This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Y4DldFhvyucFx3_-dNZ099fQEsI.roa File: Y4DldFhvyucFx3_-dNZ099fQEsI.roa (raw, json) Hash identifier: Re8X2W7TcqGQ9N8iRqWW1a3N71a8z13eznUDUQdH1ZA= Subject key identifier: 63:80:E5:74:58:6F:CA:E7:05:C7:7F:FE:74:D6:74:F7:D7:D0:12:C2 Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 019ACAA8C0A3F1639BE00244F9B1E54B1D01 Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Y4DldFhvyucFx3_-dNZ099fQEsI.roa Signing time: Fri 28 Nov 2025 13:30:48 +0000 ROA not before: Fri 28 Nov 2025 13:30:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211443 IP address blocks: 213.21.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ca:a8:c0:a3:f1:63:9b:e0:02:44:f9:b1:e5:4b:1d:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Nov 28 13:30:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6380e574586fcae705c77ffe74d674f7d7d012c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:18:7c:bf:86:62:89:2d:e8:bc:52:5c:2a:cf: de:72:c0:9b:ae:e0:a9:f8:35:f6:4a:bd:39:81:e1: f6:54:79:bd:75:8f:6c:a8:5a:2a:27:05:0a:f6:03: f1:70:87:b2:1c:66:77:b3:c7:bb:7c:a1:9f:26:82: 8d:75:74:e3:8e:90:a0:e1:d2:af:2b:56:22:55:aa: 87:a3:8a:c8:86:65:93:4b:33:a3:e7:83:55:19:cd: 48:1e:06:a3:b1:cd:4d:f4:88:64:b5:96:ee:77:1f: a7:3d:5f:c5:e5:d1:c4:6e:eb:a3:ba:60:64:bf:24: a1:9e:4f:ff:bf:e3:ba:9e:5e:b9:98:34:dd:89:c6: ae:ef:79:9e:14:13:61:5a:fb:94:07:86:75:c2:eb: 10:15:5a:c7:76:23:65:35:ed:b8:bf:1b:2f:cd:16: 4e:5c:a9:10:ca:97:df:9d:0b:76:9f:5d:40:0e:e0: 55:ef:69:41:6b:e7:ae:f0:da:3c:0f:07:f5:dd:fe: 29:d7:91:f3:04:de:e6:dc:63:be:9d:e0:cd:37:1a: 2f:18:e3:d3:92:60:15:ab:27:4c:ff:b3:71:41:05: d3:75:ec:3f:66:88:5c:d3:32:7c:33:de:e9:ff:c1: a1:67:5b:b1:4f:c7:56:a2:36:10:c0:4e:6d:21:d1: 9a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:80:E5:74:58:6F:CA:E7:05:C7:7F:FE:74:D6:74:F7:D7:D0:12:C2 X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Y4DldFhvyucFx3_-dNZ099fQEsI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.21.239.0/24 Signature Algorithm: sha256WithRSAEncryption 53:86:59:e4:ee:c0:14:79:fd:cf:b1:9f:d9:61:70:f0:18:cf: d3:11:6f:8a:51:78:88:00:ad:83:71:e0:6b:4a:b8:db:a0:da: 10:91:be:e1:95:75:d2:94:fa:bf:b1:57:09:be:ab:4d:6e:80: 46:ac:10:ea:ec:fb:a6:5a:69:20:0f:f1:f5:c2:1c:6e:28:d4: 3e:73:95:12:ef:ac:94:6f:cf:f1:7e:f3:7f:a2:11:a6:ed:6c: 46:8f:79:91:c4:b1:e1:f7:b1:24:5c:e5:61:4b:6e:c1:10:b1: 7a:2a:72:df:4b:c2:f1:6b:f5:b6:3b:3e:0a:1b:4c:3a:86:b2: c0:7e:0b:f2:df:c6:c5:c7:b7:8f:5f:ad:27:a3:d9:69:2b:84: a7:ee:a2:c4:c3:17:42:71:66:f8:57:0a:b6:1f:93:e4:38:04: 6d:60:0b:53:b0:a9:99:dd:4b:a4:92:a2:bc:79:c9:81:87:b5: ac:7d:72:2c:93:22:4a:82:0c:58:23:b4:ca:2f:df:4f:13:af: 76:90:09:77:10:1e:5d:92:80:1a:a6:a9:0f:95:60:40:b7:0a: 81:e0:d5:d0:bc:67:5c:62:93:e2:35:d5:12:dc:8b:59:15:30: a8:bf:31:e0:60:0a:f8:ec:9e:e1:81:50:17:93:14:32:3b:10: ed:d6:66:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrKqMCj8WOb4AJE+bHlSx0BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjUxMTI4MTMzMDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzgwZTU3NDU4NmZjYWU3MDVjNzdmZmU3NGQ2NzRmN2Q3ZDAxMmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthh8v4ZiiS3ovFJcKs/ecsCbruCp +DX2Sr05geH2VHm9dY9sqFoqJwUK9gPxcIeyHGZ3s8e7fKGfJoKNdXTjjpCg4dKv K1YiVaqHo4rIhmWTSzOj54NVGc1IHgajsc1N9IhktZbudx+nPV/F5dHEbuujumBk vyShnk//v+O6nl65mDTdicau73meFBNhWvuUB4Z1wusQFVrHdiNlNe24vxsvzRZO XKkQypffnQt2n11ADuBV72lBa+eu8No8Dwf13f4p15HzBN7m3GO+neDNNxovGOPT kmAVqydM/7NxQQXTdew/Zohc0zJ8M97p/8GhZ1uxT8dWojYQwE5tIdGaHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGOA5XRYb8rnBcd//nTWdPfX0BLCMB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvWTREbGRGaHZ5dWNGeDNfLWROWjA5OWZRRXNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1RXvMA0G CSqGSIb3DQEBCwUAA4IBAQBThlnk7sAUef3PsZ/ZYXDwGM/TEW+KUXiIAK2DceBr SrjboNoQkb7hlXXSlPq/sVcJvqtNboBGrBDq7PumWmkgD/H1whxuKNQ+c5US76yU b8/xfvN/ohGm7WxGj3mRxLHh97EkXOVhS27BELF6KnLfS8Lxa/W2Oz4KG0w6hrLA fgvy38bFx7ePX60no9lpK4Sn7qLEwxdCcWb4Vwq2H5PkOARtYAtTsKmZ3UukkqK8 ecmBh7WsfXIskyJKggxYI7TKL99PE692kAl3EB5dkoAapqkPlWBAtwqB4NXQvGdc YpPiNdUS3ItZFTCovzHgYAr47J7hgVAXkxQyOxDt1mZ9 -----END CERTIFICATE-----Generated at Sat Dec 6 07:27:41 2025 by rpki-client