This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wVxgMkHa6GBHfWXfGyAIQvria6Q.roa File: wVxgMkHa6GBHfWXfGyAIQvria6Q.roa (raw, json) Hash identifier: bc5epS1IJ6WU9B8g/Bm3xwDKoCNO9U8aRctPP3j3xRM= Subject key identifier: C1:5C:60:32:41:DA:E8:60:47:7D:65:DF:1B:20:08:42:FA:E2:6B:A4 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B281FC999089D42092D6C1BFF75D9E959 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wVxgMkHa6GBHfWXfGyAIQvria6Q.roa Signing time: Tue 16 Dec 2025 17:05:30 +0000 ROA not before: Tue 16 Dec 2025 17:05:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204770 IP address blocks: 84.32.32.0/24 maxlen: 24 84.32.34.0/24 maxlen: 24 84.32.48.0/24 maxlen: 24 84.32.63.0/24 maxlen: 24 84.32.70.0/24 maxlen: 24 84.32.71.0/24 maxlen: 24 84.32.128.0/22 maxlen: 32 84.32.220.0/24 maxlen: 24 88.216.39.0/24 maxlen: 24 88.216.68.0/24 maxlen: 24 88.216.198.0/24 maxlen: 24 88.216.210.0/24 maxlen: 24 88.216.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1f:c9:99:08:9d:42:09:2d:6c:1b:ff:75:d9:e9:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Dec 16 17:05:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c15c603241dae860477d65df1b200842fae26ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4c:b2:97:9b:08:32:8e:3f:46:a2:eb:b0:cf: 60:c6:20:5e:08:be:6b:ea:2f:74:10:95:50:fd:55: f9:05:68:5a:8c:d8:18:3d:60:9e:ab:df:3c:e0:db: 68:61:f0:01:b6:b2:c1:66:60:47:ec:d5:53:6c:c7: 4a:2c:48:6e:d6:a7:d4:52:b1:e4:97:b4:ce:9d:4e: b1:0d:b1:c5:23:d1:94:ee:26:40:46:19:bb:72:a1: 62:ba:50:77:3f:c2:77:76:e5:36:2f:6f:15:16:66: f4:e1:6d:da:41:fa:f4:f9:eb:fc:60:10:73:87:f8: 43:11:d2:91:a1:3b:7f:9a:6d:e0:47:93:2a:d6:ae: 60:75:20:fe:e2:62:b5:dd:49:f1:f3:fb:1f:05:bc: 1b:1d:e2:a4:80:ad:28:d8:f6:91:57:ce:ed:9a:c5: 79:56:ab:19:b8:04:c1:93:d1:a2:82:b1:fe:19:2a: fd:d2:35:4f:ce:64:f1:06:db:a7:3b:83:a4:9a:db: 89:9f:6a:e5:96:0a:b7:0f:af:82:13:8a:28:58:f7: 3a:96:51:c4:bb:a2:73:5a:de:95:8e:f6:da:50:43: a6:d7:c1:9c:b6:69:19:34:7e:92:7d:77:72:f5:78: ae:15:60:58:04:65:5d:52:ac:96:40:a7:56:61:f1: c5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:5C:60:32:41:DA:E8:60:47:7D:65:DF:1B:20:08:42:FA:E2:6B:A4 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wVxgMkHa6GBHfWXfGyAIQvria6Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.32.0/24 84.32.34.0/24 84.32.48.0/24 84.32.63.0/24 84.32.70.0/23 84.32.128.0/22 