This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/DzxS4F7YPXN5Q2g41fUsPzVkobU.roa File: DzxS4F7YPXN5Q2g41fUsPzVkobU.roa (raw, json) Hash identifier: F5CivRaAzZk6L/1qzlkdgsm/db0CCs+KuRet8YwzWYE= Subject key identifier: 0F:3C:52:E0:5E:D8:3D:73:79:43:68:38:D5:F5:2C:3F:35:64:A1:B5 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80B87E0D572370B4E26AAE75456239 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/DzxS4F7YPXN5Q2g41fUsPzVkobU.roa Signing time: Fri 02 Jan 2026 02:19:29 +0000 ROA not before: Fri 02 Jan 2026 02:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212669 IP address blocks: 84.32.69.0/24 maxlen: 24 84.32.86.0/24 maxlen: 24 84.32.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b8:7e:0d:57:23:70:b4:e2:6a:ae:75:45:62:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f3c52e05ed83d7379436838d5f52c3f3564a1b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3d:f5:d1:a7:cc:8c:ba:40:a8:6e:a3:4b:58: e7:6a:eb:bb:95:db:65:2b:17:01:ce:e3:f0:29:bc: e9:8f:ba:07:e3:40:18:77:0d:5d:cd:04:9f:d5:ff: e7:f3:2b:14:cb:72:79:75:72:54:7a:6d:33:45:b2: 46:d5:d7:a8:70:cc:a4:71:22:e5:08:ef:db:b2:b6: 55:f0:f5:0d:df:6f:c4:9f:d2:e5:d4:b6:c2:62:b8: 24:3d:00:27:dc:e2:da:2c:0b:ed:92:f2:24:1e:bb: 92:a7:7f:6e:2e:e1:f5:14:3d:dc:e5:13:20:ae:a2: ce:db:9b:2a:b2:01:9d:93:6b:39:dc:7c:c5:55:cd: e0:ce:ba:59:a4:19:01:30:c4:6e:22:57:e4:25:83: 2e:0f:a6:cc:a8:34:88:0b:77:4f:46:99:9e:16:ea: 59:8c:f1:6e:86:c5:b9:84:f4:33:f1:84:1b:d3:33: a1:f0:5f:3c:c3:83:cb:aa:e9:a3:d7:7d:1e:18:ea: 19:85:de:cf:6c:09:6b:01:a4:b6:79:94:f2:fc:93: 2f:8d:5e:56:d4:ac:32:02:0a:fe:6d:a6:33:ee:16: a9:96:1f:9a:f3:1c:71:f5:37:71:9c:84:3f:52:30: eb:74:d2:be:24:31:a4:14:ea:d5:35:31:21:91:d5: 01:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3C:52:E0:5E:D8:3D:73:79:43:68:38:D5:F5:2C:3F:35:64:A1:B5 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/DzxS4F7YPXN5Q2g41fUsPzVkobU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.69.0/24 84.32.86.0/24 84.32.227.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:9a:6d:84:95:4d:8b:1e:44:e9:f5:b1:2a:3f:7f:35:78:cd: 85:d7:7e:37:90:05:e6:15:fd:a7:ad:65:2b:25:f8:2f:82:c4: 80:4f:89:cc:19:74:84:68:81:c6:bc:6f:e2:0b:71:48:e2:00: 83:a9:ff:4b:0b:29:33:85:e7:05:ad:89:0e:11:2d:3a:ec:ca: a0:66:6b:06:b0:95:8f:d1:30:d6:70:51:80:66:25:51:5d:3a: 37:dd:b3:ef:a2:47:09:c2:18:ea:d7:c3:a6:dc:42:0d:9e:58: 6a:48:e3:9e:86:01:19:dc:22:1f:9f:46:90:d1:12:f8:90:19: 04:ed:3f:4e:5d:e6:c5:32:88:3f:d4:46:15:25:29:64:e9:2b: ab:48:12:a8:a3:47:2e:1e:53:fc:6f:18:07:00:67:50:a8:7b: fc:75:62:10:23:c3:3a:f1:87:0a:1b:df:33:d9:05:85:ae:89: 3c:db:42:ae:6a:87:d8:ae:7e:6b:53:ba:47:bf:87:9f:32:5c: 36:ed:08:1e:0c:29:60:c9:49:f5:19:32:08:2a:85:21:3a:03: e5:a0:f9:99:0d:7a:03:54:ee:33:bc:89:cd:cb:1b:27:92:b3: b6:bc:d7:e7:91:ef:9d:c9:e6:01:15:68:3b:e1:3f:3b:a6:fa: a8:ca:37:8e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gLh+DVcjcLTiaq51RWI5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjNjNTJlMDVlZDgzZDczNzk0MzY4MzhkNWY1MmMzZjM1NjRhMWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj310afMjLpAqG6jS1jnauu7ldtl KxcBzuPwKbzpj7oH40AYdw1dzQSf1f/n8ysUy3J5dXJUem0zRbJG1deocMykcSLl CO/bsrZV8PUN32/En9Ll1LbCYrgkPQAn3OLaLAvtkvIkHruSp39uLuH1FD3c5RMg rqLO25sqsgGdk2s53HzFVc3gzrpZpBkBMMRuIlfkJYMuD6bMqDSIC3dPRpmeFupZ jPFuhsW5hPQz8YQb0zOh8F88w4PLqumj130eGOoZhd7PbAlrAaS2eZTy/JMvjV5W 1KwyAgr+baYz7haplh+a8xxx9TdxnIQ/UjDrdNK+JDGkFOrVNTEhkdUBAQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFA88UuBe2D1zeUNoONX1LD81ZKG1MB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvRHp4UzRGN1lQWE41UTJnNDFmVXNQelZrb2JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVCBFAwQA VCBWAwQAVCDjMA0GCSqGSIb3DQEBCwUAA4IBAQBtmm2ElU2LHkTp9bEqP381eM2F 1343kAXmFf2nrWUrJfgvgsSAT4nMGXSEaIHGvG/iC3FI4gCDqf9LCykzhecFrYkO ES067MqgZmsGsJWP0TDWcFGAZiVRXTo33bPvokcJwhjq18Om3EINnlhqSOOehgEZ 3CIfn0aQ0RL4kBkE7T9OXebFMog/1EYVJSlk6SurSBKoo0cuHlP8bxgHAGdQqHv8 dWIQI8M68YcKG98z2QWFrok820KuaofYrn5rU7pHv4efMlw27QgeDClgyUn1GTII KoUhOgPloPmZDXoDVO4zvInNyxsnkrO2vNfnke+dyeYBFWg74T87pvqoyjeO -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:06 2026 by rpki-client