This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jTHnianjp_1DT8dwu9PxkU9d39k.roa File: jTHnianjp_1DT8dwu9PxkU9d39k.roa (raw, json) Hash identifier: cauzOG7DobHHYn2g+aBFmGAPG/fZJWZ//1z1C0jbMXw= Subject key identifier: 8D:31:E7:89:A9:E3:A7:FD:43:4F:C7:70:BB:D3:F1:91:4F:5D:DF:D9 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019A8E5CCD1CCB3B6A9BC016A606152A119D Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jTHnianjp_1DT8dwu9PxkU9d39k.roa Signing time: Sun 16 Nov 2025 20:30:37 +0000 ROA not before: Sun 16 Nov 2025 20:30:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 84.32.108.0/24 maxlen: 24 84.32.110.0/24 maxlen: 24 84.32.176.0/24 maxlen: 24 88.216.184.0/24 maxlen: 24 88.216.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:8e:5c:cd:1c:cb:3b:6a:9b:c0:16:a6:06:15:2a:11:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Nov 16 20:30:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8d31e789a9e3a7fd434fc770bbd3f1914f5ddfd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:79:2b:0e:36:4b:e4:aa:01:b4:5e:15:cc:ad: f8:d0:b1:ea:4a:87:70:36:e6:5b:15:a3:47:15:6e: e5:38:b3:e7:7f:e4:7a:89:c3:02:7f:4e:12:b1:b1: 4c:8e:9c:09:97:e7:de:42:62:4b:2e:ec:5b:91:c7: bb:39:2d:50:4f:ac:74:d9:6e:c8:3b:78:d0:ed:96: dc:4f:83:10:be:c0:f2:da:58:58:4c:8d:b3:49:a2: c0:7d:77:4a:aa:fc:30:66:59:af:6c:20:46:54:07: c6:a2:fd:23:8a:30:ab:64:12:6e:4c:39:4d:b1:4c: a0:61:49:f1:02:b2:f9:65:15:b0:22:a4:12:0f:f7: 39:b4:5c:53:7a:fc:10:af:56:c0:42:e3:ca:66:fb: ac:8b:1f:89:e2:60:8d:86:a3:92:9f:9f:f9:03:bf: ee:3a:ea:c5:32:6a:da:c0:e7:a9:05:4d:ca:57:a1: e4:90:a6:6a:9c:5c:90:2a:6b:22:46:40:85:a6:8d: 9d:0e:d0:78:99:85:fb:15:64:8f:03:5e:f6:c1:c0: e2:a9:68:f9:8e:3a:de:ab:0e:b5:80:6a:65:d2:c4: 52:66:56:e0:b5:66:27:e8:92:2d:80:25:8e:d8:80: bc:99:24:7c:3e:f8:29:6e:b1:3b:ae:bb:12:56:e4: c2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:31:E7:89:A9:E3:A7:FD:43:4F:C7:70:BB:D3:F1:91:4F:5D:DF:D9 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jTHnianjp_1DT8dwu9PxkU9d39k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.108.0/24 84.32.110.0/24 84.32.176.0/24 88.216.184.0/24 88.216.211.0/24 Signature Algorithm: sha256WithRSAEncryption 04:72:5a:5a:33:ec:58:45:70:b0:78:53:2d:16:90:f3:1a:ee: 38:57:be:2f:e3:03:18:47:a4:bf:3a:28:92:fa:e4:40:99:93: ee:6c:a2:6f:c8:38:73:7b:c9:0f:d0:2e:dc:72:1b:32:55:bb: 28:ff:89:1b:6c:67:be:b0:a7:ec:c8:25:1f:39:f6:34:70:f5: 8c:a9:2a:c7:57:f4:2a:3e:dc:78:8d:09:6a:36:7a:58:4e:8a: 71:dc:c1:96:ac:fe:fb:81:17:dc:b2:fc:d4:2a:85:12:ca:65: 59:a1:cd:ca:ad:b5:d2:43:62:14:d6:97:d4:3e:e5:8d:c4:ed: 85:d1:93:3c:7f:84:6e:91:53:9b:49:87:05:71:a6:a4:f6:79: 47:0a:ec:b6:c5:2c:5f:51:35:7b:a4:96:93:b9:99:4a:5b:9f: 97:f1:0d:d5:9b:27:c8:1c:af:10:db:9b:7f:51:31:50:18:3f: 5a:8f:33:91:3e:7a:57:6f:c5:9e:13:f7:41:de:a4:ce:e8:25: be:ce:b5:86:ae:69:12:f0:76:47:d9:ea:1f:42:cf:5b:28:b9: 71:38:fa:7c:28:e2:a8:cc:a2:27:a9:0e:db:e6:9d:64:67:e9: 01:b2:89:01:d0:ab:e6:a6:1f:73:07:5d:18:d4:9d:5c:f7:da: e9:54:64:fc -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZqOXM0cyztqm8AWpgYVKhGdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjUxMTE2MjAzMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDMxZTc4OWE5ZTNhN2ZkNDM0ZmM3NzBiYmQzZjE5MTRmNWRkZmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXkrDjZL5KoBtF4VzK340LHqSodw NuZbFaNHFW7lOLPnf+R6icMCf04SsbFMjpwJl+feQmJLLuxbkce7OS1QT6x02W7I O3jQ7ZbcT4MQvsDy2lhYTI2zSaLAfXdKqvwwZlmvbCBGVAfGov0jijCrZBJuTDlN sUygYUnxArL5ZRWwIqQSD/c5tFxTevwQr1bAQuPKZvusix+J4mCNhqOSn5/5A7/u OurFMmrawOepBU3KV6HkkKZqnFyQKmsiRkCFpo2dDtB4mYX7FWSPA172wcDiqWj5 jjreqw61gGpl0sRSZlbgtWYn6JItgCWO2IC8mSR8PvgpbrE7rrsSVuTCJQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFI0x54mp46f9Q0/HcLvT8ZFPXd/ZMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvalRIbmlhbmpwXzFEVDhkd3U5UHhrVTlkMzlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAVCBsAwQA VCBuAwQAVCCwAwQAWNi4AwQAWNjTMA0GCSqGSIb3DQEBCwUAA4IBAQAEclpaM+xY RXCweFMtFpDzGu44V74v4wMYR6S/OiiS+uRAmZPubKJvyDhze8kP0C7cchsyVbso /4kbbGe+sKfsyCUfOfY0cPWMqSrHV/QqPtx4jQlqNnpYTopx3MGWrP77gRfcsvzU KoUSymVZoc3KrbXSQ2IU1pfUPuWNxO2F0ZM8f4RukVObSYcFcaak9nlHCuy2xSxf UTV7pJaTuZlKW5+X8Q3VmyfIHK8Q25t/UTFQGD9ajzORPnpXb8WeE/dB3qTO6CW+ zrWGrmkS8HZH2eofQs9bKLlxOPp8KOKozKInqQ7b5p1kZ+kBsokB0Kvmph9zB10Y 1J1c99rpVGT8 -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:33 2025 by rpki-client