84.32.220.0/24 88.216.39.0/24 88.216.68.0/24 88.216.198.0/24 88.216.210.0/24 88.216.222.0/24 Signature Algorithm: sha256WithRSAEncryption 43:1a:52:23:b5:5f:17:a0:78:89:a3:ed:f0:98:32:c5:ce:c6: b4:80:69:aa:04:ab:3b:86:54:98:9c:8f:59:7b:86:26:01:4f: ea:f0:17:70:c7:b9:88:46:54:6f:61:33:cd:dd:65:54:98:e2: 28:d8:46:6d:0d:d3:3b:b7:c2:0f:0c:04:d9:13:0d:1d:1f:72: ac:2e:ee:9c:a4:1f:fa:a4:4d:67:a9:15:af:59:21:c7:06:b4: e9:88:c2:bd:94:40:94:33:1a:c5:a5:2b:9e:58:3e:28:d1:3c: a4:05:5b:9b:04:bf:d7:7f:21:01:c9:91:92:c1:0b:ad:58:15: 35:25:71:b7:c6:45:22:1a:51:5e:42:a4:62:30:3d:d8:c1:7e: 82:aa:df:6c:1a:04:a6:8f:1b:18:c0:30:d5:ac:ae:9f:b1:25: fd:d2:0c:4f:b6:56:a2:4f:0b:a2:51:3b:1f:2e:c7:f3:9d:88: 7d:1d:89:40:c2:87:2a:b6:c0:4c:e0:1d:4d:dd:b8:c7:aa:59: 59:a4:e6:5d:40:53:37:80:dc:08:6a:5e:10:8e:1d:79:05:a9: 8f:9b:87:f6:6e:c8:73:8b:7e:a8:a0:cd:5d:c9:55:34:d8:3f: 83:d7:2c:b0:4b:77:b7:44:bf:92:07:b2:85:35:16:20:0e:ac: a2:15:90:96 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZsoH8mZCJ1CCS1sG/912elZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjUxMjE2MTcwNTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTVjNjAzMjQxZGFlODYwNDc3ZDY1ZGYxYjIwMDg0MmZhZTI2YmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Uyyl5sIMo4/RqLrsM9gxiBeCL5r 6i90EJVQ/VX5BWhajNgYPWCeq9884NtoYfABtrLBZmBH7NVTbMdKLEhu1qfUUrHk l7TOnU6xDbHFI9GU7iZARhm7cqFiulB3P8J3duU2L28VFmb04W3aQfr0+ev8YBBz h/hDEdKRoTt/mm3gR5Mq1q5gdSD+4mK13Unx8/sfBbwbHeKkgK0o2PaRV87tmsV5 VqsZuATBk9GigrH+GSr90jVPzmTxBtunO4OkmtuJn2rllgq3D6+CE4ooWPc6llHE u6JzWt6VjvbaUEOm18GctmkZNH6SfXdy9XiuFWBYBGVdUqyWQKdWYfHF/QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMFcYDJB2uhgR31l3xsgCEL64mukMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvd1Z4Z01rSGE2R0JIZldYZkd5QUlRdnJpYTZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAVCAgAwQA VCAiAwQAVCAwAwQAVCA/AwQBVCBGAwQCVCCAAwQAVCDcAwQAWNgnAwQAWNhEAwQA WNjGAwQAWNjSAwQAWNjeMA0GCSqGSIb3DQEBCwUAA4IBAQBDGlIjtV8XoHiJo+3w mDLFzsa0gGmqBKs7hlSYnI9Ze4YmAU/q8Bdwx7mIRlRvYTPN3WVUmOIo2EZtDdM7 t8IPDATZEw0dH3KsLu6cpB/6pE1nqRWvWSHHBrTpiMK9lECUMxrFpSueWD4o0Tyk BVubBL/XfyEByZGSwQutWBU1JXG3xkUiGlFeQqRiMD3YwX6Cqt9sGgSmjxsYwDDV rK6fsSX90gxPtlaiTwuiUTsfLsfznYh9HYlAwocqtsBM4B1N3bjHqllZpOZdQFM3 gNwIal4Qjh15BamPm4f2bshzi36ooM1dyVU02D+D1yywS3e3RL+SB7KFNRYgDqyi FZCW -----END CERTIFICATE-----Generated at Sat Dec 20 08:15:34 2025 by rpki-client