This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/P8aHN4RPmuD7eoOGoYor_VB6uJo.roa File: P8aHN4RPmuD7eoOGoYor_VB6uJo.roa (raw, json) Hash identifier: TmeDfPfKJ+hzPixXvw5YqUl3mDL0JQFr2UWElCN0E24= Subject key identifier: 3F:C6:87:37:84:4F:9A:E0:FB:7A:83:86:A1:8A:2B:FD:50:7A:B8:9A Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80A5511C519DD0010481BCCF6AE071 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/P8aHN4RPmuD7eoOGoYor_VB6uJo.roa Signing time: Fri 02 Jan 2026 02:19:24 +0000 ROA not before: Fri 02 Jan 2026 02:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54252 IP address blocks: 84.32.20.0/24 maxlen: 24 84.32.58.0/24 maxlen: 24 84.32.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a5:51:1c:51:9d:d0:01:04:81:bc:cf:6a:e0:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fc68737844f9ae0fb7a8386a18a2bfd507ab89a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:90:c3:e9:aa:b4:bd:5f:c8:2d:df:cd:65:b6: 3b:cd:9e:74:11:52:c4:be:b4:a3:a1:5d:a7:df:2a: 15:05:24:e4:8d:c1:53:00:8f:75:a1:d6:42:f1:28: 23:86:cf:0f:8e:dc:c3:4d:b9:fb:38:7c:e9:d3:f8: 8c:9d:0e:da:a3:2e:97:23:e7:bc:3b:d1:6b:25:02: fc:e5:81:2d:43:3f:c8:eb:dd:bc:64:eb:db:15:75: 95:41:da:3f:71:fd:95:e9:d2:dd:74:dc:81:46:d5: f2:af:23:be:49:5d:e1:84:f7:a3:80:f9:60:4a:8a: 83:e9:12:af:a2:d3:6b:2a:5c:52:ed:77:7e:23:44: 57:b4:15:0c:45:4b:37:92:ad:a5:15:7e:51:6b:ac: ae:8d:f1:fd:81:d4:49:6f:32:89:83:cb:76:8c:8e: 04:11:93:34:c9:87:a8:d8:ea:16:23:94:39:4e:53: 5d:2e:3d:48:5a:46:3a:46:5b:59:eb:1a:29:2f:6f: 9d:d3:99:fa:dd:86:b7:d6:33:6e:49:d7:0d:ca:c5: 6f:1b:12:3e:cc:86:32:23:81:28:e1:e6:c5:3b:97: 4c:c0:7d:64:b6:5e:a3:c8:50:59:a9:d7:88:bc:5a: 4f:18:6c:f3:54:b8:ee:d9:65:3b:45:49:80:d6:ab: b2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C6:87:37:84:4F:9A:E0:FB:7A:83:86:A1:8A:2B:FD:50:7A:B8:9A X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/P8aHN4RPmuD7eoOGoYor_VB6uJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.20.0/24 84.32.58.0/24 84.32.60.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:c6:fe:fb:1c:63:33:74:fc:0f:00:5a:ce:04:e0:82:9b:c1: 6e:df:c6:6f:83:dc:a7:c6:b1:f6:70:5d:fc:6c:3d:a0:18:bb: a3:47:14:d3:88:7d:81:66:d8:0d:80:ee:33:80:8c:7c:f5:93: 51:31:b6:6e:a6:7d:ab:34:ed:af:f9:68:41:77:12:7b:3e:97: a9:b0:fc:62:44:79:8f:c9:c7:c0:98:70:66:73:5c:82:c7:a7: 13:a1:3e:14:d3:f4:9e:d3:03:fa:87:61:19:e3:50:7d:56:24: 3f:31:9b:21:74:e2:23:26:c7:10:51:aa:1d:a1:05:f9:81:f5: b6:c9:72:b9:f3:29:ca:de:cc:62:63:cf:ec:f9:ff:c1:15:a6: 8c:0d:7e:64:99:26:7c:e3:75:81:bb:be:f8:53:aa:84:f7:45: fb:bc:5c:74:22:78:35:8a:7f:0b:63:3c:37:3f:01:7b:60:af: 1f:af:54:f4:36:96:65:80:b8:aa:b2:59:81:1e:ed:89:40:55: d1:19:98:f4:5c:13:54:8f:ba:b5:d7:89:ef:24:ab:24:df:8d: 46:a4:dc:e4:b3:ef:22:67:50:97:16:78:e4:d6:de:7d:4d:48: 7c:2a:2f:37:bf:53:7d:93:15:6d:8c:34:49:1d:9e:12:c4:4c: d7:53:b9:68 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gKVRHFGd0AEEgbzPauBxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmM2ODczNzg0NGY5YWUwZmI3YTgzODZhMThhMmJmZDUwN2FiODlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypDD6aq0vV/ILd/NZbY7zZ50EVLE vrSjoV2n3yoVBSTkjcFTAI91odZC8Sgjhs8PjtzDTbn7OHzp0/iMnQ7aoy6XI+e8 O9FrJQL85YEtQz/I6928ZOvbFXWVQdo/cf2V6dLddNyBRtXyryO+SV3hhPejgPlg SoqD6RKvotNrKlxS7Xd+I0RXtBUMRUs3kq2lFX5Ra6yujfH9gdRJbzKJg8t2jI4E EZM0yYeo2OoWI5Q5TlNdLj1IWkY6RltZ6xopL2+d05n63Ya31jNuSdcNysVvGxI+ zIYyI4Eo4ebFO5dMwH1ktl6jyFBZqdeIvFpPGGzzVLju2WU7RUmA1quyWwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFD/GhzeET5rg+3qDhqGKK/1QeriaMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvUDhhSE40UlBtdUQ3ZW9PR29Zb3JfVkI2dUpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVCAUAwQA VCA6AwQAVCA8MA0GCSqGSIb3DQEBCwUAA4IBAQBrxv77HGMzdPwPAFrOBOCCm8Fu 38Zvg9ynxrH2cF38bD2gGLujRxTTiH2BZtgNgO4zgIx89ZNRMbZupn2rNO2v+WhB dxJ7PpepsPxiRHmPycfAmHBmc1yCx6cToT4U0/Se0wP6h2EZ41B9ViQ/MZshdOIj JscQUaodoQX5gfW2yXK58ynK3sxiY8/s+f/BFaaMDX5kmSZ843WBu774U6qE90X7 vFx0Ing1in8LYzw3PwF7YK8fr1T0NpZlgLiqslmBHu2JQFXRGZj0XBNUj7q114nv JKsk341GpNzks+8iZ1CXFnjk1t59TUh8Ki83v1N9kxVtjDRJHZ4SxEzXU7lo -----END CERTIFICATE-----Generated at Mon Jan 19 13:52:59 2026 by rpki-client