This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/16ZjVd8xNqNlAQyVWYC6LJsQoJw.roa File: 16ZjVd8xNqNlAQyVWYC6LJsQoJw.roa (raw, json) Hash identifier: GWrCeSdk5lMMmVHKZlchNBrXPl/7quCrTb4+Sjw/4r0= Subject key identifier: D7:A6:63:55:DF:31:36:A3:65:01:0C:95:59:80:BA:2C:9B:10:A0:9C Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B9A26D46677EBAC7F1BB58ACD7D2F797C Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/16ZjVd8xNqNlAQyVWYC6LJsQoJw.roa Signing time: Wed 07 Jan 2026 20:29:54 +0000 ROA not before: Wed 07 Jan 2026 20:29:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16125 IP address blocks: 84.32.9.0/24 maxlen: 24 84.32.25.0/24 maxlen: 24 84.32.51.0/24 maxlen: 24 84.32.83.0/24 maxlen: 24 84.32.97.0/24 maxlen: 24 84.32.109.0/24 maxlen: 24 84.32.149.0/24 maxlen: 24 84.32.151.0/24 maxlen: 24 84.32.178.0/23 maxlen: 23 84.32.209.0/24 maxlen: 24 84.32.214.0/24 maxlen: 24 84.32.215.0/24 maxlen: 24 84.32.244.0/24 maxlen: 24 84.32.248.0/24 maxlen: 24 88.216.62.0/24 maxlen: 24 88.216.90.0/24 maxlen: 24 88.216.127.0/24 maxlen: 24 88.216.197.0/24 maxlen: 24 88.216.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9a:26:d4:66:77:eb:ac:7f:1b:b5:8a:cd:7d:2f:79:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 7 20:29:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7a66355df3136a365010c955980ba2c9b10a09c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:90:09:6f:7c:ca:68:7c:dc:99:09:08:f9:27: cf:cb:40:c3:17:ff:a0:ae:a6:43:2c:f2:63:6c:51: f4:fd:6f:0a:f3:0b:9b:bf:b6:2e:88:2e:70:19:3d: 01:9d:00:3d:a2:54:e1:26:eb:a9:38:a2:a7:43:6e: c0:91:b5:81:64:03:a8:c2:f7:17:ff:95:9a:5c:95: 8e:12:de:2a:cc:84:b7:b6:3d:29:df:28:ca:f7:7b: 83:d5:f7:35:2c:2a:4d:f7:07:29:1a:a9:54:1b:ea: 37:f4:03:e9:71:92:1b:ad:75:2b:22:b8:57:0f:9c: a5:35:72:01:58:c0:42:3c:5a:1f:bf:ba:d2:61:22: 8e:40:9d:80:2a:2d:6d:b9:5c:89:82:8e:1a:88:35: 13:e9:cb:11:02:ff:91:57:c0:49:18:b4:f1:43:44: 2e:80:1b:cc:ae:02:2d:10:45:db:2d:fd:f1:8e:89: e2:8c:71:c3:9c:fb:87:c9:d4:68:e9:02:77:e1:12: f6:7e:18:b1:6f:35:3d:a6:61:0e:d1:fd:f0:8d:0c: 4c:36:90:cc:79:ea:42:c5:3e:35:cb:81:5f:47:32: 6f:65:1c:6f:dc:2d:3c:ce:eb:bd:ce:5b:30:51:21: c0:be:79:70:2b:90:e8:ad:62:4c:e1:d4:e1:2a:9f: 8a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A6:63:55:DF:31:36:A3:65:01:0C:95:59:80:BA:2C:9B:10:A0:9C X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/16ZjVd8xNqNlAQyVWYC6LJsQoJw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.9.0/24 84.32.25.0/24 84.32.51.0/24 84.32.83.0/24 84.32.97.0/24 