This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/Ctsfhc1buhjsP-LDtiYQgEeAvsM.roa File: Ctsfhc1buhjsP-LDtiYQgEeAvsM.roa (raw, json) Hash identifier: IcpxSZEbw6wlN8c6BwrewScxYORBAdj6421Et1q2/ak= Subject key identifier: 0A:DB:1F:85:CD:5B:BA:18:EC:3F:E2:C3:B6:26:10:80:47:80:BE:C3 Certificate issuer: /CN=e479af1716dc461e5bb3f876215bcb94e8808ba0 Certificate serial: 019B7F14D18C6C2A6E543F242DF6365EC053 Authority key identifier: E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/Ctsfhc1buhjsP-LDtiYQgEeAvsM.roa Signing time: Fri 02 Jan 2026 14:20:29 +0000 ROA not before: Fri 02 Jan 2026 14:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199027 IP address blocks: 213.152.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:d1:8c:6c:2a:6e:54:3f:24:2d:f6:36:5e:c0:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e479af1716dc461e5bb3f876215bcb94e8808ba0 Validity Not Before: Jan 2 14:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0adb1f85cd5bba18ec3fe2c3b62610804780bec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d9:1b:29:90:b1:cb:ff:60:40:b4:5d:cb:10: cf:b6:4a:a1:5d:82:f2:0f:ea:98:00:a9:93:d9:53: ee:93:50:91:55:48:db:ec:53:5c:37:36:92:1f:55: 40:48:68:55:8c:45:3b:a5:58:c6:c4:7d:6b:1a:ba: 29:cf:55:f6:46:6d:76:2e:fa:e1:83:53:d5:3a:5a: d9:3e:de:23:31:c2:3c:d5:b7:62:b8:8a:19:c2:38: 0c:48:d0:83:7d:05:60:c9:2c:87:0b:c3:74:d6:96: fb:4f:bf:a3:c3:0f:c5:17:97:9f:8d:7c:6a:63:ec: ad:f0:51:85:90:9f:b9:96:c8:6e:d0:bd:65:37:87: 91:c3:76:cc:67:79:61:f8:07:ec:db:25:8f:bd:00: 13:8e:1b:51:84:ba:ef:01:78:72:43:1b:14:c0:b0: a2:31:fc:ae:21:ab:b6:08:53:1f:f3:34:8c:f4:1b: 80:8e:c8:5b:ff:9f:27:9b:f0:3b:42:2a:81:8b:10: 26:85:ea:52:90:6b:65:3e:07:67:e3:d4:a8:81:db: ac:96:52:8d:7f:41:82:9c:a3:3c:ac:37:cc:f5:19: 0c:4e:16:c7:e7:64:19:5f:20:f9:6e:90:a7:34:94: 74:2d:23:a8:bd:b6:cf:d1:91:f4:89:e5:74:a7:fc: 81:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DB:1F:85:CD:5B:BA:18:EC:3F:E2:C3:B6:26:10:80:47:80:BE:C3 X509v3 Authority Key Identifier: keyid:E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/Ctsfhc1buhjsP-LDtiYQgEeAvsM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.152.21.0/24 Signature Algorithm: sha256WithRSAEncryption 04:8d:fa:7e:fa:d7:ea:7e:b4:32:c8:c8:69:6c:4f:14:f4:24: 00:8b:dc:79:a0:0e:90:78:f6:36:d0:6b:22:ca:ce:77:b0:2f: 4a:c9:a5:26:5c:a1:1a:dd:0c:cf:62:ae:11:58:21:aa:7f:36: