This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/PhXZiIOr7piIHYlDtgFb-SE3XFc.roa File: PhXZiIOr7piIHYlDtgFb-SE3XFc.roa (raw, json) Hash identifier: kQ6KIuUu9lWGspD3sgkP3G1eQcAyvbDdP58M3rp8Fes= Subject key identifier: 3E:15:D9:88:83:AB:EE:98:88:1D:89:43:B6:01:5B:F9:21:37:5C:57 Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 019B79ED535648E45DAE16F809718C75D398 Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/PhXZiIOr7piIHYlDtgFb-SE3XFc.roa Signing time: Thu 01 Jan 2026 14:19:15 +0000 ROA not before: Thu 01 Jan 2026 14:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213877 IP address blocks: 213.21.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:53:56:48:e4:5d:ae:16:f8:09:71:8c:75:d3:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Jan 1 14:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e15d98883abee98881d8943b6015bf921375c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c9:7d:62:22:07:45:aa:f8:82:49:22:1b:ac: 24:77:c4:1b:17:2a:db:b1:85:dc:03:81:b8:e4:b8: 56:e8:e3:d7:58:fd:29:cc:cf:45:5d:50:0a:af:b1: 9d:f9:1b:92:96:e2:d5:94:57:b3:81:23:d6:89:7f: 96:aa:85:9d:80:56:8e:87:c1:9f:11:0e:30:44:56: 30:1c:fb:fe:31:5e:18:60:a0:69:29:a5:47:33:b6: 3d:30:8d:5e:d3:aa:12:21:40:58:98:88:ea:eb:1f: e7:a2:57:21:be:9b:9f:db:2e:f8:04:88:02:65:ce: 70:eb:41:39:ef:9e:74:e5:e0:5b:d3:36:2f:d3:0e: 8e:a3:cc:c6:c0:e2:a4:65:1d:48:92:4d:ad:98:11: 2d:a9:3c:bc:39:ae:fd:5f:e9:07:fc:a3:4b:b4:ae: 5d:0c:63:48:a6:0a:91:24:87:2c:14:31:3f:0b:79: c9:10:fd:d8:aa:39:2a:1a:80:ec:18:15:e0:98:ca: 77:99:58:c8:5a:34:d1:af:a5:f7:9d:4a:46:eb:33: fe:51:46:a0:ef:92:c0:24:e3:07:a3:48:65:a5:9a: 82:ab:77:9c:dc:11:e4:e7:75:b2:40:f4:97:0b:ad: 68:0d:67:75:03:b1:c0:71:24:52:de:10:f7:c1:dd: 6b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:15:D9:88:83:AB:EE:98:88:1D:89:43:B6:01:5B:F9:21:37:5C:57 X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/PhXZiIOr7piIHYlDtgFb-SE3XFc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.21.241.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:25:45:82:c9:bb:b9:32:36:3a:5e:12:15:3c:0a:db:57:05: c3:2a:75:53:05:23:22:a0:9f:80:e0:28:53:89:2d:3c:a3:9e: f6:09:7d:16:a3:88:cb:81:ce:3b:be:cb:6d:c1:95:6e:2f:fb: e1:e1:5d:e9:c4:fb:af:18:eb:7a:7d:fd:13:8f:e4:37:8e:73: 23:e7:87:b7:60:86:bb:1e:43:97:90:ed:5f:3b:09:70:66:da: 89:5b:fb:02:b1:b4:1b:de:df:6f:23:7d:ba:60:4d:b3:ab:1e: 8f:3c:f2:01:e3:b5:1b:75:08:95:a3:bc:c5:50:be:3a:78:1d: 99:57:12:b9:7d:74:25:69:62:9b:90:b3:1a:70:ce:98:76:9d: f6:d1:dc:6f:05:05:e1:dd:f1:d5:2b:61:4d:a2:f2:e0:82:ee: 19:c4:41:21:ec:e6:f5:d2:d6:fc:13:9b:0c:3b:28:75:82:4a: f1:87:f7:35:83:e0:51:0c:ca:ed:ae:32:f8:fc:fb:88:b3:4b: ab:28:aa:1f:51:c3:35:59:12:fc:5c:c5:a8:3a:fd:b7:49:9b: 86:6b:b1:af:f8:10:f1:21:c2:26:f3:28:be:18:1b:b8:d9:24: e1:ad:7e:13:bc:83:f1:9f:ea:75:79:ab:bb:36:0c:3d:4d:52: 90:75:f2:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57VNWSORdrhb4CXGMddOYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjYwMTAxMTQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTE1ZDk4ODgzYWJlZTk4ODgxZDg5NDNiNjAxNWJmOTIxMzc1YzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38l9YiIHRar4gkkiG6wkd8QbFyrb sYXcA4G45LhW6OPXWP0pzM9FXVAKr7Gd+RuSluLVlFezgSPWiX+WqoWdgFaOh8Gf EQ4wRFYwHPv+MV4YYKBpKaVHM7Y9MI1e06oSIUBYmIjq6x/nolchvpuf2y74BIgC Zc5w60E575505eBb0zYv0w6Oo8zGwOKkZR1Ikk2tmBEtqTy8Oa79X+kH/KNLtK5d DGNIpgqRJIcsFDE/C3nJEP3YqjkqGoDsGBXgmMp3mVjIWjTRr6X3nUpG6zP+UUag 75LAJOMHo0hlpZqCq3ec3BHk53WyQPSXC61oDWd1A7HAcSRS3hD3wd1r/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD4V2YiDq+6YiB2JQ7YBW/khN1xXMB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvUGhYWmlJT3I3cGlJSFlsRHRnRmItU0UzWEZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1RXxMA0G CSqGSIb3DQEBCwUAA4IBAQArJUWCybu5MjY6XhIVPArbVwXDKnVTBSMioJ+A4ChT iS08o572CX0Wo4jLgc47vsttwZVuL/vh4V3pxPuvGOt6ff0Tj+Q3jnMj54e3YIa7 HkOXkO1fOwlwZtqJW/sCsbQb3t9vI326YE2zqx6PPPIB47UbdQiVo7zFUL46eB2Z VxK5fXQlaWKbkLMacM6Ydp320dxvBQXh3fHVK2FNovLggu4ZxEEh7Ob10tb8E5sM Oyh1gkrxh/c1g+BRDMrtrjL4/PuIs0urKKofUcM1WRL8XMWoOv23SZuGa7Gv+BDx IcIm8yi+GBu42SThrX4TvIPxn+p1eau7Ngw9TVKQdfLv -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:48 2026 by rpki-client