This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7bAb9f1mEoxkXNclN7zWX3UcM3Y.roa File: 7bAb9f1mEoxkXNclN7zWX3UcM3Y.roa (raw, json) Hash identifier: byDZ7ZkovrRCHUyv2B5/Q5PmMYJlSX856qEs6Bz9qcY= Subject key identifier: ED:B0:1B:F5:FD:66:12:8C:64:5C:D7:25:37:BC:D6:5F:75:1C:33:76 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80A172A45BFD6169CD42B554BEFD61 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7bAb9f1mEoxkXNclN7zWX3UcM3Y.roa Signing time: Fri 02 Jan 2026 02:19:23 +0000 ROA not before: Fri 02 Jan 2026 02:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 84.32.111.0/24 maxlen: 24 88.216.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a1:72:a4:5b:fd:61:69:cd:42:b5:54:be:fd:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edb01bf5fd66128c645cd72537bcd65f751c3376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:77:40:1d:3a:3a:ca:87:cb:28:2d:69:bc:72: 89:ba:f0:ff:93:58:5a:87:6a:cf:75:51:96:bb:68: 4d:ab:6b:97:da:18:ae:68:fd:56:fb:1e:ca:ac:8b: f2:b4:30:bb:a0:ab:31:9e:64:ba:78:c4:5b:20:a1: f7:ea:86:af:d1:a5:f5:35:d7:b9:45:91:5c:cd:99: 51:15:de:95:29:32:f3:ea:ef:74:e3:47:64:65:ef: ab:bd:d8:e7:68:6e:33:69:dc:86:af:c1:92:66:27: 22:af:a9:37:bd:30:cc:76:dd:36:7f:81:82:10:a2: 51:0f:51:8d:b2:af:ec:c1:5b:80:51:9a:ff:fe:d8: 46:92:91:84:38:b5:79:1d:29:59:47:73:c2:e1:cb: 08:40:23:bf:66:2e:8b:9b:d5:26:d4:5d:36:c8:1d: 62:98:98:52:38:6f:30:07:97:9b:b8:64:e9:70:78: 29:43:16:8c:ab:d4:8a:43:3b:18:7e:e9:c1:f7:0b: 09:87:bc:09:b7:f1:53:98:e3:92:09:72:49:6c:63: 63:1d:30:e3:87:38:5a:90:44:ab:fa:b4:81:7c:64: eb:4a:e2:b9:d9:0f:70:4a:74:94:3c:5a:65:54:12: 5b:7e:78:56:f3:a2:2c:93:45:8b:e1:51:39:40:05: 42:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B0:1B:F5:FD:66:12:8C:64:5C:D7:25:37:BC:D6:5F:75:1C:33:76 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7bAb9f1mEoxkXNclN7zWX3UcM3Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.111.0/24 88.216.100.0/24 Signature Algorithm: sha256WithRSAEncryption 06:8f:37:f6:e9:9e:3a:7d:82:b4:e1:9a:9d:3a:a6:c7:84:b5: e9:76:81:c1:1e:5a:e7:3f:7c:5c:f8:fb:60:a0:48:82:bd:f1: 82:88:22:85:07:b9:49:bc:1d:78:56:37:2c:08:ac:e3:1e:57: 7c:5e:27:f6:0a:63:3a:7f:96:4e:ec:c6:93:cd:f4:27:bb:a9: 3f:21:70:34:a8:58:53:81:42:2d:d3:67:75:36:5b:0e:5c:c7: 10:19:bd:dd:b0:2b:3e:d0:cb:5d:e1:dc:ab:26:a5:df:bb:95: 2c:4a:f4:53:02:e8:48:65:31:4a:7e:11:5a:b9:f0:02:30:e6: 92:c6:63:09:08:a0:2a:8d:5d:d2:c2:8d:62:02:b0:c2:a0:2b: e8:ac:0d:f4:36:4a:2d:dd:f3:4e:48:83:e1:02:77:45:c1:db: c8:28:ec:5e:d6:07:81:4b:aa:bf:f9:29:4a:0e:e0:72:f6:38: 32:31:8f:1f:4d:3e:03:bc:fd:6c:4b:b1:ac:19:4e:d7:49:8d: 39:8c:63:f9:f5:b1:b0:be:d6:ec:19:55:ca:9e:8e:ad:fb:94: 39:72:57:80:02:ea:86:6d:d6:f1:e5:8a:82:b8:70:2e:f1:67: 01:6e:04:e6:4c:c4:43:28:10:00:24:b4:32:2e:0a:f6:fd:8d: 09:9c:be:eb -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gKFypFv9YWnNQrVUvv1hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGIwMWJmNWZkNjYxMjhjNjQ1Y2Q3MjUzN2JjZDY1Zjc1MWMzMzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHdAHTo6yofLKC1pvHKJuvD/k1ha h2rPdVGWu2hNq2uX2hiuaP1W+x7KrIvytDC7oKsxnmS6eMRbIKH36oav0aX1Nde5 RZFczZlRFd6VKTLz6u9040dkZe+rvdjnaG4zadyGr8GSZicir6k3vTDMdt02f4GC EKJRD1GNsq/swVuAUZr//thGkpGEOLV5HSlZR3PC4csIQCO/Zi6Lm9Um1F02yB1i mJhSOG8wB5ebuGTpcHgpQxaMq9SKQzsYfunB9wsJh7wJt/FTmOOSCXJJbGNjHTDj hzhakESr+rSBfGTrSuK52Q9wSnSUPFplVBJbfnhW86Isk0WL4VE5QAVCKQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFO2wG/X9ZhKMZFzXJTe81l91HDN2MB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvN2JBYjlmMW1Fb3hrWE5jbE43eldYM1VjTTNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVCBvAwQA WNhkMA0GCSqGSIb3DQEBCwUAA4IBAQAGjzf26Z46fYK04ZqdOqbHhLXpdoHBHlrn P3xc+PtgoEiCvfGCiCKFB7lJvB14VjcsCKzjHld8Xif2CmM6f5ZO7MaTzfQnu6k/ IXA0qFhTgUIt02d1NlsOXMcQGb3dsCs+0Mtd4dyrJqXfu5UsSvRTAuhIZTFKfhFa ufACMOaSxmMJCKAqjV3Swo1iArDCoCvorA30Nkot3fNOSIPhAndFwdvIKOxe1geB S6q/+SlKDuBy9jgyMY8fTT4DvP1sS7GsGU7XSY05jGP59bGwvtbsGVXKno6t+5Q5 cleAAuqGbdbx5YqCuHAu8WcBbgTmTMRDKBAAJLQyLgr2/Y0JnL7r -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:07 2026 by rpki-client