This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/lNaG4Gjx_5ZO0dy5o_ZT6VFwK-A.roa File: lNaG4Gjx_5ZO0dy5o_ZT6VFwK-A.roa (raw, json) Hash identifier: 5g5mcSQjRfldjh9Vo1KUmjOGwq93KL5TpYLWlqcZWmk= Subject key identifier: 94:D6:86:E0:68:F1:FF:96:4E:D1:DC:B9:A3:F6:53:E9:51:70:2B:E0 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80AADB8E33F394A6C52E7515200DEE Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/lNaG4Gjx_5ZO0dy5o_ZT6VFwK-A.roa Signing time: Fri 02 Jan 2026 02:19:25 +0000 ROA not before: Fri 02 Jan 2026 02:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 84.32.87.0/24 maxlen: 24 84.32.95.0/24 maxlen: 24 88.216.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:aa:db:8e:33:f3:94:a6:c5:2e:75:15:20:0d:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94d686e068f1ff964ed1dcb9a3f653e951702be0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ab:da:87:12:3e:26:bd:c3:fa:b7:cb:7c:c8: 06:6b:8f:e1:d3:92:b3:d8:55:9e:f1:a0:55:ff:f7: 8d:eb:31:6a:42:38:45:33:46:52:2b:45:0f:bb:c5: 52:f7:1f:4a:7b:32:d0:71:36:1d:60:23:fb:c1:f0: b6:6b:ed:30:37:ba:19:33:eb:36:60:b2:8f:17:2f: 57:ab:d4:d2:c7:50:23:aa:31:c9:3d:e4:21:e1:92: 79:f2:7d:00:d1:1a:a7:d0:c3:bb:37:dd:e0:5d:0a: 5d:b7:32:46:45:a8:35:19:61:ec:e3:53:30:c2:2c: 14:5e:f6:10:2f:2d:f1:a5:09:e8:c6:59:04:9b:db: a5:20:4b:5b:5b:79:5c:96:8d:4f:fa:38:80:a7:4b: 58:80:6b:02:d5:3a:3b:e5:ac:c5:d4:8d:61:74:98: 48:28:0b:a8:6e:0a:9b:5f:00:e6:52:cc:6a:2b:bc: bc:7d:ed:46:b5:6e:84:fa:1e:6a:f3:d0:1b:0b:53: a5:0b:13:16:75:2d:97:a5:0a:00:8a:ed:d1:a2:ed: a1:10:7f:c8:0a:b1:86:20:71:8e:3f:a4:33:a3:25: bd:6e:a2:56:69:c5:6b:3f:c6:aa:dd:2e:2f:ac:4f: 9e:42:35:2a:e4:11:82:d3:23:65:7d:30:c4:09:34: 8d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D6:86:E0:68:F1:FF:96:4E:D1:DC:B9:A3:F6:53:E9:51:70:2B:E0 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/lNaG4Gjx_5ZO0dy5o_ZT6VFwK-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.87.0/24 84.32.95.0/24 88.216.91.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:19:4d:11:87:74:f3:26:99:18:1a:08:fb:d3:39:b5:18:d9: e4:d6:00:50:5d:40:11:ba:90:e8:bf:d4:ed:56:ca:30:db:94: b0:d4:d4:33:cd:05:f7:0c:3a:82:80:b4:7d:72:e9:ea:a8:19: 1b:2f:74:c8:60:7d:06:d1:01:15:49:bf:fe:65:a1:b3:d4:18: 9a:dc:06:26:35:ab:f4:a4:f0:50:17:08:e0:1d:a1:c3:ef:71: 70:fb:8a:bd:5d:0c:72:cc:8b:8b:44:a2:32:c7:c8:0c:7a:6a: 7e:8e:84:bf:fd:81:23:f2:ec:b5:ce:5f:c5:68:0f:e1:6a:f1: 8e:13:87:f3:8d:c1:ed:1e:97:94:86:c5:2d:b0:8b:82:90:0b: 75:62:26:29:97:6b:23:ec:52:e7:21:88:d4:24:dc:02:0a:1f: 0c:d8:3e:4e:a4:d8:62:e7:83:9e:e2:5a:88:0c:78:72:90:7e: 70:1b:f2:5f:6d:30:44:f6:24:19:3b:44:f5:69:63:d3:d4:fc: 09:a1:df:3f:41:25:5a:3f:57:71:c3:04:ae:ae:c5:43:12:2a: 8b:2b:62:3f:74:4b:fb:36:ae:97:b5:e7:84:da:a2:09:23:af: cd:12:9b:df:bb:ca:d3:5d:53:f8:a9:40:c6:7a:5d:c9:f4:be: d1:3b:f1:82 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gKrbjjPzlKbFLnUVIA3uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGQ2ODZlMDY4ZjFmZjk2NGVkMWRjYjlhM2Y2NTNlOTUxNzAyYmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuavahxI+Jr3D+rfLfMgGa4/h05Kz 2FWe8aBV//eN6zFqQjhFM0ZSK0UPu8VS9x9KezLQcTYdYCP7wfC2a+0wN7oZM+s2 YLKPFy9Xq9TSx1AjqjHJPeQh4ZJ58n0A0Rqn0MO7N93gXQpdtzJGRag1GWHs41Mw wiwUXvYQLy3xpQnoxlkEm9ulIEtbW3lclo1P+jiAp0tYgGsC1To75azF1I1hdJhI KAuobgqbXwDmUsxqK7y8fe1GtW6E+h5q89AbC1OlCxMWdS2XpQoAiu3Rou2hEH/I CrGGIHGOP6QzoyW9bqJWacVrP8aq3S4vrE+eQjUq5BGC0yNlfTDECTSNZQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJTWhuBo8f+WTtHcuaP2U+lRcCvgMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvbE5hRzRHanhfNVpPMGR5NW9fWlQ2VkZ3Sy1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVCBXAwQA VCBfAwQAWNhbMA0GCSqGSIb3DQEBCwUAA4IBAQCbGU0Rh3TzJpkYGgj70zm1GNnk 1gBQXUARupDov9TtVsow25Sw1NQzzQX3DDqCgLR9cunqqBkbL3TIYH0G0QEVSb/+ ZaGz1Bia3AYmNav0pPBQFwjgHaHD73Fw+4q9XQxyzIuLRKIyx8gMemp+joS//YEj 8uy1zl/FaA/havGOE4fzjcHtHpeUhsUtsIuCkAt1YiYpl2sj7FLnIYjUJNwCCh8M 2D5OpNhi54Oe4lqIDHhykH5wG/JfbTBE9iQZO0T1aWPT1PwJod8/QSVaP1dxwwSu rsVDEiqLK2I/dEv7Nq6XteeE2qIJI6/NEpvfu8rTXVP4qUDGel3J9L7RO/GC -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:15 2026 by rpki-client