This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/30rO_BdRX1qylu2XkOuDKVnX5kA.roa File: 30rO_BdRX1qylu2XkOuDKVnX5kA.roa (raw, json) Hash identifier: bXGCsHFr9AJnwD9C9VsQWa2UE5+/86m77Z5zzSFtsJQ= Subject key identifier: DF:4A:CE:FC:17:51:5F:5A:B2:96:ED:97:90:EB:83:29:59:D7:E6:40 Certificate issuer: /CN=bd5c6ab6bc206a54c4abb37415858cb2d53d349e Certificate serial: 019AADA83D25F51A34823040CB433F3F05A1 Authority key identifier: BD:5C:6A:B6:BC:20:6A:54:C4:AB:B3:74:15:85:8C:B2:D5:3D:34:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/30rO_BdRX1qylu2XkOuDKVnX5kA.roa Signing time: Sat 22 Nov 2025 22:21:15 +0000 ROA not before: Sat 22 Nov 2025 22:21:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 1853 IP address blocks: 195.177.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ad:a8:3d:25:f5:1a:34:82:30:40:cb:43:3f:3f:05:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd5c6ab6bc206a54c4abb37415858cb2d53d349e Validity Not Before: Nov 22 22:21:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=df4acefc17515f5ab296ed9790eb832959d7e640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cf:dd:28:46:98:b6:45:63:2e:75:95:d4:0a: 4a:cb:ab:39:8c:3f:e3:8d:9d:b2:76:78:39:ba:67: 52:05:5a:e5:6c:4a:7e:c3:e1:2e:44:e4:17:fc:e2: f0:51:0c:3e:02:11:68:18:cf:5e:da:3b:84:f8:51: 4b:d3:17:92:b0:c5:33:90:5f:b2:55:79:bb:0e:6d: 66:28:20:b1:92:d7:9b:0f:0b:62:6d:f1:b9:3c:49: d7:4d:d7:01:63:2e:f0:17:5f:5b:ae:75:bd:f4:5b: a4:b8:9c:30:16:1a:05:87:ce:5f:7c:d1:09:6e:e1: 93:f2:6f:1e:fb:66:c8:87:a2:8b:02:3a:af:90:9e: f3:4d:9a:d6:36:4e:28:32:30:44:6b:f1:4b:fe:a4: 32:be:1c:96:c1:1e:6d:c3:69:38:87:6b:9d:8c:b0: df:39:58:37:09:11:7a:61:e8:8d:cf:51:9b:fd:27: 3f:71:b6:b9:20:1b:b1:04:31:94:cc:a2:3b:13:ca: ce:c5:54:7f:08:a2:42:f9:47:fd:ba:29:8e:81:ce: c7:58:a6:c5:a2:c0:75:91:68:0d:74:05:ab:3d:35: ac:e8:ca:2e:31:38:dc:de:a2:65:f3:9f:e9:92:9b: 26:a4:4c:6f:69:35:3d:52:d2:6c:3f:cc:0f:0d:ec: 2a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4A:CE:FC:17:51:5F:5A:B2:96:ED:97:90:EB:83:29:59:D7:E6:40 X509v3 Authority Key Identifier: keyid:BD:5C:6A:B6:BC:20:6A:54:C4:AB:B3:74:15:85:8C:B2:D5:3D:34:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/30rO_BdRX1qylu2XkOuDKVnX5kA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.177.250.0/23 Signature Algorithm: sha256WithRSAEncryption 36:09:6a:1d:1e:2b:a5:87:b0:2a:be:37:18:3f:01:e0:e1:7d: aa:73:60:9b:f6:2e:1e:f4:b0:95:33:4a:fe:87:28:74:ce:d5: 