This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/I4vOB-6b7Yrjiz4kl9EGnxIjQXI.roa File: I4vOB-6b7Yrjiz4kl9EGnxIjQXI.roa (raw, json) Hash identifier: ZbRluEdm21PdXwQDE7RdF6oCp8YLkRPYwO66Xf0NuZo= Subject key identifier: 23:8B:CE:07:EE:9B:ED:8A:E3:8B:3E:24:97:D1:06:9F:12:23:41:72 Certificate issuer: /CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592 Certificate serial: 019B7910A80129DF4C8B14AC29A08D0C0606 Authority key identifier: 40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/I4vOB-6b7Yrjiz4kl9EGnxIjQXI.roa Signing time: Thu 01 Jan 2026 10:18:13 +0000 ROA not before: Thu 01 Jan 2026 10:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211993 IP address blocks: 185.233.34.0/24 maxlen: 24 2a10:de80::/32 maxlen: 32 2a10:de80::/48 maxlen: 48 2a10:de80:1::/48 maxlen: 48 2a10:de80:b000::/36 maxlen: 48 2a10:de80:b101::/48 maxlen: 48 2a10:de80:b12a::/48 maxlen: 48 2a10:de80:b12c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a8:01:29:df:4c:8b:14:ac:29:a0:8d:0c:06:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592 Validity Not Before: Jan 1 10:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=238bce07ee9bed8ae38b3e2497d1069f12234172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:22:59:38:a7:e1:24:63:50:4d:63:32:5c:7f: 83:21:bf:b2:b7:0e:1f:5e:fc:40:42:22:82:b5:52: f1:98:0a:39:47:20:2b:d3:21:27:e5:ee:2a:50:4f: 91:53:5d:3b:fd:70:c4:57:b2:36:7b:31:4d:e8:c8: cf:c4:44:61:7d:64:2e:da:be:1c:ff:ad:d2:80:55: 62:ab:f8:7b:5a:c4:1d:29:90:95:d1:b6:09:90:80: 93:a7:22:2a:64:99:09:c6:5a:95:bd:10:73:f1:7a: 3e:08:7b:a9:5a:1e:41:74:da:d2:cb:d7:57:c2:b2: b8:cd:8f:2b:35:8b:b4:61:93:73:d0:c9:59:1a:53: 8c:7c:93:98:a2:f5:a5:5d:5d:d8:58:58:76:54:79: 71:8a:79:d3:63:dd:5c:94:db:fe:c1:1d:0d:db:c7: 2c:0d:95:6e:6b:ec:c5:b2:9b:dd:e5:35:46:7b:03: c3:46:dc:b9:f1:db:9a:e3:92:03:2f:73:eb:f0:27: 9b:d2:35:78:ee:5b:79:86:6f:fc:bc:bb:b9:14:ca: b5:ec:1a:98:20:93:3d:81:93:1f:2c:3f:b4:0e:f3: 2d:5b:8d:dd:51:e4:c1:51:49:79:c9:4b:47:8f:47: a9:31:aa:29:ea:cd:62:56:34:c2:4f:de:c1:64:f0: 34:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8B:CE:07:EE:9B:ED:8A:E3:8B:3E:24:97:D1:06:9F:12:23:41:72 X509v3 Authority Key Identifier: keyid:40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/I4vOB-6b7Yrjiz4kl9EGnxIjQXI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.233.34.0/24 IPv6: 2a10:de80::/32 Signature Algorithm: sha256WithRSAEncryption 84:c5:f8:52:c9:eb:1b:b5:ec:39:3c:dc:f6:1d:b8:dc:c7:a9: