This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/LIEZPbv5mJgzybmqxdXVKVc2eR0.roa
File: LIEZPbv5mJgzybmqxdXVKVc2eR0.roa (raw, json)
Hash identifier: sER4hAOSChMge30hLfJ7QNzWkQjrQzcNYsA2DInAczg=
Subject key identifier: 2C:81:19:3D:BB:F9:98:98:33:C9:B9:AA:C5:D5:D5:29:57:36:79:1D
Certificate issuer: /CN=fc157d396ed992843daeef7b9cca73b043966c08
Certificate serial: 019B7A5AF3963FC1DABAF8667D1531813371
Authority key identifier: FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/LIEZPbv5mJgzybmqxdXVKVc2eR0.roa
Signing time: Thu 01 Jan 2026 16:18:59 +0000
ROA not before: Thu 01 Jan 2026 16:18:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49556
IP address blocks: 217.18.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:f3:96:3f:c1:da:ba:f8:66:7d:15:31:81:33:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc157d396ed992843daeef7b9cca73b043966c08
Validity
Not Before: Jan 1 16:18:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c81193dbbf9989833c9b9aac5d5d5295736791d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b8:8d:1d:ff:8c:11:ec:4a:97:de:e9:1a:99:
45:8a:54:34:5b:27:b6:a9:e1:fd:eb:01:02:ca:e6:
9b:31:e0:99:d3:60:4d:23:2a:d0:42:a7:37:7f:4c:
d5:4c:b2:37:fb:a2:93:9b:c0:6d:57:29:85:7c:85:
e9:3a:68:13:03:21:4b:60:93:41:b8:19:49:4f:13:
54:c5:d2:38:5e:64:4a:6e:3a:4b:22:0f:bb:1f:4b:
a2:a5:c6:be:df:47:8a:00:bb:89:bf:c2:d3:e3:23:
2e:35:4a:7d:31:c4:52:b5:44:cd:7b:0d:30:38:8c:
ce:db:35:22:51:8c:ba:65:ca:28:e1:79:68:31:1a:
b9:02:3f:93:42:07:50:6b:f4:38:f5:dd:ac:20:36:
28:62:da:95:0e:70:2b:98:ba:72:21:bc:68:18:31:
b0:25:94:5c:d3:43:7a:cf:ae:5a:be:0f:e3:0d:08:
5f:e0:50:65:fa:30:69:30:12:09:95:bf:14:58:99:
a3:45:ce:bf:be:d4:3c:54:98:08:1a:60:f4:e5:01:
34:14:22:61:7d:b6:0f:da:ea:79:dd:22:7e:f5:bb:
98:4b:a6:ee:ac:b9:90:89:4f:ab:e7:65:ad:73:8d:
89:51:45:be:20:5a:8d:17:54:a6:d9:b7:77:33:7a:
41:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:81:19:3D:BB:F9:98:98:33:C9:B9:AA:C5:D5:D5:29:57:36:79:1D
X509v3 Authority Key Identifier:
keyid:FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/LIEZPbv5mJgzybmqxdXVKVc2eR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.94.0/24
Signature Algorithm: sha256WithRSAEncryption
42:fb:93:d4:32:db:5b:32:dc:1a:ae:f3:b1:70:ab:6e:1f:ba:
2f:c9:22:15:c9:4f:a9:1b:39:21:b9:c7:30:65:dc:95:84:ea:
11:9c:03:b1:57:af:5a:97:98:b0:77:26:d6:6f:eb:cb:0f:4c:
29:55:46:25:0d:47:e6:db:d0:a6:69:cd:0a:88:fe:1f:0a:5c:
b6:ce:6d:74:07:a4:d6:3c:3d:e9:53:d7:ce:1c:37:5c:49:40:
61:4c:59:08:cc:83:f9:b9:7e:25:d9:2e:82:60:d8:0e:60:24:
d7:99:c1:86:6d:43:57:7a:53:dd:fd:99:f2:4e:39:fd:d5:9a:
c3:94:95:33:c0:a2:54:53:4e:c7:04:a5:12:c6:12:55:42:e7:
13:25:ed:5d:b4:59:27:95:bd:29:a0:37:64:0a:02:ad:7e:e1:
2b:d4:26:74:10:b9:d5:16:f3:43:ef:76:40:3d:ed:95:96:61:
5f:c8:70:4d:52:ee:80:82:d5:7b:0e:f5:64:42:89:64:01:2b:
ea:84:4c:91:98:7a:a7:31:84:08:9a:47:9d:d6:bf:eb:37:01:
4c:11:4b:90:51:74:c5:13:3d:9a:7e:7f:00:31:42:88:14:96:
ff:8e:72:e4:18:93:3c:5a:f6:ce:f5:0d:3f:11:18:31:1c:39:
7b:d0:b9:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6WvOWP8HauvhmfRUxgTNxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMTU3ZDM5NmVkOTkyODQzZGFlZWY3YjljY2E3M2IwNDM5
NjZjMDgwHhcNMjYwMTAxMTYxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzgxMTkzZGJiZjk5ODk4MzNjOWI5YWFjNWQ1ZDUyOTU3MzY3OTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubiNHf+MEexKl97pGplFilQ0Wye2
qeH96wECyuabMeCZ02BNIyrQQqc3f0zVTLI3+6KTm8BtVymFfIXpOmgTAyFLYJNB
uBlJTxNUxdI4XmRKbjpLIg+7H0uipca+30eKALuJv8LT4yMuNUp9McRStUTNew0w
OIzO2zUiUYy6Zcoo4XloMRq5Aj+TQgdQa/Q49d2sIDYoYtqVDnArmLpyIbxoGDGw
JZRc00N6z65avg/jDQhf4FBl+jBpMBIJlb8UWJmjRc6/vtQ8VJgIGmD05QE0FCJh
fbYP2up53SJ+9buYS6burLmQiU+r52Wtc42JUUW+IFqNF1Sm2bd3M3pB3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCyBGT27+ZiYM8m5qsXV1SlXNnkdMB8GA1UdIwQY
MBaAFPwVfTlu2ZKEPa7ve5zKc7BDlmwIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0JWOU9XN1prb1E5cnU5N25NcHpzRU9XYkFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mY2VhNTAtZmU0Ny00NjY0LTkyNjct
YzBkY2NkYjdhOTA1LzEvTElFWlBidjVtSmd6eWJtcXhkWFZLVmMyZVIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9mY2VhNTAtZmU0Ny00NjY0LTkyNjctYzBkY2NkYjdhOTA1
LzEvX0JWOU9XN1prb1E5cnU5N25NcHpzRU9XYkFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RJeMA0G
CSqGSIb3DQEBCwUAA4IBAQBC+5PUMttbMtwarvOxcKtuH7ovySIVyU+pGzkhuccw
ZdyVhOoRnAOxV69al5iwdybWb+vLD0wpVUYlDUfm29Cmac0KiP4fCly2zm10B6TW
PD3pU9fOHDdcSUBhTFkIzIP5uX4l2S6CYNgOYCTXmcGGbUNXelPd/ZnyTjn91ZrD
lJUzwKJUU07HBKUSxhJVQucTJe1dtFknlb0poDdkCgKtfuEr1CZ0ELnVFvND73ZA
Pe2VlmFfyHBNUu6AgtV7DvVkQolkASvqhEyRmHqnMYQImked1r/rNwFMEUuQUXTF
Ez2afn8AMUKIFJb/jnLkGJM8WvbO9Q0/ERgxHDl70Lms
-----END CERTIFICATE-----
Generated at Mon Jan 26 23:21:03 2026 by rpki-client