ee:b6:cc:85:c8:0a:f0:91:d1:ae:22:ff:b9:5d:2f:d5:a9:59: a7:50:3b:ed:4d:6f:a8:bc:df:e6:1c:a1:0e:b3:71:75:95:11: fa:79:09:cc:dd:4e:0f:b1:93:49:bb:9b:d6:13:67:08:2d:29: d0:ad:0c:f1:ac:ba:c8:26:dd:2b:ed:c9:c0:07:7b:d1:e9:e6: 24:9c:2a:9d:ad:2d:05:c8:83:b3:33:b3:e1:eb:9c:42:2c:b2: 3e:8b:65:96:dc:49:f2:e3:df:27:be:4e:b4:32:21:62:51:6b: ed:18:bb:6e:b1:88:65:a1:e0:9f:ab:2c:c8:cc:6a:78:83:cf: b3:38:7e:1b:3d:64:8e:07:1e:59:ad:79:e7:7f:bc:e5:41:b0: 54:e9:67:8b:aa:60:b6:d8:6a:3a:8d:c8:8e:f0:7d:aa:9f:a4: 1e:3d:1d:9b:9b:86:ea:a6:26:9c:a3:2f:1b:e9:5c:af:dc:ec: 65:da:39:2b:9d:b5:12:a3:24:1e:35:0d:5c:68:39:59:97:c8: 65:9b:90:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FNGMbCpuVD8kLfY2XsBTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NzlhZjE3MTZkYzQ2MWU1YmIzZjg3NjIxNWJjYjk0ZTg4 MDhiYTAwHhcNMjYwMTAyMTQyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWRiMWY4NWNkNWJiYTE4ZWMzZmUyYzNiNjI2MTA4MDQ3ODBiZWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNkbKZCxy/9gQLRdyxDPtkqhXYLy D+qYAKmT2VPuk1CRVUjb7FNcNzaSH1VASGhVjEU7pVjGxH1rGropz1X2Rm12Lvrh g1PVOlrZPt4jMcI81bdiuIoZwjgMSNCDfQVgySyHC8N01pb7T7+jww/FF5efjXxq Y+yt8FGFkJ+5lshu0L1lN4eRw3bMZ3lh+Afs2yWPvQATjhtRhLrvAXhyQxsUwLCi MfyuIau2CFMf8zSM9BuAjshb/58nm/A7QiqBixAmhepSkGtlPgdn49SogdusllKN f0GCnKM8rDfM9RkMThbH52QZXyD5bpCnNJR0LSOovbbP0ZH0ieV0p/yBMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFArbH4XNW7oY7D/iw7YmEIBHgL7DMB8GA1UdIwQY MBaAFOR5rxcW3EYeW7P4diFby5TogIugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUhtdkZ4YmNSaDVic19oMklWdkxsT2lBaTZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS82MzI5OWEtODZiMi00OWZmLWI2ZTIt MjQxZWFiNjE0ODNmLzEvQ3RzZmhjMWJ1aGpzUC1MRHRpWVFnRWVBdnNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS82MzI5OWEtODZiMi00OWZmLWI2ZTItMjQxZWFiNjE0ODNm LzEvNUhtdkZ4YmNSaDVic19oMklWdkxsT2lBaTZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ZgVMA0G CSqGSIb3DQEBCwUAA4IBAQAEjfp++tfqfrQyyMhpbE8U9CQAi9x5oA6QePY20Gsi ys53sC9KyaUmXKEa3QzPYq4RWCGqfzbutsyFyArwkdGuIv+5XS/VqVmnUDvtTW+o vN/mHKEOs3F1lRH6eQnM3U4PsZNJu5vWE2cILSnQrQzxrLrIJt0r7cnAB3vR6eYk nCqdrS0FyIOzM7Ph65xCLLI+i2WW3Eny498nvk60MiFiUWvtGLtusYhloeCfqyzI zGp4g8+zOH4bPWSOBx5ZrXnnf7zlQbBU6WeLqmC22Go6jciO8H2qn6QePR2bm4bq piacoy8b6Vyv3Oxl2jkrnbUSoyQeNQ1caDlZl8hlm5BM -----END CERTIFICATE-----Generated at Mon Jan 26 04:38:47 2026 by rpki-client