This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rTrWFQ0Ta-Wss4TtxJh0tO8L7Jg.roa File: rTrWFQ0Ta-Wss4TtxJh0tO8L7Jg.roa (raw, json) Hash identifier: 6lbGrWMM9/vyJpm9aVHoD843tQMvDt/HaCCdj2qop1E= Subject key identifier: AD:3A:D6:15:0D:13:6B:E5:AC:B3:84:ED:C4:98:74:B4:EF:0B:EC:98 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C809648C33E8DA09DACA47BB2B59C3F Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rTrWFQ0Ta-Wss4TtxJh0tO8L7Jg.roa Signing time: Fri 02 Jan 2026 02:19:20 +0000 ROA not before: Fri 02 Jan 2026 02:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 996 IP address blocks: 84.32.136.0/22 maxlen: 24 88.216.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:96:48:c3:3e:8d:a0:9d:ac:a4:7b:b2:b5:9c:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad3ad6150d136be5acb384edc49874b4ef0bec98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:dd:30:8f:bf:5c:92:59:e8:94:2f:55:c8:09: 0a:56:1e:fb:b1:7c:ed:97:03:0e:18:17:07:3b:fd: cc:70:0f:ed:b2:eb:59:98:04:1d:40:8e:ba:33:64: 4b:17:06:ac:f2:f5:65:ae:b0:77:9c:78:68:59:54: f3:ba:de:ca:4f:1b:db:d1:13:cb:11:54:b3:b9:c7: d3:89:28:8f:3f:bb:ed:6a:da:ec:31:fb:31:63:9e: 7a:d7:3e:41:2e:a0:49:de:74:39:93:6a:6f:45:e0: b1:61:20:26:35:c6:e7:b2:81:34:66:97:24:19:f5: 00:ad:41:72:1a:6d:44:9f:98:e8:c5:3d:65:ea:d1: 0a:5f:39:45:b5:aa:76:8f:ff:83:b4:ea:d3:73:44: ae:06:78:f4:44:a0:f0:35:62:27:ef:08:bd:cf:2b: f0:a7:2e:39:6b:51:9d:7b:af:f6:4f:a0:9c:9b:b4: d8:87:c9:1f:ee:e5:61:a7:c9:f2:dc:2b:b4:ce:b4: 85:24:6e:98:ad:72:dd:a5:12:36:4b:5e:92:a8:89: 0f:2c:f8:27:5a:c1:e8:82:fd:f9:14:79:fb:5c:20: bb:40:98:90:0d:f5:2e:06:bc:1b:13:44:f8:3f:b6: a6:e4:47:6e:61:1a:7f:88:ec:a8:f9:60:c4:33:9f: b7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3A:D6:15:0D:13:6B:E5:AC:B3:84:ED:C4:98:74:B4:EF:0B:EC:98 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rTrWFQ0Ta-Wss4TtxJh0tO8L7Jg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.136.0/22 88.216.248.0/22 Signature Algorithm: sha256WithRSAEncryption 59:3e:00:fc:9d:be:37:63:07:e9:37:ff:9c:ec:8c:7a:f1:d9: f8:a7:b4:90:6e:9b:46:02:12:42:b6:b7:ed:95:19:ff:71:a2: 2f:a5:91:19:bf:90:fd:d1:05:15:5f:f9:b4:d2:45:1a:26:15: df:05:26:e2:95:38:d0:a2:91:e4:69:71:61:5e:ed:a3:f9:79: 60:bc:ed:e1:df:d6:6a:23:7f:4a:41:c9:3a:fc:5a:6c:19:bb: 34:b1:f7:6d:47:e2:a2:54:80:7f:97:43:5a:ba:06:5e:4f:7a: c3:99:fc:75:31:50:f7:86:08:c6:90:d9:64:a5:ae:e4:ba:30: 02:b8:42:5f:c9:fa:96:2f:63:26:17:7e:d1:3c:c0:3c:a5:e9: 1a:47:89:2d:aa:42:38:8d:44:41:bc:ce:44:1a:66:57:a2:4e: bf:67:8f:9f:21:5b:14:de:15:3a:88:f7:be:d2:1a:8e:91:24: 59:00:c0:d4:be:04:71:56:46:f3:54:fd:eb:11:b3:06:d2:2e: 0b:1d:ba:ad:a0:e0:2b:43:34:99:fb:42:e3:89:7e:c4:d9:10: 86:43:ad:64:d9:8b:fe:c6:e6:df:a4:ce:97:8a:53:67:59:d0: e7:39:81:9e:ac:db:5b:40:cd:57:84:e2:ee:c2:80:5f:31:ec: 7d:fd:99:0b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gJZIwz6NoJ2spHuytZw/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDNhZDYxNTBkMTM2YmU1YWNiMzg0ZWRjNDk4NzRiNGVmMGJlYzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqd0wj79cklnolC9VyAkKVh77sXzt lwMOGBcHO/3McA/tsutZmAQdQI66M2RLFwas8vVlrrB3nHhoWVTzut7KTxvb0RPL EVSzucfTiSiPP7vtatrsMfsxY5561z5BLqBJ3nQ5k2pvReCxYSAmNcbnsoE0Zpck GfUArUFyGm1En5joxT1l6tEKXzlFtap2j/+DtOrTc0SuBnj0RKDwNWIn7wi9zyvw py45a1Gde6/2T6Ccm7TYh8kf7uVhp8ny3Cu0zrSFJG6YrXLdpRI2S16SqIkPLPgn WsHogv35FHn7XCC7QJiQDfUuBrwbE0T4P7am5EduYRp/iOyo+WDEM5+3swIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK061hUNE2vlrLOE7cSYdLTvC+yYMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvclRyV0ZRMFRhLVdzczRUdHhKaDB0TzhMN0pnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCVCCIAwQC WNj4MA0GCSqGSIb3DQEBCwUAA4IBAQBZPgD8nb43YwfpN/+c7Ix68dn4p7SQbptG AhJCtrftlRn/caIvpZEZv5D90QUVX/m00kUaJhXfBSbilTjQopHkaXFhXu2j+Xlg vO3h39ZqI39KQck6/FpsGbs0sfdtR+KiVIB/l0NaugZeT3rDmfx1MVD3hgjGkNlk pa7kujACuEJfyfqWL2MmF37RPMA8pekaR4ktqkI4jURBvM5EGmZXok6/Z4+fIVsU 3hU6iPe+0hqOkSRZAMDUvgRxVkbzVP3rEbMG0i4LHbqtoOArQzSZ+0LjiX7E2RCG Q61k2Yv+xubfpM6XilNnWdDnOYGerNtbQM1XhOLuwoBfMex9/ZkL -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:16 2026 by rpki-client