This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/XIVBNcTJBnkT90tLXiCswsUi9O0.roa File: XIVBNcTJBnkT90tLXiCswsUi9O0.roa (raw, json) Hash identifier: PPElf6bVEODRo+3cgHN5ArR3uE+ZQHhLBOE/ConPN30= Subject key identifier: 5C:85:41:35:C4:C9:06:79:13:F7:4B:4B:5E:20:AC:C2:C5:22:F4:ED Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 019B79ED51A981ACD3282497ADD124AA8FEC Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/XIVBNcTJBnkT90tLXiCswsUi9O0.roa Signing time: Thu 01 Jan 2026 14:19:14 +0000 ROA not before: Thu 01 Jan 2026 14:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 193.68.85.0/24 maxlen: 24 213.21.229.0/24 maxlen: 24 213.21.233.0/24 maxlen: 24 213.21.235.0/24 maxlen: 24 213.21.242.0/24 maxlen: 24 213.21.246.0/24 maxlen: 24 213.21.250.0/24 maxlen: 24 213.21.251.0/24 maxlen: 24 213.21.252.0/24 maxlen: 24 213.21.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 22:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:51:a9:81:ac:d3:28:24:97:ad:d1:24:aa:8f:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c854135c4c9067913f74b4b5e20acc2c522f4ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:40:f1:ba:9c:09:33:a7:33:99:b4:fc:e9:ee: ed:fd:40:34:f0:bd:f2:04:75:88:1f:0b:cd:3a:fb: 89:ec:4b:25:0c:3a:55:bd:d2:d8:f1:ad:9d:c5:56: 8a:c3:3c:19:39:d0:a1:14:12:63:3a:91:3a:e8:e0: 55:23:e1:52:27:89:cf:51:60:1b:d0:c1:42:1f:3a: 06:63:4d:ae:74:66:8b:fa:c8:a4:e0:2d:49:a8:a9: da:09:42:a6:5b:c6:4d:e1:7e:36:ca:62:b6:a9:7d: ee:bc:33:5a:f7:7d:4e:a3:22:ab:81:60:73:91:a2: f0:b4:2f:dc:c8:9b:8b:de:fc:98:65:e8:88:1f:61: c6:e4:fd:86:ca:3b:61:2c:bf:37:ae:a2:be:76:a2: 24:52:a3:52:b9:cf:7b:1e:52:18:44:de:56:e0:9f: 2f:3d:b2:5c:0c:74:7c:10:e9:59:c0:fd:f4:23:30: de:aa:16:d6:b8:d8:6a:05:ed:3b:00:3a:20:a6:ad: 11:c5:ed:4a:a8:5d:13:0a:c5:df:a9:17:dd:9d:41: 4c:f5:97:e1:38:8e:d9:e1:23:bc:c9:81:b7:30:77: a6:71:e6:91:c3:5f:3d:d6:bc:15:b7:e6:4e:20:6b: 6e:a9:f3:e5:1a:a2:d5:da:3d:2e:8b:62:6b:fd:39: 7d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:85:41:35:C4:C9:06:79:13:F7:4B:4B:5E:20:AC:C2:C5:22:F4:ED X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/XIVBNcTJBnkT90tLXiCswsUi9O0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.68.85.0/24 213.21.229.0/24 213.21.233.0/24 213.21.235.0/24 213.21.242.0/24 213.21.246.0/24 213.21.250.0-213.21.252.255 213.21.254.0/24 Signature Algorithm: sha256WithRSAEncryption 01:d8:51:62:06:d2:5b:2b:f1:34:9e:30:5d:99:82:69:f8:39: 47:44:c0:e9:b0:fc:d3:34:15:a9:53:3e:6c:c1:d9:82:73:94: f2:8e:63:0e:9e:3c:08:ec:49:89:bc:e4:f3:d6:81:22:c2:e0: 06:14:46:d1:6b:35:c1:7a:fd:96:49:41:16:78:09:61:20:c5: 71:12:21:0e:a0:d8:88:11:65:a6:f6:22:49:dd:a5:d9:44:01: e8:89:d8:9f:ae:7d:df:9d:18:87:15:7b:bc:a9:76:88:8d:38: 24:72:9f:8c:fc:c7:72:e3:db:f9:47:1a:6b:f0:58:f0:b6:60: 7d:5e:1c:53:a1:43:92:2e:45:02:80:8d:b7:af:63:24:2e:88: d0:fe:65:c2:43:c5:a0:17:9d:d7:82:47:97:fd:40:bb:fd:7a: 61:8c:b2:bb:7d:c2:08:a2:d8:23:50:a6:ee:98:f3:d8:b8:76: 90:ef:85:09:84:47:db:cc:b3:27:d4:79:5c:0f:c7:6a:dd:6d: 76:fe:d3:e0:ad:41:01:03:21:66:56:17:05:ff:01:ae:6b:78: f4:00:b0:7c:56:b9:39:cd:fe:28:3c:0d:e1:1c:c9:2c:1c:57: 2f:f4:f0:e1:bd:6d:51:56:3b:1b:e8:2e:ee:9e:e8:84:1d:02: d9:e1:ec:a0 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZt57VGpgazTKCSXrdEkqo/sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Yzg1NDEzNWM0YzkwNjc5MTNmNzRiNGI1ZTIwYWNjMmM1MjJmNGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEDxupwJM6czmbT86e7t/UA08L3y BHWIHwvNOvuJ7EslDDpVvdLY8a2dxVaKwzwZOdChFBJjOpE66OBVI+FSJ4nPUWAb 0MFCHzoGY02udGaL+sik4C1JqKnaCUKmW8ZN4X42ymK2qX3uvDNa931OoyKrgWBz kaLwtC/cyJuL3vyYZeiIH2HG5P2GyjthLL83rqK+dqIkUqNSuc97HlIYRN5W4J8v PbJcDHR8EOlZwP30IzDeqhbWuNhqBe07ADogpq0Rxe1KqF0TCsXfqRfdnUFM9Zfh OI7Z4SO8yYG3MHemceaRw1891rwVt+ZOIGtuqfPlGqLV2j0ui2Jr/Tl9QQIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFFyFQTXEyQZ5E/dLS14grMLFIvTtMB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvWElWQk5jVEpCbmtUOTB0TFhpQ3N3c1VpOU8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAwURVAwQA 1RXlAwQA1RXpAwQA1RXrAwQA1RXyAwQA1RX2MAwDBAHVFfoDBADVFfwDBADVFf4w DQYJKoZIhvcNAQELBQADggEBAAHYUWIG0lsr8TSeMF2Zgmn4OUdEwOmw/NM0FalT PmzB2YJzlPKOYw6ePAjsSYm85PPWgSLC4AYURtFrNcF6/ZZJQRZ4CWEgxXESIQ6g 2IgRZab2IkndpdlEAeiJ2J+ufd+dGIcVe7ypdoiNOCRyn4z8x3Lj2/lHGmvwWPC2 YH1eHFOhQ5IuRQKAjbevYyQuiND+ZcJDxaAXndeCR5f9QLv9emGMsrt9wgii2CNQ pu6Y89i4dpDvhQmER9vMsyfUeVwPx2rdbXb+0+CtQQEDIWZWFwX/Aa5rePQAsHxW uTnN/ig8DeEcySwcVy/08OG9bVFWOxvoLu6e6IQdAtnh7KA= -----END CERTIFICATE-----Generated at Tue Jan 20 07:29:48 2026 by rpki-client