This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/23BJoNFdDlJ_93-a2ClIHAl6nKA.roa File: 23BJoNFdDlJ_93-a2ClIHAl6nKA.roa (raw, json) Hash identifier: DjII82sTDDN6cpbOsiwqWIzILpschG7hs7d+wN7zZZY= Subject key identifier: DB:70:49:A0:D1:5D:0E:52:7F:F7:7F:9A:D8:29:48:1C:09:7A:9C:A0 Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e Certificate serial: 019B7AC8B04C0D874C7235DD9E1FF79D645B Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/23BJoNFdDlJ_93-a2ClIHAl6nKA.roa Signing time: Thu 01 Jan 2026 18:18:51 +0000 ROA not before: Thu 01 Jan 2026 18:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59729 IP address blocks: 185.82.216.0/22 maxlen: 22 195.123.224.0/21 maxlen: 21 217.12.202.0/23 maxlen: 23 2a02:27aa::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:b0:4c:0d:87:4c:72:35:dd:9e:1f:f7:9d:64:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e Validity Not Before: Jan 1 18:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db7049a0d15d0e527ff77f9ad829481c097a9ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4f:12:f4:f7:16:78:e3:56:5f:00:7d:24:a7: b0:37:ba:fe:23:81:78:92:d4:8e:4d:74:90:68:ce: 9f:54:d4:ae:f5:78:ec:d1:60:16:5a:3d:7e:8f:5b: a5:b0:b4:26:09:07:53:b9:96:80:f1:11:b5:66:b8: a5:26:72:3c:dc:fe:99:cd:4c:58:d4:b3:bd:42:51: f6:b1:3d:01:1b:4a:ac:98:8b:45:67:0f:e5:b1:c1: 55:0f:dd:49:ca:f6:9e:1a:e8:74:3b:30:ef:e5:e4: 29:3a:a8:29:08:37:b5:a5:da:5c:fe:30:34:7e:50: f3:30:8d:d8:64:cd:2c:f8:94:2f:c5:58:6a:48:d7: f9:df:03:16:8a:11:12:46:20:cb:f7:60:91:e6:e8: 55:56:de:ad:82:bc:ab:3b:60:e3:bc:6f:86:61:67: 76:6e:82:5b:cf:49:3f:89:d2:e4:a3:63:5c:74:54: 5f:57:29:e3:6e:10:0e:86:be:c8:a0:7f:64:ea:94: 7d:51:8d:06:42:2a:b6:2d:81:4f:1c:01:14:c4:ae: 09:73:2a:d5:a9:c6:95:31:7b:b6:52:1f:46:93:bc: 90:67:19:c5:80:44:03:86:cc:a4:91:46:60:9c:c8: 04:24:05:03:e0:93:ac:8f:a5:fa:8a:d2:61:17:57: d7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:70:49:A0:D1:5D:0E:52:7F:F7:7F:9A:D8:29:48:1C:09:7A:9C:A0 X509v3 Authority Key Identifier: keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/23BJoNFdDlJ_93-a2ClIHAl6nKA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.82.216.0/22 195.123.224.0/21 217.12.202.0/23 IPv6: 2a02:27aa::/32 Signature Algorithm: sha256WithRSAEncryption 86:00:88:a4:54:7b:05:af:6d:56:3a:6c:07:0b:21:4c:01:1e: 50:97:bc:87:bf:56:88:3a:a2:26:d5:82:a2:0e:de:4a:75:91: e6:71:5c:f3:75:b3:87:9b:4a:36:4e:d6:ff:5b:1e:44:78:5e: