This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1QLi0BVPXQlQiQoW9NL0bIZqiDc.roa File: 1QLi0BVPXQlQiQoW9NL0bIZqiDc.roa (raw, json) Hash identifier: 37Qitt6i47IaUEkcNHkBNNutfTDErxUntfgCQZwbZkg= Subject key identifier: D5:02:E2:D0:15:4F:5D:09:50:89:0A:16:F4:D2:F4:6C:86:6A:88:37 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80B9AC158281FCDF0C1A6D6C01CEBD Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1QLi0BVPXQlQiQoW9NL0bIZqiDc.roa Signing time: Fri 02 Jan 2026 02:19:29 +0000 ROA not before: Fri 02 Jan 2026 02:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214159 IP address blocks: 84.32.48.0/22 maxlen: 24 84.32.49.0/24 maxlen: 24 84.32.50.0/24 maxlen: 24 84.32.99.0/24 maxlen: 24 84.32.208.0/24 maxlen: 24 84.32.217.0/24 maxlen: 24 88.216.60.0/24 maxlen: 24 88.216.214.0/24 maxlen: 24 88.216.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b9:ac:15:82:81:fc:df:0c:1a:6d:6c:01:ce:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d502e2d0154f5d0950890a16f4d2f46c866a8837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b4:af:49:83:76:2c:69:f1:b8:70:6f:2d:ad: 72:6e:a2:de:0f:9d:2a:24:c3:c1:f7:6e:57:70:67: 4f:08:f2:6c:7e:c1:71:16:78:13:aa:ec:80:39:04: 38:fe:c5:b4:f4:cc:29:43:42:78:2c:67:e7:a1:5d: 6d:92:96:79:25:52:16:a7:fc:ea:60:c6:ce:cb:3c: b0:7d:24:0c:ed:31:e2:fd:2c:0c:18:5f:e0:21:e4: 56:b8:23:6c:4d:59:08:8f:36:33:e4:68:3d:a4:7c: 44:55:a9:c3:68:b4:36:b6:a5:a6:35:f7:42:29:91: e6:f4:18:c8:c5:c9:dc:c7:94:3c:1b:c2:bb:96:b0: c9:b7:83:90:f8:ec:b9:33:69:cb:e6:83:a7:f5:51: 5e:bc:ac:72:57:e2:58:a0:4f:c8:b4:29:d7:9a:e2: a8:1a:78:18:07:36:1f:70:8c:b2:ca:fd:64:79:2c: 88:ea:eb:ba:42:0b:d1:a5:4e:c2:4d:37:74:10:80: d3:bb:76:65:fa:3b:a7:70:29:ee:e1:bd:d2:1e:07: dd:9b:ea:8c:4e:e2:75:df:f5:41:54:ef:71:21:39: f6:8e:46:8c:9a:07:d0:66:63:08:9d:26:df:5f:be: 37:4b:34:09:97:e5:6d:47:9f:d0:24:c4:3c:da:b2: 65:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:02:E2:D0:15:4F:5D:09:50:89:0A:16:F4:D2:F4:6C:86:6A:88:37 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1QLi0BVPXQlQiQoW9NL0bIZqiDc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.48.0/22 84.32.99.0/24 84.32.208.0/24 84.32.217.0/24 88.216.60.0/24 88.216.214.0/24 88.216.223.0/24 Signature Algorithm: sha256WithRSAEncryption 34:f3:44:9b:70:3a:01:ed:3e:27:e8:96:73:32:33:d1:54:d0: 12:8b:04:a8:23:bb:ea:46:cd:1b:f1:0c:69:61:98:e3:b6:a5: c0:c9:6b:d8:eb:6e:59:1a:4a:b7:ea:ec:8d:da:a0:63:97:52: fb:b5:7c:39:f8:e0:a2:27:76:d3:bf:fe:57:2c:11:75:f5:01: f6:66:c0:ee:60:14:97:9c:be:83:46:92:52:a4:f0:04:c7:0d: db:02:6e:02:c0:b2:61:d9:4d:f9:50:39:a3:ac:b4:31:2b:43: 99:20:38:e0:64:54:8b:f6:08:cf:7b:f2:59:71:b7:ff:20:95: 45:a3:e6:4c:61:27:7e:2d:3c:96:20:fd:e9:d5:56:49:ed:3e: cc:b8:a5:35:a4:d4:fe:cf:e9:a6:61:91:97:85:cd:56:49:8d: 9a:8e:d4:63:5d:2e:8d:65:f5:7e:18:69:22:90:4d:5c:0a:88: 97:cb:56:46:20:f4:57:41:06:f4:37:82:a2:4c:19:7b:0a:b8: 0c:9b:e0:2a:ed:14:ab:c3:1e:3b:9d:15:94:76:b4:dc:a7:56: 60:3a:58:ab:47:6a:44:78:d2:66:df:cc:9b:67:95:ad:ed:0f: 2c:66:35:c8:94:3e:5c:76:7d:92:42:b6:05:83:bb:ba:f3:f2: 09:71:6c:a6 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt8gLmsFYKB/N8MGm1sAc69MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTAyZTJkMDE1NGY1ZDA5NTA4OTBhMTZmNGQyZjQ2Yzg2NmE4ODM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47SvSYN2LGnxuHBvLa1ybqLeD50q JMPB925XcGdPCPJsfsFxFngTquyAOQQ4/sW09MwpQ0J4LGfnoV1tkpZ5JVIWp/zq YMbOyzywfSQM7THi/SwMGF/gIeRWuCNsTVkIjzYz5Gg9pHxEVanDaLQ2tqWmNfdC KZHm9BjIxcncx5Q8G8K7lrDJt4OQ+Oy5M2nL5oOn9VFevKxyV+JYoE/ItCnXmuKo GngYBzYfcIyyyv1keSyI6uu6QgvRpU7CTTd0EIDTu3Zl+juncCnu4b3SHgfdm+qM TuJ13/VBVO9xITn2jkaMmgfQZmMInSbfX743SzQJl+VtR5/QJMQ82rJl5QIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFNUC4tAVT10JUIkKFvTS9GyGaog3MB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvMVFMaTBCVlBYUWxRaVFvVzlOTDBiSVpxaURjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCVCAwAwQA VCBjAwQAVCDQAwQAVCDZAwQAWNg8AwQAWNjWAwQAWNjfMA0GCSqGSIb3DQEBCwUA A4IBAQA080SbcDoB7T4n6JZzMjPRVNASiwSoI7vqRs0b8QxpYZjjtqXAyWvY625Z Gkq36uyN2qBjl1L7tXw5+OCiJ3bTv/5XLBF19QH2ZsDuYBSXnL6DRpJSpPAExw3b Am4CwLJh2U35UDmjrLQxK0OZIDjgZFSL9gjPe/JZcbf/IJVFo+ZMYSd+LTyWIP3p 1VZJ7T7MuKU1pNT+z+mmYZGXhc1WSY2ajtRjXS6NZfV+GGkikE1cCoiXy1ZGIPRX QQb0N4KiTBl7CrgMm+Aq7RSrwx47nRWUdrTcp1ZgOlirR2pEeNJm38ybZ5Wt7Q8s ZjXIlD5cdn2SQrYFg7u68/IJcWym -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:05 2026 by rpki-client