This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/FfKA3vwdc8u4zIZ8bBPypn9vJbM.roa File: FfKA3vwdc8u4zIZ8bBPypn9vJbM.roa (raw, json) Hash identifier: UX0jpcw7bA2O1tBdbPNpDqdmtYpd69Q1YU8q8rxQmdk= Subject key identifier: 15:F2:80:DE:FC:1D:73:CB:B8:CC:86:7C:6C:13:F2:A6:7F:6F:25:B3 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C809D47E987E42CF322A0AD9CC2E111 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/FfKA3vwdc8u4zIZ8bBPypn9vJbM.roa Signing time: Fri 02 Jan 2026 02:19:22 +0000 ROA not before: Fri 02 Jan 2026 02:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19437 IP address blocks: 84.32.40.0/24 maxlen: 24 88.216.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:9d:47:e9:87:e4:2c:f3:22:a0:ad:9c:c2:e1:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15f280defc1d73cbb8cc867c6c13f2a67f6f25b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ab:62:84:a5:f0:0f:16:27:9b:dd:4c:39:9c: 91:ee:4d:fd:6f:99:c7:65:3e:6c:8d:1b:45:98:c4: 74:f8:88:3f:45:9c:12:af:95:77:55:d4:1f:34:ab: cf:97:35:97:64:d0:3a:42:a8:03:c2:b2:68:94:62: 6c:a1:03:d8:df:08:6f:7e:f1:e5:d1:af:8e:2e:e6: 5f:97:2d:36:f7:61:5f:e3:64:ae:c0:75:c6:3c:3e: 17:1e:f6:41:12:64:f3:02:01:c5:b3:7a:10:3e:db: 41:cf:98:6a:a8:4d:11:c4:09:0a:80:37:9e:b8:b6: a2:bc:15:fe:15:ed:8a:ed:5d:f4:ad:12:d5:d9:cb: bb:e1:4b:db:6a:bd:ec:23:1d:2f:af:31:bf:61:2e: 2c:3f:17:15:7a:be:01:ab:af:d7:5f:0a:5b:85:61: bd:1c:cf:18:05:b5:03:09:c6:75:08:15:64:db:c0: c8:a3:4d:d2:42:25:e5:f7:80:16:6f:db:93:9c:06: 02:3a:24:9d:79:8c:43:d2:6f:5d:24:d7:3e:12:8b: 10:01:17:ca:61:8b:cb:b7:3e:b8:be:1e:ca:20:fd: 1a:8a:30:0f:92:fc:60:a1:6b:e5:28:fb:8c:cd:9d: ae:42:83:e2:b2:fd:89:da:f5:17:20:5d:06:85:80: 39:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F2:80:DE:FC:1D:73:CB:B8:CC:86:7C:6C:13:F2:A6:7F:6F:25:B3 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/FfKA3vwdc8u4zIZ8bBPypn9vJbM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.40.0/24 88.216.133.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:3a:40:5f:a1:02:25:35:21:4b:28:42:87:24:08:99:e2:9e: e8:bc:e4:4c:03:da:4a:e7:15:a0:cb:f7:d7:57:93:6b:ee:bc: da:81:a8:3b:ad:fa:68:e0:19:22:86:f5:32:2a:83:9b:f0:7e: 77:d1:f5:d3:7a:ce:a0:e4:8b:80:56:25:a0:13:2d:f7:50:d4: b7:f8:91:65:5c:00:54:bf:31:30:e7:b3:57:57:b8:5f:f1:cc: ff:9e:0e:49:dd:d0:c0:3b:9e:47:0f:a8:5d:1e:9b:39:3c:fd: dd:a0:1e:5b:28:e0:bd:af:79:49:bb:60:a5:91:3e:0a:bb:7a: 19:07:1f:ec:4b:4a:ad:15:4a:de:cf:29:b3:21:b4:3f:0e:21: e1:8f:41:e9:9f:99:61:73:60:91:fb:aa:73:5d:7a:6d:31:c7: 76:b5:20:c6:47:3c:75:fe:bb:9b:71:c1:c8:ac:64:0b:6f:75: b2:b3:48:a3:65:a8:7d:bb:d0:bc:ad:88:e9:dc:e9:2e:5e:2b: 19:a0:5c:77:30:02:59:7f:7f:33:10:fa:e6:66:1f:da:09:5f: 32:a2:58:71:3f:79:b7:6b:a8:77:91:95:5f:8f:60:3b:24:3b: f1:1d:31:c2:0a:ed:1e:6e:a3:60:19:0c:b9:a2:1b:b9:56:51: f8:b6:db:0c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gJ1H6YfkLPMioK2cwuERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWYyODBkZWZjMWQ3M2NiYjhjYzg2N2M2YzEzZjJhNjdmNmYyNWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqtihKXwDxYnm91MOZyR7k39b5nH ZT5sjRtFmMR0+Ig/RZwSr5V3VdQfNKvPlzWXZNA6QqgDwrJolGJsoQPY3whvfvHl 0a+OLuZfly0292Ff42SuwHXGPD4XHvZBEmTzAgHFs3oQPttBz5hqqE0RxAkKgDee uLaivBX+Fe2K7V30rRLV2cu74Uvbar3sIx0vrzG/YS4sPxcVer4Bq6/XXwpbhWG9 HM8YBbUDCcZ1CBVk28DIo03SQiXl94AWb9uTnAYCOiSdeYxD0m9dJNc+EosQARfK YYvLtz64vh7KIP0aijAPkvxgoWvlKPuMzZ2uQoPisv2J2vUXIF0GhYA5JQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBXygN78HXPLuMyGfGwT8qZ/byWzMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvRmZLQTN2d2RjOHU0eklaOGJCUHlwbjl2SmJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVCAoAwQA WNiFMA0GCSqGSIb3DQEBCwUAA4IBAQBfOkBfoQIlNSFLKEKHJAiZ4p7ovORMA9pK 5xWgy/fXV5Nr7rzagag7rfpo4BkihvUyKoOb8H530fXTes6g5IuAViWgEy33UNS3 +JFlXABUvzEw57NXV7hf8cz/ng5J3dDAO55HD6hdHps5PP3doB5bKOC9r3lJu2Cl kT4Ku3oZBx/sS0qtFUrezymzIbQ/DiHhj0Hpn5lhc2CR+6pzXXptMcd2tSDGRzx1 /rubccHIrGQLb3Wys0ijZah9u9C8rYjp3OkuXisZoFx3MAJZf38zEPrmZh/aCV8y olhxP3m3a6h3kZVfj2A7JDvxHTHCCu0ebqNgGQy5ohu5VlH4ttsM -----END CERTIFICATE-----Generated at Mon Jan 19 13:53:34 2026 by rpki-client