This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/uNvbYvHrpqJuxIhcHt-1BFK0pMI.roa File: uNvbYvHrpqJuxIhcHt-1BFK0pMI.roa (raw, json) Hash identifier: kpoYfsRRIuyuMkiibmfxSwK/PKM0OFnIj7VaHcrBfm4= Subject key identifier: B8:DB:DB:62:F1:EB:A6:A2:6E:C4:88:5C:1E:DF:B5:04:52:B4:A4:C2 Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10 Certificate serial: 019ACBE58707CAC11F43F00F16A16374F994 Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/uNvbYvHrpqJuxIhcHt-1BFK0pMI.roa Signing time: Fri 28 Nov 2025 19:16:48 +0000 ROA not before: Fri 28 Nov 2025 19:16:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21472 IP address blocks: 78.143.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:e5:87:07:ca:c1:1f:43:f0:0f:16:a1:63:74:f9:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10 Validity Not Before: Nov 28 19:16:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b8dbdb62f1eba6a26ec4885c1edfb50452b4a4c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e7:7b:92:77:bd:c2:a6:71:6f:1a:92:3f:1d: 41:a1:ce:a8:ec:54:2d:19:f5:e9:b2:fc:6f:c4:b4: 2a:6a:e8:25:04:8d:3f:78:dc:b0:9f:6d:9e:d5:d3: 9c:45:c4:21:ee:a9:fa:bb:83:d2:b4:74:82:36:1b: 27:ac:3c:f2:a1:9c:f8:0f:4c:98:41:9b:b1:b8:0e: 38:73:d7:88:51:96:3d:8a:53:a2:c4:8c:78:23:a2: eb:71:6f:18:47:c3:2e:d2:0d:fc:0f:d9:73:d6:f0: f9:bd:98:c2:70:99:38:84:7f:5b:f1:9e:2d:60:89: c5:53:1c:04:7a:1e:bd:9f:45:a6:b9:1b:8f:66:95: dc:c1:8e:1d:b6:10:e5:07:ef:81:c6:36:46:cb:9e: 8a:62:bc:d2:c8:f8:6f:de:39:dc:3f:26:ba:e1:94: 1a:97:26:1d:67:12:76:eb:eb:19:7a:2e:10:ed:ff: 10:1a:99:75:83:37:90:27:14:9a:5e:5f:82:7e:d7: 5b:9f:1a:ad:d4:05:86:08:9f:c4:ce:54:c7:e2:c6: 96:07:b8:4a:ca:ee:9a:11:ef:18:dd:82:9e:66:a5: 22:c9:ed:fb:d9:75:06:c3:51:59:88:2e:aa:e3:df: 9c:67:8e:92:8d:0a:a1:7a:43:46:b6:49:a0:6d:88: 2f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DB:DB:62:F1:EB:A6:A2:6E:C4:88:5C:1E:DF:B5:04:52:B4:A4:C2 X509v3 Authority Key Identifier: keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/uNvbYvHrpqJuxIhcHt-1BFK0pMI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.143.255.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:bd:2f:24:79:2a:25:f6:fd:09:fb:c1:8b:6f:5d:c8:a6:dc: b7:99:9c:73:84:d2:d9:22:18:c9:90:d2:ab:32:12:a1:f1:c8: f5:5e:16:92:b3:cd:e1:dc:68:26:b6:bb:ff:ef:38:51:e0:9e: 7e:74:c5:b9:47:b1:7c:54:98:3a:74:04:a8:ed:89:6c:ee:4c: 5e:70:48:fc:28:9a:44:cc:11:94:47:0f:73:74:0a:a4:4b:96: 6a:2c:e0:ff:df:e0:a1:64:46:81:2f:13:16:f0:82:ef:72:8e: ee:28:1c:25:58:5c:02:bc:65:2f:ec:d7:e6:18:68:6b:85:c1: c9:eb:e2:fd:c2:d7:42:f0:99:72:79:c8:db:01:f5:e9:38:d5: 6d:6a:82:9d:a5:3f:28:97:4a:4d:16:fa:89:7b:1a:13:56:4b: fe:db:e1:f1:5e:60:47:ef:a4:be:4d:8b:d7:37:6a:da:4e:c1: ee:ba:ce:1b:46:ef:79:6b:54:48:a2:b4:8f:82:be:e3:ee:21: a9:ca:77:5d:aa:83:cc:51:47:63:e1:34:84:0f:33:24:23:ba: 6e:fa:d1:64:76:35:22:e7:4f:1d:68:1d:ef:b4:d5:9b:de:44: 5d:8a:22:2d:ef:37:fa:02:3a:f8:45:79:ad:a4:c3:8c:6d:ca: 29:25:d6:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrL5YcHysEfQ/APFqFjdPmUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMmEwZmEyMDM4MzMzMmEzZjQxNGYwNTQ3NTNhMGI2MGIy NWJhMTAwHhcNMjUxMTI4MTkxNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGRiZGI2MmYxZWJhNmEyNmVjNDg4NWMxZWRmYjUwNDUyYjRhNGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOd7kne9wqZxbxqSPx1Boc6o7FQt GfXpsvxvxLQqauglBI0/eNywn22e1dOcRcQh7qn6u4PStHSCNhsnrDzyoZz4D0yY QZuxuA44c9eIUZY9ilOixIx4I6LrcW8YR8Mu0g38D9lz1vD5vZjCcJk4hH9b8Z4t YInFUxwEeh69n0WmuRuPZpXcwY4dthDlB++BxjZGy56KYrzSyPhv3jncPya64ZQa lyYdZxJ26+sZei4Q7f8QGpl1gzeQJxSaXl+Cftdbnxqt1AWGCJ/EzlTH4saWB7hK yu6aEe8Y3YKeZqUiye372XUGw1FZiC6q49+cZ46SjQqhekNGtkmgbYgvlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLjb22Lx66aibsSIXB7ftQRStKTCMB8GA1UdIwQY MBaAFC8qD6IDgzMqP0FPBUdToLYLJboQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMt NTVhOTMwZmMwYzcxLzEvdU52Yll2SHJwcUp1eEloY0h0LTFCRkswcE1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMtNTVhOTMwZmMwYzcx LzEvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATo//MA0G CSqGSIb3DQEBCwUAA4IBAQBvvS8keSol9v0J+8GLb13Ipty3mZxzhNLZIhjJkNKr MhKh8cj1XhaSs83h3Ggmtrv/7zhR4J5+dMW5R7F8VJg6dASo7Yls7kxecEj8KJpE zBGURw9zdAqkS5ZqLOD/3+ChZEaBLxMW8ILvco7uKBwlWFwCvGUv7NfmGGhrhcHJ 6+L9wtdC8JlyecjbAfXpONVtaoKdpT8ol0pNFvqJexoTVkv+2+HxXmBH76S+TYvX N2raTsHuus4bRu95a1RIorSPgr7j7iGpynddqoPMUUdj4TSEDzMkI7pu+tFkdjUi 508daB3vtNWb3kRdiiIt7zf6Ajr4RXmtpMOMbcopJdbh -----END CERTIFICATE-----Generated at Fri Dec 12 01:22:52 2025 by rpki-client