This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/10rcPrImsu8PZEdla8aGpqVO6qU.roa File: 10rcPrImsu8PZEdla8aGpqVO6qU.roa (raw, json) Hash identifier: L3JiXE1iCTndxNrL5q/bo9206BV+caOYpXrLh1CtuNU= Subject key identifier: D7:4A:DC:3E:B2:26:B2:EF:0F:64:47:65:6B:C6:86:A6:A5:4E:EA:A5 Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 019C0E1B85BA419FDE1E7D28E84AAC69F973 Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/10rcPrImsu8PZEdla8aGpqVO6qU.roa Signing time: Fri 30 Jan 2026 08:53:30 +0000 ROA not before: Fri 30 Jan 2026 08:53:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213887 IP address blocks: 213.21.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 14:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0e:1b:85:ba:41:9f:de:1e:7d:28:e8:4a:ac:69:f9:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Jan 30 08:53:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d74adc3eb226b2ef0f6447656bc686a6a54eeaa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:44:43:5b:d0:b4:2d:4d:0e:21:49:a5:23:f2: 90:49:68:1e:38:80:e1:7f:e1:4d:11:15:3b:5b:b2: c1:ae:7f:a6:68:d2:97:18:dd:ca:fd:ba:d7:9c:4b: 1e:d3:0d:83:fe:90:fe:fa:15:0a:06:55:54:e7:1f: eb:d4:6f:ad:58:b2:eb:56:59:5f:01:ea:5b:ca:75: bb:f8:12:03:11:ca:e0:81:82:ec:07:7b:46:7c:a7: e3:f1:59:d0:63:05:5d:f4:6a:17:76:18:e8:73:dc: ba:30:f3:84:7b:3e:83:33:3e:9c:b9:92:93:9a:1a: c4:36:ec:20:95:aa:af:12:c8:05:88:6e:76:aa:f2: 35:66:7d:3c:4b:74:c9:68:04:3e:7c:2b:9c:b1:1a: 03:dc:46:b5:97:2c:8f:c3:f5:aa:65:eb:3f:c7:4b: fd:bf:95:bd:b1:e5:66:d7:93:ae:29:3e:b2:27:87: f9:0b:be:d6:bf:21:32:58:f8:f7:4b:b2:b4:b6:6b: c4:5f:d2:a3:9f:6e:52:f2:40:fa:98:ea:3e:de:d1: 40:92:88:9e:a6:4f:bf:c7:8f:92:71:37:5b:66:4f: 1f:c1:d9:9b:81:b0:bf:1f:73:1f:3d:cb:58:f8:23: 9d:71:ac:07:af:76:b6:2f:1b:b8:93:b3:2c:67:57: ce:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:4A:DC:3E:B2:26:B2:EF:0F:64:47:65:6B:C6:86:A6:A5:4E:EA:A5 X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/10rcPrImsu8PZEdla8aGpqVO6qU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.21.238.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:65:ba:59:0b:06:90:f3:1d:e1:72:a6:70:bd:99:18:bf:24: 83:1b:80:4d:9c:83:c6:b5:a7:61:a3:23:49:ea:0a:31:1d:3e: e5:a4:5c:ed:34:55:35:c2:da:97:dc:39:b8:e4:13:24:df:87: ba:eb:0b:60:30:61:c0:3a:69:97:33:12:1a:32:d4:d7:a3:f1: b7:51:13:c8:84:55:a5:62:6b:67:f6:1f:d4:9d:7f:db:88:38: 35:66:0c:13:20:cc:cc:1f:ca:f9:4b:7d:71:19:3b:d6:1c:14: 9f:28:e5:34:e8:fc:46:ff:38:20:60:85:ea:70:8f:42:4b:1d: 48:38:e6:76:26:89:a9:57:f4:be:f4:c3:20:fd:59:e9:bb:84: f2:67:0b:39:bc:18:ec:c0:e6:9a:fb:5f:bd:6f:ee:79:97:43: 2b:47:b3:d4:5d:9b:75:c1:92:90:01:6c:d3:46:22:cc:cb:cd: b2:09:1f:d3:d8:6f:c9:51:04:99:9a:26:5a:a7:3d:e9:39:b5: ef:cc:c1:43:f3:47:a2:e0:38:da:e2:4c:b3:ab:a9:03:31:b4: ff:0f:08:d8:4c:20:ba:75:a8:f4:f1:32:6e:fc:b6:8e:5c:08: 08:63:0b:26:71:36:e8:0b:fc:1f:f1:54:6d:c8:7a:bd:59:01: 55:9b:27:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwOG4W6QZ/eHn0o6EqsaflzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjYwMTMwMDg1MzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzRhZGMzZWIyMjZiMmVmMGY2NDQ3NjU2YmM2ODZhNmE1NGVlYWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzERDW9C0LU0OIUmlI/KQSWgeOIDh f+FNERU7W7LBrn+maNKXGN3K/brXnEse0w2D/pD++hUKBlVU5x/r1G+tWLLrVllf AepbynW7+BIDEcrggYLsB3tGfKfj8VnQYwVd9GoXdhjoc9y6MPOEez6DMz6cuZKT mhrENuwglaqvEsgFiG52qvI1Zn08S3TJaAQ+fCucsRoD3Ea1lyyPw/WqZes/x0v9 v5W9seVm15OuKT6yJ4f5C77WvyEyWPj3S7K0tmvEX9Kjn25S8kD6mOo+3tFAkoie pk+/x4+ScTdbZk8fwdmbgbC/H3MfPctY+COdcawHr3a2Lxu4k7MsZ1fOcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNdK3D6yJrLvD2RHZWvGhqalTuqlMB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvMTByY1BySW1zdThQWkVkbGE4YUdwcVZPNnFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1RXuMA0G CSqGSIb3DQEBCwUAA4IBAQAeZbpZCwaQ8x3hcqZwvZkYvySDG4BNnIPGtadhoyNJ 6goxHT7lpFztNFU1wtqX3Dm45BMk34e66wtgMGHAOmmXMxIaMtTXo/G3URPIhFWl Ymtn9h/UnX/biDg1ZgwTIMzMH8r5S31xGTvWHBSfKOU06PxG/zggYIXqcI9CSx1I OOZ2JompV/S+9MMg/Vnpu4TyZws5vBjswOaa+1+9b+55l0MrR7PUXZt1wZKQAWzT RiLMy82yCR/T2G/JUQSZmiZapz3pObXvzMFD80ei4Dja4kyzq6kDMbT/DwjYTCC6 daj08TJu/LaOXAgIYwsmcTboC/wf8VRtyHq9WQFVmyc8 -----END CERTIFICATE-----Generated at Wed Feb 4 20:16:02 2026 by rpki-client