This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/LiIvmL2jPb5CXm2fcW48pwl6IHs.roa File: LiIvmL2jPb5CXm2fcW48pwl6IHs.roa (raw, json) Hash identifier: nIYaySFJM8B7djJy1Ih3Y/KEycQQlbGH8uUci8K6W9k= Subject key identifier: 2E:22:2F:98:BD:A3:3D:BE:42:5E:6D:9F:71:6E:3C:A7:09:7A:20:7B Certificate issuer: /CN=c7c24de99101fafdf74bca293fd6d95060d50a63 Certificate serial: 019B7BA4FE0537B1AEF2354757509721D330 Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/LiIvmL2jPb5CXm2fcW48pwl6IHs.roa Signing time: Thu 01 Jan 2026 22:19:29 +0000 ROA not before: Thu 01 Jan 2026 22:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34659 IP address blocks: 87.89.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 10:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:fe:05:37:b1:ae:f2:35:47:57:50:97:21:d3:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63 Validity Not Before: Jan 1 22:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e222f98bda33dbe425e6d9f716e3ca7097a207b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5c:16:3e:07:29:db:76:f2:71:f0:d5:80:e6: 45:1f:6f:90:9a:a6:f9:12:9d:36:70:10:f4:ed:49: 03:b5:ec:5e:e1:c2:7c:d5:f9:0f:1e:21:2d:7c:f1: f7:40:30:6c:c3:5c:3d:cf:51:91:80:9e:64:87:1a: 87:1b:5a:70:15:64:02:fa:c4:4c:92:bc:6b:ac:1a: 88:56:a9:70:bb:09:cb:1b:bc:e7:aa:6e:3a:57:f8: 20:c5:b2:9e:8f:ec:35:97:a5:f0:81:a0:fe:f9:c7: 52:54:9c:60:fe:a6:f9:61:bc:10:f2:9f:d9:a7:45: b6:c6:83:63:7e:42:03:63:67:15:36:f8:6f:00:8c: 2d:08:5d:41:06:5f:51:e4:a9:8a:51:8c:d5:9b:ac: 11:5e:df:98:0d:7f:02:26:23:7c:64:45:f7:4e:9c: b3:72:18:4d:bb:78:62:24:2b:eb:12:6e:bc:96:ee: 5d:98:dc:75:ac:44:ff:d6:d2:86:c7:9c:05:cb:6e: 7f:f3:89:c6:53:c8:b7:08:36:b7:fd:23:cc:10:a0: d6:7f:04:6c:c8:15:6e:e9:e4:49:04:63:15:7b:fb: bb:e5:6a:66:35:b8:94:76:42:e7:69:0c:52:78:5d: 6e:f4:46:65:bf:27:bb:97:d4:70:69:87:32:49:57: 53:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:22:2F:98:BD:A3:3D:BE:42:5E:6D:9F:71:6E:3C:A7:09:7A:20:7B X509v3 Authority Key Identifier: keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/LiIvmL2jPb5CXm2fcW48pwl6IHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.89.96.0/20 Signature Algorithm: sha256WithRSAEncryption 68:8f:42:dd:9b:04:7d:b7:46:67:fd:12:3b:f1:33:dd:67:e5: 73:15:09:bf:55:59:36:17:47:a3:55:de:e5:b8:44:a2:1b:e7: 02:7c:f7:88:97:74:b5:07:72:4d:14:c7:8f:9a:c2:16:ce:93: f9:6e:95:99:a6:fe:9c:e3:cb:d5:18:96:d3:d5:70:e4:ec:69: 1c:ca:95:67:ba:6c:cf:01:95:64:63:48:e5:26:59:da:79:00: 5c:4f:ec:73:42:48:d6:6a:04:55:53:d8:c3:d0:b7:d2:6d:d0: ec:07:b7:77:24:af:11:56:7c:86:f1:a4:d1:98:be:ad:90:71: 8e:85:2f:af:b7:75:9e:70:5b:7d:f4:21:22:2b:df:89:07:48: 18:d8:e8:3d:04:e3:27:dd:b4:f4:0b:3b:12:4a:52:4b:45:f6: 1f:00:0f:c2:aa:17:0a:53:bc:b8:ed:67:49:54:6d:b0:a6:d3: 7f:9e:e1:3a:42:f4:88:a3:08:7c:31:c3:16:75:a7:0c:ee:2d: 74:fa:03:4e:69:d3:89:05:60:e4:52:1d:26:ea:85:4e:e1:c5: f0:3e:0d:c0:b7:4a:96:ef:99:68:62:35:0b:47:9b:eb:a2:73: 8a:c0:4e:ff:5a:5e:74:6c:f6:35:29:6c:41:f3:75:8e:08:68: 68:0d:de:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pP4FN7Gu8jVHV1CXIdMwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YzI0ZGU5OTEwMWZhZmRmNzRiY2EyOTNmZDZkOTUwNjBk NTBhNjMwHhcNMjYwMTAxMjIxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTIyMmY5OGJkYTMzZGJlNDI1ZTZkOWY3MTZlM2NhNzA5N2EyMDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVwWPgcp23bycfDVgOZFH2+Qmqb5 Ep02cBD07UkDtexe4cJ81fkPHiEtfPH3QDBsw1w9z1GRgJ5khxqHG1pwFWQC+sRM krxrrBqIVqlwuwnLG7znqm46V/ggxbKej+w1l6XwgaD++cdSVJxg/qb5YbwQ8p/Z p0W2xoNjfkIDY2cVNvhvAIwtCF1BBl9R5KmKUYzVm6wRXt+YDX8CJiN8ZEX3Tpyz chhNu3hiJCvrEm68lu5dmNx1rET/1tKGx5wFy25/84nGU8i3CDa3/SPMEKDWfwRs yBVu6eRJBGMVe/u75WpmNbiUdkLnaQxSeF1u9EZlvye7l9RwaYcySVdTlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC4iL5i9oz2+Ql5tn3FuPKcJeiB7MB8GA1UdIwQY MBaAFMfCTemRAfr990vKKT/W2VBg1QpjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9lYjAxM2YtNTc3NC00ZTA2LWE1ZDQt ZWQ1ZDZjZThkN2U4LzEvTGlJdm1MMmpQYjVDWG0yZmNXNDhwd2w2SUhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9lYjAxM2YtNTc3NC00ZTA2LWE1ZDQtZWQ1ZDZjZThkN2U4 LzEveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEV1lgMA0G CSqGSIb3DQEBCwUAA4IBAQBoj0LdmwR9t0Zn/RI78TPdZ+VzFQm/VVk2F0ejVd7l uESiG+cCfPeIl3S1B3JNFMePmsIWzpP5bpWZpv6c48vVGJbT1XDk7GkcypVnumzP AZVkY0jlJlnaeQBcT+xzQkjWagRVU9jD0LfSbdDsB7d3JK8RVnyG8aTRmL6tkHGO hS+vt3WecFt99CEiK9+JB0gY2Og9BOMn3bT0CzsSSlJLRfYfAA/CqhcKU7y47WdJ VG2wptN/nuE6QvSIowh8McMWdacM7i10+gNOadOJBWDkUh0m6oVO4cXwPg3At0qW 75loYjULR5vronOKwE7/Wl50bPY1KWxB83WOCGhoDd5M -----END CERTIFICATE-----Generated at Sat Jan 3 18:57:54 2026 by rpki-client