This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/EBxtdfExvsjz_HhE8pfDtygWlhU.roa File: EBxtdfExvsjz_HhE8pfDtygWlhU.roa (raw, json) Hash identifier: 5bDlfEuOhZmDSkwq3x2jzfSYCwQWt+VXNt+rVqLeQ04= Subject key identifier: 10:1C:6D:75:F1:31:BE:C8:F3:FC:78:44:F2:97:C3:B7:28:16:96:15 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019A793BDDEF056A9E7948CB09F9E600E6E6 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/EBxtdfExvsjz_HhE8pfDtygWlhU.roa Signing time: Wed 12 Nov 2025 18:02:37 +0000 ROA not before: Wed 12 Nov 2025 18:02:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6079 IP address blocks: 84.32.6.0/24 maxlen: 24 88.216.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 18:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:79:3b:dd:ef:05:6a:9e:79:48:cb:09:f9:e6:00:e6:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Nov 12 18:02:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=101c6d75f131bec8f3fc7844f297c3b728169615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e9:86:f1:69:fb:7a:70:cd:0f:2b:b5:f2:20: f2:43:f9:99:82:b5:34:92:24:ca:62:19:2b:ab:b4: 45:2a:41:f8:9d:c5:e7:4e:fd:43:0a:37:d7:cd:6c: ed:cb:9d:f2:d3:a0:fe:31:ad:67:56:f8:5c:3a:09: 25:23:eb:f3:5a:8f:10:ff:8a:77:29:28:bb:8c:43: 9b:27:6e:36:79:1d:2f:db:b5:1f:5b:3b:42:d6:22: c7:a9:6d:b8:ef:aa:ab:cb:75:30:e0:9c:76:89:43: ba:a2:9a:69:9f:8f:0a:5e:41:fa:bd:2e:66:61:7e: 44:e9:7c:55:1f:41:ca:16:63:80:89:46:3d:72:80: 15:45:c1:39:db:da:39:c4:89:b7:58:eb:94:35:59: f6:c6:f7:31:22:a1:8c:74:bf:dc:86:d3:dd:36:87: 3e:af:9c:2a:f5:7d:c6:13:e3:0a:60:8c:ce:b1:44: 58:a3:4f:c1:c4:3d:a7:47:33:cd:91:f0:de:57:3f: 36:24:0e:42:b8:d9:72:2a:1f:28:4c:35:2c:40:6d: 7e:d9:98:d3:91:77:84:32:bc:52:8a:e3:f1:1d:3e: 0f:c3:f9:af:4b:23:f1:4b:91:63:c5:97:d7:66:b3: d6:9a:51:36:00:03:e1:f7:5a:d9:53:af:e2:f4:63: eb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1C:6D:75:F1:31:BE:C8:F3:FC:78:44:F2:97:C3:B7:28:16:96:15 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/EBxtdfExvsjz_HhE8pfDtygWlhU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.6.0/24 88.216.98.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:06:19:16:bb:56:6a:5c:33:be:ee:f6:7c:4f:f5:39:d5:09: 4f:be:81:b5:a0:28:d3:d9:95:9a:b2:c7:74:7f:dc:15:b7:fe: 1e:75:19:ff:3e:57:60:59:f4:e5:7c:0f:3b:58:7d:98:f8:87: 76:ee:4e:9d:e3:0b:b8:7e:84:b2:3e:52:a2:28:80:40:14:be: 1a:97:d7:bf:67:6a:9c:f4:06:67:a0:aa:b6:af:45:77:b9:19: c6:00:03:0f:c4:15:52:af:4c:bc:36:0f:3e:56:cb:8f:77:22: c3:1c:5e:c3:b8:ff:c8:54:56:2a:f1:e1:68:5c:9e:28:10:47: bb:60:80:51:79:ed:de:ff:c5:63:f7:2d:c9:bd:a4:9d:43:bc: 0d:7e:92:08:ce:d5:4a:61:cd:87:8b:8b:e5:e2:c5:61:25:5e: 3a:3c:f8:00:12:f9:e7:97:2c:d7:72:11:b4:ea:4f:50:83:0e: a4:66:ca:a9:bb:15:01:bd:3d:c6:7f:09:86:64:28:d1:53:ac: 45:aa:69:98:cb:52:50:d1:81:a9:62:b9:5b:28:24:0d:e8:17: 48:cc:35:70:f5:05:1b:a2:e2:2e:5e:c7:d6:b5:63:8b:11:3c: 37:e9:1a:09:a8:4a:17:54:74:cd:98:02:63:83:ea:06:d1:f7: 1c:c2:8a:ef -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZp5O93vBWqeeUjLCfnmAObmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjUxMTEyMTgwMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDFjNmQ3NWYxMzFiZWM4ZjNmYzc4NDRmMjk3YzNiNzI4MTY5NjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqumG8Wn7enDNDyu18iDyQ/mZgrU0 kiTKYhkrq7RFKkH4ncXnTv1DCjfXzWzty53y06D+Ma1nVvhcOgklI+vzWo8Q/4p3 KSi7jEObJ242eR0v27UfWztC1iLHqW2476qry3Uw4Jx2iUO6opppn48KXkH6vS5m YX5E6XxVH0HKFmOAiUY9coAVRcE529o5xIm3WOuUNVn2xvcxIqGMdL/chtPdNoc+ r5wq9X3GE+MKYIzOsURYo0/BxD2nRzPNkfDeVz82JA5CuNlyKh8oTDUsQG1+2ZjT kXeEMrxSiuPxHT4Pw/mvSyPxS5FjxZfXZrPWmlE2AAPh91rZU6/i9GPr/QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBAcbXXxMb7I8/x4RPKXw7coFpYVMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvRUJ4dGRmRXh2c2p6X0hoRThwZkR0eWdXbGhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVCAGAwQA WNhiMA0GCSqGSIb3DQEBCwUAA4IBAQBPBhkWu1ZqXDO+7vZ8T/U51QlPvoG1oCjT 2ZWassd0f9wVt/4edRn/PldgWfTlfA87WH2Y+Id27k6d4wu4foSyPlKiKIBAFL4a l9e/Z2qc9AZnoKq2r0V3uRnGAAMPxBVSr0y8Ng8+VsuPdyLDHF7DuP/IVFYq8eFo XJ4oEEe7YIBRee3e/8Vj9y3JvaSdQ7wNfpIIztVKYc2Hi4vl4sVhJV46PPgAEvnn lyzXchG06k9Qgw6kZsqpuxUBvT3GfwmGZCjRU6xFqmmYy1JQ0YGpYrlbKCQN6BdI zDVw9QUbouIuXsfWtWOLETw36RoJqEoXVHTNmAJjg+oG0fccworv -----END CERTIFICATE-----Generated at Fri Dec 5 03:05:29 2025 by rpki-client