This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/li2pLGYGTHJU0nX6NPyK8ZimzYI.roa File: li2pLGYGTHJU0nX6NPyK8ZimzYI.roa (raw, json) Hash identifier: q4zS4mAaPqzJqvAYUQOBNCHzaSO7fNfwhOXILVYm5CA= Subject key identifier: 96:2D:A9:2C:66:06:4C:72:54:D2:75:FA:34:FC:8A:F1:98:A6:CD:82 Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5AF8904D1B2EB55FE97F4F204AFAB6 Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/li2pLGYGTHJU0nX6NPyK8ZimzYI.roa Signing time: Fri 02 Jan 2026 06:17:52 +0000 ROA not before: Fri 02 Jan 2026 06:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22773 IP address blocks: 89.34.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:f8:90:4d:1b:2e:b5:5f:e9:7f:4f:20:4a:fa:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=962da92c66064c7254d275fa34fc8af198a6cd82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f4:59:8f:0b:a1:4e:02:d2:af:42:01:92:1f: 4d:7a:2b:20:13:5b:b4:31:12:e2:c3:74:9b:6b:03: 7a:b1:d6:04:ba:c3:77:bb:a5:3b:6c:78:65:39:db: 1b:97:23:f7:ba:68:4a:5f:5d:78:28:4f:01:fc:50: f0:dc:52:36:43:18:b7:94:af:28:f6:2b:40:d8:97: 4d:a7:eb:56:56:73:7a:12:a9:79:df:f8:82:4d:ff: 54:8e:36:8c:fd:40:65:ca:68:b6:ea:95:ad:02:1b: a8:3a:04:04:4d:90:47:dd:d4:bf:65:97:d8:da:5c: 33:7b:e9:88:b0:61:24:f2:fd:ea:e2:1a:0c:6c:24: 75:66:32:69:f2:0f:eb:d6:96:65:71:2d:16:69:57: 45:a0:e7:fa:d8:9e:3c:b5:d4:b5:f1:94:a1:6f:d5: 73:48:ed:e6:c2:e2:28:e1:8b:49:58:4d:ad:e4:8e: 10:30:9b:12:3d:7b:23:28:95:bc:ac:c7:98:dd:93: a4:67:4e:41:be:ad:2d:78:b7:5b:c0:e1:a0:f4:e4: 83:4d:81:67:e6:0a:f9:72:0a:98:49:01:b1:36:9f: 09:0b:63:16:26:56:8c:98:b1:38:52:61:0a:f4:54: 77:fc:e2:40:b4:26:40:c5:51:26:f2:ed:52:63:a9: fe:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2D:A9:2C:66:06:4C:72:54:D2:75:FA:34:FC:8A:F1:98:A6:CD:82 X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/li2pLGYGTHJU0nX6NPyK8ZimzYI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.34.224.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:68:54:e3:f9:05:65:f4:a5:82:ed:d0:c4:28:38:8f:89:28: 01:d2:e2:da:ea:99:f3:37:31:8d:31:fb:26:a7:66:ff:18:02: 91:01:ff:75:40:91:96:11:23:ed:43:d3:1a:ed:01:1e:dd:d6: 22:1c:a3:92:89:0c:a2:17:dc:6e:46:8e:c3:36:6a:0d:bb:4c: 67:61:47:f1:4c:e7:18:48:35:7b:cf:fa:9d:82:63:18:92:06: a5:c6:f8:47:80:2b:e2:61:ba:dc:48:69:13:4f:b8:75:81:03: 80:e9:1b:35:1b:44:64:4f:f6:b3:a0:e0:53:fe:dd:07:53:7b: 12:93:8a:52:b1:62:8f:ae:92:f1:45:37:9e:59:ac:45:62:a6: 87:2c:f9:c1:59:b0:de:45:d4:82:07:d3:52:8c:c2:8c:2e:4b: 79:0c:9f:ad:36:f1:1b:b8:78:37:b1:f5:d5:43:f1:b6:03:42: 8c:db:b9:43:50:df:87:05:36:34:89:ee:78:94:a6:b7:0d:c7: db:c7:99:38:e7:43:08:6d:50:9b:d0:26:d5:32:09:9d:be:09: 07:79:95:1b:8b:31:13:20:99:d3:c8:09:f4:ce:2a:7b:c6:2c: 13:fe:28:45:19:29:8c:dc:a9:76:c5:f0:c7:37:c6:bc:bd:b2: ae:77:75:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WviQTRsutV/pf08gSvq2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjJkYTkyYzY2MDY0YzcyNTRkMjc1ZmEzNGZjOGFmMTk4YTZjZDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfRZjwuhTgLSr0IBkh9NeisgE1u0 MRLiw3SbawN6sdYEusN3u6U7bHhlOdsblyP3umhKX114KE8B/FDw3FI2Qxi3lK8o 9itA2JdNp+tWVnN6Eql53/iCTf9UjjaM/UBlymi26pWtAhuoOgQETZBH3dS/ZZfY 2lwze+mIsGEk8v3q4hoMbCR1ZjJp8g/r1pZlcS0WaVdFoOf62J48tdS18ZShb9Vz SO3mwuIo4YtJWE2t5I4QMJsSPXsjKJW8rMeY3ZOkZ05Bvq0teLdbwOGg9OSDTYFn 5gr5cgqYSQGxNp8JC2MWJlaMmLE4UmEK9FR3/OJAtCZAxVEm8u1SY6n+KQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJYtqSxmBkxyVNJ1+jT8ivGYps2CMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvbGkycExHWUdUSEpVMG5YNk5QeUs4WmltellJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWSLgMA0G CSqGSIb3DQEBCwUAA4IBAQBbaFTj+QVl9KWC7dDEKDiPiSgB0uLa6pnzNzGNMfsm p2b/GAKRAf91QJGWESPtQ9Ma7QEe3dYiHKOSiQyiF9xuRo7DNmoNu0xnYUfxTOcY SDV7z/qdgmMYkgalxvhHgCviYbrcSGkTT7h1gQOA6Rs1G0RkT/azoOBT/t0HU3sS k4pSsWKPrpLxRTeeWaxFYqaHLPnBWbDeRdSCB9NSjMKMLkt5DJ+tNvEbuHg3sfXV Q/G2A0KM27lDUN+HBTY0ie54lKa3Dcfbx5k450MIbVCb0CbVMgmdvgkHeZUbizET IJnTyAn0zip7xiwT/ihFGSmM3Kl2xfDHN8a8vbKud3WW -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:15 2026 by rpki-client