This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/P4-T7lm5PMyZYQdzdipZiYvvI_E.roa File: P4-T7lm5PMyZYQdzdipZiYvvI_E.roa (raw, json) Hash identifier: UI/iwBLORRZ+AVhAGNPixkM+HvdZ9D/XfgV6KbUBERc= Subject key identifier: 3F:8F:93:EE:59:B9:3C:CC:99:61:07:73:76:2A:59:89:8B:EF:23:F1 Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8C6F8F323B77DD7CBAEA591E5A3D1 Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/P4-T7lm5PMyZYQdzdipZiYvvI_E.roa Signing time: Thu 01 Jan 2026 18:18:56 +0000 ROA not before: Thu 01 Jan 2026 18:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44698 IP address blocks: 84.237.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:c6:f8:f3:23:b7:7d:d7:cb:ae:a5:91:e5:a3:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f8f93ee59b93ccc99610773762a59898bef23f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d4:69:27:99:98:65:8e:b2:b3:18:32:04:66: 70:a5:e4:40:e3:d9:c9:40:37:02:34:d0:6c:ef:70: 68:00:79:cd:00:b6:fb:41:2d:5d:4a:ef:25:c8:b0: ff:7c:cd:cd:f7:8c:f6:cf:b9:3c:6a:2d:4e:f6:9e: 34:70:e0:63:75:ed:ce:36:82:a6:77:5a:e4:85:f5: 06:68:7c:81:c8:22:c4:d3:ff:c4:db:70:95:59:8e: 05:93:03:47:2d:e0:ce:e0:86:d3:8b:93:e0:e4:3d: 6c:67:31:b6:ec:b6:e1:75:0d:2a:8d:16:23:43:1f: ef:01:0b:80:e8:b4:c8:f3:02:b2:4a:b5:aa:5e:ef: 91:77:cc:85:2f:0e:48:73:02:8a:88:b4:55:2f:d2: 2b:ae:9d:80:d0:8d:ae:75:49:fe:4e:30:18:5b:2a: ed:f8:aa:07:54:aa:37:87:cb:0e:a9:ad:38:df:51: c2:a6:b7:11:27:14:3f:1d:9b:ef:9c:60:fe:d0:c1: d2:ef:96:d6:47:2a:bc:d1:2a:30:38:d2:21:8e:9e: 2c:d0:d9:4e:23:02:6f:00:6c:70:05:17:e1:13:16: 54:09:c0:9e:9f:ac:cd:25:c8:7e:c3:fe:25:85:bd: c1:b9:6a:0d:c2:a5:31:46:8a:87:ae:85:0e:86:b3: a9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:8F:93:EE:59:B9:3C:CC:99:61:07:73:76:2A:59:89:8B:EF:23:F1 X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/P4-T7lm5PMyZYQdzdipZiYvvI_E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.237.235.0/24 Signature Algorithm: sha256WithRSAEncryption 86:1b:a6:d7:c7:fb:bc:34:60:0b:6d:71:2a:29:0b:17:5f:77: 48:2b:dd:db:0a:13:21:32:5d:84:10:5a:c4:05:96:d3:19:d7: ea:39:f5:de:1c:4b:ab:95:43:2f:0e:cd:10:76:f1:6d:96:79: 74:af:3b:a5:7c:30:93:e4:f4:40:a3:5b:66:d6:94:37:e5:67: c5:b3:eb:82:5f:d5:b7:6f:e5:d0:66:52:71:ca:76:1a:cb:2b: 52:18:a7:b5:c2:c3:03:d5:44:4c:be:95:3b:56:86:7e:01:cb: be:ac:da:55:78:e6:d2:00:d2:cc:93:3d:f9:fb:21:32:6a:d5: 08:40:f6:4f:a5:b3:44:f0:96:ae:e0:f5:97:cd:4f:3d:fb:4f: 04:36:96:c5:6b:e0:bd:b0:60:ae:4c:bb:8b:2d:ff:2a:aa:3b: d6:a5:98:b4:5f:3b:68:b4:84:46:20:df:d8:12:26:db:07:14: f5:45:37:00:5d:cb:db:db:68:13:c7:7f:98:b7:7a:e5:98:b6: aa:af:5f:5b:02:7e:31:b2:c3:66:ae:ef:7e:23:99:cb:82:c2: 70:6d:7b:5a:b8:db:7d:90:8f:75:46:0b:72:97:27:8e:65:76: 61:69:4c:e9:5c:00:95:4d:fb:88:d4:0e:cb:12:23:d0:f5:0e: c0:33:d2:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yMb48yO3fdfLrqWR5aPRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjhmOTNlZTU5YjkzY2NjOTk2MTA3NzM3NjJhNTk4OThiZWYyM2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtRpJ5mYZY6ysxgyBGZwpeRA49nJ QDcCNNBs73BoAHnNALb7QS1dSu8lyLD/fM3N94z2z7k8ai1O9p40cOBjde3ONoKm d1rkhfUGaHyByCLE0//E23CVWY4FkwNHLeDO4IbTi5Pg5D1sZzG27LbhdQ0qjRYj Qx/vAQuA6LTI8wKySrWqXu+Rd8yFLw5IcwKKiLRVL9Irrp2A0I2udUn+TjAYWyrt +KoHVKo3h8sOqa0431HCprcRJxQ/HZvvnGD+0MHS75bWRyq80SowONIhjp4s0NlO IwJvAGxwBRfhExZUCcCen6zNJch+w/4lhb3BuWoNwqUxRoqHroUOhrOpGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD+Pk+5ZuTzMmWEHc3YqWYmL7yPxMB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvUDQtVDdsbTVQTXlaWVFkemRpcFppWXZ2SV9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVO3rMA0G CSqGSIb3DQEBCwUAA4IBAQCGG6bXx/u8NGALbXEqKQsXX3dIK93bChMhMl2EEFrE BZbTGdfqOfXeHEurlUMvDs0QdvFtlnl0rzulfDCT5PRAo1tm1pQ35WfFs+uCX9W3 b+XQZlJxynYayytSGKe1wsMD1URMvpU7VoZ+Acu+rNpVeObSANLMkz35+yEyatUI QPZPpbNE8Jau4PWXzU89+08ENpbFa+C9sGCuTLuLLf8qqjvWpZi0XztotIRGIN/Y EibbBxT1RTcAXcvb22gTx3+Yt3rlmLaqr19bAn4xssNmru9+I5nLgsJwbXtauNt9 kI91RgtylyeOZXZhaUzpXACVTfuI1A7LEiPQ9Q7AM9KI -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:57 2026 by rpki-client