This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RazqtLALkqAK_qKGbGQ_g7fYeRs.roa File: RazqtLALkqAK_qKGbGQ_g7fYeRs.roa (raw, json) Hash identifier: 3ZuYoW1SnTQKvEh6QASzxNffawGtQmHBzEUw4ES8F0g= Subject key identifier: 45:AC:EA:B4:B0:0B:92:A0:0A:FE:A2:86:6C:64:3F:83:B7:D8:79:1B Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019BB8F445C64A411C6FC5040CACB3EB55AB Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RazqtLALkqAK_qKGbGQ_g7fYeRs.roa Signing time: Tue 13 Jan 2026 20:02:54 +0000 ROA not before: Tue 13 Jan 2026 20:02:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59642 IP address blocks: 84.32.64.0/24 maxlen: 24 84.32.96.0/24 maxlen: 24 84.32.101.0/24 maxlen: 24 84.32.102.0/24 maxlen: 24 84.32.103.0/24 maxlen: 24 84.32.104.0/24 maxlen: 24 84.32.176.0/24 maxlen: 24 84.32.184.0/22 maxlen: 24 84.32.188.0/22 maxlen: 22 84.32.231.0/24 maxlen: 24 88.216.61.0/24 maxlen: 24 88.216.63.0/24 maxlen: 24 88.216.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b8:f4:45:c6:4a:41:1c:6f:c5:04:0c:ac:b3:eb:55:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 13 20:02:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45aceab4b00b92a00afea2866c643f83b7d8791b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c7:99:6c:0b:a2:47:6a:22:fd:22:53:69:b0: 8a:dd:cb:aa:06:6e:6a:c8:22:ea:db:2d:52:55:c2: 74:7d:d8:f9:df:d1:7c:6e:bd:4c:e0:05:32:c2:d5: 3e:ae:76:cf:13:31:1f:e3:d6:e5:b0:b4:bc:3a:a8: bd:08:01:29:36:6d:1c:74:f4:87:83:2c:07:33:e4: 80:c5:29:db:a1:88:d3:d7:a7:7e:ab:50:a5:e5:f8: 0f:77:99:bc:52:e7:ed:0c:d4:ac:96:a1:fd:8c:44: 8a:bb:6f:2e:cc:1b:f3:4c:f1:ef:46:20:a4:f8:6f: 96:ea:43:e0:3c:5a:70:06:7a:31:52:4c:89:72:f6: 96:4b:d0:3a:27:ae:aa:fb:75:4a:d0:07:5b:0f:1b: bc:38:45:59:8c:e4:e5:44:b3:de:e6:4c:62:9e:02: dc:46:0a:c5:61:78:bc:da:22:05:68:60:d1:25:4f: c7:3b:50:76:eb:4a:cf:c9:90:ac:1e:f5:e3:85:af: ae:ae:19:7a:cb:e0:09:d9:a9:a5:36:6b:cc:f9:28: 3d:3b:aa:b4:3f:6d:ea:0b:67:8f:80:14:65:93:61: cb:f6:0a:82:3f:01:b9:61:3d:04:75:b0:3b:4a:c4: e8:77:44:26:31:2b:00:ae:78:81:25:15:ee:0c:8d: 15:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AC:EA:B4:B0:0B:92:A0:0A:FE:A2:86:6C:64:3F:83:B7:D8:79:1B X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RazqtLALkqAK_qKGbGQ_g7fYeRs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.64.0/24 84.32.96.0/24 84.32.101.0-84.32.104.255 84.32.176.0/24 84.32.184.0/21 84.32.231.0/24 88.216.61.0/24 88.216.63.0/24 88.216.187.0/24 Signature Algorithm: sha256WithRSAEncryption 23:4a:37:75:52:9e:03:1c:39:21:12:00:bf:1b:1b:92:e4:66: da:66:a7:50:eb:9a:c3:6f:2c:a4:23:27:0e:5b:29:78:be:ec: ed:81:65:2e:59:80:1a:35:a3:e3:79:dc:a7:17:1e:3b:26:77: 49:60:88:68:cf:fe:d0:a1:1e:1f:92:34:7a:88:00:04:6f:6c: 5a:34:90:9c:2a:74:7a:c4:82:8c:63:d6:f4:cc:93:64:d0:6f: e2:9b:60:94:c9:86:37:ce:21:e7:7e:d6:ad:69:58:f7:9f:6c: 40:20:f5:92:ac:f0:4f:3b:90:86:9f:0e:5c:04:11:d9:66:3e: 68:30:f6:12:12:34:63:18:7e:49:f8:e6:c1:61:e4:3b:5d:41: cc:14:09:24:74:da:63:07:d9:c3:a4:84:41:7a:e9:f5:d6:52: ee:da:19:ba:3b:3e:99:7e:ac:2f:e9:39:ee:6b:46:4d:9c:74: ab:fa:99:67:b4:a7:90:7b:c5:ac:fc:f9:a6:a7:c1:32:a6:39: 93:43:a8:64:7d:b1:6d:6e:28:23:c6:f1:9a:ec:51:51:23:93: 84:e3:1d:32:2f:14:29:a1:df:53:0b:1c:80:e5:21:c3:a2:69: e2:cf:d6:cd:52:bf:79:a4:f6:9b:41:ca:df:72:42:fa:7a:f1: 10:c7:25:e0 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZu49EXGSkEcb8UEDKyz61WrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTEzMjAwMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWFjZWFiNGIwMGI5MmEwMGFmZWEyODY2YzY0M2Y4M2I3ZDg3OTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqseZbAuiR2oi/SJTabCK3cuqBm5q yCLq2y1SVcJ0fdj539F8br1M4AUywtU+rnbPEzEf49blsLS8Oqi9CAEpNm0cdPSH gywHM+SAxSnboYjT16d+q1Cl5fgPd5m8UuftDNSslqH9jESKu28uzBvzTPHvRiCk +G+W6kPgPFpwBnoxUkyJcvaWS9A6J66q+3VK0AdbDxu8OEVZjOTlRLPe5kxingLc RgrFYXi82iIFaGDRJU/HO1B260rPyZCsHvXjha+urhl6y+AJ2amlNmvM+Sg9O6q0 P23qC2ePgBRlk2HL9gqCPwG5YT0EdbA7SsTod0QmMSsArniBJRXuDI0VBwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFEWs6rSwC5KgCv6ihmxkP4O32HkbMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvUmF6cXRMQUxrcUFLX3FLR2JHUV9nN2ZZZVJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAVCBAAwQA VCBgMAwDBABUIGUDBABUIGgDBABUILADBANUILgDBABUIOcDBABY2D0DBABY2D8D BABY2LswDQYJKoZIhvcNAQELBQADggEBACNKN3VSngMcOSESAL8bG5LkZtpmp1Dr msNvLKQjJw5bKXi+7O2BZS5ZgBo1o+N53KcXHjsmd0lgiGjP/tChHh+SNHqIAARv bFo0kJwqdHrEgoxj1vTMk2TQb+KbYJTJhjfOIed+1q1pWPefbEAg9ZKs8E87kIaf DlwEEdlmPmgw9hISNGMYfkn45sFh5DtdQcwUCSR02mMH2cOkhEF66fXWUu7aGbo7 Ppl+rC/pOe5rRk2cdKv6mWe0p5B7xaz8+aanwTKmOZNDqGR9sW1uKCPG8ZrsUVEj k4TjHTIvFCmh31MLHIDlIcOiaeLP1s1Sv3mk9ptByt9yQvp68RDHJeA= -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:15 2026 by rpki-client