50:89:b5:73:b3:63:43:b1:37:31:de:47:82:0f:70:1d:31:88: bd:9b:95:20:0d:fe:db:e2:31:34:43:74:b2:18:3c:b4:1e:63: 93:f2:6e:44:48:3a:58:30:28:e5:73:ab:82:d8:46:e8:13:4a: 45:5a:b0:b5:05:a0:1a:5e:10:56:a7:ac:28:ad:78:d3:66:2f: 37:22:14:f7:11:f0:77:e9:84:05:db:c2:2a:74:82:42:5d:8e: 08:87:81:e4:3f:c2:39:8b:50:73:9f:1d:90:0a:86:87:6d:ef: 5e:19:03:c1:55:e5:06:94:c1:bc:c0:0a:60:ff:9c:dc:fa:47: 69:c5:cd:94:ed:4d:dd:be:8f:bb:b7:d2:17:b2:de:1c:ec:0e: bd:ed:1f:fe:ef:15:ed:1e:73:5a:f3:e0:d0:dd:31:f9:7b:12: 7b:b2:ca:11:b1:8a:ee:0f:da:0f:1c:29:a1:85:2d:cd:8f:f5: e4:32:83:91:58:cb:e3:1c:34:aa:d9:82:8d:37:ef:4a:9a:10: ec:08:76:50:8a:25:ff:78:a1:61:c4:64:6c:12:e0:9e:df:b4: 48:a9:1a:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqtqD0l9Ro0gjBAy0M/PwWhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNWM2YWI2YmMyMDZhNTRjNGFiYjM3NDE1ODU4Y2IyZDUz ZDM0OWUwHhcNMjUxMTIyMjIyMTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjRhY2VmYzE3NTE1ZjVhYjI5NmVkOTc5MGViODMyOTU5ZDdlNjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws/dKEaYtkVjLnWV1ApKy6s5jD/j jZ2ydng5umdSBVrlbEp+w+EuROQX/OLwUQw+AhFoGM9e2juE+FFL0xeSsMUzkF+y VXm7Dm1mKCCxktebDwtibfG5PEnXTdcBYy7wF19brnW99FukuJwwFhoFh85ffNEJ buGT8m8e+2bIh6KLAjqvkJ7zTZrWNk4oMjBEa/FL/qQyvhyWwR5tw2k4h2udjLDf OVg3CRF6YeiNz1Gb/Sc/cba5IBuxBDGUzKI7E8rOxVR/CKJC+Uf9uimOgc7HWKbF osB1kWgNdAWrPTWs6MouMTjc3qJl85/pkpsmpExvaTU9UtJsP8wPDewqwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN9KzvwXUV9aspbtl5DrgylZ1+ZAMB8GA1UdIwQY MBaAFL1cara8IGpUxKuzdBWFjLLVPTSeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlZ4cXRyd2dhbFRFcTdOMEZZV01zdFU5Tko0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xMmY0ZTYtYWYxZC00ZWYxLWI3YWQt NDIzMjNiMjAwOWUzLzEvMzByT19CZFJYMXF5bHUyWGtPdURLVm5YNWtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8xMmY0ZTYtYWYxZC00ZWYxLWI3YWQtNDIzMjNiMjAwOWUz LzEvdlZ4cXRyd2dhbFRFcTdOMEZZV01zdFU5Tko0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw7H6MA0G CSqGSIb3DQEBCwUAA4IBAQA2CWodHiulh7AqvjcYPwHg4X2qc2Cb9i4e9LCVM0r+ hyh0ztVQibVzs2NDsTcx3keCD3AdMYi9m5UgDf7b4jE0Q3SyGDy0HmOT8m5ESDpY MCjlc6uC2EboE0pFWrC1BaAaXhBWp6worXjTZi83IhT3EfB36YQF28IqdIJCXY4I h4HkP8I5i1Bznx2QCoaHbe9eGQPBVeUGlMG8wApg/5zc+kdpxc2U7U3dvo+7t9IX st4c7A697R/+7xXtHnNa8+DQ3TH5exJ7ssoRsYruD9oPHCmhhS3Nj/XkMoORWMvj HDSq2YKNN+9KmhDsCHZQiiX/eKFhxGRsEuCe37RIqRr9 -----END CERTIFICATE-----Generated at Sat Dec 6 18:47:29 2025 by rpki-client