This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jrd3aGepWtfcCg3tc6UEpOBWEuo.roa File: jrd3aGepWtfcCg3tc6UEpOBWEuo.roa (raw, json) Hash identifier: +zy2AupYGrHs+0UqUEOJlsBHJsyiQcS8qzqsrRERKrs= Subject key identifier: 8E:B7:77:68:67:A9:5A:D7:DC:0A:0D:ED:73:A5:04:A4:E0:56:12:EA Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80B7E7474FD39BD0C7F1B724929B54 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jrd3aGepWtfcCg3tc6UEpOBWEuo.roa Signing time: Fri 02 Jan 2026 02:19:28 +0000 ROA not before: Fri 02 Jan 2026 02:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212609 IP address blocks: 84.32.78.0/24 maxlen: 24 88.216.34.0/24 maxlen: 24 88.216.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b7:e7:47:4f:d3:9b:d0:c7:f1:b7:24:92:9b:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8eb7776867a95ad7dc0a0ded73a504a4e05612ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5e:3c:c3:d2:ca:e9:31:c2:a1:88:b3:9f:60: 9d:63:f0:4c:0a:61:1b:fd:7d:6b:7d:6f:97:0a:f4: 75:bf:36:b7:11:b0:2f:2b:25:a5:01:ed:37:f4:e6: 13:05:f8:d1:5e:73:0c:75:80:28:70:fc:bf:94:4e: 97:9b:d5:45:c3:59:08:fc:23:87:31:f1:99:5b:9f: be:37:db:8f:7c:9d:92:99:a5:f2:a1:70:8c:b1:8c: 6f:c9:5e:76:be:1a:f9:9a:c5:16:6a:cc:48:22:1c: 7f:58:c5:c7:53:39:f1:90:18:22:9b:aa:df:36:f8: f3:d7:61:b8:23:23:c8:6b:df:74:14:0c:22:d8:29: 35:b2:3f:05:69:dd:49:40:e7:f6:a9:01:75:f3:af: fe:94:7f:d6:d3:0e:45:1b:0b:da:df:b4:cb:d6:f9: 73:49:4c:7e:96:c9:7c:b3:26:17:f8:80:f0:54:4a: 01:b7:a7:ef:77:76:83:a4:b5:a9:00:46:db:5e:32: 1f:75:ad:79:69:68:cd:18:e5:90:8d:0f:1e:51:f2: 1b:f4:f4:43:1d:19:8e:5a:34:9d:57:8a:90:e9:24: 23:3b:63:8a:10:e9:21:27:7e:b7:11:14:48:3c:74: 4f:9f:c1:11:f1:ef:44:56:31:0c:53:38:aa:3a:06: 20:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B7:77:68:67:A9:5A:D7:DC:0A:0D:ED:73:A5:04:A4:E0:56:12:EA X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jrd3aGepWtfcCg3tc6UEpOBWEuo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.78.0/24 88.216.34.0/24 88.216.180.0/24 Signature Algorithm: sha256WithRSAEncryption 12:91:22:7f:0e:c7:dc:af:ec:43:d6:2e:51:e5:aa:3f:6f:ff: d9:21:f4:6a:52:b6:97:fb:3b:a4:b2:26:a0:d8:4e:82:60:58: 16:7b:6b:1f:8b:81:c6:2e:55:5f:52:c4:cc:2e:dd:ff:3e:94: e4:9d:87:94:fb:52:19:a8:07:a3:ca:85:95:38:65:d0:a8:73: 45:22:5e:37:e4:61:de:0c:c7:87:2b:40:f5:8f:18:c0:86:70: 3f:b1:05:f6:2d:48:a4:60:d8:b1:6e:c7:67:17:aa:19:57:ec: 53:c5:ec:33:31:5b:14:a0:3b:ae:fb:b1:2f:7e:a3:36:44:38: 23:33:aa:98:e0:98:d7:78:2a:c2:94:b8:3a:cc:bb:dd:fb:f8: d7:8e:86:21:4d:cd:cc:85:88:f6:6f:e9:0b:b2:c4:f8:7b:b6: cb:fd:bd:e4:f0:53:45:8a:4e:16:2c:e0:06:db:3d:26:a2:7f: 27:15:61:22:40:d2:b0:98:f9:28:02:67:77:43:75:2d:5c:cd: 7e:69:ec:64:51:80:a1:f8:a0:47:1c:a1:dc:30:8b:94:0c:87: b9:34:e4:c6:db:af:71:ca:ea:ec:64:1a:f2:3b:4d:b2:be:fb: 83:d1:d0:31:6e:f7:cc:87:01:a8:16:3e:b6:ae:2c:95:19:0e: bb:48:ad:e3 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gLfnR0/Tm9DH8bckkptUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWI3Nzc2ODY3YTk1YWQ3ZGMwYTBkZWQ3M2E1MDRhNGUwNTYxMmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF48w9LK6THCoYizn2CdY/BMCmEb /X1rfW+XCvR1vza3EbAvKyWlAe039OYTBfjRXnMMdYAocPy/lE6Xm9VFw1kI/COH MfGZW5++N9uPfJ2SmaXyoXCMsYxvyV52vhr5msUWasxIIhx/WMXHUznxkBgim6rf Nvjz12G4IyPIa990FAwi2Ck1sj8Fad1JQOf2qQF186/+lH/W0w5FGwva37TL1vlz SUx+lsl8syYX+IDwVEoBt6fvd3aDpLWpAEbbXjIfda15aWjNGOWQjQ8eUfIb9PRD HRmOWjSdV4qQ6SQjO2OKEOkhJ363ERRIPHRPn8ER8e9EVjEMUziqOgYg5QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFI63d2hnqVrX3AoN7XOlBKTgVhLqMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvanJkM2FHZXBXdGZjQ2czdGM2VUVwT0JXRXVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVCBOAwQA WNgiAwQAWNi0MA0GCSqGSIb3DQEBCwUAA4IBAQASkSJ/Dsfcr+xD1i5R5ao/b//Z IfRqUraX+zuksiag2E6CYFgWe2sfi4HGLlVfUsTMLt3/PpTknYeU+1IZqAejyoWV OGXQqHNFIl435GHeDMeHK0D1jxjAhnA/sQX2LUikYNixbsdnF6oZV+xTxewzMVsU oDuu+7EvfqM2RDgjM6qY4JjXeCrClLg6zLvd+/jXjoYhTc3MhYj2b+kLssT4e7bL /b3k8FNFik4WLOAG2z0mon8nFWEiQNKwmPkoAmd3Q3UtXM1+aexkUYCh+KBHHKHc MIuUDIe5NOTG269xyursZBryO02yvvuD0dAxbvfMhwGoFj62riyVGQ67SK3j -----END CERTIFICATE-----Generated at Mon Jan 19 15:28:02 2026 by rpki-client