This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Y8pdrR1f_MyWOe-YhGAK_aoFL8Q.roa File: Y8pdrR1f_MyWOe-YhGAK_aoFL8Q.roa (raw, json) Hash identifier: 13k76cemt6Sf92ZNBW6R6RxtUCROzQCLop1b+iGGSUQ= Subject key identifier: 63:CA:5D:AD:1D:5F:FC:CC:96:39:EF:98:84:60:0A:FD:AA:05:2F:C4 Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 019B79ED4CAAD9F43E28FFC8716E68EBC296 Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Y8pdrR1f_MyWOe-YhGAK_aoFL8Q.roa Signing time: Thu 01 Jan 2026 14:19:13 +0000 ROA not before: Thu 01 Jan 2026 14:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 213.21.231.0/24 maxlen: 24 213.21.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4c:aa:d9:f4:3e:28:ff:c8:71:6e:68:eb:c2:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Jan 1 14:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63ca5dad1d5ffccc9639ef9884600afdaa052fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:af:3f:74:2b:b0:35:e9:74:9b:bf:ed:0d:ac: 25:0e:49:fa:d7:49:70:cf:27:3d:fd:60:af:cd:72: 70:d5:dd:74:78:08:97:e7:ba:96:a7:98:76:53:96: cc:c5:83:69:f0:47:da:66:a2:4f:a4:35:69:a4:20: 44:e7:22:0c:ca:a5:06:e2:fb:f7:a3:db:12:28:08: fc:d3:f4:b9:77:2a:65:35:12:7d:72:9c:4e:77:e4: 04:fc:9a:52:1d:dd:2f:f4:6c:d3:64:3f:f9:44:a4: e2:05:17:07:2b:b1:8a:c7:99:e0:f5:09:83:8e:f2: 16:be:e6:fe:95:32:04:51:4f:4f:9f:b4:89:21:8e: 5d:0f:4d:aa:31:f0:72:fd:1a:6b:24:a8:07:e8:5e: db:fe:9b:e1:df:c6:fb:64:f5:73:da:86:4e:e7:70: ed:a3:be:d6:4a:59:f9:97:92:14:8a:08:0f:0e:c7: 77:67:fc:26:ed:16:14:0a:ca:72:c4:89:63:e1:87: 58:77:2c:e4:79:a4:b2:88:aa:d2:ad:2e:70:78:97: bf:6e:f5:08:54:eb:66:41:7d:e9:56:f8:01:ee:01: 2b:a2:58:53:b8:ba:c6:fe:fc:37:da:63:45:90:c3: 33:0e:a8:e1:d3:56:0f:2c:d1:27:e2:88:70:6f:cd: 7b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CA:5D:AD:1D:5F:FC:CC:96:39:EF:98:84:60:0A:FD:AA:05:2F:C4 X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Y8pdrR1f_MyWOe-YhGAK_aoFL8Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.21.231.0/24 213.21.244.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:a8:ee:ff:f0:4a:5c:0b:b4:70:7c:37:3c:91:16:30:d8:11: d5:e3:fe:6c:4e:f8:eb:50:7c:62:fd:77:2a:74:54:17:00:4b: 84:d1:8b:69:c2:c0:48:03:b8:d4:9c:82:2e:4f:a7:d1:07:08: 0d:56:e4:a8:77:2c:81:bc:8b:46:b2:96:c3:ef:2f:4d:2d:1f: 35:ea:f8:4c:65:2a:31:de:15:90:c1:c9:fa:3f:80:55:15:6b: c4:2f:10:19:1f:d1:87:fb:36:c7:26:f9:51:fd:0b:c5:80:f8: b3:8b:6d:f7:ab:dc:bb:25:dc:65:57:c8:09:13:1e:50:f2:62: c1:65:8c:0d:24:a8:db:e3:32:03:c4:05:95:aa:3e:26:91:0d: 01:01:21:6f:82:ce:bb:15:79:72:44:5a:b3:31:45:99:22:03: 4b:d9:12:bf:80:70:2e:a4:82:13:5c:c8:14:af:01:8b:a4:ef: 1e:24:bc:99:44:f6:ec:1a:82:7b:9a:66:49:a2:a7:a9:12:b7: 6d:74:e4:26:7b:d3:6f:72:af:3c:e7:1c:7c:81:7b:5c:ab:6e: f6:4d:a6:b5:6d:24:34:06:1d:bf:cd:cd:78:fd:f7:39:45:37: ef:8b:81:32:ab:ac:bd:33:85:5e:f7:9e:f9:66:00:82:c3:09: 80:2c:ff:d3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57Uyq2fQ+KP/IcW5o68KWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjYwMTAxMTQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2NhNWRhZDFkNWZmY2NjOTYzOWVmOTg4NDYwMGFmZGFhMDUyZmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr68/dCuwNel0m7/tDawlDkn610lw zyc9/WCvzXJw1d10eAiX57qWp5h2U5bMxYNp8EfaZqJPpDVppCBE5yIMyqUG4vv3 o9sSKAj80/S5dyplNRJ9cpxOd+QE/JpSHd0v9GzTZD/5RKTiBRcHK7GKx5ng9QmD jvIWvub+lTIEUU9Pn7SJIY5dD02qMfBy/RprJKgH6F7b/pvh38b7ZPVz2oZO53Dt o77WSln5l5IUiggPDsd3Z/wm7RYUCspyxIlj4YdYdyzkeaSyiKrSrS5weJe/bvUI VOtmQX3pVvgB7gErolhTuLrG/vw32mNFkMMzDqjh01YPLNEn4ohwb817CQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGPKXa0dX/zMljnvmIRgCv2qBS/EMB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvWThwZHJSMWZfTXlXT2UtWWhHQUtfYW9GTDhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1RXnAwQA 1RX0MA0GCSqGSIb3DQEBCwUAA4IBAQBaqO7/8EpcC7RwfDc8kRYw2BHV4/5sTvjr UHxi/XcqdFQXAEuE0YtpwsBIA7jUnIIuT6fRBwgNVuSodyyBvItGspbD7y9NLR81 6vhMZSox3hWQwcn6P4BVFWvELxAZH9GH+zbHJvlR/QvFgPizi233q9y7JdxlV8gJ Ex5Q8mLBZYwNJKjb4zIDxAWVqj4mkQ0BASFvgs67FXlyRFqzMUWZIgNL2RK/gHAu pIITXMgUrwGLpO8eJLyZRPbsGoJ7mmZJoqepErdtdOQme9Nvcq885xx8gXtcq272 Taa1bSQ0Bh2/zc14/fc5RTfvi4Eyq6y9M4Ve9575ZgCCwwmALP/T -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:00 2026 by rpki-client