This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/l3KMYhKUNz54PDzCAu24QjBycLE.roa File: l3KMYhKUNz54PDzCAu24QjBycLE.roa (raw, json) Hash identifier: NJbLVgnuz2IeJDRd8fnlRNcFfr4MYiFYAcrte3xLUIc= Subject key identifier: 97:72:8C:62:12:94:37:3E:78:3C:3C:C2:02:ED:B8:42:30:72:70:B1 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80B31494335E9D2305F578D75D3897 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/l3KMYhKUNz54PDzCAu24QjBycLE.roa Signing time: Fri 02 Jan 2026 02:19:27 +0000 ROA not before: Fri 02 Jan 2026 02:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210926 IP address blocks: 84.32.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b3:14:94:33:5e:9d:23:05:f5:78:d7:5d:38:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97728c621294373e783c3cc202edb842307270b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:dd:a6:63:f2:8a:58:40:75:36:83:a8:ff:0c: b5:10:93:7b:c9:67:5b:27:34:ff:c8:af:c5:93:57: 67:73:96:5b:12:65:15:85:c2:da:57:9e:bf:99:7a: 55:68:57:22:b7:d2:8d:fa:1d:8c:0d:b3:36:66:f4: 8b:7a:b6:98:ed:d6:cc:e5:85:45:52:f1:7f:63:ca: 6d:9c:8f:3b:bc:24:84:17:6d:8d:c5:ea:0c:e2:cb: aa:be:a3:ac:6f:c8:f4:c5:a0:60:fb:0f:66:c1:28: dc:81:ba:6a:d1:98:47:cc:64:0b:8e:b8:7c:b4:38: 02:2f:42:a7:a5:53:bc:2e:0e:fe:68:d3:a1:9b:70: 12:aa:42:6d:f3:eb:d5:aa:23:43:3f:2b:d2:30:e4: ad:65:1c:94:14:ba:c7:5c:e8:e7:98:9e:09:57:90: d4:56:df:87:83:3d:4b:ca:21:69:8d:e2:8d:b0:2e: 7f:c2:f7:5d:06:27:8a:53:64:95:44:4d:8b:44:21: 4c:ea:d0:0e:34:3a:42:d4:92:34:06:10:53:26:c7: a1:92:5c:2f:8f:00:bf:2d:b4:57:5d:22:8f:f7:85: 5b:5c:e4:2a:c7:9e:a8:3c:23:86:2d:80:2b:2a:85: 06:8e:af:f5:65:29:af:3c:06:5d:cf:26:86:db:ba: 4b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:72:8C:62:12:94:37:3E:78:3C:3C:C2:02:ED:B8:42:30:72:70:B1 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/l3KMYhKUNz54PDzCAu24QjBycLE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.26.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:c8:35:06:d3:03:da:01:d0:1b:e5:eb:1f:44:c7:73:6c:17: 91:4b:30:63:a7:2b:25:b1:9d:fb:d8:8b:f9:cf:0f:10:f0:a2: b4:1a:71:25:8f:d4:77:9a:8b:11:0a:76:b9:38:81:50:23:ff: 86:f3:7d:66:27:e8:6a:8a:aa:e4:3d:64:64:44:8c:0f:12:a7: 99:11:c2:f2:7f:12:57:40:a5:b1:d3:10:1e:db:87:c5:e1:41: fc:30:a5:f0:66:7a:8e:31:30:5d:f0:fa:c9:67:f2:71:5b:53: 77:99:65:e7:71:fb:d5:dc:fc:84:83:e3:62:3c:37:a7:07:8a: 99:f0:b5:7b:72:71:85:45:65:c6:e2:0a:47:31:53:51:a3:cd: 1d:f5:b8:eb:93:5d:32:3a:78:d9:cd:30:58:1e:f9:93:72:6e: 72:e6:07:cf:40:07:3e:db:b0:45:79:b6:6e:67:32:a6:7d:7e: 9e:2a:9f:68:68:20:91:c3:b3:09:c0:fd:4f:aa:ef:03:43:81: 96:87:25:bb:0b:3d:ec:4d:59:0e:aa:22:75:22:9e:68:c7:e0: 21:63:f0:7a:aa:7e:aa:a4:59:35:58:fe:a9:0f:83:83:b6:c4: ad:fb:44:91:06:37:61:1a:3a:fc:52:68:fb:4b:00:f2:1f:39: 6d:aa:81:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gLMUlDNenSMF9XjXXTiXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzcyOGM2MjEyOTQzNzNlNzgzYzNjYzIwMmVkYjg0MjMwNzI3MGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9t2mY/KKWEB1NoOo/wy1EJN7yWdb JzT/yK/Fk1dnc5ZbEmUVhcLaV56/mXpVaFcit9KN+h2MDbM2ZvSLeraY7dbM5YVF UvF/Y8ptnI87vCSEF22NxeoM4suqvqOsb8j0xaBg+w9mwSjcgbpq0ZhHzGQLjrh8 tDgCL0KnpVO8Lg7+aNOhm3ASqkJt8+vVqiNDPyvSMOStZRyUFLrHXOjnmJ4JV5DU Vt+Hgz1LyiFpjeKNsC5/wvddBieKU2SVRE2LRCFM6tAONDpC1JI0BhBTJsehklwv jwC/LbRXXSKP94VbXOQqx56oPCOGLYArKoUGjq/1ZSmvPAZdzyaG27pLJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJdyjGISlDc+eDw8wgLtuEIwcnCxMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvbDNLTVloS1VOejU0UER6Q0F1MjRRakJ5Y0xFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCAaMA0G CSqGSIb3DQEBCwUAA4IBAQA+yDUG0wPaAdAb5esfRMdzbBeRSzBjpyslsZ372Iv5 zw8Q8KK0GnElj9R3mosRCna5OIFQI/+G831mJ+hqiqrkPWRkRIwPEqeZEcLyfxJX QKWx0xAe24fF4UH8MKXwZnqOMTBd8PrJZ/JxW1N3mWXncfvV3PyEg+NiPDenB4qZ 8LV7cnGFRWXG4gpHMVNRo80d9bjrk10yOnjZzTBYHvmTcm5y5gfPQAc+27BFebZu ZzKmfX6eKp9oaCCRw7MJwP1Pqu8DQ4GWhyW7Cz3sTVkOqiJ1Ip5ox+AhY/B6qn6q pFk1WP6pD4ODtsSt+0SRBjdhGjr8Umj7SwDyHzltqoGI -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:08 2026 by rpki-client