This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/c1of_GGOGBpj8gjfCUC0AsJuKNg.roa File: c1of_GGOGBpj8gjfCUC0AsJuKNg.roa (raw, json) Hash identifier: f3erzVhNqOm3b2k4MQozf9a0YdwKNFSjx0Hb4KbZctc= Subject key identifier: 73:5A:1F:FC:61:8E:18:1A:63:F2:08:DF:09:40:B4:02:C2:6E:28:D8 Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 019B79ED4DCA439AD57A4864D5EB5FEE688C Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/c1of_GGOGBpj8gjfCUC0AsJuKNg.roa Signing time: Thu 01 Jan 2026 14:19:13 +0000 ROA not before: Thu 01 Jan 2026 14:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43350 IP address blocks: 213.21.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 17:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4d:ca:43:9a:d5:7a:48:64:d5:eb:5f:ee:68:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Jan 1 14:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=735a1ffc618e181a63f208df0940b402c26e28d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:35:73:35:8a:2d:e3:c5:aa:ae:97:44:a3:e8: dd:af:7d:bb:d6:85:cf:3d:c5:83:4b:f6:cd:b0:48: 72:68:93:e8:72:9f:c0:2d:77:a3:a8:96:86:dd:0b: 24:aa:cf:ca:24:c6:36:e5:c5:22:9d:41:68:73:1d: 13:e2:5e:84:24:8c:ec:1e:0b:f5:b5:a0:83:95:2b: cd:e8:95:df:70:60:4a:43:9e:4f:57:5a:0a:6f:88: 4f:da:56:85:67:b3:9e:27:17:d8:a2:6c:cb:3f:77: 09:0e:76:23:2d:0e:14:56:1b:7e:e3:a8:92:53:8b: 1d:33:b0:ce:ac:8c:a9:7d:4d:42:fd:8d:80:5e:cf: aa:23:1c:6d:47:88:06:9b:d2:c7:8d:d7:1e:8f:4c: 2c:2f:14:21:dc:40:28:4e:ee:18:d4:96:66:25:f2: 80:3e:96:ed:3d:38:e8:a5:d2:b7:93:0f:05:52:59: a2:8b:d6:fc:31:03:5a:d3:ce:63:01:dc:14:5d:6b: 8b:23:fc:2a:4f:0c:44:56:10:99:49:b2:b0:d6:81: a9:5f:8b:07:ad:a2:fd:98:a4:88:a3:35:56:1c:5f: 70:25:0e:d3:92:df:72:66:61:67:d1:b2:38:ca:02: 05:0a:7b:43:50:d7:98:46:96:fd:a0:e7:93:0c:fc: 34:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:5A:1F:FC:61:8E:18:1A:63:F2:08:DF:09:40:B4:02:C2:6E:28:D8 X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/c1of_GGOGBpj8gjfCUC0AsJuKNg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.21.243.0/24 Signature Algorithm: sha256WithRSAEncryption 05:4e:26:61:df:70:74:f8:82:66:3e:0f:dc:67:b4:c9:9f:60: 71:a6:d8:4f:76:40:7b:2a:a8:2d:a2:b0:6f:89:9b:64:17:93: 3b:f0:88:50:f6:0b:bb:6f:ab:02:05:1e:68:8a:9f:8e:0c:3c: ae:45:0a:3d:db:8c:d3:e6:d4:b2:92:dd:30:51:0a:db:de:56: 29:37:c5:7f:62:60:0e:e6:b7:04:d9:0f:29:05:e4:4e:b3:8a: 44:dd:10:ce:66:28:6b:f2:e3:d9:8e:9e:de:19:03:a1:dc:86: 5a:66:1c:26:bc:a9:7f:90:22:dd:67:27:73:a7:93:b0:a1:cf: e2:60:69:84:e1:63:54:86:69:22:ed:40:df:b9:c0:b9:ae:ae: 1f:b7:31:5d:e4:e0:2c:21:d3:72:02:0d:e7:98:eb:f6:dc:66: 83:83:65:6f:71:fa:48:f5:c8:bc:c9:29:d5:8f:1f:52:b2:10: bf:28:04:78:4e:10:98:d3:55:84:cd:0a:4f:58:41:69:6c:30: c7:ef:da:92:92:b7:bc:71:0d:af:41:14:e9:cf:45:70:5c:78: 5b:b2:2e:d5:dd:e0:f6:fb:59:3b:9d:ba:59:74:83:da:b0:6d: 1d:3b:d7:6e:ee:d6:28:c5:08:6b:1d:bc:b2:4f:4d:61:76:2e: 70:1b:b1:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57U3KQ5rVekhk1etf7miMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjYwMTAxMTQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzVhMWZmYzYxOGUxODFhNjNmMjA4ZGYwOTQwYjQwMmMyNmUyOGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDVzNYot48WqrpdEo+jdr3271oXP PcWDS/bNsEhyaJPocp/ALXejqJaG3Qskqs/KJMY25cUinUFocx0T4l6EJIzsHgv1 taCDlSvN6JXfcGBKQ55PV1oKb4hP2laFZ7OeJxfYomzLP3cJDnYjLQ4UVht+46iS U4sdM7DOrIypfU1C/Y2AXs+qIxxtR4gGm9LHjdcej0wsLxQh3EAoTu4Y1JZmJfKA PpbtPTjopdK3kw8FUlmii9b8MQNa085jAdwUXWuLI/wqTwxEVhCZSbKw1oGpX4sH raL9mKSIozVWHF9wJQ7Tkt9yZmFn0bI4ygIFCntDUNeYRpb9oOeTDPw0hwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHNaH/xhjhgaY/II3wlAtALCbijYMB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvYzFvZl9HR09HQnBqOGdqZkNVQzBBc0p1S05nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1RXzMA0G CSqGSIb3DQEBCwUAA4IBAQAFTiZh33B0+IJmPg/cZ7TJn2BxpthPdkB7KqgtorBv iZtkF5M78IhQ9gu7b6sCBR5oip+ODDyuRQo924zT5tSykt0wUQrb3lYpN8V/YmAO 5rcE2Q8pBeROs4pE3RDOZihr8uPZjp7eGQOh3IZaZhwmvKl/kCLdZydzp5Owoc/i YGmE4WNUhmki7UDfucC5rq4ftzFd5OAsIdNyAg3nmOv23GaDg2VvcfpI9ci8ySnV jx9SshC/KAR4ThCY01WEzQpPWEFpbDDH79qSkre8cQ2vQRTpz0VwXHhbsi7V3eD2 +1k7nbpZdIPasG0dO9du7tYoxQhrHbyyT01hdi5wG7El -----END CERTIFICATE-----Generated at Sat Jan 3 03:24:46 2026 by rpki-client