This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RWrk4UXihEq8ctRoiCGF-QM0wjI.roa File: RWrk4UXihEq8ctRoiCGF-QM0wjI.roa (raw, json) Hash identifier: x7pdeGt0Bs0uCbX7XpZ4vTP5QruZTtXU21mOOLJwT/0= Subject key identifier: 45:6A:E4:E1:45:E2:84:4A:BC:72:D4:68:88:21:85:F9:03:34:C2:32 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B281FC9304B7B7F94A29A390C91B83D96 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RWrk4UXihEq8ctRoiCGF-QM0wjI.roa Signing time: Tue 16 Dec 2025 17:05:30 +0000 ROA not before: Tue 16 Dec 2025 17:05:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 84.32.7.0/24 maxlen: 24 84.32.8.0/24 maxlen: 24 84.32.20.0/22 maxlen: 24 84.32.46.0/24 maxlen: 24 84.32.47.0/24 maxlen: 24 84.32.61.0/24 maxlen: 24 84.32.108.0/24 maxlen: 24 84.32.110.0/24 maxlen: 24 84.32.148.0/23 maxlen: 24 84.32.150.0/23 maxlen: 24 84.32.151.0/24 maxlen: 24 84.32.174.0/23 maxlen: 24 84.32.176.0/24 maxlen: 24 84.32.214.0/23 maxlen: 24 84.32.230.0/24 maxlen: 24 84.32.244.0/23 maxlen: 24 84.32.246.0/23 maxlen: 24 88.216.22.0/23 maxlen: 24 88.216.36.0/24 maxlen: 24 88.216.44.0/24 maxlen: 24 88.216.45.0/24 maxlen: 24 88.216.66.0/23 maxlen: 24 88.216.92.0/23 maxlen: 24 88.216.93.0/24 maxlen: 24 88.216.130.0/23 maxlen: 24 88.216.134.0/23 maxlen: 24 88.216.184.0/24 maxlen: 24 88.216.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1f:c9:30:4b:7b:7f:94:a2:9a:39:0c:91:b8:3d:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Dec 16 17:05:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=456ae4e145e2844abc72d468882185f90334c232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a5:f2:fa:ee:a5:d3:9f:a0:5e:cb:81:66:3e: df:ff:6e:ce:b0:f7:a9:5c:5c:94:65:d9:ab:0d:a9: ef:6b:67:61:14:6d:ff:fd:85:03:ca:02:63:4c:07: 95:37:cd:ca:04:b8:5f:95:29:0e:4a:ff:c9:2a:6e: 40:12:f9:66:7e:6e:27:59:a0:ad:52:fc:8e:2f:39: dd:b0:53:19:bf:98:64:9d:74:14:91:7f:1b:51:f9: 83:a7:6b:dc:81:fd:7a:fc:4e:3c:47:aa:8f:d3:ca: bb:0d:ab:04:2b:d1:ec:6a:92:fd:86:84:83:56:5c: ff:37:27:dd:cc:88:5d:73:dd:2e:1f:01:22:d0:31: a2:70:67:e9:e4:33:3e:02:36:c4:f0:97:74:4c:b0: cf:ad:78:13:41:b1:8c:f5:8a:8e:57:14:ce:a9:ac: 3e:fd:60:90:89:ff:7e:8f:c4:98:a4:6b:fe:87:70: af:ee:6a:23:66:3e:e1:60:2f:15:a1:ea:40:55:f0: c9:d7:e2:ad:d9:6c:d7:de:90:9b:9d:60:3b:c1:29: 7e:dd:80:ae:b9:5b:92:e3:bf:b8:25:47:eb:ca:52: 34:aa:4d:a8:46:00:c3:ee:69:27:5e:b0:49:22:2b: 00:f6:82:12:10:5b:e4:4b:5b:89:13:1e:59:08:55: f5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6A:E4:E1:45:E2:84:4A:BC:72:D4:68:88:21:85:F9:03:34:C2:32 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RWrk4UXihEq8ctRoiCGF-QM0wjI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.7.0-84.32.8.255 84.32.20.0/22 