This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/V4ytgiKMAGAV9_DdrQgW2vWwJ5Q.roa File: V4ytgiKMAGAV9_DdrQgW2vWwJ5Q.roa (raw, json) Hash identifier: yA8Jjbs1HZEmLGkTqet2kECjqyPpxNOwoZmngCZwP3k= Subject key identifier: 57:8C:AD:82:22:8C:00:60:15:F7:F0:DD:AD:08:16:DA:F5:B0:27:94 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C682A465438F7DE37FF4D95E50767F Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/V4ytgiKMAGAV9_DdrQgW2vWwJ5Q.roa Signing time: Thu 01 Jan 2026 04:17:36 +0000 ROA not before: Thu 01 Jan 2026 04:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12926 IP address blocks: 84.232.93.0/24 maxlen: 24 84.236.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:82:a4:65:43:8f:7d:e3:7f:f4:d9:5e:50:76:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=578cad82228c006015f7f0ddad0816daf5b02794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:df:79:40:52:fc:3b:33:5b:c0:17:e4:be:56: 0b:2b:fc:09:74:b5:dc:a1:97:20:cc:bd:9b:9b:06: f9:da:6a:b7:4e:ed:e0:a2:fa:41:55:a7:3c:59:ed: 26:5b:96:04:d2:ff:0b:1a:dc:33:f0:73:00:24:06: 13:97:2c:38:f3:b2:d9:38:7f:5f:71:8d:41:b1:93: 75:80:59:64:71:17:43:8c:39:6a:8e:3b:7d:00:41: 47:b1:6d:0d:2b:6f:bc:71:0b:53:db:51:ea:7a:16: 1a:0f:60:f2:58:30:bc:70:4e:8b:1f:9a:2c:a0:96: 3c:fd:e5:cb:53:a2:61:cd:f7:44:71:49:85:39:9c: a6:e5:21:4d:62:0c:b2:7d:87:8d:c2:9f:13:7c:82: 2f:a1:4a:c6:23:0c:54:b9:fb:ef:fe:c2:be:a2:f7: 06:6c:06:77:eb:a9:f8:a7:c0:bc:48:53:1e:be:3f: 1c:d9:85:a8:8d:57:e9:9e:ad:23:c0:be:fe:2f:1e: 1d:23:e0:80:b5:2f:ae:09:6c:6a:be:db:ed:99:3c: bb:ab:67:01:ad:54:9e:dc:eb:5a:f4:9f:ca:01:e4: 2b:d0:f9:41:2d:2c:a6:f6:ca:0b:c1:bf:86:12:4c: 18:36:7c:83:a7:a6:6e:0f:67:cd:b3:66:16:8b:23: aa:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:8C:AD:82:22:8C:00:60:15:F7:F0:DD:AD:08:16:DA:F5:B0:27:94 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/V4ytgiKMAGAV9_DdrQgW2vWwJ5Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.232.93.0/24 84.236.184.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:82:a8:15:9b:3a:a3:c8:23:1e:6e:b0:92:fd:02:3e:71:ae: 5c:60:4b:75:20:d9:6f:5b:17:40:f6:a4:c9:af:cf:77:87:11: 27:cb:8a:d5:72:c4:2d:8d:95:0c:9a:27:92:5a:22:8c:81:11: fb:83:ca:6c:7f:81:4c:a2:ca:66:bc:70:b9:1a:50:3c:e5:d2: 2f:7f:80:59:64:b5:03:97:52:f5:48:aa:5e:41:e6:b1:80:20: 2a:69:4d:fb:1e:88:4a:ad:b4:f0:82:e3:7c:03:7d:67:f8:5c: d9:3d:df:7c:34:16:97:c1:f7:f5:b4:13:f8:13:bf:e8:36:02: 60:3d:e1:db:72:fb:6e:be:e5:36:51:2f:d6:30:82:08:ba:b8: 9c:2e:9b:74:d9:3e:86:ec:4e:db:16:80:a1:df:4c:e6:3c:9a: 1f:f3:74:8e:05:34:24:95:9a:77:a6:7e:b5:24:22:ec:00:3e: 83:48:ea:b3:94:43:78:f9:f3:2b:e1:21:e8:de:a0:c7:6f:95: a5:f2:37:06:ca:b6:db:3a:cf:98:ed:2d:4f:bd:06:57:db:41: c0:b4:44:84:04:0c:7b:ac:91:0e:71:02:d5:f8:83:d7:6e:d2: e5:a9:2c:a9:f4:d0:86:92:ca:fe:da:25:7b:13:97:4d:5e:ea: c2:51:47:d2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xoKkZUOPfeN/9NleUHZ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzhjYWQ4MjIyOGMwMDYwMTVmN2YwZGRhZDA4MTZkYWY1YjAyNzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd95QFL8OzNbwBfkvlYLK/wJdLXc oZcgzL2bmwb52mq3Tu3govpBVac8We0mW5YE0v8LGtwz8HMAJAYTlyw487LZOH9f cY1BsZN1gFlkcRdDjDlqjjt9AEFHsW0NK2+8cQtT21HqehYaD2DyWDC8cE6LH5os oJY8/eXLU6JhzfdEcUmFOZym5SFNYgyyfYeNwp8TfIIvoUrGIwxUufvv/sK+ovcG bAZ366n4p8C8SFMevj8c2YWojVfpnq0jwL7+Lx4dI+CAtS+uCWxqvtvtmTy7q2cB rVSe3Ota9J/KAeQr0PlBLSym9soLwb+GEkwYNnyDp6ZuD2fNs2YWiyOqkQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFeMrYIijABgFffw3a0IFtr1sCeUMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvVjR5dGdpS01BR0FWOV9EZHJRZ1cydld3SjVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVOhdAwQA VOy4MA0GCSqGSIb3DQEBCwUAA4IBAQAbgqgVmzqjyCMebrCS/QI+ca5cYEt1INlv WxdA9qTJr893hxEny4rVcsQtjZUMmieSWiKMgRH7g8psf4FMospmvHC5GlA85dIv f4BZZLUDl1L1SKpeQeaxgCAqaU37HohKrbTwguN8A31n+FzZPd98NBaXwff1tBP4 E7/oNgJgPeHbcvtuvuU2US/WMIIIuricLpt02T6G7E7bFoCh30zmPJof83SOBTQk lZp3pn61JCLsAD6DSOqzlEN4+fMr4SHo3qDHb5Wl8jcGyrbbOs+Y7S1PvQZX20HA tESEBAx7rJEOcQLV+IPXbtLlqSyp9NCGksr+2iV7E5dNXurCUUfS -----END CERTIFICATE-----Generated at Wed Jan 21 01:08:57 2026 by rpki-client