This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/B54cfW3KiAc9WOcnGSgR0zlYusk.roa File: B54cfW3KiAc9WOcnGSgR0zlYusk.roa (raw, json) Hash identifier: Pt/0o51qxsBXR5rfYmcCvMWXGsb8P/WVwT8nk7ibAhk= Subject key identifier: 07:9E:1C:7D:6D:CA:88:07:3D:58:E7:27:19:28:11:D3:39:58:BA:C9 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14B0834048C9898D5FB314F0964545 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/B54cfW3KiAc9WOcnGSgR0zlYusk.roa Signing time: Fri 02 Jan 2026 14:20:20 +0000 ROA not before: Fri 02 Jan 2026 14:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36062 IP address blocks: 213.254.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:b0:83:40:48:c9:89:8d:5f:b3:14:f0:96:45:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=079e1c7d6dca88073d58e727192811d33958bac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:98:d4:4b:4e:4d:52:c0:57:b2:1a:a3:65:b8: c6:8f:32:92:0b:c5:3e:3a:d4:0a:b3:ba:54:0b:45: d1:f8:74:e9:74:e6:57:13:c8:cc:5c:d5:ca:ad:a0: 6c:e4:fd:8b:45:00:78:06:e9:89:36:53:4d:ab:5c: 04:41:f1:e9:e8:f0:df:c2:df:ba:8e:87:af:38:c4: db:0d:74:37:f1:20:ac:00:53:ac:39:16:1d:99:2b: bc:f7:b3:bd:d3:0c:15:6d:50:d4:c5:24:b9:b5:f7: ed:3a:08:04:9e:19:5b:a8:e5:ac:ea:76:c2:8d:ca: 3b:09:fa:08:89:19:b3:73:0b:f5:0a:a5:da:f5:d0: 77:49:e4:05:80:59:35:21:fd:63:32:0d:e7:df:21: 34:45:4f:51:9d:e6:46:18:eb:79:52:03:81:c5:31: ad:18:92:94:e1:26:b8:51:bc:70:f7:63:f0:40:6d: 51:86:93:cb:b6:de:57:a1:da:84:2b:be:fe:5e:8f: 76:e6:84:9f:54:6c:fa:6c:d8:89:93:c1:42:6d:a2: 72:2a:3e:46:27:9e:3f:51:1b:a1:ac:0f:db:d5:d8: bb:16:d5:d0:61:65:37:b7:29:6f:22:b1:2b:f1:21: bf:78:83:58:d4:aa:0e:da:ac:1f:6c:0d:a9:2d:14: d7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:9E:1C:7D:6D:CA:88:07:3D:58:E7:27:19:28:11:D3:39:58:BA:C9 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/B54cfW3KiAc9WOcnGSgR0zlYusk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.254.244.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:1c:c3:6c:73:3b:09:58:1b:a7:6c:5c:79:31:e9:18:be:56: 14:97:44:b2:47:c6:ec:10:da:eb:96:d2:04:db:ce:a9:38:15: 9e:28:70:34:10:7b:f1:14:9c:d3:a1:0d:bd:8f:dd:a0:8c:26: 88:ab:08:0a:2d:3e:16:3b:5d:a3:da:d2:99:33:82:f3:64:d3: 91:6b:94:e4:f7:64:92:0b:83:22:4a:63:ec:37:3d:33:de:40: 4c:90:e7:d3:26:d2:a8:c3:a9:e0:d8:4a:ce:68:f8:33:87:b4: 19:86:3b:89:b1:24:5b:6d:ee:de:5c:fd:59:08:0b:e7:af:4b: 52:e3:1a:23:41:c3:33:19:8c:2f:be:fa:50:54:1a:c2:90:1b: d2:e7:aa:79:6e:f1:b8:9d:99:fa:aa:b2:1b:41:ff:93:a8:10: 1f:2c:d6:be:5a:ee:0a:ad:a7:6d:fe:05:5f:18:ee:e8:91:d6: 98:f4:00:2e:e5:fb:08:69:45:c3:12:2c:92:45:c9:11:14:f0: 2c:b8:87:7c:ba:c8:85:2b:b5:43:9f:8a:c9:fd:9e:49:d9:d4: 67:a6:d3:95:91:0a:1d:bf:09:a6:a3:dc:b6:7a:14:cf:00:1e: 5b:8d:9d:92:6d:03:2d:03:75:83:83:ff:ac:93:a9:0d:23:8d: 61:ae:56:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FLCDQEjJiY1fsxTwlkVFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzllMWM3ZDZkY2E4ODA3M2Q1OGU3MjcxOTI4MTFkMzM5NThiYWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5jUS05NUsBXshqjZbjGjzKSC8U+ OtQKs7pUC0XR+HTpdOZXE8jMXNXKraBs5P2LRQB4BumJNlNNq1wEQfHp6PDfwt+6 joevOMTbDXQ38SCsAFOsORYdmSu897O90wwVbVDUxSS5tfftOggEnhlbqOWs6nbC jco7CfoIiRmzcwv1CqXa9dB3SeQFgFk1If1jMg3n3yE0RU9RneZGGOt5UgOBxTGt GJKU4Sa4Ubxw92PwQG1RhpPLtt5XodqEK77+Xo925oSfVGz6bNiJk8FCbaJyKj5G J54/URuhrA/b1di7FtXQYWU3tylvIrEr8SG/eINY1KoO2qwfbA2pLRTXgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAeeHH1tyogHPVjnJxkoEdM5WLrJMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvQjU0Y2ZXM0tpQWM5V09jbkdTZ1IwemxZdXNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1f70MA0G CSqGSIb3DQEBCwUAA4IBAQBPHMNsczsJWBunbFx5MekYvlYUl0SyR8bsENrrltIE 286pOBWeKHA0EHvxFJzToQ29j92gjCaIqwgKLT4WO12j2tKZM4LzZNORa5Tk92SS C4MiSmPsNz0z3kBMkOfTJtKow6ng2ErOaPgzh7QZhjuJsSRbbe7eXP1ZCAvnr0tS 4xojQcMzGYwvvvpQVBrCkBvS56p5bvG4nZn6qrIbQf+TqBAfLNa+Wu4Kradt/gVf GO7okdaY9AAu5fsIaUXDEiySRckRFPAsuId8usiFK7VDn4rJ/Z5J2dRnptOVkQod vwmmo9y2ehTPAB5bjZ2SbQMtA3WDg/+sk6kNI41hrlaS -----END CERTIFICATE-----Generated at Sun Jan 25 10:51:59 2026 by rpki-client