This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/1-S3N2jNYxw0tVM9fiU8_C8T-X9o.roa File: 1-S3N2jNYxw0tVM9fiU8_C8T-X9o.roa (raw, json) Hash identifier: Ddu3dw5E5cMsctwBaCnCHBJl5vVM/XMeaSx8/U1wJfs= Subject key identifier: F9:2D:CD:DA:33:58:C7:0D:2D:54:CF:5F:89:4F:3F:0B:C4:FE:5F:DA Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 019B79ED4FE734B5EFA34EE04FBFEE9BC8D5 Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/1-S3N2jNYxw0tVM9fiU8_C8T-X9o.roa Signing time: Thu 01 Jan 2026 14:19:14 +0000 ROA not before: Thu 01 Jan 2026 14:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199785 IP address blocks: 213.21.236.0/24 maxlen: 24 213.21.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4f:e7:34:b5:ef:a3:4e:e0:4f:bf:ee:9b:c8:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f92dcdda3358c70d2d54cf5f894f3f0bc4fe5fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4e:12:63:63:51:52:59:56:00:e1:da:6c:4f: 32:43:79:c4:69:c8:ae:70:79:5e:84:82:52:b7:cc: f3:04:7c:2c:9d:83:0b:f4:ba:c5:46:b2:e6:d1:ce: 02:53:26:11:44:27:ff:a8:a4:38:37:e5:33:ff:f6: e8:7b:e8:63:c8:ee:49:12:55:b5:73:11:d0:ab:2e: 59:f1:ca:94:e3:b4:9e:49:d1:7d:30:16:ae:fc:3b: cb:bf:fc:a1:e8:c4:9a:5d:fd:13:bf:cd:3f:30:d8: 04:7f:f5:85:03:b9:93:43:e1:0e:0f:d3:d2:7c:bb: 02:ca:eb:c2:83:5c:fc:e3:8d:98:69:34:06:d4:f6: 08:b1:7d:e2:ed:fa:2e:4b:b7:ef:84:8e:55:0a:5e: 40:11:a8:7b:d4:4f:d6:fa:e2:58:24:19:cc:99:e3: e5:1d:72:83:e2:2b:31:c2:06:8c:1a:bf:1c:12:8d: 01:1d:11:0f:97:d0:db:21:97:f5:58:de:32:e0:e1: 57:53:38:13:cb:06:0b:3b:5b:7d:34:67:1e:fe:d3: 46:fe:d1:35:65:88:45:ec:65:78:a6:9a:83:c8:9f: d9:d5:b7:f4:00:51:79:6e:c6:3e:59:03:8a:26:87: 9e:7c:30:1e:1e:5a:04:78:5d:08:cc:be:96:34:aa: a5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:2D:CD:DA:33:58:C7:0D:2D:54:CF:5F:89:4F:3F:0B:C4:FE:5F:DA X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/1-S3N2jNYxw0tVM9fiU8_C8T-X9o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.21.236.0/24 213.21.253.0/24 Signature Algorithm: sha256WithRSAEncryption 57:a6:d4:95:86:69:eb:d7:09:ff:39:73:d8:e2:a8:5d:ce:4f: dd:3b:b8:de:ab:1b:98:6b:c1:9f:05:84:33:46:c6:bf:a6:f7: a1:e4:4b:c7:20:64:f2:96:87:e9:78:fb:7b:f9:c8:45:8c:7d: 1c:19:08:f0:6d:2e:88:55:92:50:79:31:eb:2b:f1:3b:1d:30: 73:f9:ce:ac:b9:3c:22:ce:5e:17:9f:64:98:a6:14:c0:5c:40: 4e:36:d9:b3:6c:aa:cd:44:3f:62:35:63:18:0f:07:ec:19:e6: 68:d0:e2:8d:39:b1:ef:9d:d9:45:50:7c:77:8e:95:28:98:bb: ca:ab:5c:d5:30:3a:20:c2:41:b7:c6:f0:bc:e1:2c:fb:22:80: aa:45:ad:2f:97:26:6c:7d:e9:d8:a1:89:03:f5:9c:ee:da:05: d4:ec:74:45:a1:1a:66:a9:fd:59:85:e3:95:e0:cc:99:72:f7: 53:2d:1c:4f:64:20:04:a9:0b:b0:c3:19:98:41:1c:55:e2:20: 54:c1:50:62:6b:0a:b8:78:ba:49:cf:48:d8:30:e1:b3:e2:c3: c6:3b:0d:52:a8:11:1e:6e:b5:63:cd:c0:95:b3:9b:17:c5:1f: 17:b1:e0:19:45:29:3e:b6:d4:fc:72:d2:ae:c7:c3:ea:e4:33: 8a:a0:04:ea -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt57U/nNLXvo07gT7/um8jVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTJkY2RkYTMzNThjNzBkMmQ1NGNmNWY4OTRmM2YwYmM0ZmU1ZmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3U4SY2NRUllWAOHabE8yQ3nEaciu cHlehIJSt8zzBHwsnYML9LrFRrLm0c4CUyYRRCf/qKQ4N+Uz//boe+hjyO5JElW1 cxHQqy5Z8cqU47SeSdF9MBau/DvLv/yh6MSaXf0Tv80/MNgEf/WFA7mTQ+EOD9PS fLsCyuvCg1z8442YaTQG1PYIsX3i7fouS7fvhI5VCl5AEah71E/W+uJYJBnMmePl HXKD4isxwgaMGr8cEo0BHREPl9DbIZf1WN4y4OFXUzgTywYLO1t9NGce/tNG/tE1 ZYhF7GV4ppqDyJ/Z1bf0AFF5bsY+WQOKJoeefDAeHloEeF0IzL6WNKqlcwIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPktzdozWMcNLVTPX4lPPwvE/l/aMB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvMS1TM04yak5ZeHcwdFZNOWZpVThfQzhULVg5by5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZDAvYzlkZTEzLTViNzQtNDEzZC1iMmZiLTFhZjI0NjVhOGVl Yy8xL3ZQMy1iY3FLeDctaHFVVU8tWl9URmUwQ3JOay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEANUV7AME ANUV/TANBgkqhkiG9w0BAQsFAAOCAQEAV6bUlYZp69cJ/zlz2OKoXc5P3Tu43qsb mGvBnwWEM0bGv6b3oeRLxyBk8paH6Xj7e/nIRYx9HBkI8G0uiFWSUHkx6yvxOx0w c/nOrLk8Is5eF59kmKYUwFxATjbZs2yqzUQ/YjVjGA8H7BnmaNDijTmx753ZRVB8 d46VKJi7yqtc1TA6IMJBt8bwvOEs+yKAqkWtL5cmbH3p2KGJA/Wc7toF1Ox0RaEa Zqn9WYXjleDMmXL3Uy0cT2QgBKkLsMMZmEEcVeIgVMFQYmsKuHi6Sc9I2DDhs+LD xjsNUqgRHm61Y83AlbObF8UfF7HgGUUpPrbU/HLSrsfD6uQziqAE6g== -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:40 2026 by rpki-client