This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/QOlfpyLTY1GVk9P04eDDk4hrifQ.roa File: QOlfpyLTY1GVk9P04eDDk4hrifQ.roa (raw, json) Hash identifier: MN8KY4FWwTDhVDLYaAg0IRz1oAsYXnnAQRhwbCNV4Tk= Subject key identifier: 40:E9:5F:A7:22:D3:63:51:95:93:D3:F4:E1:E0:C3:93:88:6B:89:F4 Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10 Certificate serial: 019ACBE58AF883DDBDF0C9058E2AE987765C Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/QOlfpyLTY1GVk9P04eDDk4hrifQ.roa Signing time: Fri 28 Nov 2025 19:16:49 +0000 ROA not before: Fri 28 Nov 2025 19:16:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215523 IP address blocks: 79.135.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:e5:8a:f8:83:dd:bd:f0:c9:05:8e:2a:e9:87:76:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10 Validity Not Before: Nov 28 19:16:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=40e95fa722d363519593d3f4e1e0c393886b89f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ba:83:22:4d:e2:d5:02:a8:6b:15:14:06:3d: 85:c8:7d:ab:5a:cc:ce:77:c2:3a:ef:5a:6e:af:74: 82:88:22:8e:36:de:a9:de:5f:ae:b3:52:c9:8f:84: 75:eb:6d:9d:c6:74:6d:59:3e:2c:d1:8e:64:0c:e0: 1b:b5:b8:3d:b3:9a:4e:1b:9f:0a:63:19:18:0a:7d: ff:78:cb:05:f9:b3:36:9f:fa:a7:e8:ba:4b:c7:8d: 8a:cf:94:70:6c:4c:c2:6b:cb:e3:c0:be:65:29:93: dd:df:47:32:f9:99:57:d4:59:7b:c7:af:3d:08:f3: 86:70:a8:ea:85:52:aa:a3:d1:50:84:7a:54:48:cb: 70:44:9c:df:c7:1f:b0:4f:31:bc:b0:3c:ec:f9:c4: 48:a7:31:a3:85:25:31:6c:a3:05:c8:7e:c3:91:60: 53:84:e6:45:e7:f7:22:60:a7:e8:06:c3:93:8e:e0: c5:59:10:1b:11:0f:23:06:d0:4a:44:c7:2b:26:88: 9d:8a:a3:4d:9a:b5:e0:ce:1e:b0:78:07:3c:cc:60: e8:44:d3:6a:31:44:3e:9f:d7:82:06:2d:f6:94:09: 86:7b:6d:29:ae:a7:b4:2e:01:ea:00:3f:cd:0d:47: 13:49:f4:77:d5:f8:87:5d:e6:8c:59:f7:95:87:66: 9f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E9:5F:A7:22:D3:63:51:95:93:D3:F4:E1:E0:C3:93:88:6B:89:F4 X509v3 Authority Key Identifier: keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/QOlfpyLTY1GVk9P04eDDk4hrifQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.135.100.0/23 Signature Algorithm: sha256WithRSAEncryption 94:e6:cc:aa:73:f1:50:31:66:72:09:e4:8e:06:b4:5f:1d:dc: fb:5e:26:0a:01:52:32:1d:93:a7:cd:c9:dd:2a:21:ad:21:58: b9:ba:b2:2f:92:cb:87:41:f5:8a:8c:7d:f2:08:d8:b8:bc:29: 9e:5c:0b:ee:fc:ab:59:8f:49:55:80:01:e4:cf:b3:f2:86:d7: e6:c2:fd:1f:57:3a:da:7d:7a:9b:24:41:71:c9:df:54:2f:cc: a7:2c:6e:4c:19:11:ae:2b:68:b1:69:f2:86:72:c1:ca:6b:a8: 5d:66:48:ca:d0:1e:15:f6:0a:ef:84:a0:d7:5f:04:55:31:cb: 37:7c:33:61:24:74:87:56:8e:0d:03:75:b0:5f:7e:24:1a:83: ca:30:09:a9:00:7c:85:7f:09:8b:59:a2:e9:fd:5d:d3:ee:0b: 01:13:fe:36:35:54:da:fd:96:70:e6:97:ac:d7:01:d8:ac:4e: f3:31:94:13:cb:7d:69:63:bd:68:dc:5c:f7:51:b3:c1:b2:6d: 30:89:b6:a6:c2:7c:01:38:48:c4:34:67:d9:09:0e:6b:b2:97: 77:2a:79:6a:75:db:f3:ea:70:55:c0:39:51:10:0f:2b:2d:e3: 24:88:c9:7a:16:75:d9:b3:f9:3a:4f:96:8f:77:d7:1b:a3:10: 15:07:d7:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrL5Yr4g9298MkFjirph3ZcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMmEwZmEyMDM4MzMzMmEzZjQxNGYwNTQ3NTNhMGI2MGIy NWJhMTAwHhcNMjUxMTI4MTkxNjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGU5NWZhNzIyZDM2MzUxOTU5M2QzZjRlMWUwYzM5Mzg4NmI4OWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrqDIk3i1QKoaxUUBj2FyH2rWszO d8I671pur3SCiCKONt6p3l+us1LJj4R1622dxnRtWT4s0Y5kDOAbtbg9s5pOG58K YxkYCn3/eMsF+bM2n/qn6LpLx42Kz5RwbEzCa8vjwL5lKZPd30cy+ZlX1Fl7x689 CPOGcKjqhVKqo9FQhHpUSMtwRJzfxx+wTzG8sDzs+cRIpzGjhSUxbKMFyH7DkWBT hOZF5/ciYKfoBsOTjuDFWRAbEQ8jBtBKRMcrJoidiqNNmrXgzh6weAc8zGDoRNNq MUQ+n9eCBi32lAmGe20prqe0LgHqAD/NDUcTSfR31fiHXeaMWfeVh2afYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEDpX6ci02NRlZPT9OHgw5OIa4n0MB8GA1UdIwQY MBaAFC8qD6IDgzMqP0FPBUdToLYLJboQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMt NTVhOTMwZmMwYzcxLzEvUU9sZnB5TFRZMUdWazlQMDRlRERrNGhyaWZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMtNTVhOTMwZmMwYzcx LzEvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBT4dkMA0G CSqGSIb3DQEBCwUAA4IBAQCU5syqc/FQMWZyCeSOBrRfHdz7XiYKAVIyHZOnzcnd KiGtIVi5urIvksuHQfWKjH3yCNi4vCmeXAvu/KtZj0lVgAHkz7Pyhtfmwv0fVzra fXqbJEFxyd9UL8ynLG5MGRGuK2ixafKGcsHKa6hdZkjK0B4V9grvhKDXXwRVMcs3 fDNhJHSHVo4NA3WwX34kGoPKMAmpAHyFfwmLWaLp/V3T7gsBE/42NVTa/ZZw5pes 1wHYrE7zMZQTy31pY71o3Fz3UbPBsm0wibamwnwBOEjENGfZCQ5rspd3Knlqddvz 6nBVwDlREA8rLeMkiMl6FnXZs/k6T5aPd9cboxAVB9dB -----END CERTIFICATE-----Generated at Sat Dec 6 14:54:49 2025 by rpki-client