This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/h68qpETs_w3KMKzLlk7MaPo6uOw.roa File: h68qpETs_w3KMKzLlk7MaPo6uOw.roa (raw, json) Hash identifier: zsukKbjOKO5+ZqwUeKeuVVLT1xm/P3bvxZgsAP0xLZY= Subject key identifier: 87:AF:2A:A4:44:EC:FF:0D:CA:30:AC:CB:96:4E:CC:68:FA:3A:B8:EC Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C8097E351FD1F0C4C6A33A98808D5F3 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/h68qpETs_w3KMKzLlk7MaPo6uOw.roa Signing time: Fri 02 Jan 2026 02:19:20 +0000 ROA not before: Fri 02 Jan 2026 02:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6079 IP address blocks: 84.32.6.0/24 maxlen: 24 88.216.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:97:e3:51:fd:1f:0c:4c:6a:33:a9:88:08:d5:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87af2aa444ecff0dca30accb964ecc68fa3ab8ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:df:d6:b6:03:65:d0:76:c5:a6:41:58:fa:86: 65:12:c6:4f:57:04:1b:de:b2:38:5b:85:4c:c5:78: fe:9f:3b:9b:9c:3b:8e:6d:7f:8e:5e:1b:4a:e5:76: ce:e0:42:ca:a9:be:53:45:18:21:8b:84:52:25:40: 9c:7d:06:ea:89:57:22:6b:50:7f:b4:5e:e5:dc:44: f4:ea:76:1a:b0:f0:8c:0f:63:55:c9:79:93:54:37: ff:75:39:37:62:08:96:bb:24:9b:f1:a8:60:9f:a8: 60:4d:88:3c:ab:33:82:6a:56:79:47:ab:60:51:3a: 66:5f:1f:ee:34:3c:cb:57:01:0a:04:d1:fc:56:8f: 0c:27:44:4f:c9:bd:d1:d4:87:f1:c5:99:09:9e:56: bd:f4:f3:3a:89:0b:f7:77:32:35:fb:fa:67:07:0a: 87:b1:45:21:da:aa:f8:e3:3d:d2:e9:69:89:6b:37: 88:75:de:11:cc:95:0a:e4:c4:85:be:e6:4a:d2:e7: 67:74:09:78:61:df:07:38:d8:ee:55:ea:64:3a:09: 05:88:41:a6:bb:ce:28:3d:93:a2:2e:6e:cd:b8:56: 18:7d:12:60:83:58:f1:7e:8b:34:da:57:3e:aa:e7: fa:d3:35:f4:f9:cf:f3:7d:3c:69:52:c4:0b:4d:1f: 0e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AF:2A:A4:44:EC:FF:0D:CA:30:AC:CB:96:4E:CC:68:FA:3A:B8:EC X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/h68qpETs_w3KMKzLlk7MaPo6uOw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.6.0/24 88.216.98.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:0c:e5:eb:7b:36:29:6e:10:8f:72:61:14:66:a5:ca:e6:28: 69:e1:e7:f0:af:53:c5:4f:fc:d7:6e:0d:70:dc:80:f4:f2:ff: 9c:1b:25:68:ee:3a:37:6f:4c:0e:be:03:56:d9:ae:16:3a:cc: ea:85:e1:67:cc:2e:5c:90:98:96:bf:a5:c9:fe:05:c9:43:95: 82:5a:1b:28:49:38:26:66:ff:32:7f:d3:04:f4:78:8c:39:b3: fe:d5:1f:e3:80:52:5a:e3:17:84:f9:c1:e8:38:00:de:1d:3b: 05:cb:c2:15:52:44:cc:ba:c2:1a:1e:69:b3:70:eb:c6:df:7b: ad:2a:60:bd:34:e4:ed:12:c0:c3:14:b7:29:bb:2e:4b:54:cd: 4e:79:51:c9:ae:c3:d6:d3:75:92:4e:07:35:31:7d:ea:e1:d1: d9:be:c3:b7:8d:78:a1:cb:54:91:e5:46:da:0f:cb:df:bc:6d: 56:25:40:32:5a:ed:bf:99:e9:47:26:9c:1c:5f:80:95:92:fa: 5d:aa:00:0c:f1:6b:55:9a:e0:90:07:3d:0a:a3:d9:24:62:0c: f1:ac:8c:70:57:5f:e3:dd:44:38:85:b1:43:02:78:67:32:c2: 44:ce:23:ca:11:38:83:3c:e0:c2:da:50:8d:79:56:27:e9:59: 91:f6:2d:e9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gJfjUf0fDExqM6mICNXzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2FmMmFhNDQ0ZWNmZjBkY2EzMGFjY2I5NjRlY2M2OGZhM2FiOGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlt/WtgNl0HbFpkFY+oZlEsZPVwQb 3rI4W4VMxXj+nzubnDuObX+OXhtK5XbO4ELKqb5TRRghi4RSJUCcfQbqiVcia1B/ tF7l3ET06nYasPCMD2NVyXmTVDf/dTk3YgiWuySb8ahgn6hgTYg8qzOCalZ5R6tg UTpmXx/uNDzLVwEKBNH8Vo8MJ0RPyb3R1IfxxZkJnla99PM6iQv3dzI1+/pnBwqH sUUh2qr44z3S6WmJazeIdd4RzJUK5MSFvuZK0udndAl4Yd8HONjuVepkOgkFiEGm u84oPZOiLm7NuFYYfRJgg1jxfos02lc+quf60zX0+c/zfTxpUsQLTR8O/QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIevKqRE7P8NyjCsy5ZOzGj6OrjsMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvaDY4cXBFVHNfdzNLTUt6TGxrN01hUG82dU93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVCAGAwQA WNhiMA0GCSqGSIb3DQEBCwUAA4IBAQBdDOXrezYpbhCPcmEUZqXK5ihp4efwr1PF T/zXbg1w3ID08v+cGyVo7jo3b0wOvgNW2a4WOszqheFnzC5ckJiWv6XJ/gXJQ5WC WhsoSTgmZv8yf9ME9HiMObP+1R/jgFJa4xeE+cHoOADeHTsFy8IVUkTMusIaHmmz cOvG33utKmC9NOTtEsDDFLcpuy5LVM1OeVHJrsPW03WSTgc1MX3q4dHZvsO3jXih y1SR5UbaD8vfvG1WJUAyWu2/melHJpwcX4CVkvpdqgAM8WtVmuCQBz0Ko9kkYgzx rIxwV1/j3UQ4hbFDAnhnMsJEziPKETiDPODC2lCNeVYn6VmR9i3p -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:13 2026 by rpki-client