This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/_D9u8ZbYTHyxkrGe4WnKvqslf_s.roa File: _D9u8ZbYTHyxkrGe4WnKvqslf_s.roa (raw, json) Hash identifier: ay//DtZ28JLwpSQ1rKEzbR58vdmnEUCJywJIrtl3noc= Subject key identifier: FC:3F:6E:F1:96:D8:4C:7C:B1:92:B1:9E:E1:69:CA:BE:AB:25:7F:FB Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10 Certificate serial: 019B11A2F060F37A3FC9229696FD0D5EA877 Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/_D9u8ZbYTHyxkrGe4WnKvqslf_s.roa Signing time: Fri 12 Dec 2025 08:17:29 +0000 ROA not before: Fri 12 Dec 2025 08:17:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 5.144.155.0/24 maxlen: 24 78.143.252.0/24 maxlen: 24 79.135.102.0/23 maxlen: 24 194.33.150.0/24 maxlen: 24 194.33.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:a2:f0:60:f3:7a:3f:c9:22:96:96:fd:0d:5e:a8:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10 Validity Not Before: Dec 12 08:17:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fc3f6ef196d84c7cb192b19ee169cabeab257ffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b8:c1:7b:44:d9:f7:14:05:af:50:68:06:3e: af:2c:1d:f9:31:90:26:6f:d7:66:db:d9:90:5d:d1: 76:9c:c1:d1:8d:77:17:d2:ac:0f:53:06:34:b0:9b: 89:f7:35:d9:a3:2a:8d:8e:33:25:c2:de:ae:19:02: 3f:e1:f5:7e:81:05:51:66:7e:16:a4:ce:2d:7a:02: 31:1c:b2:03:29:be:f3:56:05:d0:9c:c7:92:ef:ea: e8:56:91:8c:b1:a0:37:70:bf:62:1d:d4:e3:1f:e3: 61:05:7d:0c:a9:53:1f:17:76:ed:ba:d0:cb:1c:27: 39:e2:1c:a5:1d:06:5a:8f:bc:f2:a9:ae:4c:da:1f: e0:7f:d9:17:26:de:2d:f4:2d:8a:aa:ef:2e:ce:ab: 0a:8c:f8:16:ef:a8:f7:9f:6c:df:a5:f7:b3:3d:c5: 88:78:c7:0a:fd:d8:fe:1f:3f:db:13:80:1b:8d:74: b8:be:0b:2b:40:42:d2:b3:fc:a8:7d:ba:f9:67:15: 3a:9f:30:e2:b0:3e:91:24:f8:6a:5a:d7:25:93:bd: 4d:a9:49:71:9e:f7:ae:95:e3:a9:00:77:5c:08:55: 5a:de:05:67:b8:e5:17:46:a1:1d:c1:a7:0a:96:84: 60:45:d4:21:20:29:c9:f6:08:5e:a8:85:ae:8c:10: 41:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:3F:6E:F1:96:D8:4C:7C:B1:92:B1:9E:E1:69:CA:BE:AB:25:7F:FB X509v3 Authority Key Identifier: keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/_D9u8ZbYTHyxkrGe4WnKvqslf_s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.144.155.0/24 78.143.252.0/24 79.135.102.0/23 194.33.150.0/23 Signature Algorithm: sha256WithRSAEncryption 40:46:45:06:70:2a:f8:86:32:7e:29:9a:5b:ad:ec:e1:80:bb: 83:21:08:33:58:96:af:30:e6:5b:68:20:cf:bd:b1:b7:24:56: ab:3d:d4:48:81:d2:0b:b3:be:bc:8e:4c:35:44:46:3c:e1:53: 8a:17:cd:03:56:95:e2:52:5d:68:03:f7:70:f6:1d:15:39:ab: bc:3b:ab:ed:34:a6:74:aa:a3:93:26:9c:65:08:87:43:37:57: ab:4e:a9:c4:93:fd:c5:1d:e4:fb:21:d0:3b:16:4f:d9:66:f6: dc:30:90:72:38:09:7e:a8:8b:10:c1:b8:d8:06:f5:c5:03:81: 52:64:77:a1:f2:28:72:42:80:13:70:39:c6:67:12:bd:8f:ba: fc:5d:99:af:55:ce:21:aa:c1:33:de:88:61:c8:6b:57:3a:34: 46:3e:4d:d2:68:c9:d1:de:23:80:01:57:e5:9f:a3:d7:4d:84: bc:01:fb:f1:74:0a:1f:2b:f8:0b:9d:e7:d9:e6:2a:49:f8:72: 0f:73:25:e1:d1:7b:5a:d7:41:d5:6f:f5:fc:68:f2:61:51:cf: 46:db:ac:68:33:4e:5f:cb:b8:a7:a9:c5:89:de:70:ca:47:81: 28:4f:90:54:c4:72:79:55:da:4d:da:2f:f3:67:4d:4f:00:49: 4a:31:e4:45 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZsRovBg83o/ySKWlv0NXqh3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMmEwZmEyMDM4MzMzMmEzZjQxNGYwNTQ3NTNhMGI2MGIy NWJhMTAwHhcNMjUxMjEyMDgxNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzNmNmVmMTk2ZDg0YzdjYjE5MmIxOWVlMTY5Y2FiZWFiMjU3ZmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrjBe0TZ9xQFr1BoBj6vLB35MZAm b9dm29mQXdF2nMHRjXcX0qwPUwY0sJuJ9zXZoyqNjjMlwt6uGQI/4fV+gQVRZn4W pM4tegIxHLIDKb7zVgXQnMeS7+roVpGMsaA3cL9iHdTjH+NhBX0MqVMfF3btutDL HCc54hylHQZaj7zyqa5M2h/gf9kXJt4t9C2Kqu8uzqsKjPgW76j3n2zfpfezPcWI eMcK/dj+Hz/bE4AbjXS4vgsrQELSs/yofbr5ZxU6nzDisD6RJPhqWtclk71NqUlx nveuleOpAHdcCFVa3gVnuOUXRqEdwacKloRgRdQhICnJ9gheqIWujBBBjQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPw/bvGW2Ex8sZKxnuFpyr6rJX/7MB8GA1UdIwQY MBaAFC8qD6IDgzMqP0FPBUdToLYLJboQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMt NTVhOTMwZmMwYzcxLzEvX0Q5dThaYllUSHl4a3JHZTRXbkt2cXNsZl9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMtNTVhOTMwZmMwYzcx LzEvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABZCbAwQA To/8AwQBT4dmAwQBwiGWMA0GCSqGSIb3DQEBCwUAA4IBAQBARkUGcCr4hjJ+KZpb rezhgLuDIQgzWJavMOZbaCDPvbG3JFarPdRIgdILs768jkw1REY84VOKF80DVpXi Ul1oA/dw9h0VOau8O6vtNKZ0qqOTJpxlCIdDN1erTqnEk/3FHeT7IdA7Fk/ZZvbc MJByOAl+qIsQwbjYBvXFA4FSZHeh8ihyQoATcDnGZxK9j7r8XZmvVc4hqsEz3ohh yGtXOjRGPk3SaMnR3iOAAVfln6PXTYS8AfvxdAofK/gLnefZ5ipJ+HIPcyXh0Xta 10HVb/X8aPJhUc9G26xoM05fy7inqcWJ3nDKR4EoT5BUxHJ5VdpN2i/zZ01PAElK MeRF -----END CERTIFICATE-----Generated at Mon Dec 15 17:22:03 2025 by rpki-client