d0:1c:ee:f1:bd:b5:1d:5a:a4:f4:fe:8b:d7:96:0d:fb:19:f0: 9c:da:1e:0a:0f:78:4f:eb:7d:6d:20:13:44:ef:38:b1:17:59: 19:b1:57:13:3e:ef:de:e9:69:31:90:81:91:69:bc:de:ed:ca: f6:01:c1:20:11:e5:d0:26:d5:eb:2f:5e:26:1d:a7:5f:d2:88: 3a:b6:27:02:e6:d2:35:11:f2:ff:13:6b:85:33:41:2c:df:ef: 14:14:1f:5a:5f:46:34:cb:c8:9d:bf:49:d5:04:44:9e:bb:72: a4:31:ac:ac:a1:ba:fd:df:2f:f0:f7:b0:59:87:ac:f4:e4:2c: fd:66:c2:61:b3:bb:58:79:53:b1:f1:1c:a0:09:69:19:eb:45: 76:fd:7e:7c:ec:ad:3f:cc:01:b9:e7:f2:7e:d4:d3:13:32:91: 4b:7a:b8:86:33:bb:cf:2c:23:95:49:78:7c:27:57:3f:75:d2: cc:7e:27:35:68:14:0c:00:0a:8d:9c:4f:a3:15:59:12:7b:2f: 90:1b:1f:25 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6yLBMDYdMcjXdnh/3nWRbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZDk4ZThmZWM2ODA3NzVhMTU3MjY2ZTBjNmI3OGIxNDFh MzRmNWUwHhcNMjYwMTAxMTgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjcwNDlhMGQxNWQwZTUyN2ZmNzdmOWFkODI5NDgxYzA5N2E5Y2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4k8S9PcWeONWXwB9JKewN7r+I4F4 ktSOTXSQaM6fVNSu9Xjs0WAWWj1+j1ulsLQmCQdTuZaA8RG1ZrilJnI83P6ZzUxY 1LO9QlH2sT0BG0qsmItFZw/lscFVD91JyvaeGuh0OzDv5eQpOqgpCDe1pdpc/jA0 flDzMI3YZM0s+JQvxVhqSNf53wMWihESRiDL92CR5uhVVt6tgryrO2DjvG+GYWd2 boJbz0k/idLko2NcdFRfVynjbhAOhr7IoH9k6pR9UY0GQiq2LYFPHAEUxK4JcyrV qcaVMXu2Uh9Gk7yQZxnFgEQDhsykkUZgnMgEJAUD4JOsj6X6itJhF1fXzwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFNtwSaDRXQ5Sf/d/mtgpSBwJepygMB8GA1UdIwQY MBaAFJTZjo/saAd1oVcmbgxreLFBo09eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbE5tT2oteG9CM1doVnladURHdDRzVUdqVDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83YWUzYzctNjdlNC00NGRlLWIxMzkt ODdkMTdkZjc0YzdlLzEvMjNCSm9ORmREbEpfOTMtYTJDbElIQWw2bktBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83YWUzYzctNjdlNC00NGRlLWIxMzktODdkMTdkZjc0Yzdl LzEvbE5tT2oteG9CM1doVnladURHdDRzVUdqVDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuVLYAwQD w3vgAwQB2QzKMA0EAgACMAcDBQAqAieqMA0GCSqGSIb3DQEBCwUAA4IBAQCGAIik VHsFr21WOmwHCyFMAR5Ql7yHv1aIOqIm1YKiDt5KdZHmcVzzdbOHm0o2Ttb/Wx5E eF7QHO7xvbUdWqT0/ovXlg37GfCc2h4KD3hP631tIBNE7zixF1kZsVcTPu/e6Wkx kIGRabze7cr2AcEgEeXQJtXrL14mHadf0og6ticC5tI1EfL/E2uFM0Es3+8UFB9a X0Y0y8idv0nVBESeu3KkMaysobr93y/w97BZh6z05Cz9ZsJhs7tYeVOx8RygCWkZ 60V2/X587K0/zAG55/J+1NMTMpFLeriGM7vPLCOVSXh8J1c/ddLMfic1aBQMAAqN nE+jFVkSey+QGx8l -----END CERTIFICATE-----Generated at Sun Jan 25 17:32:33 2026 by rpki-client