This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/7bFmSSOPw4SYHdqrU4QwoY_3y4E.roa File: 7bFmSSOPw4SYHdqrU4QwoY_3y4E.roa (raw, json) Hash identifier: WaymkJsbWWnlI/KAPGlEAI6MwsV+w8oHUjJETq+KEAM= Subject key identifier: ED:B1:66:49:23:8F:C3:84:98:1D:DA:AB:53:84:30:A1:8F:F7:CB:81 Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10 Certificate serial: 019B31DA0290004C70DF5718C75871D3D644 Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/7bFmSSOPw4SYHdqrU4QwoY_3y4E.roa Signing time: Thu 18 Dec 2025 14:25:29 +0000 ROA not before: Thu 18 Dec 2025 14:25:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48444 IP address blocks: 91.224.109.0/24 maxlen: 24 109.70.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:da:02:90:00:4c:70:df:57:18:c7:58:71:d3:d6:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10 Validity Not Before: Dec 18 14:25:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=edb16649238fc384981ddaab538430a18ff7cb81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fa:97:b5:e4:66:44:9c:8c:19:5a:cb:12:25: b3:7e:66:8b:ca:78:8c:06:34:13:8e:00:23:61:e7: c0:f2:bf:ee:b2:22:cf:f3:a1:2d:94:93:5d:a5:9a: b3:77:9d:e2:7f:3c:be:c2:30:2a:75:75:fc:3e:b5: a9:38:c1:22:d0:1d:73:35:f6:ec:92:f0:3d:d4:71: 35:6f:73:73:93:e1:bd:7e:6b:0c:84:19:51:f4:61: 7d:7f:1d:89:1a:e8:d4:9a:ce:db:f6:da:f0:4a:82: 2a:3f:39:a1:5c:4e:fb:e8:64:4e:05:54:7f:fb:8c: 05:af:46:eb:4a:b5:fb:3c:4a:0b:b2:3d:77:33:dc: f1:43:b3:bd:4f:21:eb:6b:29:37:12:f5:f8:b6:78: 9b:2d:2b:5f:0a:db:b7:29:69:c5:c3:66:30:29:18: f8:2a:62:05:3f:52:5c:91:d3:35:8f:f2:16:b5:6d: 72:32:26:3b:76:b2:b9:5c:9f:62:fc:90:c8:ae:ea: cc:1a:f5:22:4a:82:3a:1f:cb:3e:6c:12:34:84:a5: d0:8a:3c:b1:20:bf:56:2b:67:46:0b:fa:0b:13:de: f3:84:99:a9:c5:cf:0c:3c:a5:af:5c:ef:07:80:d6: 06:67:54:08:42:78:db:9b:59:85:55:cf:f5:49:25: c6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B1:66:49:23:8F:C3:84:98:1D:DA:AB:53:84:30:A1:8F:F7:CB:81 X509v3 Authority Key Identifier: keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/7bFmSSOPw4SYHdqrU4QwoY_3y4E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.109.0/24 109.70.72.0/24 Signature Algorithm: sha256WithRSAEncryption 24:b2:25:fc:22:19:e9:3c:81:f8:ca:c3:5f:73:65:52:92:74: 04:c9:ea:c4:3e:76:e6:4c:4d:d6:62:b2:30:7e:74:62:6a:c9: 66:00:ac:90:5f:71:bd:93:26:42:b3:5a:13:65:34:01:08:6b: 1d:99:15:43:00:29:b5:6f:89:cd:fa:d1:9d:c0:37:be:0f:22: a1:56:97:34:50:26:74:e6:f5:b2:a3:aa:9f:5e:a2:79:5a:76: 97:63:77:5f:88:e1:a4:7a:0f:93:62:5c:de:0b:5e:44:ef:7b: be:ce:b1:ef:0e:42:f7:3a:7c:81:ef:fa:46:79:b0:b5:f5:5c: fe:ee:4a:6d:7f:53:85:0c:a3:ea:5b:8d:ff:25:6a:0f:e5:fe: 64:82:4b:98:5a:ba:49:e8:bb:b3:23:12:59:9f:38:cc:21:cc: 39:80:6c:9e:9e:68:48:43:b6:d8:33:3a:6a:13:e2:39:38:c8: 95:47:4f:fd:72:0a:20:79:5a:aa:f2:82:d6:b9:fb:3e:f3:32: 8d:4c:04:29:7c:24:8f:d7:3c:e8:9f:8a:5e:2a:0a:85:16:99: 52:00:77:ba:76:b7:3f:7e:03:d8:91:4c:4f:cb:f8:b5:ee:f2: f0:d0:e8:2f:97:3d:54:c7:af:9a:54:bf:6f:29:83:36:2d:05: ea:ee:cf:9e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsx2gKQAExw31cYx1hx09ZEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMmEwZmEyMDM4MzMzMmEzZjQxNGYwNTQ3NTNhMGI2MGIy NWJhMTAwHhcNMjUxMjE4MTQyNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGIxNjY0OTIzOGZjMzg0OTgxZGRhYWI1Mzg0MzBhMThmZjdjYjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvqXteRmRJyMGVrLEiWzfmaLyniM BjQTjgAjYefA8r/usiLP86EtlJNdpZqzd53ifzy+wjAqdXX8PrWpOMEi0B1zNfbs kvA91HE1b3Nzk+G9fmsMhBlR9GF9fx2JGujUms7b9trwSoIqPzmhXE776GROBVR/ +4wFr0brSrX7PEoLsj13M9zxQ7O9TyHrayk3EvX4tnibLStfCtu3KWnFw2YwKRj4 KmIFP1JckdM1j/IWtW1yMiY7drK5XJ9i/JDIrurMGvUiSoI6H8s+bBI0hKXQijyx IL9WK2dGC/oLE97zhJmpxc8MPKWvXO8HgNYGZ1QIQnjbm1mFVc/1SSXG5wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFO2xZkkjj8OEmB3aq1OEMKGP98uBMB8GA1UdIwQY MBaAFC8qD6IDgzMqP0FPBUdToLYLJboQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMt NTVhOTMwZmMwYzcxLzEvN2JGbVNTT1B3NFNZSGRxclU0UXdvWV8zeTRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMtNTVhOTMwZmMwYzcx LzEvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+BtAwQA bUZIMA0GCSqGSIb3DQEBCwUAA4IBAQAksiX8IhnpPIH4ysNfc2VSknQEyerEPnbm TE3WYrIwfnRiaslmAKyQX3G9kyZCs1oTZTQBCGsdmRVDACm1b4nN+tGdwDe+DyKh Vpc0UCZ05vWyo6qfXqJ5WnaXY3dfiOGkeg+TYlzeC15E73u+zrHvDkL3OnyB7/pG ebC19Vz+7kptf1OFDKPqW43/JWoP5f5kgkuYWrpJ6LuzIxJZnzjMIcw5gGyenmhI Q7bYMzpqE+I5OMiVR0/9cgogeVqq8oLWufs+8zKNTAQpfCSP1zzon4peKgqFFplS AHe6drc/fgPYkUxPy/i17vLw0Ogvlz1Ux6+aVL9vKYM2LQXq7s+e -----END CERTIFICATE-----Generated at Fri Dec 19 21:47:45 2025 by rpki-client