This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/83gN9nunZxCI_TGjAlt2gijFjSk.roa File: 83gN9nunZxCI_TGjAlt2gijFjSk.roa (raw, json) Hash identifier: HtTAjJazZg7vBL/+9u3swhh4Ef/cfp0CtaGsRxKvMpI= Subject key identifier: F3:78:0D:F6:7B:A7:67:10:88:FD:31:A3:02:5B:76:82:28:C5:8D:29 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80A6C758F9F62B776B77DE767BC605 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/83gN9nunZxCI_TGjAlt2gijFjSk.roa Signing time: Fri 02 Jan 2026 02:19:24 +0000 ROA not before: Fri 02 Jan 2026 02:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58061 IP address blocks: 84.32.106.0/24 maxlen: 24 88.216.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a6:c7:58:f9:f6:2b:77:6b:77:de:76:7b:c6:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3780df67ba7671088fd31a3025b768228c58d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e2:cf:4d:08:97:14:b2:d7:cc:ed:57:41:92: bb:f3:3a:31:88:07:a7:a4:75:92:f4:92:9f:8e:47: 5f:5a:1e:42:d3:f8:5b:a1:09:22:bf:09:b6:61:3e: d6:f6:51:a1:2d:2a:49:fb:b1:c7:cb:a3:74:21:76: 2c:58:7a:65:87:64:a0:a9:40:e7:86:6a:98:3f:3d: a1:15:ac:46:ac:99:00:b4:81:f3:12:aa:23:db:38: a6:82:b8:b5:5d:ba:73:07:33:a6:9f:b1:1a:e7:48: bf:0c:88:21:13:ec:6d:c2:e3:9b:e4:96:f9:8d:66: 61:4a:0a:d2:50:85:f1:52:cd:a4:eb:69:9d:28:11: 4b:e1:44:c2:df:e1:7d:f0:13:c6:14:4c:3c:2b:11: fa:73:ae:7d:bf:de:63:cf:71:3b:50:74:0c:52:d1: 32:d2:e8:b2:39:70:28:53:63:90:8b:9a:07:46:0e: a7:7f:e7:a2:6d:10:0e:cf:e2:b3:94:65:a4:7d:4b: 89:e2:50:95:8d:77:96:b7:30:f0:22:06:dd:8b:77: 45:bd:93:a1:bc:f6:3a:d1:ba:32:25:6a:02:80:8f: 4a:9d:ca:e0:8e:54:0b:f1:eb:39:7a:8d:e7:9b:47: 7b:9a:44:2f:a5:ce:2b:26:dc:d9:a2:08:49:72:cf: e6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:78:0D:F6:7B:A7:67:10:88:FD:31:A3:02:5B:76:82:28:C5:8D:29 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/83gN9nunZxCI_TGjAlt2gijFjSk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.106.0/24 88.216.43.0/24 Signature Algorithm: sha256WithRSAEncryption 90:50:cd:64:b7:d1:b9:2b:ab:df:4b:5e:40:75:f5:66:ae:21: 6f:c3:f6:0f:fd:b9:ec:5c:ee:26:b7:75:da:d5:09:d8:7e:d1: bc:b3:1d:d4:bb:23:5b:3f:ac:44:d1:5d:f2:a0:86:8a:75:28: 91:24:ab:69:cc:2d:c1:c4:5e:f9:52:d3:b1:da:06:3b:4e:3a: f0:eb:40:12:88:50:29:95:67:7f:49:77:a6:b0:e9:7e:ea:96: e4:68:3f:44:59:c9:08:ff:f6:3c:6f:bc:90:47:b6:d0:b0:2c: 53:ad:ba:34:05:3c:11:46:e8:1c:07:2f:27:92:3f:0c:56:d5: 94:91:b2:d7:3f:cf:22:51:d9:05:f0:3e:6b:06:a1:e3:92:2f: 55:28:61:15:ae:6e:04:7d:a0:a6:56:c2:2e:59:3c:dc:fd:ce: e7:2a:d4:d5:8b:d5:fe:6c:23:b4:f5:87:81:86:b7:47:70:13: 52:d5:e4:c5:63:aa:72:cf:0f:40:3a:1c:a3:3d:b9:91:d2:4f: c5:f4:87:5a:d5:e7:5a:05:82:29:c4:13:22:4a:54:1c:75:46: 55:e8:ee:25:33:9b:c1:18:35:a0:b4:3d:fb:53:58:87:c0:33: b0:18:db:39:6e:64:bc:1d:dc:59:60:36:4b:32:5a:88:c6:4c: 18:7b:cf:53 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gKbHWPn2K3drd952e8YFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzc4MGRmNjdiYTc2NzEwODhmZDMxYTMwMjViNzY4MjI4YzU4ZDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOLPTQiXFLLXzO1XQZK78zoxiAen pHWS9JKfjkdfWh5C0/hboQkivwm2YT7W9lGhLSpJ+7HHy6N0IXYsWHplh2SgqUDn hmqYPz2hFaxGrJkAtIHzEqoj2zimgri1XbpzBzOmn7Ea50i/DIghE+xtwuOb5Jb5 jWZhSgrSUIXxUs2k62mdKBFL4UTC3+F98BPGFEw8KxH6c659v95jz3E7UHQMUtEy 0uiyOXAoU2OQi5oHRg6nf+eibRAOz+KzlGWkfUuJ4lCVjXeWtzDwIgbdi3dFvZOh vPY60boyJWoCgI9KncrgjlQL8es5eo3nm0d7mkQvpc4rJtzZoghJcs/mSwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPN4DfZ7p2cQiP0xowJbdoIoxY0pMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvODNnTjludW5aeENJX1RHakFsdDJnaWpGalNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVCBqAwQA WNgrMA0GCSqGSIb3DQEBCwUAA4IBAQCQUM1kt9G5K6vfS15AdfVmriFvw/YP/bns XO4mt3Xa1QnYftG8sx3UuyNbP6xE0V3yoIaKdSiRJKtpzC3BxF75UtOx2gY7Tjrw 60ASiFAplWd/SXemsOl+6pbkaD9EWckI//Y8b7yQR7bQsCxTrbo0BTwRRugcBy8n kj8MVtWUkbLXP88iUdkF8D5rBqHjki9VKGEVrm4EfaCmVsIuWTzc/c7nKtTVi9X+ bCO09YeBhrdHcBNS1eTFY6pyzw9AOhyjPbmR0k/F9Ida1edaBYIpxBMiSlQcdUZV 6O4lM5vBGDWgtD37U1iHwDOwGNs5bmS8HdxZYDZLMlqIxkwYe89T -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:07 2026 by rpki-client