f1:a9:4d:3c:f2:8e:54:b3:5d:2b:10:80:c6:25:26:e3:fa:cb: 69:5b:15:2c:09:a6:83:c7:cb:84:73:ba:07:ce:e3:bb:1c:30: 35:11:30:ee:cc:a7:6c:0b:6d:88:e8:a0:53:9c:af:f3:f6:8a: b9:98:97:03:83:8a:ba:1f:e4:fa:23:6d:8a:75:3c:22:e9:39: 88:0d:e5:4e:f8:4e:ef:e1:be:18:5e:53:9e:1e:ff:a9:5c:4b: 01:df:57:63:fc:fa:57:4a:7a:45:b6:50:15:a1:d2:90:4d:7e: 1b:1e:25:35:f1:c3:69:de:36:66:19:cb:f7:a9:17:73:09:3d: 0f:95:ab:6e:a7:2d:37:d1:76:fe:27:96:25:27:6f:5f:13:e6: c0:c0:bf:5c:40:95:66:39:2f:ed:b0:63:e4:87:56:c2:50:72: 85:ea:06:a4:a8:77:d2:35:d1:3b:48:04:51:8d:30:17:cf:fd: 25:27:a9:09:7c:e5:5b:b9:66:90:82:ae:28:a9:72:3c:e9:96: 58:11:7e:d7:32:9e:e3:08:f6:f3:6b:97:62:c9:95:67:e1:43: d3:ab:d2:18:e9:b0:3b:45:83:2e:8e:05:55:b0:17:62:69:f1: 0e:97:d1:76 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EKgBKd9MixSsKaCNDAYGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwOWJkNzFjY2VhMzdlZDlhNzk4ZDVhMDY5YjIxNjljZjRk NGU1OTIwHhcNMjYwMTAxMTAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzhiY2UwN2VlOWJlZDhhZTM4YjNlMjQ5N2QxMDY5ZjEyMjM0MTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iJZOKfhJGNQTWMyXH+DIb+ytw4f XvxAQiKCtVLxmAo5RyAr0yEn5e4qUE+RU107/XDEV7I2ezFN6MjPxERhfWQu2r4c /63SgFViq/h7WsQdKZCV0bYJkICTpyIqZJkJxlqVvRBz8Xo+CHupWh5BdNrSy9dX wrK4zY8rNYu0YZNz0MlZGlOMfJOYovWlXV3YWFh2VHlxinnTY91clNv+wR0N28cs DZVua+zFspvd5TVGewPDRty58dua45IDL3Pr8Ceb0jV47lt5hm/8vLu5FMq17BqY IJM9gZMfLD+0DvMtW43dUeTBUUl5yUtHj0epMaop6s1iVjTCT97BZPA0DQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCOLzgfum+2K44s+JJfRBp8SI0FyMB8GA1UdIwQY MBaAFECb1xzOo37Zp5jVoGmyFpz01OWSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUp2WEhNNmpmdG1ubU5XZ2FiSVduUFRVNVpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yMjIzOTktZWNmMC00MzYwLWFkMzQt MmJmODc0YTY3MWU4LzEvSTR2T0ItNmI3WXJqaXo0a2w5RUdueElqUVhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yMjIzOTktZWNmMC00MzYwLWFkMzQtMmJmODc0YTY3MWU4 LzEvUUp2WEhNNmpmdG1ubU5XZ2FiSVduUFRVNVpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuekiMA0E AgACMAcDBQAqEN6AMA0GCSqGSIb3DQEBCwUAA4IBAQCExfhSyesbtew5PNz2Hbjc x6nxqU088o5Us10rEIDGJSbj+stpWxUsCaaDx8uEc7oHzuO7HDA1ETDuzKdsC22I 6KBTnK/z9oq5mJcDg4q6H+T6I22KdTwi6TmIDeVO+E7v4b4YXlOeHv+pXEsB31dj /PpXSnpFtlAVodKQTX4bHiU18cNp3jZmGcv3qRdzCT0Platupy030Xb+J5YlJ29f E+bAwL9cQJVmOS/tsGPkh1bCUHKF6gakqHfSNdE7SARRjTAXz/0lJ6kJfOVbuWaQ gq4oqXI86ZZYEX7XMp7jCPbza5diyZVn4UPTq9IY6bA7RYMujgVVsBdiafEOl9F2 -----END CERTIFICATE-----Generated at Mon Jan 26 03:58:10 2026 by rpki-client