This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/uR3HAMLPvc-xIV3DkMQOX9xfCwQ.roa File: uR3HAMLPvc-xIV3DkMQOX9xfCwQ.roa (raw, json) Hash identifier: UbZVIcd+yalTZZUbboQEyuswIkvbFRYySrJh5jRUEBQ= Subject key identifier: B9:1D:C7:00:C2:CF:BD:CF:B1:21:5D:C3:90:C4:0E:5F:DC:5F:0B:04 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80A5C8D50AFBFDE1B455C5D9AC58C2 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/uR3HAMLPvc-xIV3DkMQOX9xfCwQ.roa Signing time: Fri 02 Jan 2026 02:19:24 +0000 ROA not before: Fri 02 Jan 2026 02:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56485 IP address blocks: 84.32.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a5:c8:d5:0a:fb:fd:e1:b4:55:c5:d9:ac:58:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b91dc700c2cfbdcfb1215dc390c40e5fdc5f0b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e4:b5:bf:7a:6b:26:fd:10:79:47:98:19:cc: 64:46:c4:9f:74:1e:c8:72:e5:ab:99:44:65:4e:f9: a2:5b:01:ec:96:df:bf:b4:8a:9d:1a:8d:ef:e8:2e: 22:40:0c:db:ac:71:b7:45:80:12:0c:4e:38:9d:85: 00:ae:ed:bc:61:d1:ac:8e:46:4a:33:01:93:a1:8e: f2:d8:62:73:9e:82:10:ee:9d:a0:79:a9:94:67:c9: 22:ba:8b:92:f1:5d:ba:f7:27:c4:55:80:fa:c6:c9: ea:a2:c5:fa:10:fd:ef:c9:3c:5c:bc:75:48:4c:b9: 7b:52:f9:ec:cb:e5:65:24:52:8a:33:74:c2:6c:73: 5d:d3:79:bf:89:02:0d:9e:7b:f4:4a:bf:d2:7c:80: 15:83:eb:c9:ae:6d:9d:50:30:10:4c:64:ee:f0:b1: ad:90:4a:a4:6e:f6:95:df:ed:20:c7:fd:9b:8b:e7: 7c:81:89:bf:cb:b2:ec:c0:26:cc:c5:15:a5:63:4a: 7d:52:b4:2a:d0:9a:34:e1:91:55:66:9e:f1:41:f5: 0e:6a:c4:91:67:d1:d8:7f:2a:db:ab:bf:ed:15:73: d4:2c:95:ee:6f:ea:f4:76:98:3e:5d:fd:03:4c:92: f5:97:0d:7c:e7:3f:60:01:8d:a7:cc:43:79:4e:ea: 7e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:1D:C7:00:C2:CF:BD:CF:B1:21:5D:C3:90:C4:0E:5F:DC:5F:0B:04 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/uR3HAMLPvc-xIV3DkMQOX9xfCwQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.57.0/24 Signature Algorithm: sha256WithRSAEncryption 91:ce:97:44:10:7a:cd:73:e9:c5:57:26:19:5c:a5:26:42:e6: 55:a9:2b:12:da:9f:e1:e9:46:86:77:82:ec:b7:ff:3d:e2:22: 99:e7:0a:ee:56:2c:aa:57:fa:49:17:c9:5b:f2:a3:07:a2:ac: 07:2b:0f:c4:41:c4:9f:c5:93:5b:87:98:9f:4b:c9:97:4e:81: 37:9b:df:5e:90:31:46:74:3b:f9:5b:c1:28:16:10:18:71:0e: d2:cd:12:67:54:06:51:a5:e6:75:44:13:1a:c3:d1:4e:c0:dc: 61:96:18:d5:f9:e7:4e:8f:69:6a:17:0a:a3:2d:c0:16:af:f8: 6a:c7:42:13:75:03:ed:da:92:78:31:85:12:44:ff:e1:d5:84: 31:94:17:b8:0b:69:8a:31:87:1c:8a:aa:32:5f:ef:e0:3c:2d: 01:90:b0:96:76:36:71:3d:02:bd:32:c6:b2:67:93:46:a1:60: 1f:db:2d:7a:ed:4d:77:4a:70:41:cd:d6:1f:85:27:fd:2c:08: f5:35:0a:c1:59:1c:a2:67:c1:01:08:ba:58:df:c3:7c:8f:2b: 33:45:06:78:89:a4:d4:02:f0:6a:fc:62:89:e8:0c:0b:b4:1e: 51:c7:64:ab:9e:20:ca:3f:45:50:5f:fa:f8:44:b4:24:86:0f: 70:6e:a8:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gKXI1Qr7/eG0VcXZrFjCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTFkYzcwMGMyY2ZiZGNmYjEyMTVkYzM5MGM0MGU1ZmRjNWYwYjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOS1v3prJv0QeUeYGcxkRsSfdB7I cuWrmURlTvmiWwHslt+/tIqdGo3v6C4iQAzbrHG3RYASDE44nYUAru28YdGsjkZK MwGToY7y2GJznoIQ7p2geamUZ8kiuouS8V269yfEVYD6xsnqosX6EP3vyTxcvHVI TLl7Uvnsy+VlJFKKM3TCbHNd03m/iQINnnv0Sr/SfIAVg+vJrm2dUDAQTGTu8LGt kEqkbvaV3+0gx/2bi+d8gYm/y7LswCbMxRWlY0p9UrQq0Jo04ZFVZp7xQfUOasSR Z9HYfyrbq7/tFXPULJXub+r0dpg+Xf0DTJL1lw185z9gAY2nzEN5Tup+4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLkdxwDCz73PsSFdw5DEDl/cXwsEMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvdVIzSEFNTFB2Yy14SVYzRGtNUU9YOXhmQ3dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCA5MA0G CSqGSIb3DQEBCwUAA4IBAQCRzpdEEHrNc+nFVyYZXKUmQuZVqSsS2p/h6UaGd4Ls t/894iKZ5wruViyqV/pJF8lb8qMHoqwHKw/EQcSfxZNbh5ifS8mXToE3m99ekDFG dDv5W8EoFhAYcQ7SzRJnVAZRpeZ1RBMaw9FOwNxhlhjV+edOj2lqFwqjLcAWr/hq x0ITdQPt2pJ4MYUSRP/h1YQxlBe4C2mKMYcciqoyX+/gPC0BkLCWdjZxPQK9Msay Z5NGoWAf2y167U13SnBBzdYfhSf9LAj1NQrBWRyiZ8EBCLpY38N8jyszRQZ4iaTU AvBq/GKJ6AwLtB5Rx2SrniDKP0VQX/r4RLQkhg9wbqik -----END CERTIFICATE-----Generated at Mon Jan 19 13:53:29 2026 by rpki-client