This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/lIE_MUQJUZgNHzMzG7WoMtqvPPw.roa File: lIE_MUQJUZgNHzMzG7WoMtqvPPw.roa (raw, json) Hash identifier: FgB2VqG3YjiGKZT6wOmQEkgTTE3Qc1LyABUur1KWw40= Subject key identifier: 94:81:3F:31:44:09:51:98:0D:1F:33:33:1B:B5:A8:32:DA:AF:3C:FC Certificate issuer: /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0 Certificate serial: 019B7D5C56B2AC00EC222586A087045F08B2 Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/lIE_MUQJUZgNHzMzG7WoMtqvPPw.roa Signing time: Fri 02 Jan 2026 06:19:22 +0000 ROA not before: Fri 02 Jan 2026 06:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 164.152.232.0/21 maxlen: 21 194.164.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:56:b2:ac:00:ec:22:25:86:a0:87:04:5f:08:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0 Validity Not Before: Jan 2 06:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94813f31440951980d1f33331bb5a832daaf3cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2a:16:18:56:22:52:08:73:5b:95:64:c7:2a: 0e:66:1b:9c:92:99:86:b4:4e:dd:55:cc:ae:25:d4: ad:3b:b5:0d:1a:4a:9b:ce:e5:e1:4a:dc:44:48:03: eb:ed:a4:ad:3d:ef:20:1c:65:f6:d8:0e:63:53:56: 7e:33:d3:bb:f5:d6:ea:67:71:17:0e:c6:f6:dd:02: 5a:27:80:ca:90:f4:cd:c3:a0:0c:dc:51:e7:a4:20: 6a:eb:6d:f1:d4:9c:33:21:11:44:af:31:8b:8a:c3: 3b:04:56:52:47:c9:c7:1e:3a:94:71:c4:69:b6:82: 64:94:f4:bb:23:ef:f2:05:97:4f:db:83:2f:ec:b1: ec:6d:39:ac:55:46:b6:ed:f7:50:d1:9a:d4:cd:29: fc:18:67:30:26:b3:1e:9b:40:78:af:f3:9f:d3:29: 97:59:39:04:36:bd:cb:43:8d:b6:b6:b8:3b:69:5d: 99:14:61:f9:38:26:94:d2:cb:1f:91:50:9a:c6:9d: 49:9f:48:0e:65:68:04:55:aa:f6:b9:02:b4:45:35: fe:c2:1f:d9:d4:4e:47:21:aa:1c:2f:99:0a:a3:2f: 44:b5:0c:20:c5:be:da:87:10:10:11:3d:18:e5:bf: f2:3f:34:14:21:e8:58:4d:c1:94:0c:05:2b:0e:3f: 6f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:81:3F:31:44:09:51:98:0D:1F:33:33:1B:B5:A8:32:DA:AF:3C:FC X509v3 Authority Key Identifier: keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/lIE_MUQJUZgNHzMzG7WoMtqvPPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.152.232.0/21 194.164.246.0/24 Signature Algorithm: sha256WithRSAEncryption 36:6c:24:17:b8:0d:32:4b:fb:35:fb:76:43:0e:a0:5f:52:79: a4:5f:2f:76:6d:a0:fa:8d:7d:e5:fe:4d:59:7e:6e:2d:a8:8d: 01:29:d0:ec:bd:b1:90:94:2d:82:78:f2:d2:16:12:8c:b5:39: 77:e4:75:1a:68:0e:16:c2:10:f8:b6:07:cb:5d:6c:c0:85:69: 9b:f7:cf:86:a9:3d:af:fd:f4:ed:73:a1:f6:8e:b5:48:0a:3c: 67:03:a6:1f:9e:74:48:87:45:3e:c3:6b:85:ec:62:25:35:05: 51:42:5f:b2:47:b4:8c:ad:f4:3b:42:4a:11:24:1f:94:09:d8: f6:ae:08:3b:e2:a5:00:00:f6:f2:af:06:48:01:fb:ed:55:fc: d5:60:24:5e:46:87:db:6a:3c:a1:40:fe:c7:c6:84:ce:eb:a2: 52:a8:10:51:c2:d5:f1:a5:96:1a:b9:76:41:43:47:3e:06:00: 5a:7c:35:95:40:3b:e6:34:7a:58:30:51:b2:0b:34:3b:10:48: 9b:db:7d:ca:55:4a:99:6a:a9:c9:19:df:3b:4e:ff:09:f3:9f: 0c:3e:e6:8c:ae:62:84:c8:6c:de:ce:75:b6:f4:78:50:fb:44: d9:9e:02:3f:db:51:6e:0d:8e:8e:86:56:78:0e:f8:99:b9:4c: 18:67:98:48 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XFayrADsIiWGoIcEXwiyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYjY0ZmE4ZTA1YTJkN2Y1NjRhY2YyODlhZTc1N2M0MDRj ZGQ5ZDAwHhcNMjYwMTAyMDYxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDgxM2YzMTQ0MDk1MTk4MGQxZjMzMzMxYmI1YTgzMmRhYWYzY2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyoWGFYiUghzW5VkxyoOZhuckpmG tE7dVcyuJdStO7UNGkqbzuXhStxESAPr7aStPe8gHGX22A5jU1Z+M9O79dbqZ3EX Dsb23QJaJ4DKkPTNw6AM3FHnpCBq623x1JwzIRFErzGLisM7BFZSR8nHHjqUccRp toJklPS7I+/yBZdP24Mv7LHsbTmsVUa27fdQ0ZrUzSn8GGcwJrMem0B4r/Of0ymX WTkENr3LQ422trg7aV2ZFGH5OCaU0ssfkVCaxp1Jn0gOZWgEVar2uQK0RTX+wh/Z 1E5HIaocL5kKoy9EtQwgxb7ahxAQET0Y5b/yPzQUIehYTcGUDAUrDj9vQQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJSBPzFECVGYDR8zMxu1qDLarzz8MB8GA1UdIwQY MBaAFG62T6jgWi1/VkrPKJrnV8QEzdnQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnJaUHFPQmFMWDlXU3M4b211ZFh4QVROMmRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy81ODQ5OTctODNhYi00ODE3LWFhYzMt ODhjZjcyY2E5ZTQ2LzEvbElFX01VUUpVWmdOSHpNekc3V29NdHF2UFB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy81ODQ5OTctODNhYi00ODE3LWFhYzMtODhjZjcyY2E5ZTQ2 LzEvYnJaUHFPQmFMWDlXU3M4b211ZFh4QVROMmRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDpJjoAwQA wqT2MA0GCSqGSIb3DQEBCwUAA4IBAQA2bCQXuA0yS/s1+3ZDDqBfUnmkXy92baD6 jX3l/k1Zfm4tqI0BKdDsvbGQlC2CePLSFhKMtTl35HUaaA4WwhD4tgfLXWzAhWmb 98+GqT2v/fTtc6H2jrVICjxnA6YfnnRIh0U+w2uF7GIlNQVRQl+yR7SMrfQ7QkoR JB+UCdj2rgg74qUAAPbyrwZIAfvtVfzVYCReRofbajyhQP7HxoTO66JSqBBRwtXx pZYauXZBQ0c+BgBafDWVQDvmNHpYMFGyCzQ7EEib233KVUqZaqnJGd87Tv8J858M PuaMrmKEyGzeznW29HhQ+0TZngI/21FuDY6OhlZ4DviZuUwYZ5hI -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:05 2026 by rpki-client