This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rK2embhR9FUqzGBhttrWneoR4Ho.roa File: rK2embhR9FUqzGBhttrWneoR4Ho.roa (raw, json) Hash identifier: HCGpo32E4+S0xH1hW371sy6POUmHkWAZZssFd9WN7qM= Subject key identifier: AC:AD:9E:99:B8:51:F4:55:2A:CC:60:61:B6:DA:D6:9D:EA:11:E0:7A Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019AE8AC5F9F05E9F86625500BBF0590D421 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rK2embhR9FUqzGBhttrWneoR4Ho.roa Signing time: Thu 04 Dec 2025 09:23:21 +0000 ROA not before: Thu 04 Dec 2025 09:23:21 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 84.32.7.0/24 maxlen: 24 84.32.8.0/24 maxlen: 24 84.32.20.0/22 maxlen: 24 84.32.46.0/24 maxlen: 24 84.32.47.0/24 maxlen: 24 84.32.63.0/24 maxlen: 24 84.32.148.0/23 maxlen: 24 84.32.150.0/23 maxlen: 24 84.32.151.0/24 maxlen: 24 84.32.174.0/23 maxlen: 24 84.32.214.0/23 maxlen: 24 84.32.230.0/24 maxlen: 24 84.32.244.0/23 maxlen: 24 84.32.246.0/23 maxlen: 24 88.216.22.0/23 maxlen: 24 88.216.44.0/24 maxlen: 24 88.216.45.0/24 maxlen: 24 88.216.66.0/23 maxlen: 24 88.216.93.0/24 maxlen: 24 88.216.130.0/23 maxlen: 24 88.216.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 18:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:ac:5f:9f:05:e9:f8:66:25:50:0b:bf:05:90:d4:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Dec 4 09:23:21 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=acad9e99b851f4552acc6061b6dad69dea11e07a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:73:76:84:43:27:3b:b6:16:04:ec:54:a3:03: 5a:0a:75:03:86:99:59:2f:e9:91:7a:f4:01:71:aa: af:b1:bd:5b:c2:5b:99:b8:74:a0:18:f9:47:1c:63: b0:de:21:b0:a8:c6:85:d8:cc:74:09:90:7e:1e:ee: 81:cc:4d:65:64:d2:93:f5:a7:3d:79:f1:19:ff:eb: c6:17:91:7f:a4:96:c2:4c:34:e2:88:f1:6e:3d:34: 55:b5:6c:49:8d:a3:41:5c:67:42:88:4b:6f:39:53: d1:1f:d7:6b:30:4f:53:c2:43:df:89:cf:9b:f2:f3: b6:3b:86:f8:0f:d3:9c:d0:fb:18:d9:86:d5:a0:aa: 1b:c2:64:18:3f:a7:ce:c4:1d:22:f9:8b:d0:7b:61: f3:8d:69:46:4e:64:2a:44:99:ac:5f:be:4f:e3:49: 66:fb:8e:f7:e1:24:3f:f9:df:ce:4e:70:a5:01:03: 17:22:45:95:d3:20:c2:c7:2c:3b:c8:87:4b:2c:12: db:7e:7f:c1:1d:0c:77:91:4c:8c:4e:43:63:25:ee: b3:4d:b0:41:60:d8:74:29:e1:96:e9:85:39:bf:98: 06:95:37:46:2e:0b:6a:f5:45:e5:0c:a1:a7:6f:a7: dd:46:13:19:24:dc:11:dd:56:ca:62:4c:c2:22:50: 84:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AD:9E:99:B8:51:F4:55:2A:CC:60:61:B6:DA:D6:9D:EA:11:E0:7A X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rK2embhR9FUqzGBhttrWneoR4Ho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.7.0-84.32.8.255 