This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/bUznR12Z6qgv2GJ4d51W3b4q1rY.roa File: bUznR12Z6qgv2GJ4d51W3b4q1rY.roa (raw, json) Hash identifier: E+jkSAkoWBTIGvs3/wdBA9fjQUn5qkN5HyA5QdRXFB8= Subject key identifier: 6D:4C:E7:47:5D:99:EA:A8:2F:D8:62:78:77:9D:56:DD:BE:2A:D6:B6 Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 019A5825CB37997529D0E3BCB073CBBDCADF Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/bUznR12Z6qgv2GJ4d51W3b4q1rY.roa Signing time: Thu 06 Nov 2025 07:51:03 +0000 ROA not before: Thu 06 Nov 2025 07:51:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205980 IP address blocks: 213.21.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:58:25:cb:37:99:75:29:d0:e3:bc:b0:73:cb:bd:ca:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Nov 6 07:51:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6d4ce7475d99eaa82fd86278779d56ddbe2ad6b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bd:92:ce:55:a5:4a:c3:d3:c9:03:a7:78:88: b5:61:87:d5:71:b5:90:18:d6:c3:f7:86:b0:f7:45: f9:ca:39:4b:95:74:60:58:97:35:d1:fe:a6:1c:45: 8a:62:50:ca:f8:43:40:57:37:f9:2a:78:41:ca:58: 35:18:8e:fe:4d:4c:eb:27:be:f2:77:2a:59:5e:6c: 65:9c:7f:d7:c3:fb:b2:78:6d:fc:6b:cf:03:0e:ef: 97:3b:e2:46:bc:e3:7b:73:1a:ca:ae:07:cb:d6:48: 13:fa:c9:05:c4:f5:b8:da:5c:46:41:4a:cd:67:b5: 57:91:1f:99:a6:a0:8e:48:b6:3a:86:b0:30:c8:fe: 18:70:13:95:0e:80:76:35:51:77:a4:8b:d4:2d:2a: f5:c2:10:00:53:36:7f:08:95:35:22:6e:10:fe:51: 79:7f:77:b4:15:a7:78:aa:05:ad:f3:f0:6b:30:86: 91:4a:12:f8:c8:91:79:e8:16:ca:0f:c4:26:cf:dd: 19:b0:2b:d1:7a:36:80:e2:0c:39:b8:fb:66:f1:a4: 6e:bf:3f:2c:f6:f7:d7:89:58:10:bc:81:17:25:5e: 53:e9:d2:24:9d:16:d8:12:63:1a:30:fb:c5:25:6a: 0b:7b:f6:a2:7b:36:a0:e3:e3:c1:66:92:98:e0:05: fa:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:4C:E7:47:5D:99:EA:A8:2F:D8:62:78:77:9D:56:DD:BE:2A:D6:B6 X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/bUznR12Z6qgv2GJ4d51W3b4q1rY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.21.245.0/24 Signature Algorithm: sha256WithRSAEncryption 65:db:64:77:92:a8:00:dc:2f:88:0f:42:89:6e:af:ed:d0:bf: db:f4:56:3e:72:d0:b4:3b:44:4e:c2:7e:e6:66:51:7c:15:cc: d1:b4:f2:7f:a7:a1:2f:12:7f:82:80:48:a3:fb:6e:5a:9b:44: c6:36:bb:3c:60:03:07:83:67:51:8e:2c:53:2d:9d:09:1c:d2: d6:fb:d4:90:72:04:45:ca:f7:ab:69:1f:2e:3c:c7:17:c4:b3: 62:c8:f2:9d:12:21:34:e7:90:e7:7f:31:5b:87:a3:a6:b8:b1: bc:15:b2:0b:2d:61:b3:3b:2c:75:84:5c:03:c7:db:9a:72:3e: e9:c4:9b:70:b6:55:c6:db:6c:5c:56:18:ee:3b:89:f8:24:fd: 1a:78:41:0b:ed:35:07:db:b3:e0:62:c5:22:87:4c:12:11:07: 9e:c2:58:9c:10:1b:b0:ce:71:c2:ee:06:aa:d8:43:be:1c:f8: b8:47:87:ff:6c:9b:2e:f9:f1:96:e0:cd:f8:e5:ca:c6:86:af: 6c:02:c6:3f:85:f2:bd:01:8a:db:6a:fd:e0:05:05:92:c4:93: cd:c1:39:f6:bc:97:00:31:ae:32:5e:e5:83:be:d2:8b:5c:35: c6:4b:98:14:40:ca:5b:04:cb:cb:f2:27:c8:3d:b2:1a:d4:fd: 4e:7d:0f:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpYJcs3mXUp0OO8sHPLvcrfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjUxMTA2MDc1MTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDRjZTc0NzVkOTllYWE4MmZkODYyNzg3NzlkNTZkZGJlMmFkNmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL2SzlWlSsPTyQOneIi1YYfVcbWQ GNbD94aw90X5yjlLlXRgWJc10f6mHEWKYlDK+ENAVzf5KnhBylg1GI7+TUzrJ77y dypZXmxlnH/Xw/uyeG38a88DDu+XO+JGvON7cxrKrgfL1kgT+skFxPW42lxGQUrN Z7VXkR+ZpqCOSLY6hrAwyP4YcBOVDoB2NVF3pIvULSr1whAAUzZ/CJU1Im4Q/lF5 f3e0Fad4qgWt8/BrMIaRShL4yJF56BbKD8Qmz90ZsCvRejaA4gw5uPtm8aRuvz8s 9vfXiVgQvIEXJV5T6dIknRbYEmMaMPvFJWoLe/aiezag4+PBZpKY4AX6RwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG1M50ddmeqoL9hieHedVt2+Kta2MB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvYlV6blIxMlo2cWd2MkdKNGQ1MVczYjRxMXJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1RX1MA0G CSqGSIb3DQEBCwUAA4IBAQBl22R3kqgA3C+ID0KJbq/t0L/b9FY+ctC0O0ROwn7m ZlF8FczRtPJ/p6EvEn+CgEij+25am0TGNrs8YAMHg2dRjixTLZ0JHNLW+9SQcgRF yveraR8uPMcXxLNiyPKdEiE055DnfzFbh6OmuLG8FbILLWGzOyx1hFwDx9uacj7p xJtwtlXG22xcVhjuO4n4JP0aeEEL7TUH27PgYsUih0wSEQeewlicEBuwznHC7gaq 2EO+HPi4R4f/bJsu+fGW4M345crGhq9sAsY/hfK9AYrbav3gBQWSxJPNwTn2vJcA Ma4yXuWDvtKLXDXGS5gUQMpbBMvL8ifIPbIa1P1OfQ8s -----END CERTIFICATE-----Generated at Sat Dec 6 07:27:39 2025 by rpki-client