This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/LiC_HAv2ieS9qZCIroR8UZoFlPI.roa File: LiC_HAv2ieS9qZCIroR8UZoFlPI.roa (raw, json) Hash identifier: R+F8lZe1pX4qczdw7OYcz3GuxYj0Q6ggGPfm7H8FjeE= Subject key identifier: 2E:20:BF:1C:0B:F6:89:E4:BD:A9:90:88:AE:84:7C:51:9A:05:94:F2 Certificate issuer: /CN=1a12509e4f2a730e169937d40833bb893ee7b98c Certificate serial: 019B791034FB664DAC9630E24C201AA7B6DF Authority key identifier: 1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/LiC_HAv2ieS9qZCIroR8UZoFlPI.roa Signing time: Thu 01 Jan 2026 10:17:43 +0000 ROA not before: Thu 01 Jan 2026 10:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 185.76.201.0/24 maxlen: 24 185.76.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:34:fb:66:4d:ac:96:30:e2:4c:20:1a:a7:b6:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a12509e4f2a730e169937d40833bb893ee7b98c Validity Not Before: Jan 1 10:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e20bf1c0bf689e4bda99088ae847c519a0594f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ee:08:86:92:d1:03:05:3d:6a:78:ee:4f:d1: 9d:17:34:12:68:37:5d:b4:2c:41:6d:8c:e6:e7:ea: 82:54:e2:26:ed:24:45:c7:e6:3d:74:a9:da:a9:a8: be:15:8c:cb:86:6b:3d:ac:cb:09:a0:b8:1b:a2:38: b6:da:1d:46:62:ed:2b:9e:13:06:8c:40:c5:af:92: 2c:8e:98:30:dd:fa:17:63:ed:40:2f:72:35:dd:0a: 93:0f:9a:de:34:cb:28:45:47:12:1e:db:8f:08:23: 4d:98:7b:4d:ed:49:b9:56:c6:09:d3:f5:d9:9c:c5: 3d:e1:e7:0c:58:01:a9:b9:0d:42:73:ac:c7:51:ce: f9:b3:5d:ce:2c:95:10:50:28:a3:24:f8:13:38:6e: e2:cb:50:38:00:7b:ff:19:7a:5d:31:f5:a8:48:a2: 0f:74:10:10:42:44:3f:2b:b6:f8:32:71:4c:26:5c: 2a:6e:d6:50:ac:68:29:5e:2c:63:cf:78:31:25:e1: 75:46:7f:a9:b9:85:99:dc:d4:69:6c:ad:29:1c:bc: 27:85:9b:bb:7b:83:b0:f5:49:ae:d5:33:89:7a:9c: 61:8f:11:a1:0f:4a:51:59:a9:53:dd:38:c2:e5:16: 2a:cf:be:b1:bb:da:af:bb:7c:67:21:cc:67:ea:1c: 33:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:20:BF:1C:0B:F6:89:E4:BD:A9:90:88:AE:84:7C:51:9A:05:94:F2 X509v3 Authority Key Identifier: keyid:1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/LiC_HAv2ieS9qZCIroR8UZoFlPI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.76.201.0/24 185.76.203.0/24 Signature Algorithm: sha256WithRSAEncryption 54:93:23:2a:8d:59:53:94:3e:f3:7b:7a:58:4d:87:c9:fe:e7: 01:b8:f9:ee:7d:68:73:9d:5c:7a:ef:9f:0a:89:49:b5:e0:aa: 06:5a:c4:11:41:81:e4:46:3d:8c:4f:44:bd:ec:6f:36:fa:5a: