This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/loKjYmyP7Vt5UEUGwKmeDE_I1FQ.roa File: loKjYmyP7Vt5UEUGwKmeDE_I1FQ.roa (raw, json) Hash identifier: ILR3ixtUv6JZ1VaWZeVVa/XbM3wkue4zJnwTbOAIIhM= Subject key identifier: 96:82:A3:62:6C:8F:ED:5B:79:50:45:06:C0:A9:9E:0C:4F:C8:D4:54 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B214C09E742A3B5BA0FD3087662EBE1F9 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/loKjYmyP7Vt5UEUGwKmeDE_I1FQ.roa Signing time: Mon 15 Dec 2025 09:16:29 +0000 ROA not before: Mon 15 Dec 2025 09:16:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 84.32.7.0/24 maxlen: 24 84.32.8.0/24 maxlen: 24 84.32.20.0/22 maxlen: 24 84.32.46.0/24 maxlen: 24 84.32.47.0/24 maxlen: 24 84.32.61.0/24 maxlen: 24 84.32.63.0/24 maxlen: 24 84.32.108.0/24 maxlen: 24 84.32.110.0/24 maxlen: 24 84.32.148.0/23 maxlen: 24 84.32.150.0/23 maxlen: 24 84.32.151.0/24 maxlen: 24 84.32.174.0/23 maxlen: 24 84.32.176.0/24 maxlen: 24 84.32.214.0/23 maxlen: 24 84.32.230.0/24 maxlen: 24 84.32.244.0/23 maxlen: 24 84.32.246.0/23 maxlen: 24 88.216.22.0/23 maxlen: 24 88.216.36.0/24 maxlen: 24 88.216.44.0/24 maxlen: 24 88.216.45.0/24 maxlen: 24 88.216.66.0/23 maxlen: 24 88.216.92.0/23 maxlen: 24 88.216.93.0/24 maxlen: 24 88.216.130.0/23 maxlen: 24 88.216.134.0/23 maxlen: 24 88.216.184.0/24 maxlen: 24 88.216.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:49:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:4c:09:e7:42:a3:b5:ba:0f:d3:08:76:62:eb:e1:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Dec 15 09:16:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9682a3626c8fed5b79504506c0a99e0c4fc8d454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:43:6c:97:33:39:83:61:93:a8:ce:cd:bb:38: 2d:bd:9f:4a:c2:c5:9a:d3:94:a3:7b:03:f9:6a:8d: c5:eb:63:6c:71:e7:6d:96:e3:77:8b:a7:51:86:2e: 5e:19:d1:ce:e4:47:e9:08:72:ba:c1:9d:8f:4e:bc: 48:14:c6:26:9b:44:14:d1:a9:33:e9:71:ea:39:46: 1a:70:d4:5b:0f:11:1a:f7:e8:e7:6a:b1:17:55:3e: c5:16:3b:80:a6:c9:cb:3a:1c:51:88:4c:bd:32:1d: c4:e7:9d:fb:5f:bb:8b:6f:87:01:8a:62:c2:65:b7: 8a:36:9b:a3:06:e2:19:05:2e:e0:d2:51:6d:1e:14: 42:4a:20:93:07:2b:0e:6f:4d:e6:ef:9e:bc:23:63: 4f:68:4d:fd:b2:84:3d:c7:05:f4:16:b1:f7:c3:e2: b0:a0:2f:9f:69:ff:fc:27:39:f2:ee:cf:1d:c7:2f: 86:91:9f:39:9a:9d:f0:82:07:64:5f:0b:f1:8d:49: f3:2e:6d:41:d0:cd:18:f0:53:1f:f5:22:18:34:8d: 60:31:60:9c:bc:e2:63:ea:c8:5f:ff:b0:57:49:94: 1c:94:92:45:3a:15:db:74:6e:04:95:9b:48:d3:4c: d2:d4:86:4b:30:90:94:26:1c:8e:68:03:90:b9:9a: 9f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:82:A3:62:6C:8F:ED:5B:79:50:45:06:C0:A9:9E:0C:4F:C8:D4:54 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/loKjYmyP7Vt5UEUGwKmeDE_I1FQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.7.0-84.32.8.255 