This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/nyip2d6XuydsqjKM3-V0ZLachLs.roa File: nyip2d6XuydsqjKM3-V0ZLachLs.roa (raw, json) Hash identifier: 5lrTeLqwfRX95hUh6vQXAQTisWPFKn/KBL59xBxRhKU= Subject key identifier: 9F:28:A9:D9:DE:97:BB:27:6C:AA:32:8C:DF:E5:74:64:B6:9C:84:BB Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80A7EFC318F9A390FF615632B86E78 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/nyip2d6XuydsqjKM3-V0ZLachLs.roa Signing time: Fri 02 Jan 2026 02:19:24 +0000 ROA not before: Fri 02 Jan 2026 02:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 84.32.15.0/24 maxlen: 24 84.32.24.0/24 maxlen: 24 84.32.107.0/24 maxlen: 24 84.32.152.0/24 maxlen: 24 84.32.154.0/24 maxlen: 24 84.32.156.0/24 maxlen: 24 84.32.177.0/24 maxlen: 24 84.32.218.0/24 maxlen: 24 88.216.41.0/24 maxlen: 24 88.216.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 05:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a7:ef:c3:18:f9:a3:90:ff:61:56:32:b8:6e:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f28a9d9de97bb276caa328cdfe57464b69c84bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c9:bc:64:46:cd:fd:23:a9:63:10:35:58:24: 5f:43:22:40:44:18:ad:af:1c:6e:f0:15:9f:05:85: 2d:ba:1b:4b:88:76:da:9f:27:1f:71:58:76:c6:57: 3f:de:af:5a:d4:47:de:4e:3f:48:88:34:f7:04:7b: 54:dd:ad:18:f0:29:a7:24:e5:e6:fe:de:5b:77:9e: 83:fb:12:17:03:f7:01:21:82:25:23:e6:8a:63:28: 87:8c:4f:64:0e:80:e3:ba:0c:82:41:b4:8c:9b:0b: 31:86:25:10:ea:6f:53:12:e8:38:03:51:56:91:1a: ee:a0:29:56:1e:ba:83:e6:98:2c:b5:1b:49:02:88: 0c:fe:58:58:13:8d:5f:5c:29:74:b1:b9:52:e6:0b: 19:4a:2e:97:96:0c:1f:eb:65:ce:af:ac:d6:f7:a3: ed:09:f1:1d:cd:f2:ca:93:9b:14:61:b4:3d:1d:85: 28:d2:25:c2:b3:52:61:bb:2f:e0:55:be:d6:c1:ad: ad:34:87:f0:c3:81:db:62:25:35:ea:20:96:1f:41: 5f:e1:39:88:c4:48:3f:da:68:01:49:9f:f1:61:f2: ec:13:67:f0:8e:07:a2:57:a9:6f:05:cf:d4:11:91: 0e:9d:2e:37:d7:da:fc:5a:59:3b:d0:41:db:d3:b3: 80:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:28:A9:D9:DE:97:BB:27:6C:AA:32:8C:DF:E5:74:64:B6:9C:84:BB X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/nyip2d6XuydsqjKM3-V0ZLachLs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.15.0/24 84.32.24.0/24 84.32.107.0/24 84.32.152.0/24 84.32.154.0/24 84.32.156.0/24 84.32.177.0/24 84.32.218.0/24 88.216.41.0/24 88.216.186.0/24 Signature Algorithm: sha256WithRSAEncryption 52:43:2d:06:02:1c:f9:e3:0a:44:f0:a0:10:00:0c:97:d4:75: b7:e1:d6:1f:a5:f1:a5:61:6b:5d:0a:e5:af:7d:59:8b:a3:52: 29:2e:2b:b5:d4:1a:bd:e1:f9:2b:1f:12:e7:ca:6f:80:a3:5c: 6c:40:02:1c:19:3c:27:2c:f3:61:55:7e:36:fe:e8:d0:31:e0: 64:79:d0:e2:36:7b:0a:ca:91:18:f2:f1:74:09:60:bf:48:f5: 54:45:e6:48:95:05:b1:46:05:34:00:d1:57:aa:02:f0:81:f7: 80:d3:64:cc:a9:f4:89:e5:41:e7:42:53:67:31:da:03:d9:a2: 24:d7:e2:98:9f:33:a7:33:58:dd:3d:fd:d4:3b:49:78:20:e8: 4a:cc:dc:e6:95:cd:55:f5:21:58:cd:b3:06:b9:7b:dc:f3:ce: e7:b0:cc:8b:05:4f:c4:3f:79:8d:c3:f5:78:e9:94:eb:f1:eb: 70:54:ce:78:01:87:e7:18:b4:c4:0c:37:92:cb:32:c7:08:0b: b8:9d:0f:fe:6c:bf:8c:70:0d:fc:37:ab:41:1f:c7:77:ae:ee: 7a:a0:5f:2d:63:d4:b6:5d:ba:02:5d:8a:d4:03:3b:f9:6d:b8: 5d:f1:46:4f:8b:d7:28:0b:01:07:f7:26:dd:82:06:3a:15:71: 82:a4:d6:06 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt8gKfvwxj5o5D/YVYyuG54MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjI4YTlkOWRlOTdiYjI3NmNhYTMyOGNkZmU1NzQ2NGI2OWM4NGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcm8ZEbN/SOpYxA1WCRfQyJARBit rxxu8BWfBYUtuhtLiHbanycfcVh2xlc/3q9a1EfeTj9IiDT3BHtU3a0Y8CmnJOXm /t5bd56D+xIXA/cBIYIlI+aKYyiHjE9kDoDjugyCQbSMmwsxhiUQ6m9TEug4A1FW kRruoClWHrqD5pgstRtJAogM/lhYE41fXCl0sblS5gsZSi6Xlgwf62XOr6zW96Pt CfEdzfLKk5sUYbQ9HYUo0iXCs1Jhuy/gVb7Wwa2tNIfww4HbYiU16iCWH0Ff4TmI xEg/2mgBSZ/xYfLsE2fwjgeiV6lvBc/UEZEOnS4319r8Wlk70EHb07OACQIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFJ8oqdnel7snbKoyjN/ldGS2nIS7MB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvbnlpcDJkNlh1eWRzcWpLTTMtVjBaTGFjaExzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAVCAPAwQA VCAYAwQAVCBrAwQAVCCYAwQAVCCaAwQAVCCcAwQAVCCxAwQAVCDaAwQAWNgpAwQA WNi6MA0GCSqGSIb3DQEBCwUAA4IBAQBSQy0GAhz54wpE8KAQAAyX1HW34dYfpfGl YWtdCuWvfVmLo1IpLiu11Bq94fkrHxLnym+Ao1xsQAIcGTwnLPNhVX42/ujQMeBk edDiNnsKypEY8vF0CWC/SPVUReZIlQWxRgU0ANFXqgLwgfeA02TMqfSJ5UHnQlNn MdoD2aIk1+KYnzOnM1jdPf3UO0l4IOhKzNzmlc1V9SFYzbMGuXvc887nsMyLBU/E P3mNw/V46ZTr8etwVM54AYfnGLTEDDeSyzLHCAu4nQ/+bL+McA38N6tBH8d3ru56 oF8tY9S2XboCXYrUAzv5bbhd8UZPi9coCwEH9ybdggY6FXGCpNYG -----END CERTIFICATE-----Generated at Thu Jan 8 12:58:20 2026 by rpki-client