This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jVziSUuQ2zDuqtyJyDz1KtBC-4w.roa File: jVziSUuQ2zDuqtyJyDz1KtBC-4w.roa (raw, json) Hash identifier: jnX3Wgjp/VlmVhCUA+3eKRHH5xxO0+bT+cE5jWnZ/fM= Subject key identifier: 8D:5C:E2:49:4B:90:DB:30:EE:AA:DC:89:C8:3C:F5:2A:D0:42:FB:8C Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B220F0B90184DF0EAFF4D9CC1F8B26251 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jVziSUuQ2zDuqtyJyDz1KtBC-4w.roa Signing time: Mon 15 Dec 2025 12:49:29 +0000 ROA not before: Mon 15 Dec 2025 12:49:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16125 IP address blocks: 84.32.9.0/24 maxlen: 24 84.32.25.0/24 maxlen: 24 84.32.51.0/24 maxlen: 24 84.32.97.0/24 maxlen: 24 84.32.149.0/24 maxlen: 24 84.32.151.0/24 maxlen: 24 84.32.178.0/23 maxlen: 23 84.32.209.0/24 maxlen: 24 84.32.214.0/24 maxlen: 24 84.32.215.0/24 maxlen: 24 84.32.244.0/24 maxlen: 24 84.32.248.0/24 maxlen: 24 88.216.62.0/24 maxlen: 24 88.216.90.0/24 maxlen: 24 88.216.127.0/24 maxlen: 24 88.216.197.0/24 maxlen: 24 88.216.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:0f:0b:90:18:4d:f0:ea:ff:4d:9c:c1:f8:b2:62:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Dec 15 12:49:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8d5ce2494b90db30eeaadc89c83cf52ad042fb8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7e:cd:e2:db:2d:b6:7a:af:4e:42:0b:1e:71: 51:84:cf:9c:a0:d6:ae:55:53:7c:3f:a5:df:69:6f: 8a:9a:fc:a4:70:6a:90:f7:7b:9b:7a:ef:0f:ef:7a: bf:26:bc:34:c6:6a:d1:2a:d6:89:9f:a3:c1:a0:a6: 80:0e:98:27:15:c5:b5:e4:32:c5:41:34:ac:01:49: 9b:a2:26:1c:68:58:06:0a:12:4f:32:8c:83:8f:4b: 2e:23:f7:56:13:2d:d5:9a:f8:2f:05:cf:bc:fb:ff: bc:10:42:05:98:7c:f3:83:c8:a8:4d:4b:a5:47:18: aa:00:63:5a:0a:c6:a1:e7:4c:5e:59:51:5c:2f:9a: a1:6e:b5:50:8d:c3:89:d6:40:4b:69:92:6b:b3:e2: ed:3f:be:24:4c:fe:a4:7e:8e:62:1d:5e:5a:80:16: f4:92:09:2c:0f:db:f2:08:fd:45:5a:48:a3:2e:11: 0f:6d:94:a6:be:5f:1c:37:a7:d5:1f:b5:97:1b:b1: e5:2b:1f:d3:6e:f7:f7:ce:a5:7f:f0:94:bb:09:0b: c8:ee:46:c6:a7:0d:2b:71:26:53:a5:b4:74:70:c2: 99:79:10:c4:9b:b3:29:6b:78:70:57:e4:45:77:d1: f2:80:ad:0f:09:3b:e7:de:e9:b4:e2:1a:17:53:78: bc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5C:E2:49:4B:90:DB:30:EE:AA:DC:89:C8:3C:F5:2A:D0:42:FB:8C X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jVziSUuQ2zDuqtyJyDz1KtBC-4w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.9.0/24 84.32.25.0/24 84.32.51.0/24 84.32.97.0/24 84.32.149.0/24 84.32.151.0/24 84.32.178.0/23 84.32.209.0/24 84.32.214.0/23 84.32.244.0/24 84.32.248.0/24 88.216.62.0/24 88.216.90.0/24 88.216.127.0/24 88.216.197.0/24 88.216.215.