This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/oLV5SKfY-zjLqIyOW6zU-bz_SA4.roa File: oLV5SKfY-zjLqIyOW6zU-bz_SA4.roa (raw, json) Hash identifier: w/7dM9IZeNCiZ2By+1jxyO/EjmzKRQDY0Hhm0lNI5M4= Subject key identifier: A0:B5:79:48:A7:D8:FB:38:CB:A8:8C:8E:5B:AC:D4:F9:BC:FF:48:0E Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10 Certificate serial: 019B78A264A8A776D2E566DC3F5233EF6BA2 Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/oLV5SKfY-zjLqIyOW6zU-bz_SA4.roa Signing time: Thu 01 Jan 2026 08:17:47 +0000 ROA not before: Thu 01 Jan 2026 08:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48444 IP address blocks: 91.224.109.0/24 maxlen: 24 109.70.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:64:a8:a7:76:d2:e5:66:dc:3f:52:33:ef:6b:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10 Validity Not Before: Jan 1 08:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0b57948a7d8fb38cba88c8e5bacd4f9bcff480e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5f:36:21:34:99:6f:40:65:42:27:01:dc:51: 46:de:1a:47:2f:fa:36:f1:9f:e2:f1:ff:49:01:63: c9:8e:13:21:45:65:c2:a3:e1:b3:4f:50:25:a5:16: 32:ae:b6:2b:ac:d7:6f:92:95:31:a9:a2:44:1c:74: 88:2d:07:da:c6:9f:74:15:d8:89:27:da:4f:3c:7f: af:2c:e8:cf:db:69:44:9a:cc:56:50:bb:1a:ac:35: ea:3c:99:82:0e:7a:f3:00:f6:ce:6a:6b:de:92:28: e0:33:1e:c6:43:dd:49:67:84:b9:68:fb:10:e6:b4: 9c:62:48:2c:fe:12:89:6d:a5:89:cb:6f:54:4c:4f: e2:f0:73:2d:99:90:7d:32:b9:49:d4:9c:65:f4:8a: c0:5b:02:21:ff:c0:36:bb:d4:02:20:77:f2:c9:4b: b3:9f:83:d0:d5:37:f1:90:89:04:d9:c9:41:02:ae: 1e:59:c4:1a:88:31:8f:71:59:e5:6b:49:c5:89:e5: fe:3e:d4:94:dc:d9:24:68:e3:91:14:25:54:eb:26: 23:df:3f:bb:af:3a:c7:67:6c:af:63:2f:6f:e0:63: 5a:dd:4b:91:26:2b:f5:70:09:3e:50:b4:19:4c:bd: 85:9f:4d:6d:de:20:ec:82:f6:13:bf:f6:79:4c:19: 13:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B5:79:48:A7:D8:FB:38:CB:A8:8C:8E:5B:AC:D4:F9:BC:FF:48:0E X509v3 Authority Key Identifier: keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/oLV5SKfY-zjLqIyOW6zU-bz_SA4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.109.0/24 109.70.72.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:8c:60:a7:ef:ef:d3:b8:06:6e:dd:b2:65:be:fc:90:f3:49: 37:eb:0b:33:9e:b5:f8:06:0a:d9:ea:80:04:2b:6b:c2:47:b5: ec:39:b7:45:a3:16:c7:f4:2a:97:9f:40:11:ac:a8:1f:eb:2a: e9:71:48:e0:65:bc:a6:91:c4:a7:c8:f7:09:d1:06:83:e7:6c: 84:e3:cb:73:95:f0:af:89:8b:b2:9e:b8:e3:4d:1c:44:59:e8: 25:bc:a1:6e:0e:b9:ac:28:fe:29:75:1e:18:8f:63:da:7c:2b: d9:17:d7:71:2d:35:b9:87:73:42:79:39:a9:28:40:fd:a6:3a: aa:05:d1:9e:2d:98:90:ae:2c:99:84:49:81:09:56:6f:91:73: 79:6c:da:58:bf:3f:02:47:79:e0:bb:fc:0c:a3:81:bf:0a:51: c5:ed:fe:e5:59:54:bb:f6:e0:00:b9:84:79:78:88:0e:d5:00: 80:51:bb:72:72:52:be:82:7c:9a:43:f6:f4:32:e8:3e:55:a3: 74:f0:14:fb:97:e2:e5:19:46:06:57:07:2a:12:26:27:60:cd: a4:ef:80:a2:dd:05:c6:d2:42:a6:48:92:74:a3:95:d5:0a:93: 40:ac:10:16:de:8d:13:c6:60:0a:fe:d0:c9:be:6e:95:55:ec: cb:ee:85:6b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4omSop3bS5WbcP1Iz72uiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMmEwZmEyMDM4MzMzMmEzZjQxNGYwNTQ3NTNhMGI2MGIy NWJhMTAwHhcNMjYwMTAxMDgxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGI1Nzk0OGE3ZDhmYjM4Y2JhODhjOGU1YmFjZDRmOWJjZmY0ODBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV82ITSZb0BlQicB3FFG3hpHL/o2 8Z/i8f9JAWPJjhMhRWXCo+GzT1AlpRYyrrYrrNdvkpUxqaJEHHSILQfaxp90FdiJ J9pPPH+vLOjP22lEmsxWULsarDXqPJmCDnrzAPbOamvekijgMx7GQ91JZ4S5aPsQ 5rScYkgs/hKJbaWJy29UTE/i8HMtmZB9MrlJ1Jxl9IrAWwIh/8A2u9QCIHfyyUuz n4PQ1TfxkIkE2clBAq4eWcQaiDGPcVnla0nFieX+PtSU3NkkaOORFCVU6yYj3z+7 rzrHZ2yvYy9v4GNa3UuRJiv1cAk+ULQZTL2Fn01t3iDsgvYTv/Z5TBkTYQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKC1eUin2Ps4y6iMjlus1Pm8/0gOMB8GA1UdIwQY MBaAFC8qD6IDgzMqP0FPBUdToLYLJboQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMt NTVhOTMwZmMwYzcxLzEvb0xWNVNLZlktempMcUl5T1c2elUtYnpfU0E0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMtNTVhOTMwZmMwYzcx LzEvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+BtAwQA bUZIMA0GCSqGSIb3DQEBCwUAA4IBAQAtjGCn7+/TuAZu3bJlvvyQ80k36wsznrX4 BgrZ6oAEK2vCR7XsObdFoxbH9CqXn0ARrKgf6yrpcUjgZbymkcSnyPcJ0QaD52yE 48tzlfCviYuynrjjTRxEWeglvKFuDrmsKP4pdR4Yj2PafCvZF9dxLTW5h3NCeTmp KED9pjqqBdGeLZiQriyZhEmBCVZvkXN5bNpYvz8CR3ngu/wMo4G/ClHF7f7lWVS7 9uAAuYR5eIgO1QCAUbtyclK+gnyaQ/b0Mug+VaN08BT7l+LlGUYGVwcqEiYnYM2k 74Ci3QXG0kKmSJJ0o5XVCpNArBAW3o0TxmAK/tDJvm6VVezL7oVr -----END CERTIFICATE-----Generated at Sun Jan 25 12:05:57 2026 by rpki-client