This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/liwxDT5LJpIXlKlVZ9n6p87PfOI.roa File: liwxDT5LJpIXlKlVZ9n6p87PfOI.roa (raw, json) Hash identifier: BOe25rjjRQ8tqwHFLqCfoig+Bv/rJP70vjeo2DPMR9c= Subject key identifier: 96:2C:31:0D:3E:4B:26:92:17:94:A9:55:67:D9:FA:A7:CE:CF:7C:E2 Certificate issuer: /CN=af6eaeff123ca67446d0e49401e495057078e174 Certificate serial: 019B7DCB5D52DE2F702C33B2AE32BD40CB6E Authority key identifier: AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/liwxDT5LJpIXlKlVZ9n6p87PfOI.roa Signing time: Fri 02 Jan 2026 08:20:38 +0000 ROA not before: Fri 02 Jan 2026 08:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202851 IP address blocks: 185.172.124.0/22 maxlen: 22 2a0b:2300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5d:52:de:2f:70:2c:33:b2:ae:32:bd:40:cb:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af6eaeff123ca67446d0e49401e495057078e174 Validity Not Before: Jan 2 08:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=962c310d3e4b26921794a95567d9faa7cecf7ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b9:da:87:74:10:c2:68:a3:f9:5d:61:87:4f: 66:94:96:5d:84:91:80:78:cf:f7:3f:e3:75:41:e9: ea:ee:13:9f:10:07:2f:63:5e:31:4e:b1:7f:c2:f2: a9:6c:70:f7:72:3c:8c:8b:d3:6e:ea:e1:0d:49:b8: 92:26:59:c2:8d:4e:7c:2c:df:43:a7:ee:e6:bd:bf: 55:73:d7:05:40:d7:58:d1:c2:c6:43:5a:97:b5:7c: cb:42:1e:09:bd:a7:b4:9e:7e:10:c8:ea:89:ad:07: 86:9b:41:7b:47:1d:6a:eb:c7:25:6d:b4:0e:b1:4c: eb:ed:dd:ee:73:18:ea:4e:7e:d0:25:c5:2d:9a:2c: c0:0d:79:38:c8:41:fc:9d:de:23:16:4d:08:48:19: 3a:5b:d7:a8:5f:93:05:e5:fe:3c:9a:dd:05:29:c9: a6:c5:b4:c3:e6:c5:85:91:20:7f:1c:95:16:42:a6: 5b:08:f0:e8:56:c4:34:bd:fc:66:10:da:44:6f:d4: f0:d8:6a:8a:16:4f:08:85:d1:e8:9d:5c:bf:e1:9d: f2:c0:33:e7:d1:90:05:54:5f:ed:d5:4c:27:10:b9: d5:57:be:72:55:3a:ce:00:9f:72:9e:d5:1b:19:39: bf:a2:98:7d:a7:94:63:67:81:eb:d3:9e:5f:67:46: 2e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2C:31:0D:3E:4B:26:92:17:94:A9:55:67:D9:FA:A7:CE:CF:7C:E2 X509v3 Authority Key Identifier: keyid:AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/liwxDT5LJpIXlKlVZ9n6p87PfOI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.172.124.0/22 IPv6: 2a0b:2300::/32 Signature Algorithm: sha256WithRSAEncryption 1d:b1:6e:c8:86:76:3c:4e:db:82:f1:d7:75:8e:52:eb:9d:6a: e2:f5:a5:f6:f3:2c:11:13:51:2f:77:ca:58:02:a0:71:29:a5: 62:d5:11:85:ba:33:c6:81:24:e3:1c:1a:67:2a:0a:de:b4:6b: 