This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/I7FVyieNvrUlc5uWEQHmEV2eC20.roa File: I7FVyieNvrUlc5uWEQHmEV2eC20.roa (raw, json) Hash identifier: ourhDuMBrCejhb8bU5uTFUIqnsR40/olf1Q9ATKJH94= Subject key identifier: 23:B1:55:CA:27:8D:BE:B5:25:73:9B:96:11:01:E6:11:5D:9E:0B:6D Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80B3CF2F7EDDECC13CB15EA33E66D8 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/I7FVyieNvrUlc5uWEQHmEV2eC20.roa Signing time: Fri 02 Jan 2026 02:19:27 +0000 ROA not before: Fri 02 Jan 2026 02:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211192 IP address blocks: 84.32.173.0/24 maxlen: 24 88.216.56.0/24 maxlen: 24 88.216.59.0/24 maxlen: 24 88.216.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b3:cf:2f:7e:dd:ec:c1:3c:b1:5e:a3:3e:66:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23b155ca278dbeb525739b961101e6115d9e0b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:01:fc:c6:e7:4d:db:d5:d8:aa:45:cf:d6:67: 2f:5f:b7:8a:52:c8:78:3f:f6:73:a6:24:1c:ca:29: 51:ff:aa:09:1c:21:98:db:dd:82:a3:a7:fa:08:5c: 40:d4:8f:f8:4a:ca:fe:53:3c:9d:71:97:eb:18:ea: fe:8d:48:d8:8c:13:3e:ce:e3:0e:29:52:d7:81:9b: 7b:7d:27:26:b1:4e:00:5d:3a:24:5c:3d:e6:8c:60: 14:b0:38:a3:cc:ed:7c:04:1d:16:6a:af:c1:69:82: 03:7b:36:cf:e8:bf:9d:b2:69:cb:41:96:78:28:d8: c6:65:50:57:4b:36:d5:93:d3:2e:9b:7a:36:38:e2: 54:10:ec:3b:2c:b2:84:2c:e9:02:cb:24:fe:d6:0c: 28:de:9c:b2:86:e3:0e:55:a6:1a:dd:15:17:7e:f1: 20:b8:44:5c:4e:2f:48:f5:8c:ce:4d:d9:32:f8:cf: d9:cb:bb:31:db:1d:14:6d:15:1e:74:49:23:4a:7f: 1f:d7:16:e1:0e:27:94:a9:c2:f0:fa:a5:34:ac:08: 9c:c1:bf:4c:f3:00:f0:8d:84:f6:02:e1:e7:c7:a6: 06:83:2a:dc:0c:8e:14:e4:3b:77:4f:9e:b5:bb:c1: b9:d6:a1:11:a6:ab:30:0c:33:0d:fb:07:9c:fa:35: 54:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B1:55:CA:27:8D:BE:B5:25:73:9B:96:11:01:E6:11:5D:9E:0B:6D X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/I7FVyieNvrUlc5uWEQHmEV2eC20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.173.0/24 88.216.56.0/24 88.216.59.0/24 88.216.232.0/22 Signature Algorithm: sha256WithRSAEncryption 12:33:43:f0:5d:1f:d7:22:d5:22:55:7a:84:d2:8f:14:4d:c8: 79:e6:7d:34:e4:e5:e5:ce:ad:39:5f:f8:e3:b3:0f:38:88:a5: 48:57:16:d6:62:14:02:e1:4e:49:8d:57:d5:fc:18:73:60:bc: d0:b4:9d:66:13:15:cf:35:a3:31:12:47:51:8c:6f:f9:b3:d2: 9a:3c:24:e1:29:c3:0d:5c:2d:09:fc:ce:5d:9e:88:f3:01:67: d2:81:82:0e:4d:d0:a3:1f:2e:40:7b:0e:80:f4:b1:db:0a:f1: 75:97:f9:28:70:2c:4c:eb:8d:6c:b6:8d:76:f4:39:86:19:de: b0:c7:8a:fb:99:bb:5e:36:0e:ec:cf:37:77:24:a2:b8:a2:d9: a9:75:ab:26:ba:b2:74:07:f4:a5:12:a3:0b:06:a8:7a:d3:7a: fa:26:12:b2:9f:fb:54:f4:08:20:38:b9:9a:26:e5:2b:a4:b3: b4:d1:c6:5e:77:92:50:ee:ff:25:11:f8:6b:19:8f:57:67:b1: 84:e2:f4:91:65:72:4f:81:10:fd:f5:9c:dd:fc:5e:f5:ca:51: 44:71:75:3c:c5:fb:22:39:f6:84:41:54:47:b7:3d:30:ea:c4: 74:88:17:f3:12:d5:d1:46:2c:35:21:98:b9:22:5d:81:31:87: 25:d6:b7:e5 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8gLPPL37d7ME8sV6jPmbYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2IxNTVjYTI3OGRiZWI1MjU3MzliOTYxMTAxZTYxMTVkOWUwYjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwH8xudN29XYqkXP1mcvX7eKUsh4 P/ZzpiQcyilR/6oJHCGY292Co6f6CFxA1I/4Ssr+UzydcZfrGOr+jUjYjBM+zuMO KVLXgZt7fScmsU4AXTokXD3mjGAUsDijzO18BB0Waq/BaYIDezbP6L+dsmnLQZZ4 KNjGZVBXSzbVk9Mum3o2OOJUEOw7LLKELOkCyyT+1gwo3pyyhuMOVaYa3RUXfvEg uERcTi9I9YzOTdky+M/Zy7sx2x0UbRUedEkjSn8f1xbhDieUqcLw+qU0rAicwb9M 8wDwjYT2AuHnx6YGgyrcDI4U5Dt3T561u8G51qERpqswDDMN+wec+jVUawIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCOxVconjb61JXOblhEB5hFdngttMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvSTdGVnlpZU52clVsYzV1V0VRSG1FVjJlQzIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVCCtAwQA WNg4AwQAWNg7AwQCWNjoMA0GCSqGSIb3DQEBCwUAA4IBAQASM0PwXR/XItUiVXqE 0o8UTch55n005OXlzq05X/jjsw84iKVIVxbWYhQC4U5JjVfV/BhzYLzQtJ1mExXP NaMxEkdRjG/5s9KaPCThKcMNXC0J/M5dnojzAWfSgYIOTdCjHy5Aew6A9LHbCvF1 l/kocCxM641sto129DmGGd6wx4r7mbteNg7szzd3JKK4otmpdasmurJ0B/SlEqML Bqh603r6JhKyn/tU9AggOLmaJuUrpLO00cZed5JQ7v8lEfhrGY9XZ7GE4vSRZXJP gRD99Zzd/F71ylFEcXU8xfsiOfaEQVRHtz0w6sR0iBfzEtXRRiw1IZi5Il2BMYcl 1rfl -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:05 2026 by rpki-client