84.32.109.0/24 84.32.149.0/24 84.32.151.0/24 84.32.178.0/23 84.32.209.0/24 84.32.214.0/23 84.32.244.0/24 84.32.248.0/24 88.216.62.0/24 88.216.90.0/24 88.216.127.0/24 88.216.197.0/24 88.216.215.0/24 Signature Algorithm: sha256WithRSAEncryption 33:d2:1b:d0:d1:20:16:b7:21:01:00:b9:63:96:9f:30:f1:b2: a9:66:cf:06:c9:6c:e1:d4:88:c5:25:02:cb:6e:f1:db:61:d2: e1:02:a9:e7:64:f9:09:41:21:aa:fd:31:7a:3e:6f:39:f7:09: 53:04:5a:f6:03:2b:ed:1d:c1:06:1e:9f:cf:67:99:b2:0d:cf: bd:fd:8b:47:70:6f:14:41:c8:58:73:b8:3b:99:73:7b:62:7c: ba:ad:9e:ac:ca:99:4d:9b:94:29:9a:04:fe:b8:e3:27:d8:1c: 0d:ed:54:cd:0d:16:39:75:52:39:40:c0:ec:b8:49:cc:59:64: bc:6f:6d:3b:c4:9d:38:8d:0d:3d:7b:62:69:c3:f6:fb:9d:7f: 7e:47:82:8b:69:bd:b1:09:67:94:79:4a:98:b3:4a:5d:ae:21: e3:37:40:33:fb:31:66:47:ec:f1:74:19:1c:39:25:bb:c2:90: dc:44:33:0d:a1:70:ab:1e:a1:17:56:cb:d3:b4:9e:5c:b7:5e: b7:49:12:b4:32:89:db:43:27:ab:08:cd:4b:a8:91:72:6d:7c: b6:97:69:34:63:20:5e:70:e4:63:85:4a:48:42:61:e1:19:92: b6:71:d2:e4:21:8c:30:fb:1f:1a:e3:f5:91:d0:02:bd:f5:4d: c7:fd:d9:1c -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgISAZuaJtRmd+usfxu1is19L3l8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTA3MjAyOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2E2NjM1NWRmMzEzNmEzNjUwMTBjOTU1OTgwYmEyYzliMTBhMDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZAJb3zKaHzcmQkI+SfPy0DDF/+g rqZDLPJjbFH0/W8K8wubv7YuiC5wGT0BnQA9olThJuupOKKnQ27AkbWBZAOowvcX /5WaXJWOEt4qzIS3tj0p3yjK93uD1fc1LCpN9wcpGqlUG+o39APpcZIbrXUrIrhX D5ylNXIBWMBCPFofv7rSYSKOQJ2AKi1tuVyJgo4aiDUT6csRAv+RV8BJGLTxQ0Qu gBvMrgItEEXbLf3xjonijHHDnPuHydRo6QJ34RL2fhixbzU9pmEO0f3wjQxMNpDM eepCxT41y4FfRzJvZRxv3C08zuu9zlswUSHAvnlwK5DorWJM4dThKp+KRQIDAQAB o4ICcDCCAmwwHQYDVR0OBBYEFNemY1XfMTajZQEMlVmAuiybEKCcMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvMTZaalZkOHhOcU5sQVF5VldZQzZMSnNRb0p3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAFQgCQME AFQgGQMEAFQgMwMEAFQgUwMEAFQgYQMEAFQgbQMEAFQglQMEAFQglwMEAVQgsgME AFQg0QMEAVQg1gMEAFQg9AMEAFQg+AMEAFjYPgMEAFjYWgMEAFjYfwMEAFjYxQME AFjY1zANBgkqhkiG9w0BAQsFAAOCAQEAM9Ib0NEgFrchAQC5Y5afMPGyqWbPBsls 4dSIxSUCy27x22HS4QKp52T5CUEhqv0xej5vOfcJUwRa9gMr7R3BBh6fz2eZsg3P vf2LR3BvFEHIWHO4O5lze2J8uq2erMqZTZuUKZoE/rjjJ9gcDe1UzQ0WOXVSOUDA 7LhJzFlkvG9tO8SdOI0NPXtiacP2+51/fkeCi2m9sQlnlHlKmLNKXa4h4zdAM/sx Zkfs8XQZHDklu8KQ3EQzDaFwqx6hF1bL07SeXLdet0kStDKJ20MnqwjNS6iRcm18 tpdpNGMgXnDkY4VKSEJh4RmStnHS5CGMMPsfGuP1kdACvfVNx/3ZHA== -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:07 2026 by rpki-client