcDBQMqBEXAMA0GCSqGSIb3DQEBCwUAA4IBAQBV4NAsTNsWketBgayYBDzw 58obDydIsgsjRZfqQE+ScDtxtgsPaxV74WrR0UpetEl7LS333mA0Yac7Z5mzAhxa c/9ke6YjyMiWWHFqCRq03J/Y8bMhgq9YFFUoCWzM9If2gr6m4/GFyuG2FIDU8ynJ 8hKaDJIexkMo/6LhUbMqkmhpEhRuJO2jVMVTEf+tirQFhNxlqGqi9XiX5j55yg6Q 5+fhOxkT09F7nubtYIjNKpWq52LvM2ky1FvhJNFdDCEoF10q3xvwzyH1Lqpw7oDT 3YdXaOwPm9GSie9WyWSfGmixUuJI+XWi3RmKPS2Soc1vOZknEXz/CrWhjEqgFu0t -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:50 2026 by rpki-client