This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/liE4awLV9IZqJvS8kuTm0XKDgXg.roa File: liE4awLV9IZqJvS8kuTm0XKDgXg.roa (raw, json) Hash identifier: llMUaUp6aUG5sjUJHzI9hrhhVzTQNRZ79kTDVPPAFyc= Subject key identifier: 96:21:38:6B:02:D5:F4:86:6A:26:F4:BC:92:E4:E6:D1:72:83:81:78 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C138B67EDBE529367F0CC8FA6CF80D8 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/liE4awLV9IZqJvS8kuTm0XKDgXg.roa Signing time: Fri 02 Jan 2026 00:20:14 +0000 ROA not before: Fri 02 Jan 2026 00:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207046 IP address blocks: 45.134.84.0/22 maxlen: 24 80.71.155.0/24 maxlen: 24 178.212.225.0/24 maxlen: 24 185.221.16.0/23 maxlen: 23 185.224.220.0/22 maxlen: 22 185.227.206.0/24 maxlen: 24 185.227.207.0/24 maxlen: 24 185.247.4.0/22 maxlen: 24 185.247.5.0/24 maxlen: 24 185.247.6.0/23 maxlen: 24 185.247.7.0/24 maxlen: 24 185.249.204.0/22 maxlen: 22 185.250.182.0/23 maxlen: 24 194.113.28.0/22 maxlen: 24 194.146.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:8b:67:ed:be:52:93:67:f0:cc:8f:a6:cf:80:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9621386b02d5f4866a26f4bc92e4e6d172838178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:74:b5:3a:3b:59:d2:05:e1:be:e4:53:c4:7f: 94:2a:10:7a:fe:ee:bd:26:28:f9:1e:e8:fb:75:bc: 4b:95:d0:bc:8e:04:23:08:ed:0c:fc:20:44:05:a8: ca:49:89:0e:37:d9:0b:2d:d1:84:60:9d:11:a5:43: 16:76:48:03:63:7b:5c:23:a6:1c:66:28:db:06:fe: 41:cf:f7:58:cd:ea:40:10:22:ba:e1:92:51:e2:18: bb:7f:52:49:14:51:9e:08:d3:18:07:84:43:98:13: 55:f0:7f:05:7f:29:a3:a5:42:6e:64:9c:c4:b7:47: 65:9e:9e:6f:49:8d:94:49:bf:04:54:06:1d:94:53: 96:85:36:54:aa:d6:0e:fb:f5:b9:61:c4:ca:21:b6: 68:11:c5:67:00:77:5f:f4:2f:0c:83:35:12:37:c0: 8a:1f:99:7d:87:22:6b:28:65:59:e6:bc:72:af:d3: 6a:eb:4e:a2:ad:79:04:12:8b:3f:6e:96:bf:54:e5: 1c:c7:0e:bb:a4:63:9d:76:e1:9d:38:f9:73:ec:c6: 8a:3c:81:f3:a9:51:01:93:c5:db:64:a5:25:2b:75: 11:1a:d5:73:e5:5c:3c:3e:e2:b3:25:c6:40:6d:58: fe:fc:7c:48:b2:0a:a0:00:92:78:31:aa:39:06:81: 7f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:21:38:6B:02:D5:F4:86:6A:26:F4:BC:92:E4:E6:D1:72:83:81:78 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/liE4awLV9IZqJvS8kuTm0XKDgXg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.84.0/22 80.71.155.0/24 178.212.225.0/24 