This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/liOq_bxUZWYwUQJdTmCeIacGUbE.roa File: liOq_bxUZWYwUQJdTmCeIacGUbE.roa (raw, json) Hash identifier: GqI5g/TpMiOOPnrSMEIczXK7pRHXISy9b4nuM+CDj4s= Subject key identifier: 96:23:AA:FD:BC:54:65:66:30:51:02:5D:4E:60:9E:21:A7:06:51:B1 Certificate issuer: /CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f Certificate serial: 019B7CEE50FBD047628A34231BCD5ACF8070 Authority key identifier: 9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/liOq_bxUZWYwUQJdTmCeIacGUbE.roa Signing time: Fri 02 Jan 2026 04:19:11 +0000 ROA not before: Fri 02 Jan 2026 04:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201633 IP address blocks: 193.33.156.0/24 maxlen: 24 206.225.17.0/24 maxlen: 24 2a12:d4c0:b00b::/48 maxlen: 48 2a12:d4c0:beef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:50:fb:d0:47:62:8a:34:23:1b:cd:5a:cf:80:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f Validity Not Before: Jan 2 04:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9623aafdbc5465663051025d4e609e21a70651b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:88:3a:a7:a2:5c:cd:6b:7e:f7:8b:f3:35:da: 4c:0c:f6:7a:11:e9:e8:fe:39:6c:ad:8c:07:26:aa: 0f:99:b8:5e:ad:20:7d:6e:0d:3b:43:60:d6:9c:03: c2:e6:ba:94:6f:dd:a3:f8:4a:33:07:33:d7:53:10: b8:27:34:67:f1:a5:e9:59:5b:61:59:4f:94:8b:df: be:b0:07:18:44:e8:27:f7:c6:99:51:13:6b:95:e5: 93:b4:21:3c:ef:a3:82:70:b4:58:29:10:29:c9:00: a7:34:c8:96:a0:30:6c:49:76:f6:01:fa:84:18:6f: 02:c1:21:12:58:9e:b5:53:32:2a:be:cd:6a:03:a4: 9e:fe:cd:17:a8:2f:f0:cf:6f:12:42:99:55:ba:aa: 2d:d7:b9:1c:b6:3b:96:3f:57:d0:b5:fc:0d:16:8f: ba:20:20:00:73:1b:eb:0a:49:ba:f9:75:57:56:f8: 09:99:e8:a2:2c:36:ae:3f:2b:60:35:96:70:a8:00: f4:40:aa:a3:be:91:c1:d6:ad:88:66:6e:95:5d:db: 08:54:44:90:b4:36:79:70:e5:52:eb:fa:7d:2c:8e: dd:60:2d:c2:7b:35:52:41:27:58:df:a3:e0:9b:f2: 15:5a:c5:f3:a4:86:dd:ea:04:ba:21:9a:41:9c:22: a7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:23:AA:FD:BC:54:65:66:30:51:02:5D:4E:60:9E:21:A7:06:51:B1 X509v3 Authority Key Identifier: keyid:9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/liOq_bxUZWYwUQJdTmCeIacGUbE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.33.156.0/24 206.225.17.0/24 IPv6: 2a12:d4c0:b00b::/48 2a12:d4c0:beef::/48 Signature Algorithm: sha256WithRSAEncryption 6b:52:7c:0e:1e:3e:cd:31:b4:e3:a5:ce:a6:e5:ce:a4:06:92: a9:2f:f9:65:81:4b:cb:72:99:93:cc:8f:c0:53:79:23:b8:fa: 