This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/NK8Gz6GJqrc_7GHChg-EsR07AfU.roa File: NK8Gz6GJqrc_7GHChg-EsR07AfU.roa (raw, json) Hash identifier: JA439v4n3wZO/wreGKnPL6yB/tf8ErrxMnfksJXArYo= Subject key identifier: 34:AF:06:CF:A1:89:AA:B7:3F:EC:61:C2:86:0F:84:B1:1D:3B:01:F5 Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Certificate serial: 019B1510EDDA3B2EF719B25AA0116D79ABDB Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/NK8Gz6GJqrc_7GHChg-EsR07AfU.roa Signing time: Sat 13 Dec 2025 00:16:29 +0000 ROA not before: Sat 13 Dec 2025 00:16:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 33667 IP address blocks: 185.22.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:15:10:ed:da:3b:2e:f7:19:b2:5a:a0:11:6d:79:ab:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Validity Not Before: Dec 13 00:16:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=34af06cfa189aab73fec61c2860f84b11d3b01f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f1:37:fa:2b:e5:3d:80:b5:90:3b:d3:ad:06: 43:46:9c:79:61:ba:50:09:4e:63:80:51:02:01:bc: e6:02:ea:d8:5f:66:3f:42:77:04:bd:59:b8:09:7e: 3d:d2:81:ec:f9:cc:21:a9:50:99:89:56:fe:f4:3d: 36:4a:3b:c1:05:a8:bd:ba:6f:a2:ee:d3:b5:33:0b: a1:43:d8:f5:07:b8:7b:1b:ca:3b:0c:80:1f:9e:c2: 8d:06:27:87:81:ac:f3:02:e6:1f:2a:c3:ad:fa:54: 93:54:04:d7:39:a3:06:1c:89:d2:c9:ad:bc:03:89: 87:7e:a5:b6:ef:03:16:4c:45:cb:2a:e6:31:1f:ae: f7:06:17:70:ff:d9:a1:e4:00:bd:c7:cb:79:fa:9b: 74:11:78:2b:7a:05:9a:58:db:b4:3e:f1:99:42:40: f8:ca:c7:37:c9:1b:9e:66:8c:0e:9c:db:34:8f:18: 66:dc:9d:a9:2e:7b:2c:82:39:82:59:5f:bf:dd:dd: af:db:f7:14:eb:a4:98:f3:45:ec:15:d7:79:bd:f6: 60:6d:71:ee:30:77:a3:c2:e0:ae:87:4d:0b:7f:6e: 33:2c:2f:74:9d:4b:f2:25:68:a0:8c:f7:6e:a2:16: 92:7a:0c:f3:86:97:63:30:e0:59:35:17:92:54:52: 20:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:AF:06:CF:A1:89:AA:B7:3F:EC:61:C2:86:0F:84:B1:1D:3B:01:F5 X509v3 Authority Key Identifier: keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/NK8Gz6GJqrc_7GHChg-EsR07AfU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.22.43.0/24 Signature Algorithm: sha256WithRSAEncryption 13:ef:5b:6f:94:e0:01:96:73:35:20:01:43:b0:e9:5a:59:94: d9:61:b0:c2:6f:93:b7:39:52:42:de:f8:da:0a:7a:06:ed:67: 86:e5:50:ee:30:3c:ff:5f:2f:3a:30:b4:f1:45:52:0f:20:dd: 9d:41:da:14:9b:0b:92:60:e4:ad:4e:84:97:80:de:df:e6:f8: 7b:07:3e:d7:dd:b1:bd:a4:7b:91:80:a8:da:aa:38:c1:30:30: 02:75:20:2a:e2:4e:eb:d6:cf:71:8a:95:ee:81:37:70:f3:68: 7d:69:3a:1d:a9:b3:c2:e6:0d:87:e4:5c:9a:75:9c:1e:4b:87: 0b:4e:18:fe:cb:21:98:57:6a:8d:7e:19:82:a4:53:e7:61:e2: c0:44:32:2d:10:24:e2:6a:0b:00:c3:68:60:bc:6b:09:bc:55: 31:39:af:8c:e0:d8:b6:5a:c3:24:40:db:70:83:f7:a4:83:cb: 67:2e:be:bf:6c:06:7a:9a:d0:13:b3:16:d9:fc:0a:22:ae:46: eb:71:5c:5c:8a:ac:5a:fa:74:8c:89:d9:0d:8c:c5:77:59:52: 86:8f:87:e9:74:1f:db:17:66:f9:02:0f:61:71:7a:af:01:66: d0:ce:32:08:58:55:40:64:27:86:0c:13:ee:fc:d0:8d:dd:dd: 02:77:40:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsVEO3aOy73GbJaoBFteavbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjJiYjdiYWQ1MGYxOTIxODEwYTAyOGU3OGVkZDY1Zjgx ZjZhN2QwHhcNMjUxMjEzMDAxNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGFmMDZjZmExODlhYWI3M2ZlYzYxYzI4NjBmODRiMTFkM2IwMWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/E3+ivlPYC1kDvTrQZDRpx5YbpQ CU5jgFECAbzmAurYX2Y/QncEvVm4CX490oHs+cwhqVCZiVb+9D02SjvBBai9um+i 7tO1MwuhQ9j1B7h7G8o7DIAfnsKNBieHgazzAuYfKsOt+lSTVATXOaMGHInSya28 A4mHfqW27wMWTEXLKuYxH673Bhdw/9mh5AC9x8t5+pt0EXgregWaWNu0PvGZQkD4 ysc3yRueZowOnNs0jxhm3J2pLnssgjmCWV+/3d2v2/cU66SY80XsFdd5vfZgbXHu MHejwuCuh00Lf24zLC90nUvyJWigjPduohaSegzzhpdjMOBZNReSVFIgZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDSvBs+hiaq3P+xhwoYPhLEdOwH1MB8GA1UdIwQY MBaAFE+yu3utUPGSGBCgKOeO3WX4H2p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYt MjdmYmM5OWVhM2M2LzEvTks4R3o2R0pxcmNfN0dIQ2hnLUVzUjA3QWZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYtMjdmYmM5OWVhM2M2 LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRYrMA0G CSqGSIb3DQEBCwUAA4IBAQAT71tvlOABlnM1IAFDsOlaWZTZYbDCb5O3OVJC3vja CnoG7WeG5VDuMDz/Xy86MLTxRVIPIN2dQdoUmwuSYOStToSXgN7f5vh7Bz7X3bG9 pHuRgKjaqjjBMDACdSAq4k7r1s9xipXugTdw82h9aTodqbPC5g2H5FyadZweS4cL Thj+yyGYV2qNfhmCpFPnYeLARDItECTiagsAw2hgvGsJvFUxOa+M4Ni2WsMkQNtw g/ekg8tnLr6/bAZ6mtATsxbZ/AoirkbrcVxciqxa+nSMidkNjMV3WVKGj4fpdB/b F2b5Ag9hcXqvAWbQzjIIWFVAZCeGDBPu/NCN3d0Cd0BN -----END CERTIFICATE-----Generated at Thu Dec 18 20:30:12 2025 by rpki-client