This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/LiCbU9PSa0SDKETuy2xeDeSeyt0.roa File: LiCbU9PSa0SDKETuy2xeDeSeyt0.roa (raw, json) Hash identifier: 1XVPMZeKoqErxRm7H3sqh+s6gfOjmfTrA1F14Voiavk= Subject key identifier: 2E:20:9B:53:D3:D2:6B:44:83:28:44:EE:CB:6C:5E:0D:E4:9E:CA:DD Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE69C13F531872258E7BBB82E6AB89 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/LiCbU9PSa0SDKETuy2xeDeSeyt0.roa Signing time: Fri 02 Jan 2026 04:19:17 +0000 ROA not before: Fri 02 Jan 2026 04:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206822 IP address blocks: 87.229.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:69:c1:3f:53:18:72:25:8e:7b:bb:82:e6:ab:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e209b53d3d26b44832844eecb6c5e0de49ecadd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:29:8d:17:9e:83:82:4e:ae:28:6d:d1:ee:fc: 3e:0f:b9:bb:e3:eb:e8:a9:5f:ad:38:81:08:f8:a2: 57:74:5c:48:cb:f8:86:00:43:3c:22:3a:52:b6:d5: ad:1c:ae:c8:fe:69:73:0b:38:b3:2a:11:78:83:28: f2:fb:e5:15:64:75:3c:8e:bb:3f:ff:00:d2:3e:1c: 69:ee:dc:93:4c:44:c2:ad:57:5b:54:d9:d5:ec:94: b5:2e:68:b6:71:8e:ac:44:71:d6:01:c3:14:db:dd: b3:03:18:80:d8:de:9c:a7:1d:10:46:d8:37:71:d8: 89:e3:2e:d7:62:75:a5:8d:70:16:a9:f8:32:06:5d: 43:40:fb:18:8e:d7:2c:6d:9f:48:4f:c5:e6:7f:01: d6:e4:13:21:80:f4:28:a8:67:4b:26:32:c8:0a:db: c0:5a:a6:84:44:72:bd:2e:3e:b7:8e:56:e7:b7:95: 85:07:fd:c2:81:2e:12:43:f2:f6:86:94:bd:3a:e1: a1:1c:c3:91:f9:72:66:f8:6e:7d:61:a2:62:cb:86: 20:70:86:01:74:e4:22:72:0d:73:0c:f3:fa:ab:95: 72:60:8b:82:8b:78:25:80:29:e0:50:8d:42:ed:ec: 10:f5:35:6a:64:05:e9:2a:db:cd:a1:5f:95:59:be: 03:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:20:9B:53:D3:D2:6B:44:83:28:44:EE:CB:6C:5E:0D:E4:9E:CA:DD X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/LiCbU9PSa0SDKETuy2xeDeSeyt0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.97.0/24 Signature Algorithm: sha256WithRSAEncryption 49:75:f3:7f:15:64:b8:60:05:97:e2:d2:0a:b5:21:f7:59:95: 84:3e:b3:fb:8a:d9:f0:bf:e0:a2:2c:47:a4:a7:57:26:db:e7: 52:bf:ff:65:92:e5:54:6e:1a:90:c9:6c:af:3d:c0:64:9a:1d: a8:03:f6:29:23:48:04:d0:a7:25:b9:b8:26:1d:3f:3c:c0:26: 7d:ad:c4:fb:e7:0e:45:69:42:20:3c:27:ad:de:fb:7f:5e:10: 67:10:c0:c4:2e:c5:f2:6a:cc:1c:6b:f3:2e:0d:50:bb:f2:95: c9:66:3c:6f:72:87:e3:30:cd:92:1d:1d:0d:02:35:9b:6b:bd: b9:2a:7a:ea:ee:86:e9:a9:91:97:ad:07:a9:25:4c:15:cb:3b: 7b:1c:6b:58:35:df:46:b5:47:cb:ff:bd:04:52:b5:78:97:a9: 34:7c:f0:16:61:25:1e:da:46:1e:05:53:31:b1:b6:03:fd:68: b5:64:94:75:de:2c:ee:af:62:24:7a:af:a4:e0:04:a2:1a:c7: f7:2e:23:3b:76:9e:b9:c8:30:b8:f7:c8:77:cd:fb:b4:a5:2a: 9a:30:94:29:f9:05:2a:3e:6a:74:85:4e:d2:8a:75:81:f6:e5: 86:57:9b:62:70:99:b9:bb:e7:29:cc:ce:ee:92:90:41:c9:68: 86:a1:9d:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87mnBP1MYciWOe7uC5quJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTIwOWI1M2QzZDI2YjQ0ODMyODQ0ZWVjYjZjNWUwZGU0OWVjYWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCmNF56Dgk6uKG3R7vw+D7m74+vo qV+tOIEI+KJXdFxIy/iGAEM8IjpSttWtHK7I/mlzCzizKhF4gyjy++UVZHU8jrs/ /wDSPhxp7tyTTETCrVdbVNnV7JS1Lmi2cY6sRHHWAcMU292zAxiA2N6cpx0QRtg3 cdiJ4y7XYnWljXAWqfgyBl1DQPsYjtcsbZ9IT8XmfwHW5BMhgPQoqGdLJjLICtvA WqaERHK9Lj63jlbnt5WFB/3CgS4SQ/L2hpS9OuGhHMOR+XJm+G59YaJiy4YgcIYB dOQicg1zDPP6q5VyYIuCi3glgCngUI1C7ewQ9TVqZAXpKtvNoV+VWb4DqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC4gm1PT0mtEgyhE7stsXg3knsrdMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvTGlDYlU5UFNhMFNES0VUdXkyeGVEZVNleXQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+VhMA0G CSqGSIb3DQEBCwUAA4IBAQBJdfN/FWS4YAWX4tIKtSH3WZWEPrP7itnwv+CiLEek p1cm2+dSv/9lkuVUbhqQyWyvPcBkmh2oA/YpI0gE0KclubgmHT88wCZ9rcT75w5F aUIgPCet3vt/XhBnEMDELsXyaswca/MuDVC78pXJZjxvcofjMM2SHR0NAjWba725 Knrq7obpqZGXrQepJUwVyzt7HGtYNd9GtUfL/70EUrV4l6k0fPAWYSUe2kYeBVMx sbYD/Wi1ZJR13izur2Ikeq+k4ASiGsf3LiM7dp65yDC498h3zfu0pSqaMJQp+QUq Pmp0hU7SinWB9uWGV5ticJm5u+cpzM7ukpBByWiGoZ1v -----END CERTIFICATE-----Generated at Mon Jan 19 23:36:34 2026 by rpki-client