This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1J2y8e3CyS9jfFwZ83t9OxaRea0.roa File: 1J2y8e3CyS9jfFwZ83t9OxaRea0.roa (raw, json) Hash identifier: HrrMBOCsePQskyo7InYtH6QmwCoJ8HOM72oW4X44QQI= Subject key identifier: D4:9D:B2:F1:ED:C2:C9:2F:63:7C:5C:19:F3:7B:7D:3B:16:91:79:AD Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80B09A60B147A7A75CEFDE67C72226 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1J2y8e3CyS9jfFwZ83t9OxaRea0.roa Signing time: Fri 02 Jan 2026 02:19:27 +0000 ROA not before: Fri 02 Jan 2026 02:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209043 IP address blocks: 84.32.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b0:9a:60:b1:47:a7:a7:5c:ef:de:67:c7:22:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d49db2f1edc2c92f637c5c19f37b7d3b169179ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f6:20:f6:6d:a0:2e:6e:fe:fd:85:f4:e1:41: 1d:28:e8:59:b9:ca:a3:37:54:10:ac:a8:da:5f:cc: 00:94:46:55:6c:06:07:25:1d:c9:75:ac:6a:4d:45: b8:e8:19:df:13:03:08:a2:7c:73:d4:f5:c9:f5:23: 0a:ff:c5:7a:e0:11:e4:d4:39:98:25:cd:49:54:e3: c7:2a:6e:cf:fc:ac:a0:4f:6f:70:7c:3f:0a:fb:3c: c9:86:eb:51:85:19:85:df:01:f9:a7:8f:e4:99:80: 9b:e2:74:39:e5:0c:01:35:00:fb:78:4f:6d:6c:8d: bb:48:81:fd:1a:b5:40:c3:5d:46:95:96:b7:30:10: 88:c6:01:00:a1:46:57:f6:66:ca:9f:61:92:10:6a: ea:34:59:22:a5:b6:0d:e2:80:ff:bf:98:de:0e:ec: d9:ae:30:46:a4:20:aa:ef:01:c1:2d:60:50:1c:3c: aa:fe:59:fa:60:ad:ce:29:7c:1b:72:d1:0d:bd:90: 77:fe:1c:f6:ef:bd:e8:97:bf:5e:80:ab:0c:22:f3: 3d:a2:44:45:9d:46:54:92:e0:7d:68:b9:71:3b:e1: fe:62:44:0e:9a:d2:ff:7f:a8:4d:a7:7f:00:4c:ae: 97:70:18:dd:0c:71:e6:f6:cb:77:fa:f9:59:97:cc: 90:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:9D:B2:F1:ED:C2:C9:2F:63:7C:5C:19:F3:7B:7D:3B:16:91:79:AD X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1J2y8e3CyS9jfFwZ83t9OxaRea0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.78.0/24 Signature Algorithm: sha256WithRSAEncryption 70:90:34:5f:6f:06:a6:2e:47:fc:8f:36:14:52:0a:32:85:c1: 5f:76:65:0f:b1:e0:3b:86:ba:5d:3e:68:71:d4:29:37:d8:88: fb:25:fc:64:22:3a:d7:5a:66:2a:d3:fa:03:c2:d9:24:88:55: 1a:fd:1c:9e:c1:dc:67:73:a8:66:9c:de:80:56:5c:43:d2:83: ad:d6:f3:3f:57:cc:bd:93:4b:00:90:a4:de:1d:7b:d6:40:c4: 78:fc:f1:aa:78:cb:05:7a:60:91:58:d8:b5:97:98:c8:55:3f: 72:cc:14:ba:91:f3:2f:c5:4f:8d:3e:1e:a6:29:35:e3:b4:51: 31:19:5a:84:d1:64:10:d8:8a:a0:5b:2b:21:a9:e4:af:30:2e: 90:41:13:3d:2c:a0:b8:fe:38:24:66:0e:2f:78:56:45:54:6d: 5c:04:5b:e0:d1:a2:ad:57:30:73:ec:96:7c:7c:e1:eb:af:0a: 47:ab:b7:32:51:0a:10:7c:16:1e:65:1f:bd:06:ca:f7:f9:45: 67:1f:ab:32:4e:c4:1f:9b:e9:75:ff:9d:9a:8f:27:96:a1:6e: cd:73:54:26:23:b7:c9:9b:1a:6e:7b:ea:72:d9:b8:3d:21:9a: fa:9b:4e:3b:4f:ea:01:3b:88:25:8e:ee:cc:e1:8b:59:70:25: 81:35:92:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gLCaYLFHp6dc795nxyImMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDlkYjJmMWVkYzJjOTJmNjM3YzVjMTlmMzdiN2QzYjE2OTE3OWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/Yg9m2gLm7+/YX04UEdKOhZucqj N1QQrKjaX8wAlEZVbAYHJR3JdaxqTUW46BnfEwMIonxz1PXJ9SMK/8V64BHk1DmY Jc1JVOPHKm7P/KygT29wfD8K+zzJhutRhRmF3wH5p4/kmYCb4nQ55QwBNQD7eE9t bI27SIH9GrVAw11GlZa3MBCIxgEAoUZX9mbKn2GSEGrqNFkipbYN4oD/v5jeDuzZ rjBGpCCq7wHBLWBQHDyq/ln6YK3OKXwbctENvZB3/hz2773ol79egKsMIvM9okRF nUZUkuB9aLlxO+H+YkQOmtL/f6hNp38ATK6XcBjdDHHm9st3+vlZl8yQ5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNSdsvHtwskvY3xcGfN7fTsWkXmtMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvMUoyeThlM0N5UzlqZkZ3WjgzdDlPeGFSZWEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCBOMA0G CSqGSIb3DQEBCwUAA4IBAQBwkDRfbwamLkf8jzYUUgoyhcFfdmUPseA7hrpdPmhx 1Ck32Ij7JfxkIjrXWmYq0/oDwtkkiFUa/Ryewdxnc6hmnN6AVlxD0oOt1vM/V8y9 k0sAkKTeHXvWQMR4/PGqeMsFemCRWNi1l5jIVT9yzBS6kfMvxU+NPh6mKTXjtFEx GVqE0WQQ2IqgWyshqeSvMC6QQRM9LKC4/jgkZg4veFZFVG1cBFvg0aKtVzBz7JZ8 fOHrrwpHq7cyUQoQfBYeZR+9Bsr3+UVnH6syTsQfm+l1/52ajyeWoW7Nc1QmI7fJ mxpue+py2bg9IZr6m047T+oBO4glju7M4YtZcCWBNZJd -----END CERTIFICATE-----Generated at Mon Jan 19 13:53:33 2026 by rpki-client