This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7T4CAskX_MjRLfC6M7Pi2GEuhPE.roa File: 7T4CAskX_MjRLfC6M7Pi2GEuhPE.roa (raw, json) Hash identifier: jSeuhD8cSwkpYJkNTG4RJQABhpD/sWijQzVzAw42jqA= Subject key identifier: ED:3E:02:02:C9:17:FC:C8:D1:2D:F0:BA:33:B3:E2:D8:61:2E:84:F1 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80A10CD21999ACE2F89E757DF1B7EC Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7T4CAskX_MjRLfC6M7Pi2GEuhPE.roa Signing time: Fri 02 Jan 2026 02:19:23 +0000 ROA not before: Fri 02 Jan 2026 02:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 84.32.91.0/24 maxlen: 24 88.216.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a1:0c:d2:19:99:ac:e2:f8:9e:75:7d:f1:b7:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed3e0202c917fcc8d12df0ba33b3e2d8612e84f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:de:51:b2:40:1d:43:bb:e3:04:4e:5c:e2:3c: d8:1e:1b:04:1f:90:8c:1f:2c:ab:70:49:9f:a8:65: 60:5c:fa:82:4d:12:95:e7:83:c2:5a:8c:bd:c5:50: ef:c7:49:68:8c:ce:4d:df:2c:32:a9:86:35:43:bd: dc:ff:b1:a6:8c:a3:4a:6d:7b:c3:6a:fe:e9:29:25: 74:3e:03:62:8d:02:a7:88:c2:86:5a:47:a5:60:9c: 6b:64:d0:08:c6:f5:16:fa:11:5b:50:a8:fc:63:1a: 2e:73:31:7f:a8:25:0d:b4:2b:54:dc:e7:b1:3b:01: 16:04:75:bc:6d:16:a7:2b:56:7d:c2:2e:b1:67:d4: ad:fa:3d:b8:e9:b4:ad:29:9e:dd:86:b9:29:12:c1: a2:e8:94:0e:3a:99:f9:47:98:bf:6b:7b:1b:c1:28: d1:ad:78:dd:1b:14:74:0a:2c:20:43:a7:d0:84:96: 79:b6:e7:66:c4:43:0e:7d:fe:2b:48:24:41:01:d0: 42:ef:d2:b7:b4:68:e5:37:bc:95:da:49:01:f0:02: c2:18:78:aa:50:ee:17:9a:1f:10:c5:c3:7a:d6:f5: f6:c1:2a:aa:a5:e2:bb:cf:7f:f7:f2:d2:e7:4d:84: f7:fc:19:7d:a5:12:d8:eb:96:2a:f0:95:79:4b:58: 0f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:3E:02:02:C9:17:FC:C8:D1:2D:F0:BA:33:B3:E2:D8:61:2E:84:F1 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7T4CAskX_MjRLfC6M7Pi2GEuhPE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.91.0/24 88.216.131.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:6d:4b:ef:22:68:47:b3:b0:88:88:3c:bb:e7:8e:29:5d:a4: 00:62:c2:f1:24:a0:79:0e:b8:98:72:f0:de:e1:ae:cb:e2:1a: 00:3c:3f:1e:15:bb:71:0e:b5:2c:1c:dc:60:30:a9:5f:16:cb: d3:7e:47:ae:5e:5e:f8:4d:01:7a:3f:6f:63:68:83:7b:89:02: 71:5a:a8:f7:29:61:a9:e2:54:40:2a:54:2a:01:c9:36:3d:ee: b6:e6:11:d1:26:91:91:34:b6:4e:dc:2a:e5:de:8e:26:c6:54: 8c:c8:5c:a0:66:9b:92:d8:bb:5c:bb:50:91:cd:19:f7:31:84: 0b:37:85:8e:7b:34:6f:82:d4:4f:34:8f:09:ab:db:ef:60:1a: 5a:9b:ca:68:4e:c2:52:6e:6c:6a:ef:a0:df:61:2c:85:a8:24: e9:cb:8f:a6:dc:ff:43:37:51:73:63:fe:12:28:86:e6:dd:dc: ab:62:15:da:1b:be:36:16:dd:ca:5e:52:3d:ed:06:17:e4:01: 10:16:12:28:1a:f6:8a:fe:69:5f:ac:e0:b1:c6:d8:dc:f8:75: 3e:73:55:9f:b6:29:38:5c:2c:04:a0:18:4b:52:99:5f:08:8d: 14:8b:81:0c:6d:26:76:5a:77:82:30:d1:87:cf:b6:dc:29:d9: 09:89:7f:54 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gKEM0hmZrOL4nnV98bfsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDNlMDIwMmM5MTdmY2M4ZDEyZGYwYmEzM2IzZTJkODYxMmU4NGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyN5RskAdQ7vjBE5c4jzYHhsEH5CM HyyrcEmfqGVgXPqCTRKV54PCWoy9xVDvx0lojM5N3ywyqYY1Q73c/7GmjKNKbXvD av7pKSV0PgNijQKniMKGWkelYJxrZNAIxvUW+hFbUKj8YxouczF/qCUNtCtU3Oex OwEWBHW8bRanK1Z9wi6xZ9St+j246bStKZ7dhrkpEsGi6JQOOpn5R5i/a3sbwSjR rXjdGxR0CiwgQ6fQhJZ5tudmxEMOff4rSCRBAdBC79K3tGjlN7yV2kkB8ALCGHiq UO4Xmh8QxcN61vX2wSqqpeK7z3/38tLnTYT3/Bl9pRLY65Yq8JV5S1gPHwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFO0+AgLJF/zI0S3wujOz4thhLoTxMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvN1Q0Q0Fza1hfTWpSTGZDNk03UGkyR0V1aFBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVCBbAwQA WNiDMA0GCSqGSIb3DQEBCwUAA4IBAQA7bUvvImhHs7CIiDy7544pXaQAYsLxJKB5 DriYcvDe4a7L4hoAPD8eFbtxDrUsHNxgMKlfFsvTfkeuXl74TQF6P29jaIN7iQJx Wqj3KWGp4lRAKlQqAck2Pe625hHRJpGRNLZO3Crl3o4mxlSMyFygZpuS2Ltcu1CR zRn3MYQLN4WOezRvgtRPNI8Jq9vvYBpam8poTsJSbmxq76DfYSyFqCTpy4+m3P9D N1FzY/4SKIbm3dyrYhXaG742Ft3KXlI97QYX5AEQFhIoGvaK/mlfrOCxxtjc+HU+ c1Wftik4XCwEoBhLUplfCI0Ui4EMbSZ2WneCMNGHz7bcKdkJiX9U -----END CERTIFICATE-----Generated at Mon Jan 19 15:11:41 2026 by rpki-client