7d:44:27:23:83:6e:c5:33:f4:1d:d4:6b:b9:87:88:b1:7a:55: c9:b7:93:d4:50:d0:4f:79:f5:13:bd:ec:ce:a0:8a:a7:c0:49: 65:2a:ac:46:41:52:1a:c2:ab:51:14:75:0c:aa:32:16:ab:f1: 08:bf:8c:9d:37:84:e0:0f:67:f9:d4:8c:37:c0:0a:e9:14:ad: de:08:40:09:5a:f1:0d:c5:02:0d:b2:ca:f1:d0:c7:9f:bc:f2: 7c:c8:e5:3a:02:4b:88:bc:88:6d:65:0b:05:2c:00:c0:8e:7a: 29:14:48:50:b6:d4:54:47:a7:61:49:3f:88:3c:5a:7f:94:0d: 09:3e:d2:a5:bc:6b:19:8c:db:50:52:e5:36:5f:39:69:ae:39: d1:93:0c:d8:68:4a:2a:92:af:e8:23:09:28:db:a0:75:c7:c2: 70:85:1f:ed:e8:ee:0a:75:f5:e4:63:0d:1b:bb:08:7f:83:44: 1e:fd:7b:56:78:46:09:51:60:0c:94:ed:26:30:43:75:37:1d: 23:c0:fb:f1:48:1a:f8:56:ec:f2:b6:86:49:9d:84:3a:79:2d: 66:e2:0b:79 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt87lD70EdiijQjG81az4BwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZGEwOTZkYmM4ZDU5YTQ0MjcyMWNjMTY5ZDZhZWI2NDlm NWZkM2YwHhcNMjYwMTAyMDQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjIzYWFmZGJjNTQ2NTY2MzA1MTAyNWQ0ZTYwOWUyMWE3MDY1MWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74g6p6JczWt+94vzNdpMDPZ6Eeno /jlsrYwHJqoPmbherSB9bg07Q2DWnAPC5rqUb92j+EozBzPXUxC4JzRn8aXpWVth WU+Ui9++sAcYROgn98aZURNrleWTtCE876OCcLRYKRApyQCnNMiWoDBsSXb2AfqE GG8CwSESWJ61UzIqvs1qA6Se/s0XqC/wz28SQplVuqot17kctjuWP1fQtfwNFo+6 ICAAcxvrCkm6+XVXVvgJmeiiLDauPytgNZZwqAD0QKqjvpHB1q2IZm6VXdsIVESQ tDZ5cOVS6/p9LI7dYC3CezVSQSdY36Pgm/IVWsXzpIbd6gS6IZpBnCKnlwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFJYjqv28VGVmMFECXU5gniGnBlGxMB8GA1UdIwQY MBaAFJ7aCW28jVmkQnIcwWnWrrZJ9f0/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnRvSmJieU5XYVJDY2h6QmFkYXV0a24xX1Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85ODFiNTAtMDNhYi00MTRiLWEzMTAt YmRjNWQ2Y2IyMTQxLzEvbGlPcV9ieFVaV1l3VVFKZFRtQ2VJYWNHVWJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi85ODFiNTAtMDNhYi00MTRiLWEzMTAtYmRjNWQ2Y2IyMTQx LzEvbnRvSmJieU5XYVJDY2h6QmFkYXV0a24xX1Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAwSGcAwQA zuERMBgEAgACMBIDBwAqEtTAsAsDBwAqEtTAvu8wDQYJKoZIhvcNAQELBQADggEB AGtSfA4ePs0xtOOlzqblzqQGkqkv+WWBS8tymZPMj8BTeSO4+n1EJyODbsUz9B3U a7mHiLF6Vcm3k9RQ0E959RO97M6giqfASWUqrEZBUhrCq1EUdQyqMhar8Qi/jJ03 hOAPZ/nUjDfACukUrd4IQAla8Q3FAg2yyvHQx5+88nzI5ToCS4i8iG1lCwUsAMCO eikUSFC21FRHp2FJP4g8Wn+UDQk+0qW8axmM21BS5TZfOWmuOdGTDNhoSiqSr+gj CSjboHXHwnCFH+3o7gp19eRjDRu7CH+DRB79e1Z4RglRYAyU7SYwQ3U3HSPA+/FI GvhW7PK2hkmdhDp5LWbiC3k= -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:56 2026 by rpki-client