84.32.20.0/22 84.32.46.0/23 84.32.63.0/24 84.32.148.0/22 84.32.174.0/23 84.32.214.0/23 84.32.230.0/24 84.32.244.0/22 88.216.22.0/23 88.216.44.0/23 88.216.66.0/23 88.216.93.0/24 88.216.130.0/23 88.216.134.0/23 Signature Algorithm: sha256WithRSAEncryption 40:a1:85:27:8f:d4:d5:ce:b6:00:1c:63:cd:28:31:21:31:de: e2:11:08:dc:aa:da:7c:c2:52:dd:23:cc:b8:35:b1:51:c9:f2: b1:09:0a:26:cb:d1:7a:fa:63:d4:3f:8a:c0:2e:8f:3a:d0:ec: 2e:3c:ef:2f:73:e2:e3:ef:30:40:55:71:0c:73:29:50:0e:f3: d4:a9:a4:cb:ec:35:91:74:02:3c:14:0f:39:b2:08:93:ee:09: 80:25:a2:5f:21:1b:89:df:a4:15:4a:f4:d5:ed:e3:eb:3f:02: c0:8e:90:4c:4b:be:07:c6:76:09:11:78:83:6b:f5:ef:08:52: 9b:ce:5b:55:10:35:d4:5f:8c:ed:d0:d9:04:22:ec:5b:8b:fc: 00:d8:7a:00:89:5b:96:0d:19:e6:fe:03:c7:07:10:51:61:61: 26:6a:cb:d6:7e:5b:36:4c:84:a2:c9:d3:60:46:1f:7d:c7:9c: b8:98:c7:15:8e:b0:76:0d:08:79:cb:4e:44:6d:81:8a:a2:fa: 32:e3:8c:57:e5:12:7f:a0:8c:e2:d6:31:f4:4f:a9:da:6f:55: 76:0b:3d:4a:71:3c:c9:89:47:13:a7:81:4f:fa:eb:96:49:27: 69:da:9f:ae:35:34:b0:d2:0e:30:99:1e:4c:08:20:80:be:bc: f3:6d:0a:98 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgISAZrorF+fBen4ZiVQC78FkNQhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjUxMjA0MDkyMzIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2FkOWU5OWI4NTFmNDU1MmFjYzYwNjFiNmRhZDY5ZGVhMTFlMDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnN2hEMnO7YWBOxUowNaCnUDhplZ L+mRevQBcaqvsb1bwluZuHSgGPlHHGOw3iGwqMaF2Mx0CZB+Hu6BzE1lZNKT9ac9 efEZ/+vGF5F/pJbCTDTiiPFuPTRVtWxJjaNBXGdCiEtvOVPRH9drME9TwkPfic+b 8vO2O4b4D9Oc0PsY2YbVoKobwmQYP6fOxB0i+YvQe2HzjWlGTmQqRJmsX75P40lm +4734SQ/+d/OTnClAQMXIkWV0yDCxyw7yIdLLBLbfn/BHQx3kUyMTkNjJe6zTbBB YNh0KeGW6YU5v5gGlTdGLgtq9UXlDKGnb6fdRhMZJNwR3VbKYkzCIlCElwIDAQAB o4ICZTCCAmEwHQYDVR0OBBYEFKytnpm4UfRVKsxgYbba1p3qEeB6MB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvcksyZW1iaFI5RlVxekdCaHR0clduZW9SNEhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAATBiMAwDBABUIAcD BABUIAgDBAJUIBQDBAFUIC4DBABUID8DBAJUIJQDBAFUIK4DBAFUINYDBABUIOYD BAJUIPQDBAFY2BYDBAFY2CwDBAFY2EIDBABY2F0DBAFY2IIDBAFY2IYwDQYJKoZI hvcNAQELBQADggEBAEChhSeP1NXOtgAcY80oMSEx3uIRCNyq2nzCUt0jzLg1sVHJ 8rEJCibL0Xr6Y9Q/isAujzrQ7C487y9z4uPvMEBVcQxzKVAO89SppMvsNZF0AjwU DzmyCJPuCYAlol8hG4nfpBVK9NXt4+s/AsCOkExLvgfGdgkReINr9e8IUpvOW1UQ NdRfjO3Q2QQi7FuL/ADYegCJW5YNGeb+A8cHEFFhYSZqy9Z+WzZMhKLJ02BGH33H nLiYxxWOsHYNCHnLTkRtgYqi+jLjjFflEn+gjOLWMfRPqdpvVXYLPUpxPMmJRxOn gU/665ZJJ2nan641NLDSDjCZHkwIIIC+vPNtCpg= -----END CERTIFICATE-----Generated at Fri Dec 5 03:05:28 2025 by rpki-client