This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/U0JSuNUuTjLl7dVWH1P5_IgxE8Q.roa File: U0JSuNUuTjLl7dVWH1P5_IgxE8Q.roa (raw, json) Hash identifier: B3mwus/U3ubR2jHQcwiuf+pe9c1sR1cWKUfspDKkWU4= Subject key identifier: 53:42:52:B8:D5:2E:4E:32:E5:ED:D5:56:1F:53:F9:FC:88:31:13:C4 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019AC9BF4B27AF941A176B06416F6FC1969C Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/U0JSuNUuTjLl7dVWH1P5_IgxE8Q.roa Signing time: Fri 28 Nov 2025 09:15:48 +0000 ROA not before: Fri 28 Nov 2025 09:15:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29802 IP address blocks: 84.32.111.0/24 maxlen: 24 88.216.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 18:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:bf:4b:27:af:94:1a:17:6b:06:41:6f:6f:c1:96:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Nov 28 09:15:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=534252b8d52e4e32e5edd5561f53f9fc883113c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:02:5c:83:ef:29:64:d4:e8:be:f6:d3:d6:f7: d4:61:8a:f4:ef:2c:34:d7:fd:58:c4:05:ea:9e:66: 1c:78:dd:2b:15:60:74:a1:4e:fc:55:96:a4:68:c7: 49:1c:47:b8:4e:e3:54:be:30:52:fc:7d:10:94:c8: f3:0a:7c:47:a5:d4:ca:61:76:93:2c:21:ec:53:61: 71:9d:ab:e0:48:ea:fc:07:12:cf:bf:ce:97:48:91: bf:63:3f:09:8e:ff:64:66:73:7b:0f:33:88:b4:48: 99:04:ea:01:0a:c2:93:f1:7c:aa:19:92:8f:ae:cc: 7f:a9:b7:79:fc:db:09:28:bd:0e:b5:80:5a:a6:2c: a4:e4:15:06:96:aa:07:c8:aa:24:1b:5a:03:7b:ca: ab:00:3d:22:81:75:7d:43:3a:4b:a2:3f:23:d2:5d: 1d:af:f5:5c:e6:93:f1:44:4b:99:00:52:46:b3:11: c6:71:b8:21:c4:e8:fc:27:b6:45:ed:86:6a:bd:0e: b8:b1:dd:5d:91:46:ba:60:9f:45:75:19:1c:61:48: 59:69:d5:66:8a:cf:4b:fd:ae:cc:58:5f:21:4a:e1: e2:4b:c7:44:a1:71:9d:0e:bd:93:a5:57:5a:e0:0d: bd:f2:ed:13:46:d6:9e:61:25:40:ca:dc:08:21:61: ff:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:42:52:B8:D5:2E:4E:32:E5:ED:D5:56:1F:53:F9:FC:88:31:13:C4 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/U0JSuNUuTjLl7dVWH1P5_IgxE8Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.111.0/24 88.216.100.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:60:66:fd:72:58:63:bc:29:25:1a:b4:40:aa:0b:53:2c:eb: 14:65:30:b6:e5:28:6c:9c:61:7f:a3:25:45:c1:2f:e4:c3:41: 52:52:7e:52:27:34:3f:00:74:e6:32:a1:67:8f:33:7c:58:5b: 9e:5a:7e:20:df:77:fc:22:5f:b8:4e:75:8c:ad:0e:b2:a0:5f: 9f:d2:26:4b:80:3f:f8:b7:0b:c3:df:59:19:4b:1f:ef:f7:9d: 42:7a:2c:b4:99:b1:e6:80:4a:d4:8c:26:a8:30:ac:66:4b:4f: 69:ff:72:ba:29:ce:3b:b8:0c:d6:6f:47:5d:c6:ad:95:16:e7: 25:bf:24:58:fb:b7:c5:47:4d:5f:7c:32:4e:ce:f4:fb:eb:4e: ab:9f:3e:2e:6f:bc:06:ab:0c:a6:7a:ae:d8:8d:c8:40:1c:3f: af:24:f1:b3:38:62:b6:d2:71:cb:f7:6d:38:7d:83:93:06:33: 05:fb:de:ce:b8:18:e4:f3:29:fe:1e:c5:71:0b:5f:33:f7:96: 94:f1:b3:f7:e6:3b:af:59:36:44:b5:b7:29:ed:32:0b:02:d0: 99:1f:d7:54:03:d2:97:69:ac:dd:1e:75:dc:1e:be:aa:09:50: 03:d4:f3:e1:c4:49:a3:20:b4:80:99:40:36:58:a0:4d:9f:ed: 70:ac:94:dd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrJv0snr5QaF2sGQW9vwZacMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjUxMTI4MDkxNTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzQyNTJiOGQ1MmU0ZTMyZTVlZGQ1NTYxZjUzZjlmYzg4MzExM2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAJcg+8pZNTovvbT1vfUYYr07yw0 1/1YxAXqnmYceN0rFWB0oU78VZakaMdJHEe4TuNUvjBS/H0QlMjzCnxHpdTKYXaT LCHsU2FxnavgSOr8BxLPv86XSJG/Yz8Jjv9kZnN7DzOItEiZBOoBCsKT8XyqGZKP rsx/qbd5/NsJKL0OtYBapiyk5BUGlqoHyKokG1oDe8qrAD0igXV9QzpLoj8j0l0d r/Vc5pPxREuZAFJGsxHGcbghxOj8J7ZF7YZqvQ64sd1dkUa6YJ9FdRkcYUhZadVm is9L/a7MWF8hSuHiS8dEoXGdDr2TpVda4A298u0TRtaeYSVAytwIIWH/AwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFNCUrjVLk4y5e3VVh9T+fyIMRPEMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvVTBKU3VOVXVUakxsN2RWV0gxUDVfSWd4RThRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVCBvAwQA WNhkMA0GCSqGSIb3DQEBCwUAA4IBAQCLYGb9clhjvCklGrRAqgtTLOsUZTC25Shs nGF/oyVFwS/kw0FSUn5SJzQ/AHTmMqFnjzN8WFueWn4g33f8Il+4TnWMrQ6yoF+f 0iZLgD/4twvD31kZSx/v951Ceiy0mbHmgErUjCaoMKxmS09p/3K6Kc47uAzWb0dd xq2VFuclvyRY+7fFR01ffDJOzvT7606rnz4ub7wGqwymeq7YjchAHD+vJPGzOGK2 0nHL9204fYOTBjMF+97OuBjk8yn+HsVxC18z95aU8bP35juvWTZEtbcp7TILAtCZ H9dUA9KXaazdHnXcHr6qCVAD1PPhxEmjILSAmUA2WKBNn+1wrJTd -----END CERTIFICATE-----Generated at Fri Dec 5 03:05:29 2025 by rpki-client