84.32.46.0/23 84.32.61.0/24 84.32.108.0/24 84.32.110.0/24 84.32.148.0/22 84.32.174.0-84.32.176.255 84.32.214.0/23 84.32.230.0/24 84.32.244.0/22 88.216.22.0/23 88.216.36.0/24 88.216.44.0/23 88.216.66.0/23 88.216.92.0/23 88.216.130.0/23 88.216.134.0/23 88.216.184.0/24 88.216.211.0/24 Signature Algorithm: sha256WithRSAEncryption 05:46:f3:bd:b8:a2:e3:f0:f6:70:d5:c9:9a:00:43:f2:17:9d: d0:04:d1:bb:5e:8f:0d:13:d3:c7:cf:70:25:db:dd:c5:38:3c: 5d:0f:e7:9e:65:bb:9f:52:6b:cf:55:c8:5c:52:6b:f9:09:f7: 18:73:1f:85:6c:93:bc:ec:dc:04:9a:d4:b8:cf:ac:b7:7d:ba: 87:37:10:c5:03:0d:3e:e6:c1:02:10:49:51:1d:bc:4d:86:3d: 0f:9c:ca:b2:61:c1:26:4a:63:2f:f1:b9:b6:aa:79:20:5d:0d: e1:2d:bd:64:f8:9b:47:d3:78:55:fe:f4:66:35:b9:fb:5e:3f: cf:74:b5:28:ed:5e:7e:ee:9c:e1:2e:21:f4:f0:4a:80:67:bc: 90:6d:4b:bf:e0:0b:cc:0f:90:6e:cd:09:a2:b8:c6:1e:3c:9a: 2b:d3:b4:fc:8a:ed:9e:2c:fb:ac:bf:26:38:fa:4f:23:a7:54: 8d:29:0e:3d:91:17:72:2b:92:b2:08:df:08:0d:d6:90:44:a1: 60:8a:94:c1:ab:fe:17:ee:0e:73:47:09:50:b7:ba:b5:96:14: 18:78:b2:f5:9c:13:4e:e9:ce:64:85:bf:95:ab:1e:c4:82:73: 11:35:2a:cd:b2:a9:b9:8e:85:a2:f2:d8:bf:7d:35:36:5d:42: 71:e8:26:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZsoH8kwS3t/lKKaOQyRuD2WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjUxMjE2MTcwNTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTZhZTRlMTQ1ZTI4NDRhYmM3MmQ0Njg4ODIxODVmOTAzMzRjMjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaXy+u6l05+gXsuBZj7f/27OsPep XFyUZdmrDanva2dhFG3//YUDygJjTAeVN83KBLhflSkOSv/JKm5AEvlmfm4nWaCt UvyOLzndsFMZv5hknXQUkX8bUfmDp2vcgf16/E48R6qP08q7DasEK9HsapL9hoSD Vlz/NyfdzIhdc90uHwEi0DGicGfp5DM+AjbE8Jd0TLDPrXgTQbGM9YqOVxTOqaw+ /WCQif9+j8SYpGv+h3Cv7mojZj7hYC8VoepAVfDJ1+Kt2WzX3pCbnWA7wSl+3YCu uVuS47+4JUfrylI0qk2oRgDD7mknXrBJIisA9oISEFvkS1uJEx5ZCFX1rQIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFEVq5OFF4oRKvHLUaIghhfkDNMIyMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvUldyazRVWGloRXE4Y3RSb2lDR0YtUU0wd2pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGlBggrBgEFBQcBBwEB/wSBlTCBkjCBjwQCAAEwgYgwDAME AFQgBwMEAFQgCAMEAlQgFAMEAVQgLgMEAFQgPQMEAFQgbAMEAFQgbgMEAlQglDAM AwQBVCCuAwQAVCCwAwQBVCDWAwQAVCDmAwQCVCD0AwQBWNgWAwQAWNgkAwQBWNgs AwQBWNhCAwQBWNhcAwQBWNiCAwQBWNiGAwQAWNi4AwQAWNjTMA0GCSqGSIb3DQEB CwUAA4IBAQAFRvO9uKLj8PZw1cmaAEPyF53QBNG7Xo8NE9PHz3Al293FODxdD+ee ZbufUmvPVchcUmv5CfcYcx+FbJO87NwEmtS4z6y3fbqHNxDFAw0+5sECEElRHbxN hj0PnMqyYcEmSmMv8bm2qnkgXQ3hLb1k+JtH03hV/vRmNbn7Xj/PdLUo7V5+7pzh LiH08EqAZ7yQbUu/4AvMD5BuzQmiuMYePJor07T8iu2eLPusvyY4+k8jp1SNKQ49 kRdyK5KyCN8IDdaQRKFgipTBq/4X7g5zRwlQt7q1lhQYeLL1nBNO6c5khb+Vqx7E gnMRNSrNsqm5joWi8ti/fTU2XUJx6CZp -----END CERTIFICATE-----Generated at Sat Dec 20 08:15:36 2025 by rpki-client