This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/gJ785XJ9H_YCOb3lGo5CQfpeh40.roa File: gJ785XJ9H_YCOb3lGo5CQfpeh40.roa (raw, json) Hash identifier: a5odbU5RIdIG7qJGjHKzZYL1YiHtyjAYLv2S3BT+WIQ= Subject key identifier: 80:9E:FC:E5:72:7D:1F:F6:02:39:BD:E5:1A:8E:42:41:FA:5E:87:8D Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C809F862B85AEF18D3F48D237AB8D89 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/gJ785XJ9H_YCOb3lGo5CQfpeh40.roa Signing time: Fri 02 Jan 2026 02:19:22 +0000 ROA not before: Fri 02 Jan 2026 02:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22773 IP address blocks: 84.32.52.0/22 maxlen: 24 88.216.129.0/24 maxlen: 24 88.216.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:9f:86:2b:85:ae:f1:8d:3f:48:d2:37:ab:8d:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=809efce5727d1ff60239bde51a8e4241fa5e878d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4c:92:67:3f:17:f7:7d:7c:00:01:99:92:b6: 2b:89:78:80:41:36:0b:e3:4e:c0:78:fb:e4:15:88: be:79:9b:0a:ec:79:5c:28:51:3b:23:e3:ab:64:d9: 39:91:02:c0:b0:c4:6e:45:a6:8b:b0:dc:ab:2b:16: d7:ec:98:f0:ef:27:cd:6f:eb:2f:10:44:13:d1:09: c3:54:8b:1d:99:75:35:5b:eb:c0:59:e9:74:53:91: ef:40:48:cb:bc:de:37:a6:e2:d9:c0:4f:98:68:71: 26:8d:d7:e0:2d:ce:e3:08:70:65:e2:21:6f:9c:cb: 02:8c:c9:de:5e:44:ae:62:dc:67:be:fa:42:14:fa: 8f:a9:0d:ec:54:bd:43:57:c5:cd:22:2b:04:57:72: 2c:c2:85:0e:7b:3b:4d:54:a7:73:c5:d2:90:15:b6: cc:95:6d:52:e3:e4:90:f2:c2:30:56:99:25:d3:98: 0e:35:1f:cb:41:fc:e8:71:a2:96:fa:99:f0:4f:67: 19:db:2d:f2:e4:01:08:88:e0:25:05:81:99:81:fa: 58:d0:7a:40:d8:e9:cc:d7:bb:92:c9:a2:7c:d3:13: ed:d5:63:86:40:37:29:0c:38:09:82:b4:34:32:34: b6:9b:d2:8d:27:ab:14:23:ff:f0:66:af:ab:96:d0: 3c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:9E:FC:E5:72:7D:1F:F6:02:39:BD:E5:1A:8E:42:41:FA:5E:87:8D X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/gJ785XJ9H_YCOb3lGo5CQfpeh40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.52.0/22 88.216.129.0/24 88.216.252.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:17:1e:19:41:68:e2:9b:94:83:d9:bb:04:cf:3c:de:6e:56: 5b:f6:2e:80:4a:45:af:18:26:e0:52:48:3e:ea:b3:3f:a0:bb: a9:b2:47:e9:a9:0d:79:26:2f:91:42:10:93:bf:22:69:d9:cf: 10:a9:9f:30:d0:54:81:76:28:5a:23:c4:fa:99:ef:7a:36:0c: 20:6c:f7:e9:be:f8:e4:7a:b6:8d:d0:ff:fc:69:3c:f0:90:4c: 57:86:a9:ac:1e:b1:05:94:ef:08:fd:73:cb:70:03:d0:f0:07: 3e:69:70:a7:4f:a4:8c:67:bd:28:9f:e7:0a:94:0f:8c:c4:dc: 03:2c:28:be:db:e7:0f:70:79:e3:9f:ed:f1:ca:97:00:4e:d8: bf:7a:d9:51:82:02:a4:95:3f:f5:8c:b1:51:2e:23:01:fd:29: 00:80:39:89:63:d5:c4:66:27:ad:16:20:7d:ae:b2:0f:70:4a: 1c:f1:28:23:f8:57:2e:74:1c:ee:17:f3:e1:d4:cd:1b:fd:e2: db:17:73:b4:ee:fd:03:e1:cc:af:56:40:65:1a:b9:53:24:04: af:e2:d1:fd:55:40:95:9e:dd:73:7a:0d:00:54:e1:b1:5a:64: b8:57:78:de:5d:12:4e:ad:c2:e6:bd:d8:b8:eb:a8:87:e3:bb: 3b:5e:da:91 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gJ+GK4Wu8Y0/SNI3q42JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDllZmNlNTcyN2QxZmY2MDIzOWJkZTUxYThlNDI0MWZhNWU4NzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUySZz8X9318AAGZkrYriXiAQTYL 407AePvkFYi+eZsK7HlcKFE7I+OrZNk5kQLAsMRuRaaLsNyrKxbX7Jjw7yfNb+sv EEQT0QnDVIsdmXU1W+vAWel0U5HvQEjLvN43puLZwE+YaHEmjdfgLc7jCHBl4iFv nMsCjMneXkSuYtxnvvpCFPqPqQ3sVL1DV8XNIisEV3IswoUOeztNVKdzxdKQFbbM lW1S4+SQ8sIwVpkl05gONR/LQfzocaKW+pnwT2cZ2y3y5AEIiOAlBYGZgfpY0HpA 2OnM17uSyaJ80xPt1WOGQDcpDDgJgrQ0MjS2m9KNJ6sUI//wZq+rltA8AwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFICe/OVyfR/2Ajm95RqOQkH6XoeNMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvZ0o3ODVYSjlIX1lDT2IzbEdvNUNRZnBlaDQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCVCA0AwQA WNiBAwQCWNj8MA0GCSqGSIb3DQEBCwUAA4IBAQAcFx4ZQWjim5SD2bsEzzzeblZb 9i6ASkWvGCbgUkg+6rM/oLupskfpqQ15Ji+RQhCTvyJp2c8QqZ8w0FSBdihaI8T6 me96NgwgbPfpvvjkeraN0P/8aTzwkExXhqmsHrEFlO8I/XPLcAPQ8Ac+aXCnT6SM Z70on+cKlA+MxNwDLCi+2+cPcHnjn+3xypcATti/etlRggKklT/1jLFRLiMB/SkA gDmJY9XEZietFiB9rrIPcEoc8Sgj+FcudBzuF/Ph1M0b/eLbF3O07v0D4cyvVkBl GrlTJASv4tH9VUCVnt1zeg0AVOGxWmS4V3jeXRJOrcLmvdi466iH47s7XtqR -----END CERTIFICATE-----Generated at Sun Jan 25 13:33:20 2026 by rpki-client