This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ZDpVGp012tdy3fNDJLDVCPj8tWU.roa File: ZDpVGp012tdy3fNDJLDVCPj8tWU.roa (raw, json) Hash identifier: pMzDwy/LWqVsLjb1OeJaf4xyO13mti2R4w+RbpkOX58= Subject key identifier: 64:3A:55:1A:9D:35:DA:D7:72:DD:F3:43:24:B0:D5:08:F8:FC:B5:65 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C8098E9F8C0818653F30579A1A38560 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ZDpVGp012tdy3fNDJLDVCPj8tWU.roa Signing time: Fri 02 Jan 2026 02:19:21 +0000 ROA not before: Fri 02 Jan 2026 02:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 84.32.6.0/24 maxlen: 24 84.32.136.0/22 maxlen: 24 88.216.20.0/24 maxlen: 24 88.216.21.0/24 maxlen: 24 88.216.98.0/24 maxlen: 24 88.216.103.0/24 maxlen: 24 88.216.185.0/24 maxlen: 24 88.216.212.0/24 maxlen: 24 88.216.213.0/24 maxlen: 24 88.216.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 23:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:98:e9:f8:c0:81:86:53:f3:05:79:a1:a3:85:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=643a551a9d35dad772ddf34324b0d508f8fcb565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:86:53:1f:91:ad:ef:ff:b2:77:12:27:23:95: 34:00:d4:e2:b3:de:e2:87:07:07:12:54:cf:05:53: 06:7d:45:1f:ac:49:4e:58:f5:29:df:dd:bc:48:43: 26:9f:0d:7e:15:46:5a:91:de:53:40:d7:0a:ef:dc: c2:20:5e:70:79:69:12:fa:59:fe:e8:1d:7d:62:3e: d2:9d:09:da:37:b8:30:75:e0:7f:3c:04:51:9e:7b: fa:52:39:22:53:a6:fd:c2:fd:76:b8:b9:cf:62:bb: d4:ce:8f:78:b7:c9:06:d3:3d:97:ef:38:0b:69:c1: d0:5b:0f:ba:bc:95:92:24:01:c9:8d:24:6a:38:8c: b6:75:df:2a:17:ee:40:0d:4d:06:ef:a9:f6:e9:0e: 5b:d2:91:0e:5b:1d:bc:78:d4:7e:d5:bb:7f:6b:ef: 86:79:18:a4:2b:07:ab:c9:3b:25:ad:e6:ab:80:a8: 19:5c:e1:ae:9f:1d:38:71:0d:fe:cf:33:26:58:fe: 31:61:80:0d:e0:03:65:1c:98:d1:35:e7:c9:26:e7: 59:50:fd:64:cc:a8:92:93:c0:b9:58:c5:c4:7f:38: 6a:aa:9c:e0:06:df:4f:46:88:e9:11:5a:aa:5a:6e: 19:5e:24:39:6a:da:52:8e:64:7c:bb:5b:31:86:67: f6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3A:55:1A:9D:35:DA:D7:72:DD:F3:43:24:B0:D5:08:F8:FC:B5:65 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ZDpVGp012tdy3fNDJLDVCPj8tWU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.6.0/24 84.32.136.0/22 88.216.20.0/23 88.216.98.0/24 88.216.103.0/24 88.216.185.0/24 88.216.212.0/23 88.216.248.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:de:2e:5b:c8:d9:e8:76:2f:e8:69:b4:08:d3:04:51:ae:38: ba:0d:17:77:bf:bd:2c:dd:24:c9:2f:5a:a4:b0:c9:a5:20:ce: ab:4a:c8:b2:ac:b6:66:af:58:c8:5a:c7:a3:15:b0:9a:f4:51: 6b:33:06:9b:6c:cd:e1:a5:81:45:f0:1f:ff:e1:5b:59:95:89: a2:58:72:51:28:1b:fd:92:b6:51:f1:8c:33:9e:c0:bc:da:eb: 3e:11:52:34:13:33:f7:e4:ef:6c:98:8f:da:08:1e:a0:7e:35: 50:c0:4c:3e:ed:8b:b3:0c:75:58:68:bf:ef:30:b4:e6:13:43: 99:de:84:d9:e6:68:6b:aa:d5:b5:c4:59:1b:85:a7:d9:86:3f: 63:62:76:b0:2b:8e:ce:8d:f6:81:8a:95:b3:a9:4c:a2:36:1f: 64:61:4e:9e:f0:39:0a:28:91:64:e6:db:fd:ba:51:3c:6c:08: f5:0a:ec:77:08:1a:2d:a6:cc:d6:ee:af:b3:2d:1b:7e:9b:ca: 6f:b5:0c:9a:b1:0f:a4:f8:43:1b:41:ef:35:24:65:f9:7e:42: c9:9a:90:99:ce:91:f0:87:ee:99:60:56:59:20:12:c7:7b:54: b8:cf:1e:23:92:e3:da:2a:2d:6b:ff:90:69:04:7d:47:47:eb: dd:bd:0a:19 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt8gJjp+MCBhlPzBXmho4VgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDNhNTUxYTlkMzVkYWQ3NzJkZGYzNDMyNGIwZDUwOGY4ZmNiNTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoZTH5Gt7/+ydxInI5U0ANTis97i hwcHElTPBVMGfUUfrElOWPUp3928SEMmnw1+FUZakd5TQNcK79zCIF5weWkS+ln+ 6B19Yj7SnQnaN7gwdeB/PARRnnv6UjkiU6b9wv12uLnPYrvUzo94t8kG0z2X7zgL acHQWw+6vJWSJAHJjSRqOIy2dd8qF+5ADU0G76n26Q5b0pEOWx28eNR+1bt/a++G eRikKweryTslreargKgZXOGunx04cQ3+zzMmWP4xYYAN4ANlHJjRNefJJudZUP1k zKiSk8C5WMXEfzhqqpzgBt9PRojpEVqqWm4ZXiQ5atpSjmR8u1sxhmf2hQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFGQ6VRqdNdrXct3zQySw1Qj4/LVlMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvWkRwVkdwMDEydGR5M2ZOREpMRFZDUGo4dFdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAVCAGAwQC VCCIAwQBWNgUAwQAWNhiAwQAWNhnAwQAWNi5AwQBWNjUAwQCWNj4MA0GCSqGSIb3 DQEBCwUAA4IBAQCM3i5byNnodi/oabQI0wRRrji6DRd3v70s3STJL1qksMmlIM6r SsiyrLZmr1jIWsejFbCa9FFrMwabbM3hpYFF8B//4VtZlYmiWHJRKBv9krZR8Ywz nsC82us+EVI0EzP35O9smI/aCB6gfjVQwEw+7YuzDHVYaL/vMLTmE0OZ3oTZ5mhr qtW1xFkbhafZhj9jYnawK47OjfaBipWzqUyiNh9kYU6e8DkKKJFk5tv9ulE8bAj1 Cux3CBotpszW7q+zLRt+m8pvtQyasQ+k+EMbQe81JGX5fkLJmpCZzpHwh+6ZYFZZ IBLHe1S4zx4jkuPaKi1r/5BpBH1HR+vdvQoZ -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:57 2026 by rpki-client