This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/CKaHb2UFUB81R70K_cX-CMGCB4c.roa File: CKaHb2UFUB81R70K_cX-CMGCB4c.roa (raw, json) Hash identifier: SL1gTzVmd4toTboFdORx+c2tTjUEiufXea6TCoAA21E= Subject key identifier: 08:A6:87:6F:65:05:50:1F:35:47:BD:0A:FD:C5:FE:08:C1:82:07:87 Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 019B79ED4AA93881536316E719FCF093C1EE Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/CKaHb2UFUB81R70K_cX-CMGCB4c.roa Signing time: Thu 01 Jan 2026 14:19:12 +0000 ROA not before: Thu 01 Jan 2026 14:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13213 IP address blocks: 213.21.238.0/24 maxlen: 24 213.21.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4a:a9:38:81:53:63:16:e7:19:fc:f0:93:c1:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Jan 1 14:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08a6876f6505501f3547bd0afdc5fe08c1820787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:17:8b:d6:76:28:9f:22:f1:c6:12:7a:6c:03: cd:a2:d8:a4:10:a6:ac:3b:e3:e4:8b:db:cd:e3:4a: 34:cb:f0:da:cc:a7:44:80:83:b5:be:c4:14:49:15: 36:72:cb:28:a3:85:9f:23:93:3a:b1:09:bc:4a:dc: 16:9e:9e:85:b0:12:ea:b3:30:55:4b:7c:48:85:f3: 9b:54:c9:70:a7:5d:80:b1:d9:b1:b6:06:38:67:52: e0:21:57:00:31:49:23:d0:24:a9:46:fc:6c:c5:54: 7e:d0:7a:c8:27:19:ed:dd:44:d2:ac:0c:20:c2:b1: 0d:52:40:92:9f:b8:5e:06:56:0b:12:11:5d:ce:8f: 29:5f:9d:df:a1:09:ad:c9:6f:8a:7d:47:11:5c:2c: fb:97:a8:fa:b1:7a:4e:17:ce:2c:19:c3:d7:d5:ca: 86:d9:81:27:41:bd:61:b5:58:5c:d8:dc:30:9e:6a: 44:5e:f9:85:bc:97:41:0b:af:eb:ff:c5:ac:12:69: 92:61:75:6a:e7:37:f3:f4:32:57:50:96:c1:91:3d: 6a:cf:16:b1:b0:0a:f7:88:70:1f:c1:43:64:08:f9: 0e:3c:63:19:c7:07:1b:86:8a:1c:58:97:d5:ce:ca: a6:49:59:02:a0:8b:cc:35:b1:ea:96:41:4f:34:83: 91:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A6:87:6F:65:05:50:1F:35:47:BD:0A:FD:C5:FE:08:C1:82:07:87 X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/CKaHb2UFUB81R70K_cX-CMGCB4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.21.238.0/24 213.21.248.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:ec:fd:ae:1d:8e:d6:a2:4c:c2:10:08:26:83:39:81:1a:17: 81:ce:8f:4d:97:a2:50:06:75:b5:e2:bd:27:9e:fc:17:b7:40: 1b:65:88:a1:01:51:1c:30:b0:bc:a5:35:f4:1f:a5:c0:7c:fd: 36:1b:36:28:c3:8b:3a:fb:ba:15:5b:30:fd:91:83:b7:4e:d4: 50:5a:6a:44:be:54:3e:b6:3b:56:d9:63:e2:f7:3a:6e:22:7f: 67:ab:f3:08:c3:84:97:9b:50:26:47:9e:97:e7:7f:64:cd:e1: d8:00:04:d3:08:e0:fe:c0:46:f8:c1:2a:4d:00:4e:52:27:42: 00:b8:20:b1:b6:fc:e5:aa:e8:59:7c:0b:25:f8:89:71:c5:88: 70:57:43:27:5b:2c:49:4e:2b:23:2a:cb:21:05:e4:9a:1f:ac: 25:43:90:fa:26:49:12:f4:f7:f5:42:92:04:fd:53:47:b6:2f: 7b:1d:b9:ff:fc:f9:fb:58:0d:c2:3e:37:a3:60:8a:64:19:d5: 6f:91:8a:84:8a:e6:91:09:02:83:aa:ee:e6:af:b9:b3:f0:b6: 1c:ff:9c:d6:bb:f4:bd:39:1a:4e:ca:3a:2b:84:21:f6:85:4c: 0c:45:d0:72:6d:39:89:7d:de:6b:d9:17:49:a7:e5:c1:88:ed: 2b:6b:4a:98 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57UqpOIFTYxbnGfzwk8HuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjYwMTAxMTQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGE2ODc2ZjY1MDU1MDFmMzU0N2JkMGFmZGM1ZmUwOGMxODIwNzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBeL1nYonyLxxhJ6bAPNotikEKas O+Pki9vN40o0y/DazKdEgIO1vsQUSRU2cssoo4WfI5M6sQm8StwWnp6FsBLqszBV S3xIhfObVMlwp12AsdmxtgY4Z1LgIVcAMUkj0CSpRvxsxVR+0HrIJxnt3UTSrAwg wrENUkCSn7heBlYLEhFdzo8pX53foQmtyW+KfUcRXCz7l6j6sXpOF84sGcPX1cqG 2YEnQb1htVhc2NwwnmpEXvmFvJdBC6/r/8WsEmmSYXVq5zfz9DJXUJbBkT1qzxax sAr3iHAfwUNkCPkOPGMZxwcbhoocWJfVzsqmSVkCoIvMNbHqlkFPNIORlwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAimh29lBVAfNUe9Cv3F/gjBggeHMB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvQ0thSGIyVUZVQjgxUjcwS19jWC1DTUdDQjRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1RXuAwQA 1RX4MA0GCSqGSIb3DQEBCwUAA4IBAQAO7P2uHY7WokzCEAgmgzmBGheBzo9Nl6JQ BnW14r0nnvwXt0AbZYihAVEcMLC8pTX0H6XAfP02GzYow4s6+7oVWzD9kYO3TtRQ WmpEvlQ+tjtW2WPi9zpuIn9nq/MIw4SXm1AmR56X539kzeHYAATTCOD+wEb4wSpN AE5SJ0IAuCCxtvzlquhZfAsl+IlxxYhwV0MnWyxJTisjKsshBeSaH6wlQ5D6JkkS 9Pf1QpIE/VNHti97Hbn//Pn7WA3CPjejYIpkGdVvkYqEiuaRCQKDqu7mr7mz8LYc /5zWu/S9ORpOyjorhCH2hUwMRdBybTmJfd5r2RdJp+XBiO0ra0qY -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:45 2026 by rpki-client