This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Ys5uNWXcabyigl96ree5Jzjc4xQ.roa File: Ys5uNWXcabyigl96ree5Jzjc4xQ.roa (raw, json) Hash identifier: f+JccggJ2odV8dttKzqJrNMhrUYzKd+wSv2brX2GdxA= Subject key identifier: 62:CE:6E:35:65:DC:69:BC:A2:82:5F:7A:AD:E7:B9:27:38:DC:E3:14 Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 019B79ED50CCF0E3B821971FD4A69AA6D847 Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Ys5uNWXcabyigl96ree5Jzjc4xQ.roa Signing time: Thu 01 Jan 2026 14:19:14 +0000 ROA not before: Thu 01 Jan 2026 14:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205980 IP address blocks: 213.21.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:50:cc:f0:e3:b8:21:97:1f:d4:a6:9a:a6:d8:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62ce6e3565dc69bca2825f7aade7b92738dce314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:90:f9:97:21:bd:cd:0e:c3:db:cd:08:d6:28: 4c:ac:e4:c7:f1:ad:46:de:71:35:f0:36:1e:62:0e: 14:71:87:d5:37:ee:6a:9f:fe:be:4f:cf:6c:fc:c5: 44:66:72:19:b1:88:a4:be:e6:20:a3:14:29:c3:74: 44:65:3f:c6:80:a5:20:c1:04:c5:64:b3:8e:91:86: 2c:42:3a:25:6c:29:f5:58:28:53:e0:51:8f:a6:4d: 50:be:e4:ff:cb:9f:e4:d5:bd:43:a6:bb:3f:2e:c0: fa:1b:00:6d:58:1f:29:45:f4:27:b2:ab:05:e0:3c: 63:65:f1:63:77:f7:fd:ff:17:13:2b:7b:5c:b7:8f: 14:84:4d:64:7f:78:8a:75:00:f8:58:38:30:19:be: ac:41:2c:16:12:bb:88:19:61:b0:01:d1:73:ab:35: 01:07:b9:27:9d:bb:94:18:de:d7:ae:52:41:29:bc: 44:a3:6e:86:57:5c:b2:38:81:6c:ab:e8:c1:44:a6: 79:1d:26:85:b2:e2:d8:81:4c:aa:97:fb:11:20:b8: 2f:ff:2a:87:16:12:75:71:a4:05:fb:61:45:57:58: e4:46:e0:52:d8:28:02:8a:70:c9:56:26:d2:5e:e4: e6:13:da:fc:1d:d5:c3:79:17:52:8e:c6:cb:08:bc: 7c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:CE:6E:35:65:DC:69:BC:A2:82:5F:7A:AD:E7:B9:27:38:DC:E3:14 X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Ys5uNWXcabyigl96ree5Jzjc4xQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.21.245.0/24 Signature Algorithm: sha256WithRSAEncryption 94:ee:44:b3:26:f8:1e:59:e6:e0:33:9b:8d:26:e7:fc:0a:0c: 83:30:21:75:55:09:ab:e8:b6:46:e6:ae:e1:70:04:70:8d:d5: 48:5c:7b:e3:82:68:0e:ad:45:1a:44:4e:76:31:28:d2:d5:6a: 84:1a:de:08:e2:9d:1e:b2:b3:08:91:4f:98:61:47:7c:05:2d: de:37:5d:46:88:44:52:60:97:4d:36:fa:44:4a:a1:be:35:6e: f3:80:d0:6f:5c:c6:eb:8d:e7:44:d6:23:73:31:2b:91:4e:7b: eb:b3:f9:42:94:82:38:11:fe:8e:bd:4f:2d:49:e1:5d:db:17: 39:86:4a:d3:1e:6f:95:47:ec:32:fb:91:ba:d7:48:fa:fa:94: 3a:98:d7:90:ca:dd:a5:44:27:06:a7:0f:fa:e9:78:45:97:96: c0:c1:9e:16:2d:97:63:f3:86:f3:5b:09:d8:f0:48:d3:fd:6d: 9d:22:0b:c3:d9:57:5a:8c:ff:8b:13:5b:f6:da:c9:f2:73:9d: 3b:d8:73:c1:0e:86:0f:f7:05:ba:c1:36:54:d9:5e:62:27:8e: d5:ec:d8:d8:8b:b8:bb:0d:b2:08:a8:3f:e3:4b:55:29:ca:74: ac:53:1f:c4:74:ed:69:6c:9f:cf:28:30:1e:83:50:89:59:2d: 85:62:de:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57VDM8OO4IZcf1KaapthHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmNlNmUzNTY1ZGM2OWJjYTI4MjVmN2FhZGU3YjkyNzM4ZGNlMzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZD5lyG9zQ7D280I1ihMrOTH8a1G 3nE18DYeYg4UcYfVN+5qn/6+T89s/MVEZnIZsYikvuYgoxQpw3REZT/GgKUgwQTF ZLOOkYYsQjolbCn1WChT4FGPpk1QvuT/y5/k1b1Dprs/LsD6GwBtWB8pRfQnsqsF 4DxjZfFjd/f9/xcTK3tct48UhE1kf3iKdQD4WDgwGb6sQSwWEruIGWGwAdFzqzUB B7knnbuUGN7XrlJBKbxEo26GV1yyOIFsq+jBRKZ5HSaFsuLYgUyql/sRILgv/yqH FhJ1caQF+2FFV1jkRuBS2CgCinDJVibSXuTmE9r8HdXDeRdSjsbLCLx8zwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGLObjVl3Gm8ooJfeq3nuSc43OMUMB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvWXM1dU5XWGNhYnlpZ2w5NnJlZTVKempjNHhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1RX1MA0G CSqGSIb3DQEBCwUAA4IBAQCU7kSzJvgeWebgM5uNJuf8CgyDMCF1VQmr6LZG5q7h cARwjdVIXHvjgmgOrUUaRE52MSjS1WqEGt4I4p0esrMIkU+YYUd8BS3eN11GiERS YJdNNvpESqG+NW7zgNBvXMbrjedE1iNzMSuRTnvrs/lClII4Ef6OvU8tSeFd2xc5 hkrTHm+VR+wy+5G610j6+pQ6mNeQyt2lRCcGpw/66XhFl5bAwZ4WLZdj84bzWwnY 8EjT/W2dIgvD2VdajP+LE1v22snyc5072HPBDoYP9wW6wTZU2V5iJ47V7NjYi7i7 DbIIqD/jS1UpynSsUx/EdO1pbJ/PKDAeg1CJWS2FYt7K -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:38 2026 by rpki-client