This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/7wqU_Dpg98miVffme3_om0dwgQk.roa File: 7wqU_Dpg98miVffme3_om0dwgQk.roa (raw, json) Hash identifier: /JBhUWDrPatMnU7sxVdssgCUi1cEWzrYMitqBHBDdcE= Subject key identifier: EF:0A:94:FC:3A:60:F7:C9:A2:55:F7:E6:7B:7F:E8:9B:47:70:81:09 Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10 Certificate serial: 019B5FBA64EEFD30793ED098DB37B160EDD8 Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/7wqU_Dpg98miVffme3_om0dwgQk.roa Signing time: Sat 27 Dec 2025 12:13:29 +0000 ROA not before: Sat 27 Dec 2025 12:13:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 5.144.155.0/24 maxlen: 24 78.143.252.0/24 maxlen: 24 78.143.253.0/24 maxlen: 24 79.135.102.0/23 maxlen: 24 194.33.150.0/24 maxlen: 24 194.33.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:ba:64:ee:fd:30:79:3e:d0:98:db:37:b1:60:ed:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10 Validity Not Before: Dec 27 12:13:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ef0a94fc3a60f7c9a255f7e67b7fe89b47708109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ca:61:95:df:9e:2e:ab:71:ba:d1:c8:e5:83: b6:67:6f:5b:b8:85:78:30:0d:86:56:d5:36:4c:de: 78:0d:8c:5a:25:97:f1:ba:7a:8c:b1:d0:94:91:da: b9:b2:ee:79:d4:d2:6b:47:1a:2c:4c:4d:a3:03:ff: af:d3:97:7c:d3:df:b4:60:d4:d1:54:23:35:1a:db: 19:47:b9:3b:56:54:32:42:b1:b7:cd:df:8f:72:ef: 9b:ba:b6:2f:28:0b:78:d8:0b:67:28:e2:e8:02:a3: 26:33:11:a8:6e:c4:6d:c2:33:2d:55:34:f4:49:dc: ed:63:02:8e:ec:27:f5:71:1d:63:a8:c4:77:4f:0d: 1d:4e:9c:e5:36:ae:d1:02:af:a9:ef:f1:0a:f6:ea: cb:af:bf:c0:94:24:27:cb:80:44:c1:1a:10:7e:57: 00:f3:8b:7c:dd:f7:64:1a:0a:2a:03:2e:5c:07:48: e7:b1:66:e5:5c:cf:2d:f1:64:9e:4e:b7:e9:08:fe: e7:77:31:d3:e7:06:d6:ab:b2:89:ee:6c:15:60:27: 86:c5:87:2e:27:3e:10:3f:e2:f1:b3:a5:e1:b6:75: 35:d1:22:0f:a0:5c:ad:62:68:c8:fe:dc:c8:89:a6: 82:2a:58:9c:55:a6:7e:9c:f0:ff:b8:8d:7c:32:f2: d4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:0A:94:FC:3A:60:F7:C9:A2:55:F7:E6:7B:7F:E8:9B:47:70:81:09 X509v3 Authority Key Identifier: keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/7wqU_Dpg98miVffme3_om0dwgQk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.144.155.0/24 78.143.252.0/23 79.135.102.0/23 194.33.150.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:f3:6f:eb:48:a4:3c:3a:ef:98:28:6f:4e:63:62:15:af:9a: 5d:87:52:c9:3c:31:0e:1d:34:31:a3:82:ce:cf:cb:d3:dc:1a: ca:13:81:e9:03:a3:0a:7d:b3:c5:b6:fd:01:d0:55:b3:ac:28: b2:e8:a8:fa:5e:56:2d:c1:29:0f:a0:a4:d3:9a:c7:6b:42:6c: 41:97:fd:a7:33:28:e6:cd:d9:76:50:1c:ad:16:c7:6c:38:6b: 63:5e:9d:0c:02:7c:9e:1c:7d:02:ac:a8:62:c6:f1:73:65:d8: e7:94:4b:28:e2:b4:27:a9:b5:77:c7:b8:ed:a5:ab:1d:c2:1e: 33:a1:7e:5e:74:38:b0:c0:48:6f:9d:55:29:89:4c:4d:58:f9: a3:44:a9:27:c9:34:a8:15:86:a2:d6:9e:4a:a5:fb:77:d3:ab: 39:48:24:79:e5:f3:fc:20:15:ec:35:d8:7e:3e:5a:29:cd:5f: 8f:d3:2f:0e:63:c9:5a:f2:d0:a7:d8:4d:b9:d9:be:6c:0f:95: 53:b9:77:fa:3b:eb:2d:e0:04:f1:73:7d:c2:2d:7a:ca:f5:3b: 78:bd:f3:31:da:a7:47:87:a4:a5:f5:21:21:66:ef:4d:07:53: 6d:be:db:a3:6e:b4:89:12:6e:9e:af:fc:0d:a7:50:27:bf:2b: 7c:bf:70:0d -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZtfumTu/TB5PtCY2zexYO3YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMmEwZmEyMDM4MzMzMmEzZjQxNGYwNTQ3NTNhMGI2MGIy NWJhMTAwHhcNMjUxMjI3MTIxMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjBhOTRmYzNhNjBmN2M5YTI1NWY3ZTY3YjdmZTg5YjQ3NzA4MTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucphld+eLqtxutHI5YO2Z29buIV4 MA2GVtU2TN54DYxaJZfxunqMsdCUkdq5su551NJrRxosTE2jA/+v05d809+0YNTR VCM1GtsZR7k7VlQyQrG3zd+Pcu+burYvKAt42AtnKOLoAqMmMxGobsRtwjMtVTT0 SdztYwKO7Cf1cR1jqMR3Tw0dTpzlNq7RAq+p7/EK9urLr7/AlCQny4BEwRoQflcA 84t83fdkGgoqAy5cB0jnsWblXM8t8WSeTrfpCP7ndzHT5wbWq7KJ7mwVYCeGxYcu Jz4QP+Lxs6XhtnU10SIPoFytYmjI/tzIiaaCKlicVaZ+nPD/uI18MvLUawIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFO8KlPw6YPfJolX35nt/6JtHcIEJMB8GA1UdIwQY MBaAFC8qD6IDgzMqP0FPBUdToLYLJboQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMt NTVhOTMwZmMwYzcxLzEvN3dxVV9EcGc5OG1pVmZmbWUzX29tMGR3Z1FrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMtNTVhOTMwZmMwYzcx LzEvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABZCbAwQB To/8AwQBT4dmAwQBwiGWMA0GCSqGSIb3DQEBCwUAA4IBAQAc82/rSKQ8Ou+YKG9O Y2IVr5pdh1LJPDEOHTQxo4LOz8vT3BrKE4HpA6MKfbPFtv0B0FWzrCiy6Kj6XlYt wSkPoKTTmsdrQmxBl/2nMyjmzdl2UBytFsdsOGtjXp0MAnyeHH0CrKhixvFzZdjn lEso4rQnqbV3x7jtpasdwh4zoX5edDiwwEhvnVUpiUxNWPmjRKknyTSoFYai1p5K pft306s5SCR55fP8IBXsNdh+PlopzV+P0y8OY8la8tCn2E252b5sD5VTuXf6O+st 4ATxc33CLXrK9Tt4vfMx2qdHh6Sl9SEhZu9NB1NtvtujbrSJEm6er/wNp1Anvyt8 v3AN -----END CERTIFICATE-----Generated at Tue Dec 30 21:05:23 2025 by rpki-client