This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/5Hv-ZZzudAToxarM-1i4ZC_RBsI.roa File: 5Hv-ZZzudAToxarM-1i4ZC_RBsI.roa (raw, json) Hash identifier: MwbLEL1/fx8nUwHfHRjg4Cj9UMkNgQetwQkoWem7O0o= Subject key identifier: E4:7B:FE:65:9C:EE:74:04:E8:C5:AA:CC:FB:58:B8:64:2F:D1:06:C2 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019A78E224DB8814FA0A2D33865E9D167734 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/5Hv-ZZzudAToxarM-1i4ZC_RBsI.roa Signing time: Wed 12 Nov 2025 16:24:37 +0000 ROA not before: Wed 12 Nov 2025 16:24:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59642 IP address blocks: 84.32.64.0/24 maxlen: 24 84.32.96.0/24 maxlen: 24 84.32.101.0/24 maxlen: 24 84.32.102.0/24 maxlen: 24 84.32.103.0/24 maxlen: 24 84.32.104.0/24 maxlen: 24 84.32.184.0/22 maxlen: 24 84.32.188.0/22 maxlen: 22 84.32.231.0/24 maxlen: 24 88.216.61.0/24 maxlen: 24 88.216.63.0/24 maxlen: 24 88.216.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 18:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:e2:24:db:88:14:fa:0a:2d:33:86:5e:9d:16:77:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Nov 12 16:24:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e47bfe659cee7404e8c5aaccfb58b8642fd106c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bd:18:bd:40:e7:59:a1:ee:4a:02:55:ff:d3: 5d:c7:6c:52:76:ac:b6:49:52:28:3b:97:b1:4e:de: 98:cc:89:19:0d:c3:b2:3e:e6:a5:17:ec:a3:27:96: 66:32:b0:f6:39:2e:dc:80:51:06:43:c8:05:b1:c3: df:b6:7a:5f:95:08:f0:78:b5:ca:1c:77:30:bc:33: 9b:8d:ec:8a:b1:a1:c9:87:a8:45:0d:72:2b:fb:9f: 8b:b1:58:99:5e:00:bb:b7:23:6c:d6:36:a6:40:8d: 9e:50:87:db:1f:b0:48:24:cd:2a:66:3a:d1:ba:99: c0:7f:ef:a5:1e:05:a9:19:41:7b:95:fe:b0:af:9a: 15:a2:a3:07:48:d0:90:0d:6e:d5:e5:4a:e6:0e:13: 2d:1c:cb:3f:53:f9:73:fd:97:2b:47:9f:81:c6:64: c8:98:56:40:83:54:7b:85:dd:b3:0c:e4:73:3a:92: 40:d6:3b:00:f2:8e:ac:62:2b:4e:b5:a2:24:98:72: de:01:33:b0:15:71:37:41:66:e8:79:68:b6:bd:13: e5:fb:61:23:8f:e4:d3:1f:32:e3:01:2f:48:81:20: 38:9e:7e:d0:0f:2f:64:b9:05:fe:6a:17:a1:09:6e: 82:01:f0:45:c8:43:0f:b0:05:cb:b6:09:a4:d2:21: f4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:7B:FE:65:9C:EE:74:04:E8:C5:AA:CC:FB:58:B8:64:2F:D1:06:C2 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/5Hv-ZZzudAToxarM-1i4ZC_RBsI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.64.0/24 84.32.96.0/24 84.32.101.0-84.32.104.255 84.32.184.0/21 84.32.231.0/24 88.216.61.0/24 88.216.63.0/24 88.216.187.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:ad:69:d5:33:41:fe:88:4a:a5:9a:b1:94:92:77:bb:1c:f7: 44:bc:d5:cc:85:fe:8c:cf:86:04:7e:ee:54:bc:bf:ec:bb:af: ad:78:cf:a0:04:9c:0d:15:03:58:78:17:65:58:81:f0:da:30: b2:22:1b:33:be:5d:c2:cc:c2:fd:56:25:9f:39:cb:de:71:44: 31:64:d8:dd:e8:69:87:bd:57:d5:6e:1b:1b:1d:07:c6:f8:e2: 90:61:17:d8:5c:79:f8:6b:60:22:66:89:f9:df:99:bc:da:29: 6f:f9:80:a6:66:79:9e:3a:83:0c:f0:14:bf:8e:f6:58:b7:b5: 7b:bf:c3:80:19:9d:42:ad:3b:d2:5a:33:8a:5f:a6:18:72:61: 77:c7:6b:11:ee:b9:5d:07:47:84:f0:17:ff:b5:15:29:f4:a1: 85:b8:1e:32:14:64:87:64:30:47:41:23:08:e3:66:4e:17:c8: e4:88:28:99:e8:54:e6:d6:22:c2:0c:13:52:d8:39:18:f1:e3: c0:d2:ea:cb:38:a0:45:00:bd:2e:31:17:f2:67:d0:30:89:2f: 42:dd:fd:b4:15:dd:f0:70:c8:05:18:3b:65:a2:6b:26:e5:c5: 0d:68:b3:c1:0d:ea:d4:f0:67:ca:6a:ca:86:40:d0:f3:a5:16: 0f:a9:92:35 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZp44iTbiBT6Ci0zhl6dFnc0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjUxMTEyMTYyNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDdiZmU2NTljZWU3NDA0ZThjNWFhY2NmYjU4Yjg2NDJmZDEwNmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb0YvUDnWaHuSgJV/9Ndx2xSdqy2 SVIoO5exTt6YzIkZDcOyPualF+yjJ5ZmMrD2OS7cgFEGQ8gFscPftnpflQjweLXK HHcwvDObjeyKsaHJh6hFDXIr+5+LsViZXgC7tyNs1jamQI2eUIfbH7BIJM0qZjrR upnAf++lHgWpGUF7lf6wr5oVoqMHSNCQDW7V5UrmDhMtHMs/U/lz/ZcrR5+BxmTI mFZAg1R7hd2zDORzOpJA1jsA8o6sYitOtaIkmHLeATOwFXE3QWboeWi2vRPl+2Ej j+TTHzLjAS9IgSA4nn7QDy9kuQX+ahehCW6CAfBFyEMPsAXLtgmk0iH02wIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFOR7/mWc7nQE6MWqzPtYuGQv0QbCMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvNUh2LVpaenVkQVRveGFyTS0xaTRaQ19SQnNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAVCBAAwQA VCBgMAwDBABUIGUDBABUIGgDBANUILgDBABUIOcDBABY2D0DBABY2D8DBABY2Lsw DQYJKoZIhvcNAQELBQADggEBAB6tadUzQf6ISqWasZSSd7sc90S81cyF/ozPhgR+ 7lS8v+y7r614z6AEnA0VA1h4F2VYgfDaMLIiGzO+XcLMwv1WJZ85y95xRDFk2N3o aYe9V9VuGxsdB8b44pBhF9hcefhrYCJmifnfmbzaKW/5gKZmeZ46gwzwFL+O9li3 tXu/w4AZnUKtO9JaM4pfphhyYXfHaxHuuV0HR4TwF/+1FSn0oYW4HjIUZIdkMEdB IwjjZk4XyOSIKJnoVObWIsIME1LYORjx48DS6ss4oEUAvS4xF/Jn0DCJL0Ld/bQV 3fBwyAUYO2WiayblxQ1os8EN6tTwZ8pqyoZA0POlFg+pkjU= -----END CERTIFICATE-----Generated at Fri Dec 5 03:05:28 2025 by rpki-client