This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dw9RFwXpLGgfvcx0A7upFSj9kYE.roa File: dw9RFwXpLGgfvcx0A7upFSj9kYE.roa (raw, json) Hash identifier: PtE1kzslkIGu2QTiiGQCkRkxzCVfhJsu/ymq1qkQOU0= Subject key identifier: 77:0F:51:17:05:E9:2C:68:1F:BD:CC:74:03:BB:A9:15:28:FD:91:81 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019BB8F4453E16D6CF46969D94FB5C77260E Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dw9RFwXpLGgfvcx0A7upFSj9kYE.roa Signing time: Tue 13 Jan 2026 20:02:54 +0000 ROA not before: Tue 13 Jan 2026 20:02:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 84.32.7.0/24 maxlen: 24 84.32.8.0/24 maxlen: 24 84.32.20.0/22 maxlen: 24 84.32.46.0/24 maxlen: 24 84.32.47.0/24 maxlen: 24 84.32.61.0/24 maxlen: 24 84.32.108.0/24 maxlen: 24 84.32.110.0/24 maxlen: 24 84.32.148.0/23 maxlen: 24 84.32.150.0/23 maxlen: 24 84.32.151.0/24 maxlen: 24 84.32.174.0/23 maxlen: 24 84.32.214.0/23 maxlen: 24 84.32.230.0/24 maxlen: 24 84.32.244.0/23 maxlen: 24 84.32.246.0/23 maxlen: 24 88.216.22.0/23 maxlen: 24 88.216.36.0/24 maxlen: 24 88.216.44.0/24 maxlen: 24 88.216.45.0/24 maxlen: 24 88.216.66.0/23 maxlen: 24 88.216.92.0/23 maxlen: 24 88.216.93.0/24 maxlen: 24 88.216.130.0/23 maxlen: 24 88.216.134.0/23 maxlen: 24 88.216.184.0/24 maxlen: 24 88.216.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b8:f4:45:3e:16:d6:cf:46:96:9d:94:fb:5c:77:26:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 13 20:02:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=770f511705e92c681fbdcc7403bba91528fd9181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:67:93:e0:d5:54:e1:ac:40:1d:1e:e2:a3:8e: b0:66:93:35:e2:76:32:05:43:8c:8b:ec:48:55:55: fe:5d:ed:f6:00:f2:68:85:cb:15:ea:b6:51:0c:a8: e5:49:6c:de:7f:08:d7:9d:c8:dc:eb:53:db:bd:2c: 38:a9:ff:10:f3:79:53:24:40:1c:0c:a6:57:fe:ef: a4:b0:d9:37:f2:cf:83:b3:e4:5b:c6:ec:9e:7f:ef: ca:83:50:b6:c3:df:c0:ab:44:16:75:02:d5:27:c3: 1d:21:1a:d5:9a:80:1d:2b:c2:03:3c:80:c4:39:82: eb:1d:a4:b1:5a:b5:d9:f5:72:4b:31:af:55:25:db: d5:7c:b6:b4:37:98:5a:50:4b:49:f1:07:4e:48:c9: 3d:08:7d:fd:2a:d7:2f:c5:c1:88:b0:a6:58:5a:65: 89:5e:3b:46:e1:f8:c5:8c:bb:40:4f:d2:21:96:fb: b8:8a:7e:ae:a0:b9:74:9f:6f:72:29:5d:19:75:66: 44:37:52:cb:4b:ca:bc:1b:79:d8:e3:e7:3f:be:b8: ec:8a:85:78:9f:01:aa:60:12:c3:27:3b:14:22:26: c6:c6:76:c9:df:47:42:fd:7e:22:aa:64:91:e4:36: 7f:0f:f2:3d:18:2e:80:1f:1d:3c:1f:05:42:9e:c3: 3f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:0F:51:17:05:E9:2C:68:1F:BD:CC:74:03:BB:A9:15:28:FD:91:81 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dw9RFwXpLGgfvcx0A7upFSj9kYE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.7.0-84.32.8.255 84.32.20.0/22 84.32.46.0/23 84.32.61.0/24 84.32.108.0/24 84.32.110.0/24 84.32.148.0/22 84.32.174.0/23 84.32.214.0/23 84.32.230.0/24 84.32.244.0/22 88.216.22.0/23 88.216.36.0/24 88.216.44.0/23 88.216.66.0/23 88.216.92.0/23 88.216.130.0/23 88.216.134.0/23 88.216.184.0/24 88.216.211.