185.221.16.0/23 185.224.220.0/22 185.227.206.0/23 185.247.4.0/22 185.249.204.0/22 185.250.182.0/23 194.113.28.0/22 194.146.220.0/22 Signature Algorithm: sha256WithRSAEncryption aa:c7:2e:42:b2:64:0b:99:97:5a:98:64:21:a6:7b:25:fd:7c: 0f:d8:ee:7d:d3:33:e8:11:15:59:98:49:7f:24:3a:39:96:5b: 4e:68:dc:c7:73:3a:7c:1a:1a:23:b3:59:93:b4:af:8c:5e:d1: 67:a5:2a:4a:66:f2:6d:4c:36:40:df:5c:27:cc:c8:40:33:21: d5:96:57:c9:f9:2a:e4:bc:d6:cc:05:45:9f:72:57:0a:e8:82: 11:64:8f:f2:1b:f6:e6:6d:29:bd:3a:65:07:61:5c:55:1e:87: 5e:88:91:2a:35:b4:29:b6:ea:0d:5c:0e:42:6f:a1:90:51:56: 98:e0:c1:1f:d6:4c:a0:f2:df:17:da:ab:74:69:76:e9:a3:4a: 42:4c:61:cd:9e:37:b5:dc:e4:95:df:af:f3:a0:d2:6e:73:19: f2:76:74:73:80:1e:9d:f2:58:d1:d2:ee:3c:3c:ad:76:cb:63: fb:8c:37:49:e7:07:f3:51:32:95:c2:cd:f6:a1:b5:a1:79:a4: 30:25:71:7f:68:d6:e1:fd:fe:8b:6e:21:21:c2:91:31:14:a2: 83:84:02:f6:5f:f8:dc:c7:c1:5b:38:75:d8:f0:29:67:5d:90: 03:d1:63:4c:3d:58:bf:56:11:8f:0a:43:80:fb:43:24:e8:39: 1b:3d:60:e7 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt8E4tn7b5Sk2fwzI+mz4DYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjIxMzg2YjAyZDVmNDg2NmEyNmY0YmM5MmU0ZTZkMTcyODM4MTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3S1OjtZ0gXhvuRTxH+UKhB6/u69 Jij5Huj7dbxLldC8jgQjCO0M/CBEBajKSYkON9kLLdGEYJ0RpUMWdkgDY3tcI6Yc ZijbBv5Bz/dYzepAECK64ZJR4hi7f1JJFFGeCNMYB4RDmBNV8H8FfymjpUJuZJzE t0dlnp5vSY2USb8EVAYdlFOWhTZUqtYO+/W5YcTKIbZoEcVnAHdf9C8MgzUSN8CK H5l9hyJrKGVZ5rxyr9Nq606irXkEEos/bpa/VOUcxw67pGOdduGdOPlz7MaKPIHz qVEBk8XbZKUlK3URGtVz5Vw8PuKzJcZAbVj+/HxIsgqgAJJ4Mao5BoF/oQIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFJYhOGsC1fSGaib0vJLk5tFyg4F4MB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvbGlFNGF3TFY5SVpxSnZTOGt1VG0wWEtEZ1hnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQCLYZUAwQA UEebAwQAstThAwQBud0QAwQCueDcAwQBuePOAwQCufcEAwQCufnMAwQBufq2AwQC wnEcAwQCwpLcMA0GCSqGSIb3DQEBCwUAA4IBAQCqxy5CsmQLmZdamGQhpnsl/XwP 2O590zPoERVZmEl/JDo5lltOaNzHczp8Ghojs1mTtK+MXtFnpSpKZvJtTDZA31wn zMhAMyHVllfJ+SrkvNbMBUWfclcK6IIRZI/yG/bmbSm9OmUHYVxVHodeiJEqNbQp tuoNXA5Cb6GQUVaY4MEf1kyg8t8X2qt0aXbpo0pCTGHNnje13OSV36/zoNJucxny dnRzgB6d8ljR0u48PK12y2P7jDdJ5wfzUTKVws32obWheaQwJXF/aNbh/f6LbiEh wpExFKKDhAL2X/jcx8FbOHXY8ClnXZAD0WNMPVi/VhGPCkOA+0Mk6DkbPWDn -----END CERTIFICATE-----Generated at Sun Jan 25 14:39:33 2026 by rpki-client