This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/bXbBf7KxxWqh2jqlvKbNflSebNs.roa File: bXbBf7KxxWqh2jqlvKbNflSebNs.roa (raw, json) Hash identifier: 7i4DMyJwvupDDG9jZW4NbSOx3n1uNqTN7nHNHBQMmhs= Subject key identifier: 6D:76:C1:7F:B2:B1:C5:6A:A1:DA:3A:A5:BC:A6:CD:7E:54:9E:6C:DB Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10 Certificate serial: 019ACBE588B795B1438523945E90497C164C Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/bXbBf7KxxWqh2jqlvKbNflSebNs.roa Signing time: Fri 28 Nov 2025 19:16:48 +0000 ROA not before: Fri 28 Nov 2025 19:16:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42831 IP address blocks: 91.224.108.0/24 maxlen: 24 194.33.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 07:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:e5:88:b7:95:b1:43:85:23:94:5e:90:49:7c:16:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10 Validity Not Before: Nov 28 19:16:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6d76c17fb2b1c56aa1da3aa5bca6cd7e549e6cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:38:32:8b:04:fc:9d:64:f5:9a:84:d9:f1:2e: b6:34:a7:b3:0d:d5:86:d9:93:77:08:53:65:ac:86: c1:c7:ab:80:5f:3c:4b:63:aa:56:e2:33:e9:30:97: 17:9e:3f:a9:aa:ae:1a:31:73:35:59:e7:a1:93:cf: cb:e2:d4:bf:83:b8:13:e1:5b:86:10:c9:9c:0c:b7: 44:49:a6:27:0f:d8:e4:74:49:50:d6:42:dc:d1:e3: 6d:82:7f:a3:fb:c6:33:cc:d7:85:6e:e4:74:fc:97: d2:1b:20:e7:d8:8b:05:f0:81:6f:9d:20:ff:b3:d8: f5:6e:c1:2a:41:ea:c1:0b:9a:0a:f2:09:02:7a:21: 0a:45:67:55:09:4d:00:9e:d6:a4:8b:6d:9b:0a:66: 71:10:3c:de:d2:01:09:34:8b:d1:a0:41:6a:53:78: 8d:60:49:11:ba:86:17:22:d0:b5:c2:1d:82:ae:2a: d8:2b:58:cf:c7:3e:f3:21:28:68:3b:2f:5f:98:03: d6:84:d4:bd:d1:54:c8:cc:2c:5c:1d:d3:02:0b:d0: 78:7b:5f:cc:cc:84:c2:23:23:42:a2:2d:82:4d:6a: 62:05:76:ce:d8:2f:4b:19:9f:25:01:1e:c1:e5:8d: c2:ef:af:e4:30:71:6f:ed:6b:c7:81:bf:e3:23:63: 05:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:76:C1:7F:B2:B1:C5:6A:A1:DA:3A:A5:BC:A6:CD:7E:54:9E:6C:DB X509v3 Authority Key Identifier: keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/bXbBf7KxxWqh2jqlvKbNflSebNs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.108.0/24 194.33.58.0/24 Signature Algorithm: sha256WithRSAEncryption 27:0f:71:b6:63:3c:bc:72:b9:20:5c:ee:48:85:70:12:cf:3b: 0c:80:c0:69:a7:34:5c:e9:ee:d1:62:00:e8:fb:72:9c:11:d7: 6d:b6:b8:a6:16:d8:4e:b4:fa:60:76:4b:bc:66:3a:e4:c2:e4: 10:3a:b9:9d:bf:ba:4b:fa:22:4f:26:28:9f:e8:57:4f:13:44: 2a:d4:55:ec:a4:d7:83:ee:d1:35:13:54:77:68:23:33:7f:0e: 30:cb:fb:74:c8:dd:fc:ec:0d:ed:98:93:3d:2c:41:a6:56:21: 98:46:3a:36:43:d3:98:70:ab:05:11:5b:a0:97:2f:a4:44:60: 51:7b:0d:1f:af:2d:51:68:a7:38:1f:72:7f:32:95:48:16:5c: db:e1:a9:31:4d:9a:34:61:4c:ef:e9:d5:42:ad:fa:e0:69:37: 2e:f3:5b:66:64:74:cc:ba:29:06:07:7e:5f:c2:f0:d4:95:0c: 98:79:86:a2:f9:34:d3:aa:d3:c2:25:d1:05:33:b8:da:51:71: 1c:fa:6f:65:48:62:e1:bf:b1:4e:f2:04:86:30:0b:98:92:5c: ec:80:4a:c3:bc:21:ba:2c:c5:b7:34:17:8e:7d:8e:4b:1c:7d: 1d:46:b5:53:f1:e5:7d:7a:c5:95:1b:a5:6e:1b:89:9f:74:c4: a4:18:67:fc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrL5Yi3lbFDhSOUXpBJfBZMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMmEwZmEyMDM4MzMzMmEzZjQxNGYwNTQ3NTNhMGI2MGIy NWJhMTAwHhcNMjUxMTI4MTkxNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDc2YzE3ZmIyYjFjNTZhYTFkYTNhYTViY2E2Y2Q3ZTU0OWU2Y2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jgyiwT8nWT1moTZ8S62NKezDdWG 2ZN3CFNlrIbBx6uAXzxLY6pW4jPpMJcXnj+pqq4aMXM1Weehk8/L4tS/g7gT4VuG EMmcDLdESaYnD9jkdElQ1kLc0eNtgn+j+8YzzNeFbuR0/JfSGyDn2IsF8IFvnSD/ s9j1bsEqQerBC5oK8gkCeiEKRWdVCU0Antaki22bCmZxEDze0gEJNIvRoEFqU3iN YEkRuoYXItC1wh2CrirYK1jPxz7zIShoOy9fmAPWhNS90VTIzCxcHdMCC9B4e1/M zITCIyNCoi2CTWpiBXbO2C9LGZ8lAR7B5Y3C76/kMHFv7WvHgb/jI2MFeQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFG12wX+yscVqodo6pbymzX5UnmzbMB8GA1UdIwQY MBaAFC8qD6IDgzMqP0FPBUdToLYLJboQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMt NTVhOTMwZmMwYzcxLzEvYlhiQmY3S3h4V3FoMmpxbHZLYk5mbFNlYk5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMtNTVhOTMwZmMwYzcx LzEvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+BsAwQA wiE6MA0GCSqGSIb3DQEBCwUAA4IBAQAnD3G2Yzy8crkgXO5IhXASzzsMgMBppzRc 6e7RYgDo+3KcEddttrimFthOtPpgdku8ZjrkwuQQOrmdv7pL+iJPJiif6FdPE0Qq 1FXspNeD7tE1E1R3aCMzfw4wy/t0yN387A3tmJM9LEGmViGYRjo2Q9OYcKsFEVug ly+kRGBRew0fry1RaKc4H3J/MpVIFlzb4akxTZo0YUzv6dVCrfrgaTcu81tmZHTM uikGB35fwvDUlQyYeYai+TTTqtPCJdEFM7jaUXEc+m9lSGLhv7FO8gSGMAuYklzs gErDvCG6LMW3NBeOfY5LHH0dRrVT8eV9esWVG6VuG4mfdMSkGGf8 -----END CERTIFICATE-----Generated at Fri Dec 5 16:14:43 2025 by rpki-client