84.32.20.0/22 84.32.46.0/23 84.32.61.0/24 84.32.63.0/24 84.32.108.0/24 84.32.110.0/24 84.32.148.0/22 84.32.174.0-84.32.176.255 84.32.214.0/23 84.32.230.0/24 84.32.244.0/22 88.216.22.0/23 88.216.36.0/24 88.216.44.0/23 88.216.66.0/23 88.216.92.0/23 88.216.130.0/23 88.216.134.0/23 88.216.184.0/24 88.216.211.0/24 Signature Algorithm: sha256WithRSAEncryption 34:f4:e4:1d:1a:67:15:fb:a1:bc:3f:0e:26:8b:c9:20:f9:50: 08:7c:00:af:76:02:bc:44:85:68:45:46:ec:b3:1d:6e:e5:a5: c6:a6:b2:f8:28:d5:ec:b2:ae:af:87:c4:12:6f:28:26:51:f0: 06:56:b3:70:59:f8:2e:6a:ed:f8:bf:7e:8b:7c:63:50:7f:f7: 16:df:c8:f1:ca:9c:e6:81:59:e5:b8:3b:58:b8:d6:43:5c:6c: 69:a4:54:cb:d2:78:f1:70:c7:ca:98:34:5e:f7:05:f9:45:67: 85:31:f8:68:1a:75:c5:1e:68:3f:44:2d:43:ec:51:86:04:15: 70:19:98:b2:42:cc:bd:ee:1a:4c:c4:1d:3d:99:74:aa:9c:d7: 33:50:fe:6f:cd:9a:af:38:a0:4e:6e:26:78:43:60:08:c5:ae: 93:97:f3:f6:8a:fc:99:45:d3:7e:7c:e9:65:71:3d:47:f9:f4: 75:99:23:f3:0a:68:cc:63:7f:d2:f8:52:b7:78:83:fb:f5:d5: 0f:18:e9:e0:4e:24:81:fe:2c:f3:13:59:bb:c8:16:12:50:7f: 2a:85:fb:4c:5a:75:1d:41:72:1e:fa:29:dc:fb:dd:59:f9:84: 04:59:25:1a:f7:2a:2e:52:47:53:e2:59:a6:2a:76:11:a4:f1: 4d:d0:55:30 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgISAZshTAnnQqO1ug/TCHZi6+H5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjUxMjE1MDkxNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjgyYTM2MjZjOGZlZDViNzk1MDQ1MDZjMGE5OWUwYzRmYzhkNDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkNslzM5g2GTqM7NuzgtvZ9KwsWa 05SjewP5ao3F62NscedtluN3i6dRhi5eGdHO5EfpCHK6wZ2PTrxIFMYmm0QU0akz 6XHqOUYacNRbDxEa9+jnarEXVT7FFjuApsnLOhxRiEy9Mh3E5537X7uLb4cBimLC ZbeKNpujBuIZBS7g0lFtHhRCSiCTBysOb03m7568I2NPaE39soQ9xwX0FrH3w+Kw oC+faf/8Jzny7s8dxy+GkZ85mp3wggdkXwvxjUnzLm1B0M0Y8FMf9SIYNI1gMWCc vOJj6shf/7BXSZQclJJFOhXbdG4ElZtI00zS1IZLMJCUJhyOaAOQuZqfswIDAQAB o4ICljCCApIwHQYDVR0OBBYEFJaCo2Jsj+1beVBFBsCpngxPyNRUMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvbG9LallteVA3VnQ1VUVVR3dLbWVERV9JMUZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGrBggrBgEFBQcBBwEB/wSBmzCBmDCBlQQCAAEwgY4wDAME AFQgBwMEAFQgCAMEAlQgFAMEAVQgLgMEAFQgPQMEAFQgPwMEAFQgbAMEAFQgbgME AlQglDAMAwQBVCCuAwQAVCCwAwQBVCDWAwQAVCDmAwQCVCD0AwQBWNgWAwQAWNgk AwQBWNgsAwQBWNhCAwQBWNhcAwQBWNiCAwQBWNiGAwQAWNi4AwQAWNjTMA0GCSqG SIb3DQEBCwUAA4IBAQA09OQdGmcV+6G8Pw4mi8kg+VAIfACvdgK8RIVoRUbssx1u 5aXGprL4KNXssq6vh8QSbygmUfAGVrNwWfguau34v36LfGNQf/cW38jxypzmgVnl uDtYuNZDXGxppFTL0njxcMfKmDRe9wX5RWeFMfhoGnXFHmg/RC1D7FGGBBVwGZiy Qsy97hpMxB09mXSqnNczUP5vzZqvOKBObiZ4Q2AIxa6Tl/P2ivyZRdN+fOllcT1H +fR1mSPzCmjMY3/S+FK3eIP79dUPGOngTiSB/izzE1m7yBYSUH8qhftMWnUdQXIe +inc+91Z+YQEWSUa9youUkdT4lmmKnYRpPFN0FUw -----END CERTIFICATE-----Generated at Mon Dec 15 17:27:26 2025 by rpki-client