This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/1h3O8l_TW_Pt04UkNDvHQykjzBo.roa File: 1h3O8l_TW_Pt04UkNDvHQykjzBo.roa (raw, json) Hash identifier: YPYjSO8A3RKdjeZ4kpCNyf7+uhxWq8m+nhKrC4aIRXo= Subject key identifier: D6:1D:CE:F2:5F:D3:5B:F3:ED:D3:85:24:34:3B:C7:43:29:23:CC:1A Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 019B79ED4FAE7AC747A643A99BDFE1831A1C Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/1h3O8l_TW_Pt04UkNDvHQykjzBo.roa Signing time: Thu 01 Jan 2026 14:19:14 +0000 ROA not before: Thu 01 Jan 2026 14:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199152 IP address blocks: 213.21.222.0/24 maxlen: 24 2a06:e8c1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4f:ae:7a:c7:47:a6:43:a9:9b:df:e1:83:1a:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d61dcef25fd35bf3edd38524343bc7432923cc1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8c:f8:c1:49:8f:b4:a0:61:aa:b8:ff:46:3b: 2c:0b:ea:ca:71:ce:a6:4b:ab:f0:9c:9e:2d:b7:de: e2:36:16:4e:06:ad:aa:0a:99:64:3b:6c:26:af:86: a5:0a:09:d6:fc:4d:01:d3:6b:f5:49:26:09:9b:e2: 45:aa:61:3e:19:38:56:fb:72:b4:b4:5b:88:a3:f8: 72:c3:d5:c5:98:38:06:05:13:fe:50:60:07:0d:fd: 95:8c:3b:0f:48:17:4f:ca:76:61:2f:14:3f:c6:71: 8a:ae:3d:31:9c:b1:a8:a8:e2:f6:ba:e1:c0:e7:e2: 6f:e7:f4:cb:68:35:fc:17:80:3c:05:9b:88:5a:13: 21:b9:3c:2b:b4:82:c1:fa:e2:b3:51:98:e6:90:75: 4b:40:51:94:df:c8:42:95:12:5b:41:74:15:54:f5: e7:dc:e6:8c:5f:5e:a1:f0:20:7e:39:51:77:d2:b3: 98:d3:b0:d8:54:a4:bf:e4:a4:be:2e:4b:ac:7b:14: 67:06:0c:e2:42:8e:03:05:ea:52:53:86:93:9f:04: 88:88:a9:65:49:61:6f:e4:23:9d:9c:01:b0:49:e1: 45:0d:5f:20:a2:b5:d5:39:ae:c3:87:6c:3a:68:42: 34:38:b2:f0:22:66:c0:96:80:85:8c:d0:53:10:57: d4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:1D:CE:F2:5F:D3:5B:F3:ED:D3:85:24:34:3B:C7:43:29:23:CC:1A X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/1h3O8l_TW_Pt04UkNDvHQykjzBo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.21.222.0/24 IPv6: 2a06:e8c1::/32 Signature Algorithm: sha256WithRSAEncryption 06:cf:7a:fd:3e:fa:d3:23:7f:db:c2:0e:1e:77:31:ad:65:f6: e1:dc:62:c4:3a:c1:96:c0:8d:6e:de:9b:20:ad:05:46:63:d2: 82:fe:28:fd:d3:6a:0d:9f:0c:d5:9c:db:f8:d8:6e:a5:f9:fc: fd:69:df:7a:62:a8:b3:ea:43:46:e6:c5:38:01:f4:3f:07:3e: be:17:87:27:43:7b:8f:a7:72:86:44:b1:f9:2e:f0:1d:88:a9: b0:c8:05:3b:a0:17:b8:21:d4:76:79:1a:4b:e7:c7:2b:78:b0: be:97:8d:73:25:1f:50:fb:ce:bf:f0:15:19:e8:9b:99:71:18: 52:f0:3d:5b:be:39:e8:a9:7f:91:df:a5:44:f8:cf:5b:ae:47: b1:d8:e2:5c:ff:b8:a7:f1:51:87:3a:d9:a7:39:3c:0f:07:b2: 5c:7c:37:ab:03:7e:d9:71:74:3d:3d:89:fe:58:78:2a:df:f1: 65:c2:34:e9:6e:56:fd:bb:2e:5e:c7:65:4c:21:72:cd:c9:c8: 05:f4:1b:c9:86:8b:92:15:0a:e0:59:ef:19:c6:a8:e3:16:0f: b6:59:35:89:20:27:34:ed:0d:ae:ca:d1:6a:bd:73:3f:ab:d9: c3:58:e1:76:f3:17:23:5f:eb:93:19:71:21:a7:cf:fd:80:ca: c9:7c:06:1c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57U+uesdHpkOpm9/hgxocMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjFkY2VmMjVmZDM1YmYzZWRkMzg1MjQzNDNiYzc0MzI5MjNjYzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYz4wUmPtKBhqrj/RjssC+rKcc6m S6vwnJ4tt97iNhZOBq2qCplkO2wmr4alCgnW/E0B02v1SSYJm+JFqmE+GThW+3K0 tFuIo/hyw9XFmDgGBRP+UGAHDf2VjDsPSBdPynZhLxQ/xnGKrj0xnLGoqOL2uuHA 5+Jv5/TLaDX8F4A8BZuIWhMhuTwrtILB+uKzUZjmkHVLQFGU38hClRJbQXQVVPXn 3OaMX16h8CB+OVF30rOY07DYVKS/5KS+LkusexRnBgziQo4DBepSU4aTnwSIiKll SWFv5COdnAGwSeFFDV8gorXVOa7Dh2w6aEI0OLLwImbAloCFjNBTEFfURQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNYdzvJf01vz7dOFJDQ7x0MpI8waMB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvMWgzTzhsX1RXX1B0MDRVa05EdkhReWtqekJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA1RXeMA0E AgACMAcDBQAqBujBMA0GCSqGSIb3DQEBCwUAA4IBAQAGz3r9PvrTI3/bwg4edzGt Zfbh3GLEOsGWwI1u3psgrQVGY9KC/ij902oNnwzVnNv42G6l+fz9ad96Yqiz6kNG 5sU4AfQ/Bz6+F4cnQ3uPp3KGRLH5LvAdiKmwyAU7oBe4IdR2eRpL58creLC+l41z JR9Q+86/8BUZ6JuZcRhS8D1bvjnoqX+R36VE+M9brkex2OJc/7in8VGHOtmnOTwP B7JcfDerA37ZcXQ9PYn+WHgq3/FlwjTpblb9uy5ex2VMIXLNycgF9BvJhouSFQrg We8ZxqjjFg+2WTWJICc07Q2uytFqvXM/q9nDWOF28xcjX+uTGXEhp8/9gMrJfAYc -----END CERTIFICATE-----Generated at Tue Jan 20 12:49:43 2026 by rpki-client