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:2f:1d:9e:35:9a:66:52:38:7f:e3:13:54:64:d4:38:bf:97: 50:fe:4e:7a:9a:21:1c:ee:39:96:c8:5f:65:05:a3:0c:fd:84: a1:82:f4:f4:73:26:3f:ed:c7:57:ba:9a:b3:1c:8c:7b:17:72: e6:c5:7f:98:67:93:07:ff:91:c1:e7:c1:46:4f:8c:92:a5:60: 54:22:80:17:1e:21:5c:14:34:d3:45:68:76:30:43:92:9b:cb: 52:d1:9a:68:65:d7:15:e4:76:dc:fc:fa:b4:f9:4d:aa:77:17: ab:1c:e3:86:84:a1:04:5e:e0:81:8d:2a:f3:5e:64:bb:ad:28: 84:0e:49:fd:50:6f:1a:06:d6:78:43:b8:ca:4f:06:cd:96:7b: 92:1c:82:aa:ab:e7:19:eb:86:32:17:47:38:de:ab:2a:e2:ee: c8:ca:b0:9f:aa:69:0a:38:2c:b9:77:c0:82:c4:42:b2:76:23: b6:d9:25:e3:5a:64:7b:65:73:53:ad:23:97:1f:cc:57:b9:2f: c8:33:38:4f:88:0f:4e:9f:1e:09:72:d7:4a:97:31:00:9a:54: d4:b2:e1:df:6c:53:77:81:ab:68:75:ec:a0:e3:30:ac:14:c9: 0c:0d:e1:7e:18:a6:28:9f:f2:b2:d4:3c:44:c9:af:cb:a2:63: d6:9d:37:d5 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgISAZsiDwuQGE3w6v9NnMH4smJRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjUxMjE1MTI0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDVjZTI0OTRiOTBkYjMwZWVhYWRjODljODNjZjUyYWQwNDJmYjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX7N4tsttnqvTkILHnFRhM+coNau VVN8P6XfaW+KmvykcGqQ93ubeu8P73q/Jrw0xmrRKtaJn6PBoKaADpgnFcW15DLF QTSsAUmboiYcaFgGChJPMoyDj0suI/dWEy3VmvgvBc+8+/+8EEIFmHzzg8ioTUul RxiqAGNaCsah50xeWVFcL5qhbrVQjcOJ1kBLaZJrs+LtP74kTP6kfo5iHV5agBb0 kgksD9vyCP1FWkijLhEPbZSmvl8cN6fVH7WXG7HlKx/Tbvf3zqV/8JS7CQvI7kbG pw0rcSZTpbR0cMKZeRDEm7Mpa3hwV+RFd9HygK0PCTvn3um04hoXU3i8qwIDAQAB o4ICYzCCAl8wHQYDVR0OBBYEFI1c4klLkNsw7qrcicg89SrQQvuMMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvalZ6aVNVdVEyekR1cXR5SnlEejFLdEJDLTR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQAVCAJAwQA VCAZAwQAVCAzAwQAVCBhAwQAVCCVAwQAVCCXAwQBVCCyAwQAVCDRAwQBVCDWAwQA VCD0AwQAVCD4AwQAWNg+AwQAWNhaAwQAWNh/AwQAWNjFAwQAWNjXMA0GCSqGSIb3 DQEBCwUAA4IBAQCPLx2eNZpmUjh/4xNUZNQ4v5dQ/k56miEc7jmWyF9lBaMM/YSh gvT0cyY/7cdXupqzHIx7F3LmxX+YZ5MH/5HB58FGT4ySpWBUIoAXHiFcFDTTRWh2 MEOSm8tS0ZpoZdcV5Hbc/Pq0+U2qdxerHOOGhKEEXuCBjSrzXmS7rSiEDkn9UG8a BtZ4Q7jKTwbNlnuSHIKqq+cZ64YyF0c43qsq4u7IyrCfqmkKOCy5d8CCxEKydiO2 2SXjWmR7ZXNTrSOXH8xXuS/IMzhPiA9Onx4JctdKlzEAmlTUsuHfbFN3gatodeyg 4zCsFMkMDeF+GKYon/Ky1DxEya/LomPWnTfV -----END CERTIFICATE-----Generated at Thu Dec 18 20:16:58 2025 by rpki-client