This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/LiXlLYugCW3RvOnr1LPH06hCFi0.roa File: LiXlLYugCW3RvOnr1LPH06hCFi0.roa (raw, json) Hash identifier: AkKrdcEERtDNg9ZG/4NBwA8HSdB0PAY609q2G2KM1cI= Subject key identifier: 2E:25:E5:2D:8B:A0:09:6D:D1:BC:E9:EB:D4:B3:C7:D3:A8:42:16:2D Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88 Certificate serial: 019A87D5F5C0EC40A667248D10F39539B501 Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/LiXlLYugCW3RvOnr1LPH06hCFi0.roa Signing time: Sat 15 Nov 2025 14:05:37 +0000 ROA not before: Sat 15 Nov 2025 14:05:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211421 IP address blocks: 94.184.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:87:d5:f5:c0:ec:40:a6:67:24:8d:10:f3:95:39:b5:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88 Validity Not Before: Nov 15 14:05:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2e25e52d8ba0096dd1bce9ebd4b3c7d3a842162d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4a:03:c6:4f:ce:fe:57:12:10:fd:b4:d3:71: 02:f7:6e:ba:1c:e0:71:83:92:9d:f2:9d:a1:ca:09: d3:bf:38:13:61:09:9e:7d:54:8a:87:95:64:e4:fb: 42:6e:40:76:07:09:5e:c4:78:ed:83:86:32:eb:ac: 0b:d0:0a:19:06:bc:ed:df:88:f8:9f:8f:5c:95:03: 73:09:83:c9:c6:56:e3:f2:5b:2f:59:ef:cb:19:43: fc:19:c4:50:fb:27:6d:3d:4e:fe:a8:b7:d7:56:1c: a3:fe:69:70:b8:2f:a5:ff:b5:a0:4a:29:e7:3a:7f: f1:43:97:07:df:b8:aa:17:4f:09:33:3a:d7:f6:ba: 85:f4:08:f6:d7:84:4c:e6:75:6d:7f:6f:f3:13:fb: d9:9f:6c:d3:65:93:45:ad:1a:0b:89:d3:8b:f7:fb: 77:39:95:d9:5c:2b:2e:b6:2a:21:08:7a:91:48:69: 9a:f1:db:7f:da:15:55:fc:6c:1e:89:6c:5b:a4:1e: bf:41:4d:55:c8:4d:d7:ec:69:90:69:e2:55:f1:e2: 3d:c3:9b:18:31:80:e4:4f:f1:58:ac:34:9a:68:3b: 32:0f:72:fc:b2:69:3a:68:9b:84:49:58:72:51:2d: 5e:a2:a4:fa:48:7c:e4:54:7b:3f:fc:56:0c:60:00: e3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:25:E5:2D:8B:A0:09:6D:D1:BC:E9:EB:D4:B3:C7:D3:A8:42:16:2D X509v3 Authority Key Identifier: keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/LiXlLYugCW3RvOnr1LPH06hCFi0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.184.16.0/24 Signature Algorithm: sha256WithRSAEncryption 41:f7:3b:9b:cc:f9:05:b6:53:14:b8:f6:e7:4e:c7:54:0b:6d: 14:74:2e:9e:14:15:6c:cc:4f:ca:81:c1:aa:29:9d:5a:56:6e: e0:43:86:fa:5f:32:9c:c7:78:8b:77:89:7b:93:62:7e:d9:31: 3d:b2:82:8d:e7:95:08:0b:8d:bc:43:a9:a5:44:9c:6f:85:70: 6c:e8:65:56:d3:50:ad:84:e9:fa:07:f5:b9:bd:48:21:82:84: 92:d0:5a:a5:64:16:19:8d:c6:27:68:0c:63:d7:5f:3a:1c:3c: 73:4f:89:86:d6:32:ae:ab:d0:bd:57:04:98:11:ba:9d:b2:dd: ee:97:9f:c7:ba:40:e0:0c:c1:ba:a8:9c:28:57:2e:96:e6:7a: a5:24:4b:9d:40:09:27:32:e4:49:70:52:9a:ca:c1:cc:9d:3e: c0:d4:bd:a1:3c:d2:76:c5:f9:3a:d3:e8:ed:a9:68:22:ff:a4: b9:55:dc:5c:62:e7:7c:c4:c5:dd:3f:dd:9e:0a:c7:66:02:80: 36:70:d0:76:dc:aa:59:03:0d:c7:33:43:53:4e:3b:4e:3f:36: b9:df:37:ca:71:a3:1e:70:86:ee:37:61:a0:73:d3:b3:f2:8a: 88:94:50:ac:c3:64:f6:22:9b:5f:fc:f6:1f:84:64:6d:9e:9b: b5:a2:97:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqH1fXA7ECmZySNEPOVObUBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3 YjBhODgwHhcNMjUxMTE1MTQwNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTI1ZTUyZDhiYTAwOTZkZDFiY2U5ZWJkNGIzYzdkM2E4NDIxNjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUoDxk/O/lcSEP2003EC9266HOBx g5Kd8p2hygnTvzgTYQmefVSKh5Vk5PtCbkB2BwlexHjtg4Yy66wL0AoZBrzt34j4 n49clQNzCYPJxlbj8lsvWe/LGUP8GcRQ+ydtPU7+qLfXVhyj/mlwuC+l/7WgSinn On/xQ5cH37iqF08JMzrX9rqF9Aj214RM5nVtf2/zE/vZn2zTZZNFrRoLidOL9/t3 OZXZXCsutiohCHqRSGma8dt/2hVV/GweiWxbpB6/QU1VyE3X7GmQaeJV8eI9w5sY MYDkT/FYrDSaaDsyD3L8smk6aJuESVhyUS1eoqT6SHzkVHs//FYMYADjCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC4l5S2LoAlt0bzp69Szx9OoQhYtMB8GA1UdIwQY MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt ZGE2MTUzODg1ZjNiLzEvTGlYbExZdWdDVzNSdk9ucjFMUEgwNmhDRmkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXrgQMA0G CSqGSIb3DQEBCwUAA4IBAQBB9zubzPkFtlMUuPbnTsdUC20UdC6eFBVszE/KgcGq KZ1aVm7gQ4b6XzKcx3iLd4l7k2J+2TE9soKN55UIC428Q6mlRJxvhXBs6GVW01Ct hOn6B/W5vUghgoSS0FqlZBYZjcYnaAxj1186HDxzT4mG1jKuq9C9VwSYEbqdst3u l5/HukDgDMG6qJwoVy6W5nqlJEudQAknMuRJcFKaysHMnT7A1L2hPNJ2xfk60+jt qWgi/6S5VdxcYud8xMXdP92eCsdmAoA2cNB23KpZAw3HM0NTTjtOPza53zfKcaMe cIbuN2Ggc9Oz8oqIlFCsw2T2Iptf/PYfhGRtnpu1opcx -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:09 2025 by rpki-client