This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/juzTecYdygHFemZoqHTLiCRKXN4.roa File: juzTecYdygHFemZoqHTLiCRKXN4.roa (raw, json) Hash identifier: b9Stq7q7euEv2SCvBQlXEjlZLaSvbZ6O7Woxu9UHRuk= Subject key identifier: 8E:EC:D3:79:C6:1D:CA:01:C5:7A:66:68:A8:74:CB:88:24:4A:5C:DE Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019BFB3A74C6EE46E30322DB6BB3AA020F88 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/juzTecYdygHFemZoqHTLiCRKXN4.roa Signing time: Mon 26 Jan 2026 16:54:30 +0000 ROA not before: Mon 26 Jan 2026 16:54:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59642 IP address blocks: 84.32.64.0/24 maxlen: 24 84.32.96.0/24 maxlen: 24 84.32.101.0/24 maxlen: 24 84.32.102.0/24 maxlen: 24 84.32.103.0/24 maxlen: 24 84.32.104.0/24 maxlen: 24 84.32.108.0/24 maxlen: 24 84.32.176.0/24 maxlen: 24 84.32.184.0/22 maxlen: 24 84.32.188.0/22 maxlen: 22 84.32.231.0/24 maxlen: 24 88.216.61.0/24 maxlen: 24 88.216.63.0/24 maxlen: 24 88.216.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 16:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:3a:74:c6:ee:46:e3:03:22:db:6b:b3:aa:02:0f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 26 16:54:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8eecd379c61dca01c57a6668a874cb88244a5cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2b:cf:f2:41:a2:b8:f3:94:ca:28:e9:ec:54: 73:a0:a9:16:5b:3c:34:3e:3d:74:6f:fe:3c:91:d9: b9:29:dd:53:6e:04:49:14:db:ca:0d:6d:12:15:28: 13:bd:c6:48:8b:41:49:23:02:ce:54:dc:0c:ee:b4: 4f:f3:a3:ff:52:5f:d6:a9:c3:17:55:2e:71:ae:2c: cb:ab:5b:63:4a:cf:53:c5:c0:77:f7:7d:40:85:1c: 4e:51:10:44:b8:83:6a:b6:c1:9d:0f:5a:8a:d7:09: 6b:a7:ae:07:94:ce:fe:27:d3:92:7b:57:91:c5:f5: 59:d4:8c:e2:e8:38:9a:ae:0a:dc:ca:ba:5d:af:66: 16:19:1f:45:9d:71:5f:89:0c:88:c2:f6:97:88:d1: e9:34:18:46:b4:23:39:17:d2:0f:b3:55:38:66:39: 23:41:7d:e5:6c:52:d3:51:df:17:8d:f9:15:a1:8d: 60:1e:5c:e4:4e:43:ef:3f:e3:64:4f:c5:43:47:ad: 5c:20:e2:55:06:c8:4c:2a:f3:96:cc:4f:2e:6d:df: 9c:0d:9e:1d:a1:f6:7b:08:c4:a3:1a:96:46:a7:d6: ac:c7:91:50:c3:7b:0a:6b:07:fd:86:2a:7f:6a:04: 88:70:ce:78:20:04:d7:8c:cd:97:73:32:0e:d1:8e: 88:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:EC:D3:79:C6:1D:CA:01:C5:7A:66:68:A8:74:CB:88:24:4A:5C:DE X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/juzTecYdygHFemZoqHTLiCRKXN4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.64.0/24 84.32.96.0/24 84.32.101.0-84.32.104.255 84.32.108.0/24 84.32.176.0/24 84.32.184.0/21 84.32.231.0/24 88.216.61.0/24 88.216.63.0/24 88.216.187.