This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/4QBOhoFNUxak77byKINjZVmZ2fE.roa File: 4QBOhoFNUxak77byKINjZVmZ2fE.roa (raw, json) Hash identifier: v5Sp6DRTjrIUknZcB2dDqhlDf9TOw4Vufs1sIAdSgTo= Subject key identifier: E1:00:4E:86:81:4D:53:16:A4:EF:B6:F2:28:83:63:65:59:99:D9:F1 Certificate issuer: /CN=521a30077223c25c6f37dcf59480778c0b5b1068 Certificate serial: 019AEA4964074F5803D2F4A4338C7DA7649B Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/4QBOhoFNUxak77byKINjZVmZ2fE.roa Signing time: Thu 04 Dec 2025 16:54:29 +0000 ROA not before: Thu 04 Dec 2025 16:54:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206754 IP address blocks: 176.117.108.0/24 maxlen: 24 185.194.112.0/24 maxlen: 24 2a0a:4a40::/29 maxlen: 29 2a14:5340::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ea:49:64:07:4f:58:03:d2:f4:a4:33:8c:7d:a7:64:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068 Validity Not Before: Dec 4 16:54:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e1004e86814d5316a4efb6f2288363655999d9f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5c:12:3c:f3:01:66:57:7e:7f:f7:a0:7f:99: f8:9e:26:fb:21:aa:6e:04:df:ba:5b:ed:0d:af:ec: 4d:10:51:83:6c:27:84:57:38:e5:f2:dd:d2:f6:38: 2f:e7:44:d0:b7:e1:da:50:8b:6e:d2:dd:fc:1d:28: 26:03:69:80:6d:0d:72:c3:0d:8f:36:cc:09:2b:73: ae:35:65:1b:f6:07:5a:86:1c:fb:00:ed:6c:53:b5: e2:38:c7:26:13:88:5e:d8:2c:99:a9:b3:0e:8d:53: 5a:20:50:07:40:9f:9f:00:ca:97:f8:eb:ad:99:f3: 47:88:7a:8a:31:4f:0c:b2:95:b9:5c:4d:11:a5:9c: 0c:ae:34:9c:ef:42:ee:36:d4:18:4f:a0:5e:52:0f: 31:9a:43:10:7b:62:f7:76:10:03:49:ea:01:ca:f4: 15:14:fa:15:dc:73:75:d6:82:90:94:dc:2c:e7:42: 98:f6:d7:14:33:d6:7b:ec:79:f3:8e:8b:7c:92:4e: 24:ea:8f:3f:53:26:b0:96:87:07:12:4b:5b:23:ee: 7d:95:b8:cf:32:c0:43:9b:db:8a:01:87:7d:be:5b: 6f:e4:7f:d1:59:08:19:c0:47:f7:8c:d5:b3:ad:3f: ab:41:fb:6e:48:ca:cf:72:3e:3b:1d:3a:cc:58:d4: 3c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:00:4E:86:81:4D:53:16:A4:EF:B6:F2:28:83:63:65:59:99:D9:F1 X509v3 Authority Key Identifier: keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/4QBOhoFNUxak77byKINjZVmZ2fE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.117.108.0/24 185.194.112.0/24 IPv6: 2a0a:4a40::/29 2a14:5340::/29 Signature Algorithm: sha256WithRSAEncryption 2c:07:d6:f3:74:01:05:f3:47:52:da:02:cb:c1:26:7b:72:68: 9e:ac:f5:0d:2a:84:06:9d:ee:2d:bd:54:66:ad:10:42:87:4b: ec:7d:d3:89:53:26:41:7a:83:75:95:bf:00:91:a4:bc:6f:b5: ea:4e:6a:5a:3c:cc:8c:66:95:15:a4:9f:23:ce:b4:73:cf:e6: 42:e5:a0:5f:7f:94:d2:90:d4:75:4f:b7:e0:42:b0:3b:74:1e: eb:96:f1:e6:9e:ab:9c:86:12:6c:9f:c3:75:8f:4c:63:7c:b2: e8:e4:b7:c7:f9:7e:a4:2b:cf:60:da:79:01:bf:68:f1:8f:fc: d2:5d:8a:d7:ae:ce:b3:91:c8:86:53:7b:bb:83:4d:61:80:f9: 2e:e9:88:88:d7:9c:cf:8f:18:68:3a:c2:e7:d8:2f:c1:04:58: c5:d0:74:31:45:5f:8c:36:50:f7:55:52:1a:d8:8f:96:66:d7: 08:3b:05:09:c7:58:15:3d:a9:4d:a8:45:6e:d1:92:6f:6e:82: cc:89:00:c2:6c:74:b4:f0:40:99:1d:7e:47:f0:73:e0:8a:b0: 1e:56:91:73:37:51:be:71:7a:ee:c2:da:f0:2a:f8:30:97:99: b5:6f:8b:af:88:6d:a3:2a:67:5b:f9:03:e1:47:df:d2:b8:38: bb:d7:e0:73 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrqSWQHT1gD0vSkM4x9p2SbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMWEzMDA3NzIyM2MyNWM2ZjM3ZGNmNTk0ODA3NzhjMGI1 YjEwNjgwHhcNMjUxMjA0MTY1NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTAwNGU4NjgxNGQ1MzE2YTRlZmI2ZjIyODgzNjM2NTU5OTlkOWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1wSPPMBZld+f/egf5n4nib7Iapu BN+6W+0Nr+xNEFGDbCeEVzjl8t3S9jgv50TQt+HaUItu0t38HSgmA2mAbQ1yww2P NswJK3OuNWUb9gdahhz7AO1sU7XiOMcmE4he2CyZqbMOjVNaIFAHQJ+fAMqX+Out mfNHiHqKMU8MspW5XE0RpZwMrjSc70LuNtQYT6BeUg8xmkMQe2L3dhADSeoByvQV FPoV3HN11oKQlNws50KY9tcUM9Z77Hnzjot8kk4k6o8/UyawlocHEktbI+59lbjP MsBDm9uKAYd9vltv5H/RWQgZwEf3jNWzrT+rQftuSMrPcj47HTrMWNQ8awIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFOEAToaBTVMWpO+28iiDY2VZmdnxMB8GA1UdIwQY MBaAFFIaMAdyI8Jcbzfc9ZSAd4wLWxBoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMt MGY1ZjA5YjJlYjE0LzEvNFFCT2hvRk5VeGFrNzdieUtJTmpaVm1aMmZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMtMGY1ZjA5YjJlYjE0 LzEvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQAsHVsAwQA ucJwMBQEAgACMA4DBQMqCkpAAwUDKhRTQDANBgkqhkiG9w0BAQsFAAOCAQEALAfW 83QBBfNHUtoCy8Eme3Jonqz1DSqEBp3uLb1UZq0QQodL7H3TiVMmQXqDdZW/AJGk vG+16k5qWjzMjGaVFaSfI860c8/mQuWgX3+U0pDUdU+34EKwO3Qe65bx5p6rnIYS bJ/DdY9MY3yy6OS3x/l+pCvPYNp5Ab9o8Y/80l2K167Os5HIhlN7u4NNYYD5LumI iNecz48YaDrC59gvwQRYxdB0MUVfjDZQ91VSGtiPlmbXCDsFCcdYFT2pTahFbtGS b26CzIkAwmx0tPBAmR1+R/Bz4IqwHlaRczdRvnF67sLa8Cr4MJeZtW+Lr4htoypn W/kD4Uff0rg4u9fgcw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:18:23 2025 by rpki-client