This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4qBR2ItG34cHekU4hIapSdpdhRI.roa File: 4qBR2ItG34cHekU4hIapSdpdhRI.roa (raw, json) Hash identifier: v35f1Ky1tsWA4icslysifHscafmpoJzYEy0xq3bmf2Y= Subject key identifier: E2:A0:51:D8:8B:46:DF:87:07:7A:45:38:84:86:A9:49:DA:5D:85:12 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80BB170B51A604B3FF933400E08573 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4qBR2ItG34cHekU4hIapSdpdhRI.roa Signing time: Fri 02 Jan 2026 02:19:29 +0000 ROA not before: Fri 02 Jan 2026 02:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216444 IP address blocks: 84.32.22.0/23 maxlen: 24 84.32.249.0/24 maxlen: 24 88.216.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:bb:17:0b:51:a6:04:b3:ff:93:34:00:e0:85:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2a051d88b46df87077a45388486a949da5d8512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c0:b3:0c:fd:3d:8a:d1:84:8c:0d:bc:aa:ff: 29:b3:83:2f:df:50:e1:1d:26:5b:e4:7f:8a:5d:bb: d0:60:ab:0d:46:9a:f1:45:ae:70:8c:1b:85:5c:31: 45:69:17:87:2b:8c:44:0e:e8:90:00:a8:8a:2f:9e: 9d:0a:15:b8:b9:bc:07:7b:fe:99:73:f3:4f:ec:8a: e5:a5:98:8a:f3:c4:26:e8:17:4d:1d:fb:db:b1:d1: f3:9f:f1:63:ac:3b:77:ec:fe:a8:cf:05:8d:2e:d5: 1e:d4:1f:33:76:37:f1:45:a7:2c:67:3f:53:9d:da: ea:1f:87:a6:f0:7f:b1:5f:34:dc:16:86:04:04:9c: 67:b2:4f:03:ad:51:35:cb:f7:67:b9:72:39:9d:a6: e8:fe:1e:a6:f1:57:7c:d8:6d:45:34:e0:ce:36:58: a8:bb:ee:54:b1:53:6e:1d:a7:be:31:4b:f0:86:87: 4e:76:f4:f6:52:99:1b:c9:7d:d1:89:ce:6c:4f:e7: d1:4f:1b:cd:02:af:47:a6:8e:8d:38:ba:91:a0:1f: 65:d8:18:bd:be:8c:8f:b6:e6:3c:4c:a6:af:5f:92: 86:21:9c:f2:4a:84:8e:53:0b:54:79:c0:a0:17:9c: 5d:6e:18:6d:76:27:2c:4d:21:88:64:35:53:a8:15: 1d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A0:51:D8:8B:46:DF:87:07:7A:45:38:84:86:A9:49:DA:5D:85:12 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4qBR2ItG34cHekU4hIapSdpdhRI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.22.0/23 84.32.249.0/24 88.216.208.0/24 Signature Algorithm: sha256WithRSAEncryption 09:1e:64:a4:5d:74:e7:1f:fe:bc:22:28:90:4e:ca:f2:94:d5: bd:15:d6:64:9c:14:81:c8:a3:57:bc:3d:ca:90:92:06:f3:40: 8e:65:32:7a:bc:b0:45:ba:29:df:2e:18:72:74:64:87:89:21: 3d:81:77:92:40:e4:88:35:ab:f2:b5:42:7a:60:f5:62:df:a6: 4c:1d:cf:bc:2b:28:af:40:a6:6c:51:18:d2:bb:11:e7:f8:e5: cc:9d:f2:c2:a9:57:1e:e0:57:83:2a:cd:74:02:a2:49:81:06: 4f:21:68:4e:70:05:ef:d5:ef:5e:3d:4c:5f:0e:c9:51:1c:13: a3:8e:6b:bd:90:03:e0:fb:62:b6:a9:2d:c8:2b:a0:01:71:5e: bb:c6:e8:ba:f9:c2:a6:e7:65:9c:51:6f:ec:57:d0:d5:26:81: 97:06:46:bd:fa:6a:76:cf:d3:fb:c8:76:67:9a:70:a3:b7:a6: 0e:45:6f:ea:f2:9c:a6:3b:c4:02:c9:85:9c:ef:04:18:7e:21: 1c:7e:14:d7:91:4b:bf:a0:c9:55:c6:97:3b:24:4f:bd:3c:94: 9e:5a:59:ce:9d:e7:2e:f7:2f:d9:d1:34:86:23:6d:a3:fd:7d: 72:05:89:6e:5e:0e:2c:36:24:35:b8:c3:37:69:02:fc:60:bf: 35:03:2a:40 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gLsXC1GmBLP/kzQA4IVzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmEwNTFkODhiNDZkZjg3MDc3YTQ1Mzg4NDg2YTk0OWRhNWQ4NTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicCzDP09itGEjA28qv8ps4Mv31Dh HSZb5H+KXbvQYKsNRprxRa5wjBuFXDFFaReHK4xEDuiQAKiKL56dChW4ubwHe/6Z c/NP7IrlpZiK88Qm6BdNHfvbsdHzn/FjrDt37P6ozwWNLtUe1B8zdjfxRacsZz9T ndrqH4em8H+xXzTcFoYEBJxnsk8DrVE1y/dnuXI5nabo/h6m8Vd82G1FNODONlio u+5UsVNuHae+MUvwhodOdvT2UpkbyX3Ric5sT+fRTxvNAq9Hpo6NOLqRoB9l2Bi9 voyPtuY8TKavX5KGIZzySoSOUwtUecCgF5xdbhhtdicsTSGIZDVTqBUdeQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOKgUdiLRt+HB3pFOISGqUnaXYUSMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvNHFCUjJJdEczNGNIZWtVNGhJYXBTZHBkaFJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBVCAWAwQA VCD5AwQAWNjQMA0GCSqGSIb3DQEBCwUAA4IBAQAJHmSkXXTnH/68IiiQTsrylNW9 FdZknBSByKNXvD3KkJIG80COZTJ6vLBFuinfLhhydGSHiSE9gXeSQOSINavytUJ6 YPVi36ZMHc+8KyivQKZsURjSuxHn+OXMnfLCqVce4FeDKs10AqJJgQZPIWhOcAXv 1e9ePUxfDslRHBOjjmu9kAPg+2K2qS3IK6ABcV67xui6+cKm52WcUW/sV9DVJoGX Bka9+mp2z9P7yHZnmnCjt6YORW/q8pymO8QCyYWc7wQYfiEcfhTXkUu/oMlVxpc7 JE+9PJSeWlnOnecu9y/Z0TSGI22j/X1yBYluXg4sNiQ1uMM3aQL8YL81AypA -----END CERTIFICATE-----Generated at Mon Jan 19 13:53:32 2026 by rpki-client