This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/1xjWVjs3koYC_kPUqAJqpqdwbwg.roa File: 1xjWVjs3koYC_kPUqAJqpqdwbwg.roa (raw, json) Hash identifier: fw/VqmKRzC/93kggKzzd5mMzlLwdRHo2w3F0Nsroot0= Subject key identifier: D7:18:D6:56:3B:37:92:86:02:FE:43:D4:A8:02:6A:A6:A7:70:6F:08 Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10 Certificate serial: 019ACBE587ECFC4746B57C114A1984980DB8 Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/1xjWVjs3koYC_kPUqAJqpqdwbwg.roa Signing time: Fri 28 Nov 2025 19:16:48 +0000 ROA not before: Fri 28 Nov 2025 19:16:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 31742 IP address blocks: 91.208.114.0/24 maxlen: 24 91.241.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:e5:87:ec:fc:47:46:b5:7c:11:4a:19:84:98:0d:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10 Validity Not Before: Nov 28 19:16:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d718d6563b37928602fe43d4a8026aa6a7706f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:21:48:81:cc:ab:2c:ad:f1:fd:07:0f:78:b9: 84:c8:a7:9e:f8:55:16:0c:c5:24:db:eb:74:93:58: 77:64:68:a2:90:17:8f:83:88:af:07:1f:94:5c:b5: 86:55:f6:0d:a8:a3:e9:b3:32:ec:8e:f1:a7:89:9d: fe:3a:68:2c:a0:a5:43:87:71:55:95:17:b8:bb:4d: fb:d3:a9:82:9e:13:6c:94:de:2d:c7:06:de:b5:62: 0e:cc:24:f3:8d:80:a6:24:92:1f:83:7d:f3:4e:9b: 9a:38:c1:f8:4d:59:26:14:e2:46:35:b6:91:d3:38: 48:74:88:99:3b:28:54:f3:44:14:71:c6:59:28:d6: c5:aa:c9:27:97:2c:36:8c:46:38:e6:e6:73:3f:07: d8:72:91:36:d0:2b:32:76:f4:cf:c6:bb:7e:ba:17: c1:1e:7a:8c:ca:02:16:f8:27:3f:49:f1:c4:22:39: 72:3a:f5:9a:36:2d:63:99:95:31:98:44:ed:20:52: 60:94:de:be:e1:2c:69:b0:47:93:9f:c2:cf:92:ce: 94:74:c8:2a:8c:df:74:e4:73:c0:11:32:99:30:00: ff:84:ed:8e:cb:31:a5:a9:09:8c:75:6a:75:2f:cd: 85:ee:31:a6:4b:e0:44:da:55:a3:d1:f7:69:a4:28: e1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:18:D6:56:3B:37:92:86:02:FE:43:D4:A8:02:6A:A6:A7:70:6F:08 X509v3 Authority Key Identifier: keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/1xjWVjs3koYC_kPUqAJqpqdwbwg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.114.0/24 91.241.78.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:e4:45:be:7f:e8:ef:92:fd:74:f0:bd:72:ee:89:ad:e4:23: 9e:fd:28:37:62:cf:5c:c6:19:c7:1c:2f:6f:c3:7e:57:16:35: 62:68:c5:4f:68:52:f6:80:de:b0:e0:df:16:f4:5b:19:20:0a: 8b:07:c6:2a:f1:08:01:d3:17:94:2a:4e:72:d3:3e:ac:34:ea: 7b:fe:34:3e:ad:6f:09:51:7a:29:31:d2:6c:7a:b1:c9:0c:ba: a9:0a:f3:03:af:55:6e:e1:5c:5e:6f:ed:13:1e:a9:18:47:88: 72:ab:43:b5:da:af:40:db:0c:95:42:d9:5b:a2:ee:8b:3d:59: 51:1b:97:f5:37:bb:c0:5e:f6:c5:2d:56:cf:08:da:ce:c7:88: 41:d3:00:df:3b:7d:51:10:09:16:90:ee:9a:db:fd:2b:05:39: 60:c3:59:f8:2f:53:82:4c:cd:c9:f3:07:05:87:40:37:41:fd: e8:a2:91:b9:aa:c3:aa:4d:cc:54:91:18:46:2b:b7:fa:cd:ca: 9c:43:18:e8:11:fa:eb:6d:62:1a:3e:3b:45:ed:78:ba:91:01: a6:46:a4:03:02:b4:f9:14:e9:a1:86:0b:57:8c:9f:6a:ed:0e: 18:a7:3c:29:77:dd:7b:6a:49:6a:77:0e:96:c0:b9:0f:c4:b0: b9:f6:b1:64 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrL5Yfs/EdGtXwRShmEmA24MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMmEwZmEyMDM4MzMzMmEzZjQxNGYwNTQ3NTNhMGI2MGIy NWJhMTAwHhcNMjUxMTI4MTkxNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzE4ZDY1NjNiMzc5Mjg2MDJmZTQzZDRhODAyNmFhNmE3NzA2ZjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSFIgcyrLK3x/QcPeLmEyKee+FUW DMUk2+t0k1h3ZGiikBePg4ivBx+UXLWGVfYNqKPpszLsjvGniZ3+OmgsoKVDh3FV lRe4u03706mCnhNslN4txwbetWIOzCTzjYCmJJIfg33zTpuaOMH4TVkmFOJGNbaR 0zhIdIiZOyhU80QUccZZKNbFqsknlyw2jEY45uZzPwfYcpE20CsydvTPxrt+uhfB HnqMygIW+Cc/SfHEIjlyOvWaNi1jmZUxmETtIFJglN6+4SxpsEeTn8LPks6UdMgq jN905HPAETKZMAD/hO2OyzGlqQmMdWp1L82F7jGmS+BE2lWj0fdppCjhBQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNcY1lY7N5KGAv5D1KgCaqancG8IMB8GA1UdIwQY MBaAFC8qD6IDgzMqP0FPBUdToLYLJboQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMt NTVhOTMwZmMwYzcxLzEvMXhqV1ZqczNrb1lDX2tQVXFBSnFwcWR3YndnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMtNTVhOTMwZmMwYzcx LzEvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9ByAwQA W/FOMA0GCSqGSIb3DQEBCwUAA4IBAQBe5EW+f+jvkv108L1y7omt5COe/Sg3Ys9c xhnHHC9vw35XFjViaMVPaFL2gN6w4N8W9FsZIAqLB8Yq8QgB0xeUKk5y0z6sNOp7 /jQ+rW8JUXopMdJserHJDLqpCvMDr1Vu4Vxeb+0THqkYR4hyq0O12q9A2wyVQtlb ou6LPVlRG5f1N7vAXvbFLVbPCNrOx4hB0wDfO31REAkWkO6a2/0rBTlgw1n4L1OC TM3J8wcFh0A3Qf3oopG5qsOqTcxUkRhGK7f6zcqcQxjoEfrrbWIaPjtF7Xi6kQGm RqQDArT5FOmhhgtXjJ9q7Q4Ypzwpd917aklqdw6WwLkPxLC59rFk -----END CERTIFICATE-----Generated at Sat Dec 6 15:41:40 2025 by rpki-client