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:55:8c:64:f3:0d:5d:0b:87:b4:67:20:3e:33:a8:5a:44:87: dd:88:c2:71:7f:f6:50:85:4d:5f:81:cf:d7:05:46:77:d4:ed: cd:15:58:0e:2b:44:11:61:2d:3e:b7:ae:27:ec:29:cf:9d:96: 0d:f0:d7:1b:d6:0d:4b:22:62:b0:c4:3b:6e:97:af:d5:d4:77: be:a3:8d:be:22:c2:71:a2:8f:60:8f:b8:61:81:1e:b3:3f:5b: 63:a6:b9:b1:c4:ec:70:a1:af:6f:db:c6:cf:48:26:97:82:e3: b6:fc:17:c5:9c:3a:57:63:98:df:3a:fa:f5:05:cd:de:d5:cc: 37:d9:36:57:ee:d7:44:c4:27:d5:42:13:7b:76:2e:c9:ee:18: b8:a2:d8:c3:59:92:ff:1d:3a:28:8e:c1:ef:10:77:9e:8b:55: 38:b2:cd:1e:13:c3:47:26:9f:d9:e1:a4:97:74:0d:2e:ce:81: ea:ea:d9:72:cf:9a:9d:06:2d:62:cc:b7:0a:1b:3e:76:d2:89: 3c:38:1a:15:c9:a0:9b:ae:62:ba:ee:29:19:a2:ed:b3:66:be: b3:81:c4:4c:66:2a:6c:f3:51:10:a3:39:f0:8e:6c:f4:f0:ac: d9:02:11:41:4b:f3:f8:37:82:24:a7:86:3e:1a:15:24:43:7f: e9:3a:53:29 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgISAZv7OnTG7kbjAyLba7OqAg+IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTI2MTY1NDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWVjZDM3OWM2MWRjYTAxYzU3YTY2NjhhODc0Y2I4ODI0NGE1Y2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuivP8kGiuPOUyijp7FRzoKkWWzw0 Pj10b/48kdm5Kd1TbgRJFNvKDW0SFSgTvcZIi0FJIwLOVNwM7rRP86P/Ul/WqcMX VS5xrizLq1tjSs9TxcB3931AhRxOURBEuINqtsGdD1qK1wlrp64HlM7+J9OSe1eR xfVZ1Izi6Diargrcyrpdr2YWGR9FnXFfiQyIwvaXiNHpNBhGtCM5F9IPs1U4Zjkj QX3lbFLTUd8XjfkVoY1gHlzkTkPvP+NkT8VDR61cIOJVBshMKvOWzE8ubd+cDZ4d ofZ7CMSjGpZGp9asx5FQw3sKawf9hip/agSIcM54IATXjM2XczIO0Y6IXwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFI7s03nGHcoBxXpmaKh0y4gkSlzeMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvanV6VGVjWWR5Z0hGZW1ab3FIVExpQ1JLWE40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQAVCBAAwQA VCBgMAwDBABUIGUDBABUIGgDBABUIGwDBABUILADBANUILgDBABUIOcDBABY2D0D BABY2D8DBABY2LswDQYJKoZIhvcNAQELBQADggEBAEtVjGTzDV0Lh7RnID4zqFpE h92IwnF/9lCFTV+Bz9cFRnfU7c0VWA4rRBFhLT63rifsKc+dlg3w1xvWDUsiYrDE O26Xr9XUd76jjb4iwnGij2CPuGGBHrM/W2OmubHE7HChr2/bxs9IJpeC47b8F8Wc OldjmN86+vUFzd7VzDfZNlfu10TEJ9VCE3t2LsnuGLii2MNZkv8dOiiOwe8Qd56L VTiyzR4Tw0cmn9nhpJd0DS7Ogerq2XLPmp0GLWLMtwobPnbSiTw4GhXJoJuuYrru KRmi7bNmvrOBxExmKmzzURCjOfCObPTwrNkCEUFL8/g3giSnhj4aFSRDf+k6Uyk= -----END CERTIFICATE-----Generated at Fri Feb 6 00:10:19 2026 by rpki-client