This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/yDpEKIiizClbtFz7oGPvOYtp264.roa File: yDpEKIiizClbtFz7oGPvOYtp264.roa (raw, json) Hash identifier: +4X0XmT1mUKMWdn/slNnCZnYtBjk9lBUVq8bJKFw5QI= Subject key identifier: C8:3A:44:28:88:A2:CC:29:5B:B4:5C:FB:A0:63:EF:39:8B:69:DB:AE Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10 Certificate serial: 019ACBE58A2F5C796CFF28E559D6A8D08703 Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/yDpEKIiizClbtFz7oGPvOYtp264.roa Signing time: Fri 28 Nov 2025 19:16:49 +0000 ROA not before: Fri 28 Nov 2025 19:16:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214143 IP address blocks: 5.144.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 07:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:e5:8a:2f:5c:79:6c:ff:28:e5:59:d6:a8:d0:87:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10 Validity Not Before: Nov 28 19:16:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c83a442888a2cc295bb45cfba063ef398b69dbae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:09:9a:40:6e:01:ec:49:76:06:ef:77:99:fc: 49:2c:d3:2d:20:72:51:0d:84:b4:81:5a:2a:0f:6f: b3:10:40:da:f3:d2:cb:13:7e:3e:9e:8c:cc:9e:c8: 3e:6e:bd:af:4d:4e:3e:f0:28:dd:01:ab:52:1e:4e: 98:15:11:27:e5:e4:94:53:46:3f:a0:4c:a5:37:b8: 42:ce:48:6f:14:9f:1f:39:64:5a:b3:38:12:72:e0: 34:a2:17:57:01:9c:c9:ac:05:e9:3c:b0:eb:dd:81: 52:2e:d6:ae:82:9b:bd:cc:93:e4:fe:0f:2a:a3:b4: bc:71:90:b3:12:21:74:27:af:c1:7f:dd:73:69:57: 79:1a:15:8e:b4:e4:b8:ce:0a:0b:d2:6e:bd:8b:5b: 5d:70:53:af:66:0e:0a:b5:3c:b7:c9:a3:cf:fa:c7: ad:5f:c2:06:7c:49:73:3b:3f:11:74:7e:e3:da:1b: 0c:0f:65:e5:38:54:06:2b:7a:25:90:6d:67:54:7a: fa:c1:4e:dc:0c:bc:73:6f:c6:06:1b:b2:8a:22:0a: 47:d2:4c:1c:94:15:76:a7:6f:11:cf:75:48:5a:fa: 48:86:c2:7a:47:38:67:71:37:75:3d:07:44:3f:78: 6f:a9:75:76:ea:66:5c:46:48:7a:70:ea:27:33:fa: 9b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3A:44:28:88:A2:CC:29:5B:B4:5C:FB:A0:63:EF:39:8B:69:DB:AE X509v3 Authority Key Identifier: keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/yDpEKIiizClbtFz7oGPvOYtp264.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.144.154.0/24 Signature Algorithm: sha256WithRSAEncryption 60:ca:e1:33:29:ff:3b:f8:8a:6e:1d:3e:c3:96:66:99:76:d8: 3f:7f:d2:03:04:6c:b9:36:20:a2:58:ed:7a:f6:59:98:d4:11: c5:dc:51:eb:8a:a6:89:5a:e0:63:52:6a:77:5d:2e:83:ef:41: e3:1d:dd:d4:6d:c5:af:24:db:e5:b8:3b:7b:5f:93:a3:15:74: 9b:fe:76:49:37:7a:e7:45:9f:c3:ef:e4:3f:6b:e0:59:1f:13: 0d:a5:d2:5f:c0:4b:20:01:48:ae:ae:18:a6:cf:bd:c0:02:9a: 6e:56:46:f1:13:8d:df:dc:ad:05:89:89:2f:ef:d5:57:32:ee: 01:67:91:03:2e:5f:66:76:42:0f:3c:6b:9d:ae:d9:fd:78:1e: 65:b5:f9:de:69:5c:20:75:1a:ce:60:33:b5:f1:29:b1:99:27: bf:c3:15:ae:17:c6:4f:f5:20:50:90:52:32:9b:f6:02:c3:ce: fb:14:37:41:d9:9e:b0:42:cc:33:fc:ff:26:b7:51:cd:58:61: 2d:65:8c:9b:5f:8e:46:db:1a:8d:86:5f:cb:57:04:a4:a6:f1: 1c:fb:77:7d:40:54:6f:d8:3b:db:c7:2f:f5:6f:0d:8b:b4:41: 4d:94:0d:ba:16:3a:3e:a5:cc:a1:34:62:73:ad:36:f7:7a:6f: 92:70:13:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrL5YovXHls/yjlWdao0IcDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMmEwZmEyMDM4MzMzMmEzZjQxNGYwNTQ3NTNhMGI2MGIy NWJhMTAwHhcNMjUxMTI4MTkxNjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODNhNDQyODg4YTJjYzI5NWJiNDVjZmJhMDYzZWYzOThiNjlkYmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgmaQG4B7El2Bu93mfxJLNMtIHJR DYS0gVoqD2+zEEDa89LLE34+nozMnsg+br2vTU4+8CjdAatSHk6YFREn5eSUU0Y/ oEylN7hCzkhvFJ8fOWRaszgScuA0ohdXAZzJrAXpPLDr3YFSLtaugpu9zJPk/g8q o7S8cZCzEiF0J6/Bf91zaVd5GhWOtOS4zgoL0m69i1tdcFOvZg4KtTy3yaPP+set X8IGfElzOz8RdH7j2hsMD2XlOFQGK3olkG1nVHr6wU7cDLxzb8YGG7KKIgpH0kwc lBV2p28Rz3VIWvpIhsJ6RzhncTd1PQdEP3hvqXV26mZcRkh6cOonM/qbUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMg6RCiIoswpW7Rc+6Bj7zmLaduuMB8GA1UdIwQY MBaAFC8qD6IDgzMqP0FPBUdToLYLJboQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMt NTVhOTMwZmMwYzcxLzEveURwRUtJaWl6Q2xidEZ6N29HUHZPWXRwMjY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMtNTVhOTMwZmMwYzcx LzEvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABZCaMA0G CSqGSIb3DQEBCwUAA4IBAQBgyuEzKf87+IpuHT7DlmaZdtg/f9IDBGy5NiCiWO16 9lmY1BHF3FHriqaJWuBjUmp3XS6D70HjHd3UbcWvJNvluDt7X5OjFXSb/nZJN3rn RZ/D7+Q/a+BZHxMNpdJfwEsgAUiurhimz73AAppuVkbxE43f3K0FiYkv79VXMu4B Z5EDLl9mdkIPPGudrtn9eB5ltfneaVwgdRrOYDO18SmxmSe/wxWuF8ZP9SBQkFIy m/YCw877FDdB2Z6wQswz/P8mt1HNWGEtZYybX45G2xqNhl/LVwSkpvEc+3d9QFRv 2Dvbxy/1bw2LtEFNlA26Fjo+pcyhNGJzrTb3em+ScBOm -----END CERTIFICATE-----Generated at Fri Dec 5 12:46:40 2025 by rpki-client