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:cd:29:d1:7c:0e:08:92:05:f7:ce:29:b5:5c:b8:68:87:b6: 29:71:e7:45:6e:97:9f:8d:d0:0b:79:b2:f3:39:b8:cf:8a:2c: 75:40:86:e1:39:79:c1:e9:17:da:c8:8b:05:b6:7e:b4:b1:6c: 76:48:d6:bd:f3:5f:23:0a:3a:47:e0:d0:1a:3e:ef:fa:c5:37: fc:ee:48:c8:74:7b:59:ac:14:71:00:86:91:f7:20:c7:69:57: 6c:6e:68:be:cc:1d:5c:69:a8:b3:1e:8f:8d:b0:e5:d9:51:08: 2b:90:fe:38:5b:8f:b7:30:c1:3e:e0:4c:2c:2f:da:42:78:b6: c0:64:e5:8c:16:ba:69:3e:f6:b6:6a:cf:44:37:3b:78:33:45: 9f:80:79:db:a6:3a:b7:46:3f:7a:c4:4e:3c:33:ff:bb:dd:aa: 97:aa:38:48:dd:7f:a6:ab:35:9b:c5:bf:0f:ec:25:9d:0d:58: d2:8a:70:b5:0d:a6:9e:7b:a4:fc:8d:d4:29:66:5d:75:e9:96: 06:58:90:d5:12:b3:f4:6a:f4:f5:37:0e:e2:e6:cd:a9:8b:cc: 44:0d:10:e5:9f:15:08:78:10:45:38:bb:ed:32:5f:6f:e7:b2: 68:c0:59:b9:54:07:cf:69:9f:ab:16:c7:24:3e:ad:b2:33:f4: 61:98:53:ec -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgISAZu49EU+FtbPRpadlPtcdyYOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTEzMjAwMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzBmNTExNzA1ZTkyYzY4MWZiZGNjNzQwM2JiYTkxNTI4ZmQ5MTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymeT4NVU4axAHR7io46wZpM14nYy BUOMi+xIVVX+Xe32APJohcsV6rZRDKjlSWzefwjXncjc61PbvSw4qf8Q83lTJEAc DKZX/u+ksNk38s+Ds+Rbxuyef+/Kg1C2w9/Aq0QWdQLVJ8MdIRrVmoAdK8IDPIDE OYLrHaSxWrXZ9XJLMa9VJdvVfLa0N5haUEtJ8QdOSMk9CH39KtcvxcGIsKZYWmWJ XjtG4fjFjLtAT9Ihlvu4in6uoLl0n29yKV0ZdWZEN1LLS8q8G3nY4+c/vrjsioV4 nwGqYBLDJzsUIibGxnbJ30dC/X4iqmSR5DZ/D/I9GC6AHx08HwVCnsM/BwIDAQAB o4ICiDCCAoQwHQYDVR0OBBYEFHcPURcF6SxoH73MdAO7qRUo/ZGBMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvZHc5UkZ3WHBMR2dmdmN4MEE3dXBGU2o5a1lFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGdBggrBgEFBQcBBwEB/wSBjTCBijCBhwQCAAEwgYAwDAME AFQgBwMEAFQgCAMEAlQgFAMEAVQgLgMEAFQgPQMEAFQgbAMEAFQgbgMEAlQglAME AVQgrgMEAVQg1gMEAFQg5gMEAlQg9AMEAVjYFgMEAFjYJAMEAVjYLAMEAVjYQgME AVjYXAMEAVjYggMEAVjYhgMEAFjYuAMEAFjY0zANBgkqhkiG9w0BAQsFAAOCAQEA Hc0p0XwOCJIF984ptVy4aIe2KXHnRW6Xn43QC3my8zm4z4osdUCG4Tl5wekX2siL BbZ+tLFsdkjWvfNfIwo6R+DQGj7v+sU3/O5IyHR7WawUcQCGkfcgx2lXbG5ovswd XGmosx6PjbDl2VEIK5D+OFuPtzDBPuBMLC/aQni2wGTljBa6aT72tmrPRDc7eDNF n4B526Y6t0Y/esROPDP/u92ql6o4SN1/pqs1m8W/D+wlnQ1Y0opwtQ2mnnuk/I3U KWZddemWBliQ1RKz9Gr09TcO4ubNqYvMRA0Q5Z8VCHgQRTi77TJfb+eyaMBZuVQH z2mfqxbHJD6tsjP0YZhT7A== -----END CERTIFICATE-----Generated at Mon Jan 19 13:53:31 2026 by rpki-client