This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/lioj_GWOLpfqXzdt8ax4P6Mc2aU.roa File: lioj_GWOLpfqXzdt8ax4P6Mc2aU.roa (raw, json) Hash identifier: AGs+ir4ro7QQV7jYL9La9S53EvSqLFzPT1Ni572Pi50= Subject key identifier: 96:2A:23:FC:65:8E:2E:97:EA:5F:37:6D:F1:AC:78:3F:A3:1C:D9:A5 Certificate issuer: /CN=e3710607ba7a815e911c4892f968b18ae6604389 Certificate serial: 019B7DCAA6DE4949A37C0F67A820A06CE574 Authority key identifier: E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/lioj_GWOLpfqXzdt8ax4P6Mc2aU.roa Signing time: Fri 02 Jan 2026 08:19:51 +0000 ROA not before: Fri 02 Jan 2026 08:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12337 IP address blocks: 194.77.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 21:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:a6:de:49:49:a3:7c:0f:67:a8:20:a0:6c:e5:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3710607ba7a815e911c4892f968b18ae6604389 Validity Not Before: Jan 2 08:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=962a23fc658e2e97ea5f376df1ac783fa31cd9a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:17:53:40:10:b5:14:9c:f6:10:86:62:59:69: d4:09:99:23:46:f8:d4:a0:50:7d:36:79:e4:6e:0d: d1:89:10:20:dd:ed:5b:00:07:7d:dc:52:d4:1a:83: c6:5e:59:01:1d:a1:b3:f7:e4:0c:24:1a:94:df:af: c7:aa:26:b7:53:bb:5f:c1:0c:ae:be:cd:7a:3b:43: d7:9c:f6:32:64:32:a6:f2:37:09:60:8d:cf:8b:63: 09:d1:31:bc:0c:21:aa:d6:1a:5f:78:3c:8d:be:34: 2e:1d:cd:f8:4b:e1:c0:83:34:45:a2:15:9f:ee:c3: e5:36:01:af:57:35:ff:cf:a1:66:fb:4d:6d:62:1a: f4:8b:95:c8:ed:5e:07:d0:26:67:de:e5:e1:15:76: 22:6c:41:9b:ad:1c:8b:01:38:2f:ca:29:27:da:5c: a5:96:ce:39:00:61:f0:db:12:a0:24:67:2b:73:45: 3d:02:e4:be:5c:14:07:51:fb:db:9d:d4:6e:80:fd: f7:79:2a:3a:6f:d2:4f:90:9e:dd:8e:1a:c2:c1:00: 87:69:9e:73:5d:35:08:18:ec:31:bb:1c:10:c3:92: 10:b7:f5:03:62:2e:e6:46:93:20:30:f1:f3:84:51: 6b:9f:22:18:a5:bb:7e:c8:53:92:80:51:12:af:7c: 9f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2A:23:FC:65:8E:2E:97:EA:5F:37:6D:F1:AC:78:3F:A3:1C:D9:A5 X509v3 Authority Key Identifier: keyid:E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/lioj_GWOLpfqXzdt8ax4P6Mc2aU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.77.145.0/24 Signature Algorithm: sha256WithRSAEncryption b5:06:71:3f:8a:c0:91:95:7a:57:b8:5c:22:dd:2d:e6:05:a9: 58:60:e8:98:b0:c3:10:0c:4b:11:09:13:f9:69:44:8a:8b:b7: 79:44:00:19:a9:1c:63:37:94:3d:f4:83:05:40:d5:b4:72:49: 5c:54:ce:d1:13:65:50:61:2e:f3:34:36:28:20:47:86:1e:dd: 5e:62:19:77:04:ca:f9:a6:89:5b:a6:81:c4:0f:1e:a4:c7:96: 43:d6:ec:67:c7:0b:a5:6c:8d:e4:dc:c9:91:50:d4:f5:8b:0d: b1:e9:87:3c:2d:d9:7c:7a:2c:e4:2b:99:b8:84:f8:4e:3f:df: 81:83:87:73:85:1e:e1:f6:01:f3:b0:65:4b:6e:d9:5d:d4:aa: 4a:6a:d3:db:f3:a8:24:6f:fb:3e:47:40:db:a3:45:4d:59:47: e7:b6:3d:20:16:3f:5b:85:86:16:1e:d9:38:2e:a3:d1:7a:d8: 86:38:1c:68:e9:0e:9d:3e:72:8d:3e:c1:da:24:2b:cc:70:a7: fb:d4:45:f9:02:16:ea:6e:88:84:8f:84:40:75:8c:75:28:cf: 7c:44:96:f4:d7:4e:1a:f3:1d:ce:19:b0:84:a1:c6:5c:fc:91: 38:bb:e7:ee:db:3a:4f:a5:ca:5e:9f:d1:70:b9:89:2e:2f:57: a4:45:f4:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yqbeSUmjfA9nqCCgbOV0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNzEwNjA3YmE3YTgxNWU5MTFjNDg5MmY5NjhiMThhZTY2 MDQzODkwHhcNMjYwMTAyMDgxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjJhMjNmYzY1OGUyZTk3ZWE1ZjM3NmRmMWFjNzgzZmEzMWNkOWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhdTQBC1FJz2EIZiWWnUCZkjRvjU oFB9Nnnkbg3RiRAg3e1bAAd93FLUGoPGXlkBHaGz9+QMJBqU36/Hqia3U7tfwQyu vs16O0PXnPYyZDKm8jcJYI3Pi2MJ0TG8DCGq1hpfeDyNvjQuHc34S+HAgzRFohWf 7sPlNgGvVzX/z6Fm+01tYhr0i5XI7V4H0CZn3uXhFXYibEGbrRyLATgvyikn2lyl ls45AGHw2xKgJGcrc0U9AuS+XBQHUfvbndRugP33eSo6b9JPkJ7djhrCwQCHaZ5z XTUIGOwxuxwQw5IQt/UDYi7mRpMgMPHzhFFrnyIYpbt+yFOSgFESr3yfeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJYqI/xlji6X6l83bfGseD+jHNmlMB8GA1UdIwQY MBaAFONxBge6eoFekRxIkvlosYrmYEOJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDNFR0I3cDZnVjZSSEVpUy1XaXhpdVpnUTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wNDU5ODYtYjNhNC00OWU0LThmNDUt MTI2ZDVlNjBmZGQxLzEvbGlval9HV09McGZxWHpkdDhheDRQNk1jMmFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8wNDU5ODYtYjNhNC00OWU0LThmNDUtMTI2ZDVlNjBmZGQx LzEvNDNFR0I3cDZnVjZSSEVpUy1XaXhpdVpnUTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwk2RMA0G CSqGSIb3DQEBCwUAA4IBAQC1BnE/isCRlXpXuFwi3S3mBalYYOiYsMMQDEsRCRP5 aUSKi7d5RAAZqRxjN5Q99IMFQNW0cklcVM7RE2VQYS7zNDYoIEeGHt1eYhl3BMr5 polbpoHEDx6kx5ZD1uxnxwulbI3k3MmRUNT1iw2x6Yc8Ldl8eizkK5m4hPhOP9+B g4dzhR7h9gHzsGVLbtld1KpKatPb86gkb/s+R0Dbo0VNWUfntj0gFj9bhYYWHtk4 LqPRetiGOBxo6Q6dPnKNPsHaJCvMcKf71EX5AhbqboiEj4RAdYx1KM98RJb0104a 8x3OGbCEocZc/JE4u+fu2zpPpcpen9FwuYkuL1ekRfRu -----END CERTIFICATE-----Generated at Tue Feb 3 06:34:48 2026 by rpki-client