ad:6b:b5:fd:4a:c8:14:3b:01:f5:dd:f3:c0:96:e0:29:a6:99: 7d:ed:90:da:59:f4:6b:62:56:5f:3d:83:7e:f0:0e:34:d4:54: 84:b5:60:c0:49:71:3b:f2:e1:fc:10:5a:54:6f:82:ff:49:94: ea:ac:3c:b5:f1:f6:67:6e:b4:2f:ed:74:28:ad:0e:41:9c:3a: 5e:6a:c9:68:96:8e:c9:ac:7c:47:5c:e2:98:81:76:23:36:ce: 1e:74:1e:ac:e8:df:50:42:4e:37:10:4c:89:6a:b3:0b:eb:e1: 51:e0:af:27:5a:ca:52:a5:36:d5:91:dd:2a:e7:a4:d3:0a:21: 67:98:ab:ad:1f:3d:37:af:fe:09:c3:39:46:23:87:f1:ea:07: ea:3c:35:49:34:32:d1:dc:ac:58:83:23:2a:26:ac:90:cb:0a: 36:2c:09:53:55:87:8d:d9:64:57:ad:58:ca:bb:bb:6d:de:8d: 32:bd:d7:32:31:92:12:1b:3e:a8:aa:91:b0:bf:e6:8b:16:25: 84:3b:c1:dd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EDT7Zk2sljDiTCAap7bfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMTI1MDllNGYyYTczMGUxNjk5MzdkNDA4MzNiYjg5M2Vl N2I5OGMwHhcNMjYwMTAxMTAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTIwYmYxYzBiZjY4OWU0YmRhOTkwODhhZTg0N2M1MTlhMDU5NGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+4IhpLRAwU9anjuT9GdFzQSaDdd tCxBbYzm5+qCVOIm7SRFx+Y9dKnaqai+FYzLhms9rMsJoLgboji22h1GYu0rnhMG jEDFr5Isjpgw3foXY+1AL3I13QqTD5reNMsoRUcSHtuPCCNNmHtN7Um5VsYJ0/XZ nMU94ecMWAGpuQ1Cc6zHUc75s13OLJUQUCijJPgTOG7iy1A4AHv/GXpdMfWoSKIP dBAQQkQ/K7b4MnFMJlwqbtZQrGgpXixjz3gxJeF1Rn+puYWZ3NRpbK0pHLwnhZu7 e4Ow9Umu1TOJepxhjxGhD0pRWalT3TjC5RYqz76xu9qvu3xnIcxn6hwzVQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFC4gvxwL9onkvamQiK6EfFGaBZTyMB8GA1UdIwQY MBaAFBoSUJ5PKnMOFpk31Agzu4k+57mMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2hKUW5rOHFjdzRXbVRmVUNETzdpVDdudVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iMzE3MzEtNWNkMy00NDVlLThjYjMt NDE5NmIwZWFjZDI3LzEvTGlDX0hBdjJpZVM5cVpDSXJvUjhVWm9GbFBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9iMzE3MzEtNWNkMy00NDVlLThjYjMtNDE5NmIwZWFjZDI3 LzEvR2hKUW5rOHFjdzRXbVRmVUNETzdpVDdudVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuUzJAwQA uUzLMA0GCSqGSIb3DQEBCwUAA4IBAQBUkyMqjVlTlD7ze3pYTYfJ/ucBuPnufWhz nVx6758KiUm14KoGWsQRQYHkRj2MT0S97G82+lqta7X9SsgUOwH13fPAluApppl9 7ZDaWfRrYlZfPYN+8A401FSEtWDASXE78uH8EFpUb4L/SZTqrDy18fZnbrQv7XQo rQ5BnDpeaslolo7JrHxHXOKYgXYjNs4edB6s6N9QQk43EEyJarML6+FR4K8nWspS pTbVkd0q56TTCiFnmKutHz03r/4JwzlGI4fx6gfqPDVJNDLR3KxYgyMqJqyQywo2 LAlTVYeN2WRXrVjKu7tt3o0yvdcyMZISGz6oqpGwv+aLFiWEO8Hd -----END CERTIFICATE-----Generated at Wed Jan 21 14:30:37 2026 by rpki-client