This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/ly1aWzgKgTZvCsmq1YkFHrcGkZI.roa File: ly1aWzgKgTZvCsmq1YkFHrcGkZI.roa (raw, json) Hash identifier: SyZ0oId3wfD6C8xRuw68jMVlCYOnuZUcIXZOE28ldLA= Subject key identifier: 97:2D:5A:5B:38:0A:81:36:6F:0A:C9:AA:D5:89:05:1E:B7:06:91:92 Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019B2BC3C9EE97F330077600892657CF6120 Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/ly1aWzgKgTZvCsmq1YkFHrcGkZI.roa Signing time: Wed 17 Dec 2025 10:03:30 +0000 ROA not before: Wed 17 Dec 2025 10:03:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215224 IP address blocks: 81.22.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c3:c9:ee:97:f3:30:07:76:00:89:26:57:cf:61:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Dec 17 10:03:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=972d5a5b380a81366f0ac9aad589051eb7069192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5e:cc:5c:78:88:f9:54:43:c8:d0:a5:61:fc: 10:bc:08:44:9a:19:9b:80:2e:39:bb:96:ad:76:09: ff:72:34:64:b4:48:9c:70:c6:19:af:9d:d5:bc:c7: 5c:dd:9d:c6:2d:a7:26:02:0c:0c:c1:0b:05:bc:39: 57:fc:49:89:4a:2d:54:ef:38:a1:9a:5f:66:44:92: cf:da:f2:d1:cb:85:a3:a0:d5:e1:2c:1c:5d:e9:af: 4f:5d:b3:9c:f4:69:75:74:24:ab:10:82:ad:f6:54: de:da:6c:1f:0c:c3:6a:b8:22:58:b6:e1:6d:7a:c9: ae:a3:ae:f3:53:77:fb:3c:5d:5d:6f:ec:30:fa:be: 69:f4:23:96:31:09:53:58:1f:0d:41:64:5e:71:2d: d9:74:00:0a:ac:4f:ca:98:87:53:dd:e0:a3:df:a2: d0:16:44:4e:e5:c5:bd:4f:5e:88:fe:0c:b6:89:1d: 1f:60:78:eb:eb:cb:63:7c:61:9b:62:73:67:31:44: a9:21:28:09:5e:99:ca:f3:a6:dd:00:38:6a:14:82: 20:cc:38:ca:f9:39:6b:80:52:21:55:5d:13:20:26: e6:08:75:87:7b:d1:85:25:a4:fb:da:9e:fc:ba:d3: c4:7d:02:e8:44:6a:14:fa:ce:cc:e5:55:19:82:d9: 52:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:2D:5A:5B:38:0A:81:36:6F:0A:C9:AA:D5:89:05:1E:B7:06:91:92 X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/ly1aWzgKgTZvCsmq1YkFHrcGkZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.140.0/24 Signature Algorithm: sha256WithRSAEncryption 21:c7:11:ad:a6:ec:d6:93:76:94:e9:85:d7:76:d4:20:d8:79: 27:fa:9a:b1:4e:14:38:99:c3:d3:db:43:cc:c8:8f:e9:46:2c: 65:5b:1a:68:d4:5c:5a:c0:6d:c0:17:f1:d1:c2:18:38:70:2e: 1b:5d:2d:22:08:54:dd:38:43:02:99:59:fa:d1:b6:d9:63:57: 72:2b:b3:59:99:09:7a:e0:5d:46:be:61:00:22:0e:52:2a:7f: 1c:0b:ea:b5:31:28:bf:3c:5d:0a:a9:66:e6:66:42:5e:e0:71: d1:45:36:5f:a8:46:f1:fa:7e:f9:0e:00:72:3f:4a:b7:8e:24: f1:15:ae:35:3e:e5:07:5b:4f:d9:0b:ec:a5:20:99:2c:88:ff: ec:41:97:a4:53:72:9f:9b:d7:fa:bc:77:df:0b:52:8b:db:22: 2f:89:35:43:31:a2:26:90:65:87:b9:7b:53:64:c0:ae:09:5a: ee:24:21:7b:0e:21:5c:de:cb:98:87:a2:aa:a3:a3:8b:f2:32: c9:2f:34:01:e2:f9:d4:e1:6f:5b:73:a6:c8:90:b0:b2:16:df: a1:b1:5a:bf:0b:d6:db:6b:3a:7b:2a:3a:c7:33:0c:a1:44:8f: 02:58:6f:fe:8c:75:9e:d0:8a:c3:24:33:4f:b3:58:cd:cb:81: f2:8d:85:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsrw8nul/MwB3YAiSZXz2EgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjUxMjE3MTAwMzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzJkNWE1YjM4MGE4MTM2NmYwYWM5YWFkNTg5MDUxZWI3MDY5MTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4V7MXHiI+VRDyNClYfwQvAhEmhmb gC45u5atdgn/cjRktEiccMYZr53VvMdc3Z3GLacmAgwMwQsFvDlX/EmJSi1U7zih ml9mRJLP2vLRy4WjoNXhLBxd6a9PXbOc9Gl1dCSrEIKt9lTe2mwfDMNquCJYtuFt esmuo67zU3f7PF1db+ww+r5p9COWMQlTWB8NQWRecS3ZdAAKrE/KmIdT3eCj36LQ FkRO5cW9T16I/gy2iR0fYHjr68tjfGGbYnNnMUSpISgJXpnK86bdADhqFIIgzDjK +TlrgFIhVV0TICbmCHWHe9GFJaT72p78utPEfQLoRGoU+s7M5VUZgtlSdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJctWls4CoE2bwrJqtWJBR63BpGSMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvbHkxYVd6Z0tnVFp2Q3NtcTFZa0ZIcmNHa1pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURaMMA0G CSqGSIb3DQEBCwUAA4IBAQAhxxGtpuzWk3aU6YXXdtQg2Hkn+pqxThQ4mcPT20PM yI/pRixlWxpo1FxawG3AF/HRwhg4cC4bXS0iCFTdOEMCmVn60bbZY1dyK7NZmQl6 4F1GvmEAIg5SKn8cC+q1MSi/PF0KqWbmZkJe4HHRRTZfqEbx+n75DgByP0q3jiTx Fa41PuUHW0/ZC+ylIJksiP/sQZekU3Kfm9f6vHffC1KL2yIviTVDMaImkGWHuXtT ZMCuCVruJCF7DiFc3suYh6Kqo6OL8jLJLzQB4vnU4W9bc6bIkLCyFt+hsVq/C9bb azp7KjrHMwyhRI8CWG/+jHWe0IrDJDNPs1jNy4HyjYXz -----END CERTIFICATE-----Generated at Sat Dec 20 00:50:29 2025 by rpki-client