This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/4ZDqmYbGRDS9T6I4pCkfIZz9Wog.roa File: 4ZDqmYbGRDS9T6I4pCkfIZz9Wog.roa (raw, json) Hash identifier: X8RR+0PaypDLpsEOWttv6W/dtoMpGTgNbkp3JkclUF8= Subject key identifier: E1:90:EA:99:86:C6:44:34:BD:4F:A2:38:A4:29:1F:21:9C:FD:5A:88 Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 019B79ED4D5006910B34A67F7617D734892E Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/4ZDqmYbGRDS9T6I4pCkfIZz9Wog.roa Signing time: Thu 01 Jan 2026 14:19:13 +0000 ROA not before: Thu 01 Jan 2026 14:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43260 IP address blocks: 213.21.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4d:50:06:91:0b:34:a6:7f:76:17:d7:34:89:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Jan 1 14:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e190ea9986c64434bd4fa238a4291f219cfd5a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:13:91:11:90:c1:9b:33:05:ca:f5:b8:58:c1: c3:19:54:6c:48:e6:4b:de:0d:21:21:75:70:0c:b8: b7:50:66:ee:45:e7:fb:ad:5c:dd:60:2a:bb:b3:d5: 86:d1:af:45:fa:fc:04:f3:d8:8f:cb:ca:74:cf:4f: ab:d2:e0:96:c2:8e:2f:f9:8e:b3:d0:29:f1:49:d3: 4e:d0:ac:13:3a:03:24:cc:d4:00:63:bd:92:97:b7: 4d:c5:b5:d7:63:3a:40:54:5d:ef:93:37:65:5f:8b: 0b:cc:79:ae:f7:65:aa:b7:bc:3d:5a:9e:f7:a3:a1: 8c:6f:a4:07:58:41:a7:4c:97:a0:70:80:fa:e5:6c: 7a:72:c5:06:ff:21:8e:c6:88:a8:3c:3f:da:c6:03: 59:83:f0:52:63:e8:2b:7e:c1:fe:1e:8e:81:f7:05: 7d:51:df:69:97:4e:16:53:48:aa:84:d6:5d:39:1c: 73:70:38:e1:7c:24:73:a1:4c:74:dd:78:11:48:68: 90:fd:26:98:8f:7c:b1:1d:ee:f5:c6:eb:f8:ee:67: d5:ae:82:23:d6:56:32:52:3b:50:de:22:44:bb:a9: fc:0b:2b:c7:b4:f3:4e:a4:65:72:22:5b:59:94:ba: 2d:20:d9:31:31:36:6c:73:44:a5:b0:63:be:36:58: 99:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:90:EA:99:86:C6:44:34:BD:4F:A2:38:A4:29:1F:21:9C:FD:5A:88 X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/4ZDqmYbGRDS9T6I4pCkfIZz9Wog.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.21.243.0/24 Signature Algorithm: sha256WithRSAEncryption 28:38:74:ab:5b:63:49:9a:0c:1d:a9:7c:bb:86:08:fc:33:1b: ed:6e:52:30:01:a3:a9:18:c2:09:d5:e8:b9:b0:e7:9f:9b:7c: c2:95:45:ce:e8:d7:0c:33:a0:f3:fa:37:07:19:6d:d0:b0:7b: a5:5b:c4:a6:3e:4f:6e:87:55:28:d9:26:8f:db:92:4d:30:83: 1a:80:60:fa:42:ea:1a:e6:f2:31:6c:60:4e:58:59:44:08:e4: eb:fa:7d:57:27:42:5b:ad:a5:9a:76:4f:f1:75:b9:17:28:fe: c3:56:71:51:a7:67:55:1f:30:23:74:e6:71:d5:04:c9:dc:ec: 56:d5:13:9e:f6:32:e6:8a:24:43:9b:2a:00:75:45:57:d7:4d: fe:f2:44:4d:85:65:9f:79:f0:02:e7:93:a0:ed:5d:86:95:3e: 70:00:3c:d1:c3:c8:b6:91:77:b7:5c:cf:98:0a:5f:c6:26:85: fd:ae:39:29:7f:bf:69:a0:1f:32:f0:8d:00:c2:00:e3:c6:e8: a0:33:ca:b8:0b:38:78:d2:03:42:ba:d5:91:5b:01:11:47:6e: c5:82:05:a1:da:1e:af:2e:d0:ed:fd:96:22:a4:41:d9:f2:56: 3a:96:db:c4:b6:c4:42:85:73:2b:5e:0a:ee:ba:b6:9b:76:85: 19:23:f6:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57U1QBpELNKZ/dhfXNIkuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjYwMTAxMTQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTkwZWE5OTg2YzY0NDM0YmQ0ZmEyMzhhNDI5MWYyMTljZmQ1YTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hOREZDBmzMFyvW4WMHDGVRsSOZL 3g0hIXVwDLi3UGbuRef7rVzdYCq7s9WG0a9F+vwE89iPy8p0z0+r0uCWwo4v+Y6z 0CnxSdNO0KwTOgMkzNQAY72Sl7dNxbXXYzpAVF3vkzdlX4sLzHmu92Wqt7w9Wp73 o6GMb6QHWEGnTJegcID65Wx6csUG/yGOxoioPD/axgNZg/BSY+grfsH+Ho6B9wV9 Ud9pl04WU0iqhNZdORxzcDjhfCRzoUx03XgRSGiQ/SaYj3yxHe71xuv47mfVroIj 1lYyUjtQ3iJEu6n8CyvHtPNOpGVyIltZlLotINkxMTZsc0SlsGO+NliZBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOGQ6pmGxkQ0vU+iOKQpHyGc/VqIMB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvNFpEcW1ZYkdSRFM5VDZJNHBDa2ZJWno5V29nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1RXzMA0G CSqGSIb3DQEBCwUAA4IBAQAoOHSrW2NJmgwdqXy7hgj8MxvtblIwAaOpGMIJ1ei5 sOefm3zClUXO6NcMM6Dz+jcHGW3QsHulW8SmPk9uh1Uo2SaP25JNMIMagGD6Quoa 5vIxbGBOWFlECOTr+n1XJ0JbraWadk/xdbkXKP7DVnFRp2dVHzAjdOZx1QTJ3OxW 1ROe9jLmiiRDmyoAdUVX103+8kRNhWWfefAC55Og7V2GlT5wADzRw8i2kXe3XM+Y Cl/GJoX9rjkpf79poB8y8I0AwgDjxuigM8q4Czh40gNCutWRWwERR27FggWh2h6v LtDt/ZYipEHZ8lY6ltvEtsRChXMrXgruurabdoUZI/aR -----END CERTIFICATE-----Generated at Mon Jan 19 16:52:01 2026 by rpki-client