66:73:55:12:46:b9:10:f5:1e:33:dc:7f:30:25:ff:e3:12:4d: d2:82:db:ca:f6:27:04:b8:82:39:62:9e:18:44:c7:20:84:bf: 2f:c7:bf:3f:cc:01:31:6e:10:02:f6:89:a9:c1:1f:ff:65:c1: 6b:0f:41:24:fc:6a:28:b2:95:8f:c6:91:5e:c4:6a:8e:58:96: 2e:7c:a9:dc:73:15:40:cc:eb:44:91:bd:55:35:26:18:8e:30: 3f:50:bc:fd:01:c0:b5:8d:48:cb:dc:50:44:87:17:61:d0:df: be:8c:2f:4c:f1:9d:4a:89:21:54:a0:da:e8:df:19:1c:57:e3: f5:ec:62:c0:d5:c4:11:7d:d1:0f:e9:aa:c1:f5:50:ca:9a:2d: 21:ab:ac:d4:67:be:0e:c2:c6:c1:30:58:a5:9f:8e:db:07:94: b2:00:78:75:c5:28:df:83:2e:f6:27:34:38:0a:2e:26:a5:e0: 63:a7:5b:ef:7d:47:33:1a:e2:c3:1e:c6:6d:55:b3:84:db:2a: 5d:1d:a2:8b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9y11S3i9wLDOyrjK9QMtuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNmVhZWZmMTIzY2E2NzQ0NmQwZTQ5NDAxZTQ5NTA1NzA3 OGUxNzQwHhcNMjYwMTAyMDgyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjJjMzEwZDNlNGIyNjkyMTc5NGE5NTU2N2Q5ZmFhN2NlY2Y3Y2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbnah3QQwmij+V1hh09mlJZdhJGA eM/3P+N1Qenq7hOfEAcvY14xTrF/wvKpbHD3cjyMi9Nu6uENSbiSJlnCjU58LN9D p+7mvb9Vc9cFQNdY0cLGQ1qXtXzLQh4Jvae0nn4QyOqJrQeGm0F7Rx1q68clbbQO sUzr7d3ucxjqTn7QJcUtmizADXk4yEH8nd4jFk0ISBk6W9eoX5MF5f48mt0FKcmm xbTD5sWFkSB/HJUWQqZbCPDoVsQ0vfxmENpEb9Tw2GqKFk8IhdHonVy/4Z3ywDPn 0ZAFVF/t1UwnELnVV75yVTrOAJ9yntUbGTm/oph9p5RjZ4Hr055fZ0YuRwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJYsMQ0+SyaSF5SpVWfZ+qfOz3ziMB8GA1UdIwQY MBaAFK9urv8SPKZ0RtDklAHklQVweOF0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjI2dV94SThwblJHME9TVUFlU1ZCWEI0NFhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83MDAxNjQtODlkMS00MDRmLWFmMzUt NGVmNDdmYzRiZDdmLzEvbGl3eERUNUxKcElYbEtsVlo5bjZwODdQZk9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy83MDAxNjQtODlkMS00MDRmLWFmMzUtNGVmNDdmYzRiZDdm LzEvcjI2dV94SThwblJHME9TVUFlU1ZCWEI0NFhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuax8MA0E AgACMAcDBQAqCyMAMA0GCSqGSIb3DQEBCwUAA4IBAQAdsW7IhnY8TtuC8dd1jlLr nWri9aX28ywRE1Evd8pYAqBxKaVi1RGFujPGgSTjHBpnKgretGtmc1USRrkQ9R4z 3H8wJf/jEk3SgtvK9icEuII5Yp4YRMcghL8vx78/zAExbhAC9ompwR//ZcFrD0Ek /GoospWPxpFexGqOWJYufKnccxVAzOtEkb1VNSYYjjA/ULz9AcC1jUjL3FBEhxdh 0N++jC9M8Z1KiSFUoNro3xkcV+P17GLA1cQRfdEP6arB9VDKmi0hq6zUZ74OwsbB MFiln47bB5SyAHh1xSjfgy72JzQ4Ci4mpeBjp1vvfUczGuLDHsZtVbOE2ypdHaKL -----END CERTIFICATE-----Generated at Tue Jan 27 01:52:35 2026 by rpki-client