This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/LYO4EVL97axXFG4_1JIRGo_Gcr0.roa File: LYO4EVL97axXFG4_1JIRGo_Gcr0.roa (raw, json) Hash identifier: M8NjdLPy4NRB155rg30Ob5fe1Garsp+Fkc/ASUzAL08= Subject key identifier: 2D:83:B8:11:52:FD:ED:AC:57:14:6E:3F:D4:92:11:1A:8F:C6:72:BD Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019B76EB0DD5477B3EAD0CC98A313F4C5399 Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/LYO4EVL97axXFG4_1JIRGo_Gcr0.roa Signing time: Thu 01 Jan 2026 00:17:54 +0000 ROA not before: Thu 01 Jan 2026 00:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198479 IP address blocks: 91.235.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:0d:d5:47:7b:3e:ad:0c:c9:8a:31:3f:4c:53:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Jan 1 00:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d83b81152fdedac57146e3fd492111a8fc672bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ea:fc:30:29:1b:c7:41:7b:3d:11:87:b7:57: 6b:d5:8e:fa:1b:96:f9:85:87:c1:e5:24:c2:e4:7e: 4d:88:6d:59:6c:a9:be:ae:72:a8:f2:43:0b:ab:93: 7d:d0:de:dd:7b:fb:93:e7:93:4f:89:93:40:72:9b: 7d:10:41:06:65:bb:ea:5c:87:b8:dc:b7:00:38:ba: 89:f2:ac:3e:b8:55:cf:74:ec:55:0e:0b:5e:c8:5b: e3:e3:4e:68:96:69:63:bb:5c:65:4a:13:1c:50:39: d3:2a:67:f9:11:9f:77:e9:b2:d5:5b:bc:2b:39:a6: 47:8c:a5:b9:ab:e9:d8:92:91:e0:33:11:f0:e6:4b: 89:52:59:9a:63:5b:a6:90:0e:5e:f1:39:48:45:1c: 97:37:c8:50:ab:79:76:84:f8:a2:cf:a7:27:8b:a4: 74:b4:36:a0:d7:fb:91:13:eb:31:4f:fd:c8:9b:58: 17:ab:28:a2:5e:0e:44:9d:cc:3b:b0:72:b9:5f:40: e7:a2:e2:c1:de:0c:30:e8:3f:fe:52:29:c0:16:ca: 9f:6e:ce:e2:89:37:c9:bb:19:f4:23:82:81:0b:29: 6c:83:ec:9c:bf:0c:78:98:35:79:4d:50:9a:b6:27: c4:e7:4f:68:e9:bf:9a:80:3e:a7:56:22:16:ab:c8: ce:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:83:B8:11:52:FD:ED:AC:57:14:6E:3F:D4:92:11:1A:8F:C6:72:BD X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/LYO4EVL97axXFG4_1JIRGo_Gcr0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.48.0/22 Signature Algorithm: sha256WithRSAEncryption a0:81:38:dd:39:6f:b4:62:c0:56:cd:36:c6:ea:5f:c7:c3:78: 04:d5:7d:7c:d4:a9:65:4b:ed:8a:1f:19:90:6f:00:b2:a6:df: a1:94:77:89:09:2b:5a:18:09:2b:9f:89:ee:98:67:16:8d:83: 8f:68:9c:98:1b:6c:94:25:f5:45:9b:2f:6f:e0:c4:83:e3:01: 0e:0b:38:ee:4e:ee:89:0b:f9:32:90:5d:9a:8f:58:70:1a:37: 56:77:35:58:61:70:8e:b8:f3:b2:7e:15:e8:e8:84:e5:a0:38: 05:b6:be:50:db:ef:2e:13:05:c1:c6:29:fa:e9:27:d7:bb:af: 39:75:1a:18:c2:c4:99:a5:f6:96:ec:b5:60:81:0e:d0:62:0b: df:a2:89:a8:ff:b3:16:85:b1:8f:35:c7:fd:ad:72:41:c9:41: 4f:bf:8b:af:9c:ac:68:52:2c:b3:26:f8:17:60:5a:8f:0b:13: af:40:4f:69:78:c0:15:73:9b:18:1f:63:ff:da:14:cd:0d:df: 4d:9d:57:71:61:21:90:de:ae:9d:5a:29:6d:36:1c:e0:b1:02: 14:45:14:d9:26:6f:aa:ba:08:af:a6:bd:7b:c4:b6:95:38:1d: dc:89:0c:52:51:0b:de:99:c7:88:81:e2:12:64:67:55:7d:40: 50:52:cf:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26w3VR3s+rQzJijE/TFOZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwMTAxMDAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDgzYjgxMTUyZmRlZGFjNTcxNDZlM2ZkNDkyMTExYThmYzY3MmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+r8MCkbx0F7PRGHt1dr1Y76G5b5 hYfB5STC5H5NiG1ZbKm+rnKo8kMLq5N90N7de/uT55NPiZNAcpt9EEEGZbvqXIe4 3LcAOLqJ8qw+uFXPdOxVDgteyFvj405olmlju1xlShMcUDnTKmf5EZ936bLVW7wr OaZHjKW5q+nYkpHgMxHw5kuJUlmaY1umkA5e8TlIRRyXN8hQq3l2hPiiz6cni6R0 tDag1/uRE+sxT/3Im1gXqyiiXg5Encw7sHK5X0DnouLB3gww6D/+UinAFsqfbs7i iTfJuxn0I4KBCylsg+ycvwx4mDV5TVCatifE509o6b+agD6nViIWq8jO3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC2DuBFS/e2sVxRuP9SSERqPxnK9MB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvTFlPNEVWTDk3YXhYRkc0XzFKSVJHb19HY3IwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+swMA0G CSqGSIb3DQEBCwUAA4IBAQCggTjdOW+0YsBWzTbG6l/Hw3gE1X181KllS+2KHxmQ bwCypt+hlHeJCStaGAkrn4numGcWjYOPaJyYG2yUJfVFmy9v4MSD4wEOCzjuTu6J C/kykF2aj1hwGjdWdzVYYXCOuPOyfhXo6ITloDgFtr5Q2+8uEwXBxin66SfXu685 dRoYwsSZpfaW7LVggQ7QYgvfoomo/7MWhbGPNcf9rXJByUFPv4uvnKxoUiyzJvgX YFqPCxOvQE9peMAVc5sYH2P/2hTNDd9NnVdxYSGQ3q6dWiltNhzgsQIURRTZJm+q ugivpr17xLaVOB3ciQxSUQvemceIgeISZGdVfUBQUs8D -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:58 2026 by rpki-client