This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rZVLOwvGXb7vHhZSQxT2yrY4u6Q.roa File: rZVLOwvGXb7vHhZSQxT2yrY4u6Q.roa (raw, json) Hash identifier: ZD0f+B34qMBpPrGFdSO2qUoVeK2BHD/ysevSPjaxYc4= Subject key identifier: AD:95:4B:3B:0B:C6:5D:BE:EF:1E:16:52:43:14:F6:CA:B6:38:BB:A4 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80AB67FC6D6B08BCE2FF9D563875EB Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rZVLOwvGXb7vHhZSQxT2yrY4u6Q.roa Signing time: Fri 02 Jan 2026 02:19:25 +0000 ROA not before: Fri 02 Jan 2026 02:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138997 IP address blocks: 84.32.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:ab:67:fc:6d:6b:08:bc:e2:ff:9d:56:38:75:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad954b3b0bc65dbeef1e16524314f6cab638bba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:08:e6:e9:b9:cb:d9:69:c0:35:bc:db:8b:2e: 48:45:76:8a:d5:26:2a:98:a4:a1:a0:92:b8:b5:b5: 67:72:f7:29:18:59:14:ca:5c:b0:5a:4b:f1:de:36: 99:cd:7a:63:af:7a:2a:b9:7d:fc:3d:92:27:5c:04: 62:f5:7e:c3:ee:c6:a4:9c:c4:2f:f8:9a:bf:4b:8c: 39:0d:bf:6f:a4:d5:35:7c:5e:45:8c:cd:d3:95:23: ba:a8:08:14:ea:cf:10:53:62:e4:19:d6:fc:b1:21: ca:6e:8f:4f:98:9d:fd:37:0d:24:35:06:e1:77:06: a0:b1:74:76:fc:5e:67:86:6f:83:04:2b:26:b9:21: 4d:8d:22:10:f9:28:52:24:84:ee:22:0f:08:b4:63: 79:a3:9a:14:bc:e1:e9:29:9c:80:51:32:1a:67:60: ed:d8:f5:04:2b:ee:6b:54:7f:61:fa:75:a8:d5:ee: c7:1d:24:38:34:49:3f:d3:f7:c5:9e:c6:37:bd:02: bc:0f:5c:1f:91:6d:ca:79:2a:fc:fe:22:8b:23:04: 2f:f7:cf:bd:52:23:4d:b7:5e:b8:c7:fb:bf:47:79: 36:b2:d7:3c:f2:a2:b3:1f:15:fa:77:0e:a1:63:5b: d7:19:75:f6:b9:c4:e8:d8:82:4d:04:0f:7b:8d:68: cd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:95:4B:3B:0B:C6:5D:BE:EF:1E:16:52:43:14:F6:CA:B6:38:BB:A4 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rZVLOwvGXb7vHhZSQxT2yrY4u6Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.21.0/24 Signature Algorithm: sha256WithRSAEncryption 30:fe:5a:69:83:bf:a5:b6:f7:d9:80:e9:a6:72:0e:93:af:15: 4b:04:a2:db:59:ee:22:96:fe:63:a5:40:0a:06:98:5f:a5:45: 61:85:66:ad:d0:b4:b1:96:5b:eb:ac:1d:b1:91:31:95:c2:4b: 8d:98:1d:cb:62:66:80:64:c4:a0:9a:66:a8:df:a8:ec:f5:c6: 12:35:44:b0:21:01:4d:f4:05:8e:36:ff:a8:98:ff:d1:6c:8a: 9f:29:e2:34:4f:db:7d:6b:94:61:7b:f7:29:ab:1d:9d:e3:da: 4c:f6:30:8c:76:e4:41:74:6d:6b:0a:0d:56:fe:fd:5f:f4:57: 81:87:5f:b7:da:e8:2e:08:57:90:20:26:f4:63:e4:03:ee:c0: 8d:45:59:ba:b5:d8:84:f3:4a:8a:7a:8e:13:3e:ee:2c:42:e3: 8c:34:33:c7:3e:9a:b4:8e:9e:a7:e0:60:1a:35:4e:d0:3d:82: aa:0c:f6:7a:83:f7:45:f1:b0:84:83:28:22:1a:9c:63:25:37: 36:2c:9b:7d:a2:95:4f:c9:e9:da:e1:38:02:82:f5:8c:39:9b: b9:ea:b0:2c:bd:cf:dd:e3:00:70:c2:69:60:96:ac:1e:86:28: ad:ed:5e:dc:7c:c3:5b:13:f2:41:b7:f1:5c:51:14:84:8a:06: 1c:28:78:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gKtn/G1rCLzi/51WOHXrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDk1NGIzYjBiYzY1ZGJlZWYxZTE2NTI0MzE0ZjZjYWI2MzhiYmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQjm6bnL2WnANbzbiy5IRXaK1SYq mKShoJK4tbVncvcpGFkUylywWkvx3jaZzXpjr3oquX38PZInXARi9X7D7saknMQv +Jq/S4w5Db9vpNU1fF5FjM3TlSO6qAgU6s8QU2LkGdb8sSHKbo9PmJ39Nw0kNQbh dwagsXR2/F5nhm+DBCsmuSFNjSIQ+ShSJITuIg8ItGN5o5oUvOHpKZyAUTIaZ2Dt 2PUEK+5rVH9h+nWo1e7HHSQ4NEk/0/fFnsY3vQK8D1wfkW3KeSr8/iKLIwQv98+9 UiNNt164x/u/R3k2stc88qKzHxX6dw6hY1vXGXX2ucTo2IJNBA97jWjNTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK2VSzsLxl2+7x4WUkMU9sq2OLukMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvclpWTE93dkdYYjd2SGhaU1F4VDJ5clk0dTZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCAVMA0G CSqGSIb3DQEBCwUAA4IBAQAw/lppg7+ltvfZgOmmcg6TrxVLBKLbWe4ilv5jpUAK BphfpUVhhWat0LSxllvrrB2xkTGVwkuNmB3LYmaAZMSgmmao36js9cYSNUSwIQFN 9AWONv+omP/RbIqfKeI0T9t9a5Rhe/cpqx2d49pM9jCMduRBdG1rCg1W/v1f9FeB h1+32uguCFeQICb0Y+QD7sCNRVm6tdiE80qKeo4TPu4sQuOMNDPHPpq0jp6n4GAa NU7QPYKqDPZ6g/dF8bCEgygiGpxjJTc2LJt9opVPyena4TgCgvWMOZu56rAsvc/d 4wBwwmlglqwehiit7V7cfMNbE/JBt/FcURSEigYcKHhq -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:03 2026 by rpki-client