This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/bsoFucu-95ojdd6HT9b5aZ5Yd6Y.roa
File: bsoFucu-95ojdd6HT9b5aZ5Yd6Y.roa (raw, json)
Hash identifier: kZjsCbYuva/6RQ5ML3HFlqXPFZ0iOYZfcyVyzLw6dDg=
Subject key identifier: 6E:CA:05:B9:CB:BE:F7:9A:23:75:DE:87:4F:D6:F9:69:9E:58:77:A6
Certificate issuer: /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial: 019B08F146E459D4F05225799BD31EBF21A6
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/bsoFucu-95ojdd6HT9b5aZ5Yd6Y.roa
Signing time: Wed 10 Dec 2025 15:46:28 +0000
ROA not before: Wed 10 Dec 2025 15:46:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 91.239.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Dec 2025 15:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:08:f1:46:e4:59:d4:f0:52:25:79:9b:d3:1e:bf:21:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
Validity
Not Before: Dec 10 15:46:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6eca05b9cbbef79a2375de874fd6f9699e5877a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:49:4c:a8:84:d2:f0:c2:3a:24:01:60:1a:
d3:33:75:25:23:26:02:2e:a8:f4:b7:88:3e:29:5e:
b3:e4:45:3e:c8:a7:a0:2d:df:c2:fa:dc:f3:1c:23:
1b:53:22:ed:0d:41:4f:55:ac:33:7c:01:b7:67:b2:
23:71:e8:25:29:a9:9c:04:5f:52:51:48:89:8c:33:
40:18:52:1e:ff:6c:a1:58:00:ec:9b:2d:cf:40:3d:
74:04:49:c2:e4:3a:50:23:e6:40:2e:9a:20:93:99:
2d:12:40:6e:26:c6:37:7d:c4:1e:e4:0e:00:2a:0a:
37:1a:3d:99:5c:84:a8:04:46:77:01:4c:60:c8:10:
ce:e7:50:6e:17:48:81:ec:b1:a6:d8:a4:bf:75:01:
ee:15:44:dc:3e:d4:93:41:4c:91:b5:0b:6b:b1:7d:
36:05:04:b2:47:dc:53:0c:84:be:8f:a9:04:77:b1:
3b:b9:28:64:5c:43:f7:48:42:2b:74:44:fe:45:ba:
73:c8:89:9a:74:9a:16:7d:df:a1:d3:bb:f4:45:49:
89:d2:9c:36:11:a7:e5:b9:09:7f:8f:97:44:a8:69:
26:83:40:20:11:90:9a:2d:c1:a2:6a:16:39:59:5e:
4b:29:c3:4f:d5:b6:83:03:33:e2:13:5a:c4:a7:a8:
42:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CA:05:B9:CB:BE:F7:9A:23:75:DE:87:4F:D6:F9:69:9E:58:77:A6
X509v3 Authority Key Identifier:
keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/bsoFucu-95ojdd6HT9b5aZ5Yd6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.211.0/24
Signature Algorithm: sha256WithRSAEncryption
78:58:47:10:14:6e:49:dc:a6:52:3b:54:5a:18:de:bd:57:de:
01:02:13:9a:b4:ba:c4:42:a5:3c:ab:69:ca:63:a9:97:04:3f:
34:7e:de:75:20:a8:8f:74:07:22:dc:7e:e0:a4:86:0f:0b:4f:
c1:a4:8c:9c:24:15:61:b8:90:24:91:5c:6e:f1:6f:90:64:bd:
4e:d2:b0:7f:bc:ea:17:af:1c:46:2f:07:f2:de:b4:32:46:5f:
62:56:6b:92:14:0f:84:f7:53:c0:75:c9:d1:d4:81:f3:e2:ec:
fb:91:f4:3f:65:31:82:fb:65:a5:83:70:22:bc:e2:bd:fb:36:
6b:3e:b5:c8:ee:01:fc:dc:aa:eb:61:b7:42:da:39:10:f0:97:
ae:b2:7f:1e:e3:b7:4e:cb:d9:8d:f0:e6:b2:07:59:87:fc:b6:
f4:ca:03:c2:5b:ca:d8:2b:a2:4e:e8:bf:60:03:2b:42:cb:39:
24:41:3a:41:79:7b:1d:d7:f0:e6:05:bb:e1:e4:f8:77:a3:d8:
63:e9:58:9f:8b:54:77:40:40:59:3d:fa:cb:b7:ee:16:80:a7:
6c:f5:3a:9f:95:b2:10:39:1b:7d:e8:47:9e:ae:51:2d:35:da:
bb:c3:21:c5:9e:4c:ac:21:8a:be:23:c4:6e:18:71:e2:72:a2:
9b:25:48:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 01:31:31 2025 by rpki-client