This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Axh6W00xRCo-wqMWPz_ycfhXyOk.roa File: Axh6W00xRCo-wqMWPz_ycfhXyOk.roa (raw, json) Hash identifier: am++3QQZ+DVStoaYVxUzuoW+LacZQlCoD2FsJd8c/fM= Subject key identifier: 03:18:7A:5B:4D:31:44:2A:3E:C2:A3:16:3F:3F:F2:71:F8:57:C8:E9 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80A417FF0528206F0B56BF64C05DD9 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Axh6W00xRCo-wqMWPz_ycfhXyOk.roa Signing time: Fri 02 Jan 2026 02:19:23 +0000 ROA not before: Fri 02 Jan 2026 02:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49912 IP address blocks: 84.32.36.0/23 maxlen: 23 84.32.80.0/23 maxlen: 23 88.216.26.0/23 maxlen: 23 88.216.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a4:17:ff:05:28:20:6f:0b:56:bf:64:c0:5d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03187a5b4d31442a3ec2a3163f3ff271f857c8e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3c:f8:f8:db:e8:73:a2:c7:9d:38:f8:58:cd: 59:d9:02:a1:fc:62:52:f0:e5:d3:23:2e:9d:cb:99: a2:ea:90:45:dd:ca:fa:4d:c8:ef:52:3f:71:b8:94: a3:3a:7d:43:69:ad:36:5e:43:c2:cb:6a:d7:cb:f6: 81:57:8b:fa:49:6a:d9:91:10:b4:62:c5:89:8c:bc: 54:31:3b:5a:1e:50:65:69:86:c1:d0:c6:90:9c:69: ee:71:60:85:2e:2b:b1:ac:dc:44:b2:29:1d:01:c3: 5d:68:20:dc:e2:ff:69:b9:11:5a:ec:8d:95:af:25: 3c:af:b7:c1:11:7f:71:08:a4:f8:ef:d2:41:f4:e0: 46:1d:f3:1f:3b:da:54:e4:23:5e:39:a9:c7:23:4c: eb:93:ee:7b:ef:85:bb:aa:7a:67:a8:65:e9:2e:47: 73:1c:3f:db:b9:60:b4:8f:82:59:25:23:a0:08:af: b0:9a:b2:94:dc:c2:37:eb:37:50:bd:2c:41:df:cc: b7:33:93:3a:76:b9:e4:a2:5b:8f:15:d2:11:e8:ef: b2:6b:22:9f:e8:ea:ef:82:76:44:c8:d0:ff:23:f2: 0b:e9:17:45:8f:f3:9a:cf:5d:85:25:eb:b9:23:45: ee:b5:ad:54:21:12:32:c6:b1:f3:d8:65:1d:4a:d4: fc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:18:7A:5B:4D:31:44:2A:3E:C2:A3:16:3F:3F:F2:71:F8:57:C8:E9 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Axh6W00xRCo-wqMWPz_ycfhXyOk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.36.0/23 84.32.80.0/23 88.216.26.0/23 88.216.160.0/23 Signature Algorithm: sha256WithRSAEncryption 42:64:f9:ff:be:85:be:e0:9d:3a:ff:67:17:47:c2:0c:f4:b1: 47:de:2a:48:a5:fb:7a:49:14:e1:4c:e2:da:21:f7:d4:6a:ea: 75:72:5e:8a:07:ae:67:bd:46:4f:30:31:31:85:41:87:b3:87: af:e1:ff:ae:ce:39:80:11:ed:f8:96:d0:22:9d:45:49:5b:f7: a7:ac:76:1e:e0:5c:22:2e:9c:fe:d2:43:a6:fe:bc:ea:34:de: 89:e3:37:33:2c:d3:72:3f:c1:96:26:04:f6:5d:ca:73:24:ea: f6:98:30:38:56:50:82:8c:00:62:72:79:73:8a:14:b6:ae:ff: 5d:3b:08:a4:00:cd:1e:03:15:6c:61:c5:79:e4:94:c4:f5:ab: 4d:46:99:cc:1f:56:05:aa:e9:71:97:ad:25:9d:60:6e:b5:55: 5e:00:23:bf:a0:84:90:2b:d0:bf:5c:2d:f7:b8:e5:e9:28:15: 0d:3b:c6:a8:17:e2:4d:f4:7d:fd:30:24:af:2a:b0:1a:8f:0b: d5:ea:f8:4f:2c:b3:ea:9e:23:b7:6c:6c:b3:be:df:7f:18:be: 4b:45:03:59:01:aa:83:09:92:0a:fd:14:09:ec:06:69:1a:68: 30:4b:76:f1:da:b2:fa:d7:d5:8b:b1:75:82:fd:41:77:ff:81: c1:62:d7:15 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8gKQX/wUoIG8LVr9kwF3ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzE4N2E1YjRkMzE0NDJhM2VjMmEzMTYzZjNmZjI3MWY4NTdjOGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zz4+Nvoc6LHnTj4WM1Z2QKh/GJS 8OXTIy6dy5mi6pBF3cr6TcjvUj9xuJSjOn1Daa02XkPCy2rXy/aBV4v6SWrZkRC0 YsWJjLxUMTtaHlBlaYbB0MaQnGnucWCFLiuxrNxEsikdAcNdaCDc4v9puRFa7I2V ryU8r7fBEX9xCKT479JB9OBGHfMfO9pU5CNeOanHI0zrk+5774W7qnpnqGXpLkdz HD/buWC0j4JZJSOgCK+wmrKU3MI36zdQvSxB38y3M5M6drnkoluPFdIR6O+yayKf 6OrvgnZEyND/I/IL6RdFj/Oaz12FJeu5I0Xuta1UIRIyxrHz2GUdStT8DQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFAMYeltNMUQqPsKjFj8/8nH4V8jpMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvQXhoNlcwMHhSQ28td3FNV1B6X3ljZmhYeU9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBVCAkAwQB VCBQAwQBWNgaAwQBWNigMA0GCSqGSIb3DQEBCwUAA4IBAQBCZPn/voW+4J06/2cX R8IM9LFH3ipIpft6SRThTOLaIffUaup1cl6KB65nvUZPMDExhUGHs4ev4f+uzjmA Ee34ltAinUVJW/enrHYe4FwiLpz+0kOm/rzqNN6J4zczLNNyP8GWJgT2XcpzJOr2 mDA4VlCCjABicnlzihS2rv9dOwikAM0eAxVsYcV55JTE9atNRpnMH1YFqulxl60l nWButVVeACO/oISQK9C/XC33uOXpKBUNO8aoF+JN9H39MCSvKrAajwvV6vhPLLPq niO3bGyzvt9/GL5LRQNZAaqDCZIK/RQJ7AZpGmgwS3bx2rL619WLsXWC/UF3/4HB YtcV -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:03 2026 by rpki-client