This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/LIzgNZF9YwiRTF0OOF5WKM6j064.roa File: LIzgNZF9YwiRTF0OOF5WKM6j064.roa (raw, json) Hash identifier: JJAK8vgtLM6hW1zLu2rTvOhnqPa4t2ji3yabcmc2iIo= Subject key identifier: 2C:8C:E0:35:91:7D:63:08:91:4C:5D:0E:38:5E:56:28:CE:A3:D3:AE Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B35A4FC7EB2E32B822A533337E34F46 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/LIzgNZF9YwiRTF0OOF5WKM6j064.roa Signing time: Thu 01 Jan 2026 20:17:51 +0000 ROA not before: Thu 01 Jan 2026 20:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216462 IP address blocks: 80.97.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:a4:fc:7e:b2:e3:2b:82:2a:53:33:37:e3:4f:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c8ce035917d6308914c5d0e385e5628cea3d3ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:82:5f:75:8b:83:2c:00:e3:d6:4e:5b:20:bc: f0:86:3a:f3:d0:bb:58:02:99:7b:3c:8d:78:5b:a3: 34:84:77:c2:0f:9c:ee:7b:0a:c7:d3:28:7c:64:52: a4:9e:8c:b6:8e:83:bb:7e:3b:4a:96:70:e8:1a:61: ef:ab:9f:dd:de:1f:6d:4e:fe:10:1d:6f:d5:84:2a: aa:c9:95:d9:28:c8:1a:39:79:5b:42:ac:8c:b7:75: 3f:c3:1a:96:8e:1a:07:48:35:e4:34:9f:7c:a8:88: d7:9d:0a:b5:32:d8:71:d9:39:5f:33:85:e7:23:cb: e7:29:a1:69:a6:8c:b9:4c:d4:21:9b:3c:6d:f6:d4: 36:5f:e2:6d:e1:fe:78:95:6b:be:5e:31:bc:38:cc: 47:0d:a6:28:b7:de:e6:26:a6:d4:6d:af:c7:13:eb: f2:56:ea:b2:90:a6:8f:6e:e1:81:76:dc:3a:ef:b2: 9c:07:ec:1d:a0:f4:1d:2c:a8:91:a3:cb:9a:3e:fe: 95:81:eb:69:bb:1e:e3:c4:dd:d5:4f:b2:e6:0a:85: eb:8c:01:f1:38:71:45:82:f9:2c:4b:4e:19:b8:65: 37:1f:e9:08:21:c7:eb:dd:f2:8d:44:8e:b6:c2:53: 3c:cd:52:22:8f:9f:5a:91:54:b6:ac:dc:4a:2b:1c: a0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8C:E0:35:91:7D:63:08:91:4C:5D:0E:38:5E:56:28:CE:A3:D3:AE X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/LIzgNZF9YwiRTF0OOF5WKM6j064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.97.146.0/24 Signature Algorithm: sha256WithRSAEncryption 88:4a:e3:6d:31:a0:e4:cc:e7:1b:ed:39:ec:e4:5a:d5:e8:47: 49:55:87:65:82:51:c4:90:f4:b4:85:f1:90:53:21:b7:08:3b: 06:c6:d4:37:74:2d:65:23:73:a8:b8:53:6d:c6:45:63:21:b1: ac:47:fc:db:0f:ab:e7:d4:60:d7:f3:fb:02:00:cd:e9:28:23: 64:cf:aa:2e:ec:98:5a:1e:24:5f:97:ad:d7:40:81:7c:b0:85: 12:57:d9:51:f2:ac:ac:48:ed:6e:9d:49:aa:9a:45:b7:53:94: e0:32:a9:fd:f7:29:b7:fc:27:91:e4:da:20:89:f2:3a:98:2f: de:cb:d0:4f:97:d4:70:3c:ff:12:ab:5c:4e:2f:51:7d:3f:c4: 18:5b:8e:d9:ad:20:b0:72:08:5a:e3:54:8e:dd:90:e2:50:a5: e6:26:0d:58:df:7f:82:74:73:d2:96:de:f8:e2:d8:63:67:74: 89:3f:63:3f:4c:b9:e1:a3:5e:f1:e0:c7:c4:15:7a:cb:8c:fb: 15:cc:42:2b:7f:d3:f1:99:ba:88:1a:d9:fb:e6:2b:0e:ad:2d: 19:ed:0f:28:8d:19:a2:7d:3e:0c:7a:ca:1d:56:c9:f8:95:75: 3c:39:f5:7f:63:e3:9f:de:ab:d3:5c:3f:9d:51:87:3c:b3:48: 50:9b:88:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NaT8frLjK4IqUzM3409GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzhjZTAzNTkxN2Q2MzA4OTE0YzVkMGUzODVlNTYyOGNlYTNkM2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YJfdYuDLADj1k5bILzwhjrz0LtY Apl7PI14W6M0hHfCD5zuewrH0yh8ZFKknoy2joO7fjtKlnDoGmHvq5/d3h9tTv4Q HW/VhCqqyZXZKMgaOXlbQqyMt3U/wxqWjhoHSDXkNJ98qIjXnQq1Mthx2TlfM4Xn I8vnKaFppoy5TNQhmzxt9tQ2X+Jt4f54lWu+XjG8OMxHDaYot97mJqbUba/HE+vy VuqykKaPbuGBdtw677KcB+wdoPQdLKiRo8uaPv6Vgetpux7jxN3VT7LmCoXrjAHx OHFFgvksS04ZuGU3H+kIIcfr3fKNRI62wlM8zVIij59akVS2rNxKKxygkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCyM4DWRfWMIkUxdDjheVijOo9OuMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvTEl6Z05aRjlZd2lSVEYwT09GNVdLTTZqMDY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUGGSMA0G CSqGSIb3DQEBCwUAA4IBAQCISuNtMaDkzOcb7Tns5FrV6EdJVYdlglHEkPS0hfGQ UyG3CDsGxtQ3dC1lI3OouFNtxkVjIbGsR/zbD6vn1GDX8/sCAM3pKCNkz6ou7Jha HiRfl63XQIF8sIUSV9lR8qysSO1unUmqmkW3U5TgMqn99ym3/CeR5NogifI6mC/e y9BPl9RwPP8Sq1xOL1F9P8QYW47ZrSCwcgha41SO3ZDiUKXmJg1Y33+CdHPSlt74 4thjZ3SJP2M/TLnho17x4MfEFXrLjPsVzEIrf9PxmbqIGtn75isOrS0Z7Q8ojRmi fT4MesodVsn4lXU8OfV/Y+Of3qvTXD+dUYc8s0hQm4gC -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:17 2026 by rpki-client