This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/slF9eBHTZimlmurim7UGlo0A-t0.roa File: slF9eBHTZimlmurim7UGlo0A-t0.roa (raw, json) Hash identifier: 0wukuMFetCYnzceGo+Zkb7gre2OCSK13ZeEhvrTR3kI= Subject key identifier: B2:51:7D:78:11:D3:66:29:A5:9A:EA:E2:9B:B5:06:96:8D:00:FA:DD Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80A2B59925633C1E1213A75A8C1863 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/slF9eBHTZimlmurim7UGlo0A-t0.roa Signing time: Fri 02 Jan 2026 02:19:23 +0000 ROA not before: Fri 02 Jan 2026 02:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47341 IP address blocks: 88.216.146.0/24 maxlen: 24 2001:4048:108::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a2:b5:99:25:63:3c:1e:12:13:a7:5a:8c:18:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2517d7811d36629a59aeae29bb506968d00fadd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fa:d2:42:70:b3:be:43:e3:e9:a3:1d:54:5c: 73:ba:b6:c0:da:92:10:9a:fd:21:da:42:5b:6c:bc: e4:0a:50:d5:c6:02:2f:04:b8:8a:07:f3:db:c8:31: 81:92:3e:0d:77:5d:91:b7:03:97:84:91:37:0f:7b: 8e:90:f2:a0:aa:9a:67:74:57:96:90:e6:f8:51:a2: 38:8d:d5:31:f6:57:ea:64:84:c0:7b:a7:99:95:cf: ca:84:1b:a9:f8:6a:78:e8:1b:f8:e5:af:b2:72:c7: 39:b6:56:b4:3d:96:6c:3e:0a:bc:82:63:31:0e:85: fb:6f:a7:93:9f:ba:98:17:35:77:74:1f:fe:7e:d5: 2f:d0:20:02:b4:8c:f4:91:56:ad:14:a9:b9:20:31: 60:2d:77:70:19:28:c3:77:fc:27:02:4f:ce:4f:2c: 10:19:0b:8d:f9:88:a6:45:79:71:fc:50:30:24:f6: 4f:1d:b3:6a:33:c0:1f:6e:f4:bf:22:fb:fc:a3:a2: 15:e9:de:a0:3e:f5:8d:06:9e:14:d8:0d:cd:3f:34: 61:8c:61:74:f0:9c:5c:6e:bb:f1:e1:a0:34:96:b3: 76:2e:ea:c1:82:80:56:91:6a:2c:4f:17:6b:c6:2f: 74:3c:ef:e3:2e:31:66:17:93:8d:72:a7:b4:e8:15: b6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:51:7D:78:11:D3:66:29:A5:9A:EA:E2:9B:B5:06:96:8D:00:FA:DD X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/slF9eBHTZimlmurim7UGlo0A-t0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.216.146.0/24 IPv6: 2001:4048:108::/48 Signature Algorithm: sha256WithRSAEncryption 30:3c:6f:6d:84:72:49:f3:ff:6a:fc:73:f3:f3:2f:1e:85:eb: 3c:fb:25:4c:9a:bc:ce:55:50:d2:2a:c8:6a:06:50:c6:9b:0f: 38:d0:8d:4a:a5:75:71:6e:a7:47:d1:a5:9d:11:a9:31:de:15: 6f:4a:06:cc:67:18:64:84:ae:07:a5:fb:2b:b1:5f:13:a8:c4: 69:b3:1f:2e:34:6f:8b:42:11:e9:0d:de:dc:6d:3a:cb:67:da: f2:83:99:fd:b4:24:4a:7d:dc:17:0d:1d:77:b5:8c:e8:c1:8e: 70:20:a0:17:1b:93:1e:2a:28:1b:7a:ad:ac:ea:0e:fb:3e:54: 09:8e:08:3a:63:b6:35:57:a6:6c:6b:8d:d3:6e:8a:19:98:47: f6:18:5f:03:7f:15:55:4d:3e:fe:c1:de:e1:26:04:01:a5:87: b3:ce:35:62:c0:4b:f0:19:a6:3e:1a:fa:90:c2:47:fb:5c:3e: 9a:46:3b:4d:9b:63:5b:16:fb:40:da:ec:19:8b:86:1d:f4:6d: d8:56:d5:30:c5:cd:8a:65:4f:2b:47:bd:e2:b5:2b:52:dd:e3: 47:b6:80:3a:d6:1e:5c:df:c0:91:cf:43:60:38:93:f3:ce:d2: 19:3e:b9:24:de:2e:b1:2f:0a:ec:56:e4:df:08:00:f2:2f:10: 96:f7:13:1e -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8gKK1mSVjPB4SE6dajBhjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjUxN2Q3ODExZDM2NjI5YTU5YWVhZTI5YmI1MDY5NjhkMDBmYWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvrSQnCzvkPj6aMdVFxzurbA2pIQ mv0h2kJbbLzkClDVxgIvBLiKB/PbyDGBkj4Nd12RtwOXhJE3D3uOkPKgqppndFeW kOb4UaI4jdUx9lfqZITAe6eZlc/KhBup+Gp46Bv45a+ycsc5tla0PZZsPgq8gmMx DoX7b6eTn7qYFzV3dB/+ftUv0CACtIz0kVatFKm5IDFgLXdwGSjDd/wnAk/OTywQ GQuN+YimRXlx/FAwJPZPHbNqM8AfbvS/Ivv8o6IV6d6gPvWNBp4U2A3NPzRhjGF0 8Jxcbrvx4aA0lrN2LurBgoBWkWosTxdrxi90PO/jLjFmF5ONcqe06BW2IwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLJRfXgR02YppZrq4pu1BpaNAPrdMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvc2xGOWVCSFRaaW1sbXVyaW03VUdsbzBBLXQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAWNiSMA8E AgACMAkDBwAgAUBIAQgwDQYJKoZIhvcNAQELBQADggEBADA8b22Ecknz/2r8c/Pz Lx6F6zz7JUyavM5VUNIqyGoGUMabDzjQjUqldXFup0fRpZ0RqTHeFW9KBsxnGGSE rgel+yuxXxOoxGmzHy40b4tCEekN3txtOstn2vKDmf20JEp93BcNHXe1jOjBjnAg oBcbkx4qKBt6razqDvs+VAmOCDpjtjVXpmxrjdNuihmYR/YYXwN/FVVNPv7B3uEm BAGlh7PONWLAS/AZpj4a+pDCR/tcPppGO02bY1sW+0Da7BmLhh30bdhW1TDFzYpl TytHveK1K1Ld40e2gDrWHlzfwJHPQ2A4k/PO0hk+uSTeLrEvCuxW5N8IAPIvEJb3 Ex4= -----END CERTIFICATE-----Generated at Mon Jan 19 13:53:02 2026 by rpki-client