This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Xvna-ewwtDOefU7_qXkxQHc0q00.roa File: Xvna-ewwtDOefU7_qXkxQHc0q00.roa (raw, json) Hash identifier: vRq0Oq6sQo6H7/5T6akse4W9yoGgEUeEAZPVZ+7ypL8= Subject key identifier: 5E:F9:DA:F9:EC:30:B4:33:9E:7D:4E:FF:A9:79:31:40:77:34:AB:4D Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80A857E8A66517B206E33CEA96D95C Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Xvna-ewwtDOefU7_qXkxQHc0q00.roa Signing time: Fri 02 Jan 2026 02:19:25 +0000 ROA not before: Fri 02 Jan 2026 02:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62164 IP address blocks: 84.32.5.0/24 maxlen: 24 88.216.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a8:57:e8:a6:65:17:b2:06:e3:3c:ea:96:d9:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ef9daf9ec30b4339e7d4effa97931407734ab4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:80:6a:07:8f:ab:6b:2b:f8:dc:9c:d6:7c:a8: cc:03:4e:98:0e:2d:83:5f:e4:d0:7f:3e:68:10:69: a5:82:b9:fe:fa:65:41:0c:d2:60:59:c9:90:42:77: 14:15:2e:e9:c5:67:5f:4a:7d:2e:ee:2a:78:f0:a4: ae:4b:b6:c0:01:cf:18:2b:3a:f4:f5:6a:5d:39:db: 4a:06:60:0f:57:38:8c:ff:db:0a:48:53:ab:30:50: 38:fc:60:5e:04:29:c8:51:12:64:a5:9e:9f:c7:fa: fe:30:4c:d4:1c:06:41:32:9a:d2:a0:da:c1:a3:4b: a2:15:54:84:d7:c6:d1:bd:98:81:c5:c7:d1:f4:5e: f1:33:47:67:68:58:c6:d8:6d:8f:89:77:29:36:14: fc:97:f9:db:97:81:6a:cf:39:88:de:d9:9b:ea:7b: 66:24:d8:90:f4:52:2a:13:90:aa:6b:3d:f3:3c:c8: d3:c1:46:45:77:dd:34:17:17:7c:11:c6:76:ee:fc: 79:54:7a:59:52:d2:c8:20:67:f5:65:9c:b9:37:67: 3f:ff:bd:19:0c:46:cb:8a:ab:3f:1d:1a:93:26:c7: a7:27:8a:4c:32:5a:4c:8e:6e:f5:fd:9e:ad:54:44: 35:7e:59:43:10:52:42:af:95:6e:f9:7e:b2:55:43: 8d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F9:DA:F9:EC:30:B4:33:9E:7D:4E:FF:A9:79:31:40:77:34:AB:4D X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Xvna-ewwtDOefU7_qXkxQHc0q00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.5.0/24 88.216.99.0/24 Signature Algorithm: sha256WithRSAEncryption 54:bf:7d:93:65:c6:fa:ae:f0:20:69:c1:3f:dd:05:4d:b0:2b: c3:b1:f4:0a:83:ef:2b:98:76:e7:87:f0:fb:57:94:c2:5e:34: 8f:4a:fe:b3:20:e1:b4:10:b4:5e:5f:ef:e3:f5:af:49:4b:b5: b3:e5:94:20:ac:3b:cb:ea:3d:34:20:0f:5a:ed:da:e6:37:5c: f9:72:eb:d7:3f:1b:a4:a4:bd:06:d7:32:e4:a2:29:ee:32:36: 02:eb:87:64:d8:a4:d8:41:12:71:57:3f:ba:5a:74:bb:4b:94: 2e:eb:4f:67:fa:eb:d1:83:2c:a7:24:6d:81:06:c8:16:21:d1: 13:49:41:46:b9:a6:6a:e7:d4:4a:32:85:05:34:92:5e:b0:49: ef:b9:03:34:c3:08:a8:78:f3:c2:d7:ba:90:6d:2f:06:ab:91: f9:6c:83:c9:02:08:22:6d:ff:cd:7e:e8:66:f1:fd:b2:65:0b: 17:d8:89:23:ac:d0:9d:fc:e0:3b:83:b5:1c:36:d7:95:ca:42: 23:82:b7:4b:27:15:56:58:87:55:f6:19:fb:fc:19:b6:80:23: 6c:e1:b1:db:38:47:b6:8d:ea:ea:26:31:62:66:5a:b7:c1:f7: 46:96:7a:33:0b:a2:de:14:94:58:2a:6e:62:a2:98:1a:33:1c: b8:cc:c7:e4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gKhX6KZlF7IG4zzqltlcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWY5ZGFmOWVjMzBiNDMzOWU3ZDRlZmZhOTc5MzE0MDc3MzRhYjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14BqB4+rayv43JzWfKjMA06YDi2D X+TQfz5oEGmlgrn++mVBDNJgWcmQQncUFS7pxWdfSn0u7ip48KSuS7bAAc8YKzr0 9WpdOdtKBmAPVziM/9sKSFOrMFA4/GBeBCnIURJkpZ6fx/r+MEzUHAZBMprSoNrB o0uiFVSE18bRvZiBxcfR9F7xM0dnaFjG2G2PiXcpNhT8l/nbl4FqzzmI3tmb6ntm JNiQ9FIqE5Cqaz3zPMjTwUZFd900Fxd8EcZ27vx5VHpZUtLIIGf1ZZy5N2c//70Z DEbLiqs/HRqTJsenJ4pMMlpMjm71/Z6tVEQ1fllDEFJCr5Vu+X6yVUON9QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFF752vnsMLQznn1O/6l5MUB3NKtNMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvWHZuYS1ld3d0RE9lZlU3X3FYa3hRSGMwcTAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVCAFAwQA WNhjMA0GCSqGSIb3DQEBCwUAA4IBAQBUv32TZcb6rvAgacE/3QVNsCvDsfQKg+8r mHbnh/D7V5TCXjSPSv6zIOG0ELReX+/j9a9JS7Wz5ZQgrDvL6j00IA9a7drmN1z5 cuvXPxukpL0G1zLkoinuMjYC64dk2KTYQRJxVz+6WnS7S5Qu609n+uvRgyynJG2B BsgWIdETSUFGuaZq59RKMoUFNJJesEnvuQM0wwioePPC17qQbS8Gq5H5bIPJAggi bf/Nfuhm8f2yZQsX2IkjrNCd/OA7g7UcNteVykIjgrdLJxVWWIdV9hn7/Bm2gCNs 4bHbOEe2jerqJjFiZlq3wfdGlnozC6LeFJRYKm5iopgaMxy4zMfk -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:06 2026 by rpki-client