This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/IKE4CLlQcBFlE9ScVAvy_idMxEU.roa File: IKE4CLlQcBFlE9ScVAvy_idMxEU.roa (raw, json) Hash identifier: 6gmHjXx4JLDJRUdc8fU3OlLmdxkf8KNQJpv3y9A2lUo= Subject key identifier: 20:A1:38:08:B9:50:70:11:65:13:D4:9C:54:0B:F2:FE:27:4C:C4:45 Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Certificate serial: 019B7E37AB607B34ED690F7DA0F196A3B44C Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/IKE4CLlQcBFlE9ScVAvy_idMxEU.roa Signing time: Fri 02 Jan 2026 10:18:56 +0000 ROA not before: Fri 02 Jan 2026 10:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397451 IP address blocks: 85.204.196.0/23 maxlen: 23 85.204.196.0/24 maxlen: 24 85.204.197.0/24 maxlen: 24 89.46.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ab:60:7b:34:ed:69:0f:7d:a0:f1:96:a3:b4:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Validity Not Before: Jan 2 10:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20a13808b95070116513d49c540bf2fe274cc445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c4:8f:f4:b3:6c:14:64:bb:19:cb:38:ea:85: 40:f5:2d:a0:0e:03:5f:cc:59:7d:61:23:0e:5a:7c: fb:35:53:f6:23:d6:de:fc:c6:e9:7b:80:27:bc:b9: 32:27:fb:5d:45:7b:9d:64:e2:07:38:60:ee:bf:69: ac:50:db:b4:22:b6:e0:e6:c0:9c:b2:0d:50:fc:e9: 58:89:3e:cf:b8:2a:57:f3:72:c0:58:f7:39:06:01: e1:45:2f:66:5c:a5:9f:d3:88:9c:eb:0c:b6:4d:08: 32:80:f3:a0:bb:d2:47:16:13:3a:de:90:77:f9:64: 63:81:f8:db:8f:6b:dc:c8:08:2f:f9:22:11:be:8a: 7d:1e:39:04:ae:b9:6e:63:39:f5:6e:23:cf:cb:e6: 7c:24:8e:97:bf:1c:44:32:1c:2d:14:2c:22:79:9a: d6:a5:93:64:a6:96:dc:e2:39:a9:d0:cb:43:ca:62: d8:4a:4f:fb:bf:4a:61:62:0c:57:27:79:18:a6:d3: 47:f7:09:51:47:0e:a0:f5:98:3c:72:14:61:a9:87: 94:6d:4c:4a:e1:43:9c:82:b0:cb:49:a3:a3:8d:be: d4:2e:c9:46:b4:90:ce:c3:8a:c2:93:0e:9c:2f:cd: cb:93:cd:9e:38:5b:22:46:0d:39:1d:6f:9c:26:56: ed:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A1:38:08:B9:50:70:11:65:13:D4:9C:54:0B:F2:FE:27:4C:C4:45 X509v3 Authority Key Identifier: keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/IKE4CLlQcBFlE9ScVAvy_idMxEU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.204.196.0/23 89.46.112.0/23 Signature Algorithm: sha256WithRSAEncryption 87:69:d0:0e:b2:fd:58:6a:d7:57:d1:8c:03:7c:cf:19:89:aa: c2:fa:1d:22:a4:e5:32:ca:18:cd:7b:9b:5d:3c:83:8e:56:9a: 59:16:25:2e:8e:24:08:cf:90:b0:89:fa:5f:bc:87:f3:95:14: ab:b5:8f:3d:87:e3:f1:09:8a:9e:09:5e:38:bb:0b:43:38:0a: 40:52:00:a1:9a:d0:93:59:3e:46:0f:ec:ae:59:ff:02:ee:53: 51:83:95:a3:49:fd:da:65:73:48:d0:8a:94:83:cc:40:63:94: 2f:b1:7e:bf:34:82:23:0f:25:8e:be:50:eb:cf:24:8b:f1:c3: 30:7c:eb:59:f6:ef:4a:02:f2:7b:72:07:2c:e8:28:b1:dc:9e: bb:1a:98:2a:2f:ff:da:9a:76:67:ee:25:e3:33:91:74:12:f1: 3e:f3:df:42:0b:a7:ba:4e:2c:4b:51:f9:e9:d9:16:f2:7f:ca: fd:8e:bc:44:31:21:e4:1c:e6:7e:b0:66:c1:7c:d8:6b:e2:3a: 9e:83:59:2b:f7:ca:bd:fe:7e:67:88:d6:b2:04:42:c7:9e:3e: 92:90:ca:f1:b4:e0:5d:cf:c8:59:8c:5e:c6:ef:14:bd:b0:c1: 5a:ff:2c:c5:ce:c2:f6:e9:06:cb:af:5e:03:f5:fa:fa:70:41: c6:e8:e9:ac -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N6tgezTtaQ99oPGWo7RMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy MjRkYWEwHhcNMjYwMTAyMTAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGExMzgwOGI5NTA3MDExNjUxM2Q0OWM1NDBiZjJmZTI3NGNjNDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8SP9LNsFGS7Gcs46oVA9S2gDgNf zFl9YSMOWnz7NVP2I9be/Mbpe4AnvLkyJ/tdRXudZOIHOGDuv2msUNu0Irbg5sCc sg1Q/OlYiT7PuCpX83LAWPc5BgHhRS9mXKWf04ic6wy2TQgygPOgu9JHFhM63pB3 +WRjgfjbj2vcyAgv+SIRvop9HjkErrluYzn1biPPy+Z8JI6XvxxEMhwtFCwieZrW pZNkppbc4jmp0MtDymLYSk/7v0phYgxXJ3kYptNH9wlRRw6g9Zg8chRhqYeUbUxK 4UOcgrDLSaOjjb7ULslGtJDOw4rCkw6cL83Lk82eOFsiRg05HW+cJlbt8wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCChOAi5UHARZRPUnFQL8v4nTMRFMB8GA1UdIwQY MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt ZGMwNmRkODA1OTYwLzEvSUtFNENMbFFjQkZsRTlTY1ZBdnlfaWRNeEVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBVczEAwQB WS5wMA0GCSqGSIb3DQEBCwUAA4IBAQCHadAOsv1YatdX0YwDfM8ZiarC+h0ipOUy yhjNe5tdPIOOVppZFiUujiQIz5CwifpfvIfzlRSrtY89h+PxCYqeCV44uwtDOApA UgChmtCTWT5GD+yuWf8C7lNRg5WjSf3aZXNI0IqUg8xAY5QvsX6/NIIjDyWOvlDr zySL8cMwfOtZ9u9KAvJ7cgcs6Cix3J67GpgqL//amnZn7iXjM5F0EvE+899CC6e6 TixLUfnp2Rbyf8r9jrxEMSHkHOZ+sGbBfNhr4jqeg1kr98q9/n5niNayBELHnj6S kMrxtOBdz8hZjF7G7xS9sMFa/yzFzsL26QbLr14D9fr6cEHG6Oms -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:35 2026 by rpki-client