This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/bJs1FoASoLTX-56punkdrjgk07c.roa File: bJs1FoASoLTX-56punkdrjgk07c.roa (raw, json) Hash identifier: 5XyZvlKUhwMZMJ1oB3lmUtuNgNKemPK/RQ02Zbhe2Ms= Subject key identifier: 6C:9B:35:16:80:12:A0:B4:D7:FB:9E:A9:BA:79:1D:AE:38:24:D3:B7 Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f Certificate serial: 019B2AEE7743E24F75BED732269E50C0541B Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/bJs1FoASoLTX-56punkdrjgk07c.roa Signing time: Wed 17 Dec 2025 06:10:29 +0000 ROA not before: Wed 17 Dec 2025 06:10:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48678 IP address blocks: 213.238.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 03:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:ee:77:43:e2:4f:75:be:d7:32:26:9e:50:c0:54:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f Validity Not Before: Dec 17 06:10:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6c9b35168012a0b4d7fb9ea9ba791dae3824d3b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:df:a8:c9:1a:ec:a2:09:d3:03:17:8e:83:3a: c9:8c:4e:98:22:16:85:c6:f9:9e:4c:e0:24:d1:cd: 8a:e3:ba:e2:fd:94:33:b1:05:3c:5f:b0:ff:f6:cf: 06:4e:39:93:07:aa:8b:dc:aa:26:6f:e7:95:79:65: 55:17:31:df:b5:07:36:a5:c1:4e:29:1a:21:3e:13: 6b:5c:fb:8f:0b:6a:c5:d1:8e:1a:83:81:bd:20:95: 89:a0:ab:74:c3:38:7c:02:5b:d5:06:52:59:7e:b6: f9:df:af:c4:5e:8b:02:3e:ed:67:d8:ed:5f:43:43: 98:74:dc:00:51:cb:ab:26:da:14:6d:88:6a:ae:d1: 05:7a:2b:47:2f:17:be:d0:d9:65:0a:e5:ba:09:90: 7c:a4:e1:4d:6d:8f:a2:26:95:34:80:76:cd:44:74: 50:81:87:ad:c6:e4:5f:7e:c7:2a:63:dc:9a:52:9f: b0:2a:e7:d5:3d:e4:6b:af:8e:ff:3b:e2:5b:39:bd: db:5e:5c:05:cc:94:ab:b5:8a:60:57:72:8f:63:66: 74:eb:63:6f:a8:c3:ba:79:40:f8:31:1b:77:76:96: 53:e5:1c:64:83:9b:94:6e:49:9b:d5:f7:a1:27:d8: cf:d8:2b:d1:c6:86:52:0c:96:02:d5:6b:62:96:a2: 0d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:9B:35:16:80:12:A0:B4:D7:FB:9E:A9:BA:79:1D:AE:38:24:D3:B7 X509v3 Authority Key Identifier: keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/bJs1FoASoLTX-56punkdrjgk07c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.238.180.0/24 Signature Algorithm: sha256WithRSAEncryption 30:fe:d1:d5:ab:41:74:93:e6:e0:be:24:c2:1f:d6:17:55:95: 65:96:8c:9e:f0:f8:e2:6a:00:2b:34:e6:00:6c:ec:88:7a:09: 54:3e:4a:58:d5:c9:77:65:ef:5e:5b:a5:fa:06:b5:ea:14:25: 8d:a7:40:59:eb:d5:61:e2:47:80:2a:da:d1:75:be:94:7d:fd: 44:ee:de:da:0a:fe:55:ea:2f:8e:f2:21:ec:20:49:24:f4:0c: 33:72:80:26:83:db:48:68:7a:df:68:ea:22:75:74:c0:1e:9f: e8:c1:d9:51:2d:c7:a1:f8:a8:f5:bf:5b:c9:48:f0:1f:68:1d: 8c:33:bc:fd:8a:ba:6c:56:96:20:db:35:e3:e7:dc:38:83:ac: 7b:56:48:f7:1f:9b:4d:62:d0:40:02:e6:63:69:b3:4a:75:2d: 34:51:dc:06:48:12:1d:60:32:07:57:00:77:fd:b5:54:ed:c9: d4:21:23:1e:9d:7c:2c:56:a9:90:24:47:70:38:b1:27:4c:f6: c4:98:ef:0e:aa:80:e3:86:3e:f7:55:43:64:9b:15:8a:3f:b9: d0:f6:2b:a4:3b:47:b0:5a:89:b6:10:78:33:80:b5:6a:4a:60: 59:54:06:0e:b6:f0:92:72:87:67:94:7e:60:02:c0:30:52:80: 77:d1:fc:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsq7ndD4k91vtcyJp5QwFQbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0 MGRlM2YwHhcNMjUxMjE3MDYxMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzliMzUxNjgwMTJhMGI0ZDdmYjllYTliYTc5MWRhZTM4MjRkM2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd+oyRrsognTAxeOgzrJjE6YIhaF xvmeTOAk0c2K47ri/ZQzsQU8X7D/9s8GTjmTB6qL3Komb+eVeWVVFzHftQc2pcFO KRohPhNrXPuPC2rF0Y4ag4G9IJWJoKt0wzh8AlvVBlJZfrb536/EXosCPu1n2O1f Q0OYdNwAUcurJtoUbYhqrtEFeitHLxe+0NllCuW6CZB8pOFNbY+iJpU0gHbNRHRQ gYetxuRffscqY9yaUp+wKufVPeRrr47/O+JbOb3bXlwFzJSrtYpgV3KPY2Z062Nv qMO6eUD4MRt3dpZT5Rxkg5uUbkmb1fehJ9jP2CvRxoZSDJYC1WtilqINKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGybNRaAEqC01/ueqbp5Ha44JNO3MB8GA1UdIwQY MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt Y2QzMTYxNWQwMWE5LzEvYkpzMUZvQVNvTFRYLTU2cHVua2RyamdrMDdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5 LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1e60MA0G CSqGSIb3DQEBCwUAA4IBAQAw/tHVq0F0k+bgviTCH9YXVZVlloye8PjiagArNOYA bOyIeglUPkpY1cl3Ze9eW6X6BrXqFCWNp0BZ69Vh4keAKtrRdb6Uff1E7t7aCv5V 6i+O8iHsIEkk9AwzcoAmg9tIaHrfaOoidXTAHp/owdlRLceh+Kj1v1vJSPAfaB2M M7z9irpsVpYg2zXj59w4g6x7Vkj3H5tNYtBAAuZjabNKdS00UdwGSBIdYDIHVwB3 /bVU7cnUISMenXwsVqmQJEdwOLEnTPbEmO8OqoDjhj73VUNkmxWKP7nQ9iukO0ew Wom2EHgzgLVqSmBZVAYOtvCScodnlH5gAsAwUoB30fxM -----END CERTIFICATE-----Generated at Fri Dec 19 10:17:25 2025 by rpki-client