This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/d4N59ZWMUV8cnUC2yHnrEh-B1hc.roa File: d4N59ZWMUV8cnUC2yHnrEh-B1hc.roa (raw, json) Hash identifier: ybFlHwrk0/bn9A8GTyAQQ72jsrneQsxgrXLeXX2L7mc= Subject key identifier: 77:83:79:F5:95:8C:51:5F:1C:9D:40:B6:C8:79:EB:12:1F:81:D6:17 Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 019B79ED52472980C139B9D29B79E18FA692 Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/d4N59ZWMUV8cnUC2yHnrEh-B1hc.roa Signing time: Thu 01 Jan 2026 14:19:14 +0000 ROA not before: Thu 01 Jan 2026 14:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211443 IP address blocks: 213.21.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:52:47:29:80:c1:39:b9:d2:9b:79:e1:8f:a6:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=778379f5958c515f1c9d40b6c879eb121f81d617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e4:dc:9b:64:79:0a:f6:64:e1:8a:36:cc:b6: 80:be:79:3f:8c:1e:6b:84:43:94:c9:ac:2d:89:92: 0f:69:5a:9e:b8:e6:65:c3:9e:e2:55:22:f3:dc:ff: 0e:a3:37:0c:dd:7e:e5:4c:80:35:a9:dd:7e:f9:75: a8:23:fa:c7:12:40:f3:d5:58:25:3a:38:03:cc:1f: a0:9b:9e:ca:a1:c1:96:39:aa:15:a7:cc:d7:29:e5: 20:59:14:b4:32:5a:e2:34:89:8b:c4:b8:2a:8e:b7: 1c:5c:77:8f:42:b8:75:67:7f:02:ef:70:c0:2e:d6: e0:80:bf:97:30:53:3b:72:4c:ed:98:6f:26:38:46: 5b:6f:c6:65:ed:86:d4:ec:32:94:76:fc:c0:f3:00: 08:35:2f:75:c5:0e:cf:e8:9d:23:73:89:1e:b4:87: b3:69:6c:56:1f:4f:7a:26:3f:07:2f:1c:ed:9a:85: fc:26:4e:27:a0:43:33:68:97:d9:3c:2a:ec:ad:58: cf:61:61:50:b5:a4:b4:f0:94:6b:0e:a5:4d:32:ee: 6a:2a:24:02:99:8c:a2:92:64:47:b0:74:09:86:d6: c0:e3:92:7b:24:cc:a2:e6:f4:b3:3c:fa:7a:d6:17: 4e:53:9a:2f:05:0d:09:a6:2c:a8:0e:31:d7:f3:ab: 1a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:83:79:F5:95:8C:51:5F:1C:9D:40:B6:C8:79:EB:12:1F:81:D6:17 X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/d4N59ZWMUV8cnUC2yHnrEh-B1hc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.21.239.0/24 Signature Algorithm: sha256WithRSAEncryption 92:b6:d7:29:2b:f8:d7:5d:e9:cd:3e:9f:df:ea:57:e6:07:40: ad:6d:97:22:5b:0a:88:f5:08:36:62:06:47:25:69:48:dc:2a: 24:f5:02:ae:db:73:d9:64:9b:f2:ab:18:5b:6b:18:02:c1:43: 96:1f:9a:f1:de:f6:dc:f9:06:34:ff:d3:88:83:73:e4:42:41: f0:70:1d:aa:4d:1e:c6:d0:27:e5:c7:76:81:ee:8d:7e:8d:a9: 65:cb:7f:09:30:ee:ce:4d:c5:a0:08:cc:95:c1:8c:f5:20:c4: bc:7e:d4:94:73:8c:09:27:2b:0d:86:37:e7:98:e0:da:07:36: 60:5b:91:6f:28:e2:a9:fa:14:b6:0a:9d:56:a2:04:3d:a1:dc: d5:98:44:a7:2e:2d:db:b4:3b:00:cd:b4:f1:4b:c6:f0:c1:ce: 57:7f:5d:fc:a8:c8:fa:95:43:ee:b2:59:98:b5:e4:83:d3:fe: db:b6:38:2e:b9:49:14:f8:30:ce:4e:19:26:dc:29:19:d4:a3: 75:b9:46:0e:ae:62:56:e6:82:da:c6:ef:ea:59:ec:68:a7:bc: 0d:0a:8e:25:99:a8:a5:e8:2b:8b:00:af:87:88:48:f3:6f:d7: 01:9a:1a:03:3c:2b:24:99:56:24:2b:e8:da:09:4b:91:92:91: e3:7c:ba:e9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57VJHKYDBObnSm3nhj6aSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzgzNzlmNTk1OGM1MTVmMWM5ZDQwYjZjODc5ZWIxMjFmODFkNjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+Tcm2R5CvZk4Yo2zLaAvnk/jB5r hEOUyawtiZIPaVqeuOZlw57iVSLz3P8OozcM3X7lTIA1qd1++XWoI/rHEkDz1Vgl OjgDzB+gm57KocGWOaoVp8zXKeUgWRS0MlriNImLxLgqjrccXHePQrh1Z38C73DA LtbggL+XMFM7ckztmG8mOEZbb8Zl7YbU7DKUdvzA8wAINS91xQ7P6J0jc4ketIez aWxWH096Jj8HLxztmoX8Jk4noEMzaJfZPCrsrVjPYWFQtaS08JRrDqVNMu5qKiQC mYyikmRHsHQJhtbA45J7JMyi5vSzPPp61hdOU5ovBQ0JpiyoDjHX86sahwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHeDefWVjFFfHJ1Atsh56xIfgdYXMB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvZDRONTlaV01VVjhjblVDMnlIbnJFaC1CMWhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1RXvMA0G CSqGSIb3DQEBCwUAA4IBAQCSttcpK/jXXenNPp/f6lfmB0CtbZciWwqI9Qg2YgZH JWlI3Cok9QKu23PZZJvyqxhbaxgCwUOWH5rx3vbc+QY0/9OIg3PkQkHwcB2qTR7G 0Cflx3aB7o1+jally38JMO7OTcWgCMyVwYz1IMS8ftSUc4wJJysNhjfnmODaBzZg W5FvKOKp+hS2Cp1WogQ9odzVmESnLi3btDsAzbTxS8bwwc5Xf138qMj6lUPuslmY teSD0/7btjguuUkU+DDOThkm3CkZ1KN1uUYOrmJW5oLaxu/qWexop7wNCo4lmail 6CuLAK+HiEjzb9cBmhoDPCskmVYkK+jaCUuRkpHjfLrp -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:47 2026 by rpki-client