This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/rwzolB6KaVWzX3Asr3eZ1LHkCl4.roa File: rwzolB6KaVWzX3Asr3eZ1LHkCl4.roa (raw, json) Hash identifier: iB8AOxEYfvNU1/L6TivJBk9QHQFdeq4cJO6UXX1sPUM= Subject key identifier: AF:0C:E8:94:1E:8A:69:55:B3:5F:70:2C:AF:77:99:D4:B1:E4:0A:5E Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 019B79ED4B6FF233C631EF90628B1971BF74 Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/rwzolB6KaVWzX3Asr3eZ1LHkCl4.roa Signing time: Thu 01 Jan 2026 14:19:12 +0000 ROA not before: Thu 01 Jan 2026 14:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29066 IP address blocks: 213.21.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4b:6f:f2:33:c6:31:ef:90:62:8b:19:71:bf:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Jan 1 14:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af0ce8941e8a6955b35f702caf7799d4b1e40a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7a:0f:5e:42:b4:cf:1d:a1:e8:37:bd:08:fa: b1:35:dd:5c:dd:75:9b:36:50:43:2d:f5:c0:ef:e4: 10:54:50:37:79:0c:49:25:2f:d8:6e:00:2c:31:66: 5f:46:fa:62:ed:5c:c6:68:47:52:00:43:72:23:1c: 8d:e9:03:06:2d:c9:75:a2:fb:0e:c9:0c:d1:a8:84: 8c:8c:4c:2b:6a:32:c1:15:b1:77:1d:a5:d2:25:30: 63:c5:5f:40:56:d9:18:86:ac:48:04:f0:f0:52:d4: 32:71:d0:f3:7d:3f:3d:f3:75:e1:ca:32:4b:7d:a8: 83:90:ae:9c:47:cb:b7:18:5e:f0:a7:b0:67:f7:66: 3e:23:a9:70:60:4c:3c:53:c2:6c:69:96:db:fa:9c: c2:77:1e:f3:1e:39:3f:6e:15:78:9e:15:6f:6d:67: ce:9c:24:7b:52:53:e3:f8:5f:25:d0:b1:57:8c:ef: d0:91:d9:04:14:fc:5d:1f:29:b9:dc:18:b3:c5:34: 9a:4b:a2:60:23:17:bc:d6:f7:24:f0:50:2b:d5:0c: e5:8f:cd:c9:4e:cb:c7:98:5e:25:68:02:3a:d4:28: fa:ea:18:bc:2f:14:84:97:60:08:6c:7c:ba:05:2b: 33:70:6a:c3:a8:74:cf:d5:2b:52:94:7b:dc:cf:49: ab:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:0C:E8:94:1E:8A:69:55:B3:5F:70:2C:AF:77:99:D4:B1:E4:0A:5E X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/rwzolB6KaVWzX3Asr3eZ1LHkCl4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.21.228.0/24 Signature Algorithm: sha256WithRSAEncryption 13:30:e3:78:4e:3c:f8:ee:8e:ea:c8:e3:1b:be:af:e3:28:c0: fd:cc:e6:02:62:19:99:64:66:86:8c:2a:2e:02:97:6c:e1:27: ce:a6:63:22:42:2c:a1:bb:01:e8:42:0f:10:20:ed:18:fb:4b: 06:4e:67:59:29:d4:5a:13:aa:a3:98:da:dd:93:7a:49:36:2b: 53:11:4d:aa:8f:83:1c:bf:d9:fb:9a:99:47:51:7e:a0:9b:4d: f7:c1:92:43:0d:22:50:97:31:ba:c2:a0:9f:22:bd:11:f3:b7: a9:af:a6:22:db:80:8b:10:8c:33:80:cf:2c:0d:77:f8:9f:9f: f2:d0:71:18:de:11:a6:a0:58:99:a2:47:c0:19:c3:76:0a:bd: 13:5b:0b:4e:90:4d:8f:b5:05:b8:3e:53:05:82:14:6f:38:2c: 21:46:91:3f:4f:8f:9c:f7:ac:61:71:3a:66:d1:8d:60:1d:9d: a5:70:90:34:ab:e5:d7:12:63:dd:00:fd:c5:94:21:94:9c:31: c0:99:33:44:cb:dc:14:50:80:e6:a4:48:0a:8f:a4:e5:64:bd: d0:72:0e:ec:3b:ff:f3:3f:3b:78:28:3c:33:6c:bc:56:fc:c0: 23:fa:f0:50:b1:98:65:c4:7b:ba:45:6e:78:11:7b:df:b9:ec: b0:76:b7:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Utv8jPGMe+QYosZcb90MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjYwMTAxMTQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjBjZTg5NDFlOGE2OTU1YjM1ZjcwMmNhZjc3OTlkNGIxZTQwYTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnoPXkK0zx2h6De9CPqxNd1c3XWb NlBDLfXA7+QQVFA3eQxJJS/YbgAsMWZfRvpi7VzGaEdSAENyIxyN6QMGLcl1ovsO yQzRqISMjEwrajLBFbF3HaXSJTBjxV9AVtkYhqxIBPDwUtQycdDzfT8983XhyjJL faiDkK6cR8u3GF7wp7Bn92Y+I6lwYEw8U8JsaZbb+pzCdx7zHjk/bhV4nhVvbWfO nCR7UlPj+F8l0LFXjO/QkdkEFPxdHym53BizxTSaS6JgIxe81vck8FAr1Qzlj83J TsvHmF4laAI61Cj66hi8LxSEl2AIbHy6BSszcGrDqHTP1StSlHvcz0mr2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK8M6JQeimlVs19wLK93mdSx5ApeMB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvcnd6b2xCNkthVld6WDNBc3IzZVoxTEhrQ2w0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1RXkMA0G CSqGSIb3DQEBCwUAA4IBAQATMON4Tjz47o7qyOMbvq/jKMD9zOYCYhmZZGaGjCou Apds4SfOpmMiQiyhuwHoQg8QIO0Y+0sGTmdZKdRaE6qjmNrdk3pJNitTEU2qj4Mc v9n7mplHUX6gm033wZJDDSJQlzG6wqCfIr0R87epr6Yi24CLEIwzgM8sDXf4n5/y 0HEY3hGmoFiZokfAGcN2Cr0TWwtOkE2PtQW4PlMFghRvOCwhRpE/T4+c96xhcTpm 0Y1gHZ2lcJA0q+XXEmPdAP3FlCGUnDHAmTNEy9wUUIDmpEgKj6TlZL3Qcg7sO//z Pzt4KDwzbLxW/MAj+vBQsZhlxHu6RW54EXvfueywdrdj -----END CERTIFICATE-----Generated at Mon Jan 19 17:31:53 2026 by rpki-client