This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lIzwuWFpzxPxb9jStXK8LaPUJFc.roa File: lIzwuWFpzxPxb9jStXK8LaPUJFc.roa (raw, json) Hash identifier: aR2O5i+BsDz/YPRbd06DtuTqsD7P0XDIvZjcQS1XOGc= Subject key identifier: 94:8C:F0:B9:61:69:CF:13:F1:6F:D8:D2:B5:72:BC:2D:A3:D4:24:57 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B265E43DA09764DB832DF5C1E68C48D8B Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lIzwuWFpzxPxb9jStXK8LaPUJFc.roa Signing time: Tue 16 Dec 2025 08:54:30 +0000 ROA not before: Tue 16 Dec 2025 08:54:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202911 IP address blocks: 94.156.153.0/24 maxlen: 32 212.73.146.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:5e:43:da:09:76:4d:b8:32:df:5c:1e:68:c4:8d:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Dec 16 08:54:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=948cf0b96169cf13f16fd8d2b572bc2da3d42457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3f:5e:ad:9b:e4:25:b9:4d:82:d9:a8:a2:ba: e7:c8:b9:f5:c0:78:09:55:5f:32:d5:21:d3:2d:35: 1a:bd:84:4f:1e:de:f2:14:f7:5b:b9:8d:3c:25:46: 6d:73:a0:77:fc:a1:8e:59:8b:4b:63:d1:9f:e9:8e: 0a:c7:4b:5a:4d:38:83:69:b4:13:c9:6d:81:4a:f1: 13:30:f8:bf:a8:de:16:83:bd:be:c9:5e:5e:f1:3f: 32:8e:8b:b0:e0:3c:a9:0f:fd:af:96:42:70:70:cc: 34:5d:03:2f:02:08:26:e5:cd:5a:69:d3:5d:d1:16: 6e:bc:31:6d:65:8a:03:06:ed:00:7d:0d:08:4d:48: b7:e7:7b:ad:81:2f:95:73:2a:a9:5b:e6:05:4d:eb: c7:c9:66:ae:ad:f1:af:ea:82:a2:11:3f:30:5f:b0: ba:99:93:9e:55:92:6c:cb:0d:58:72:28:c3:55:99: 01:b1:9d:4b:1f:68:fd:0f:e4:37:8a:a1:84:b5:eb: 28:03:b1:ae:68:8b:64:31:d4:ee:e6:7c:15:e8:0f: b3:6b:ba:79:69:c7:9c:1a:73:68:2c:eb:9c:03:53: e5:a0:fb:9c:a2:5e:43:db:4b:b8:2d:5c:40:ff:09: e1:3d:5e:9e:e3:fd:7e:48:ea:d9:f0:96:3d:60:ac: 40:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:8C:F0:B9:61:69:CF:13:F1:6F:D8:D2:B5:72:BC:2D:A3:D4:24:57 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lIzwuWFpzxPxb9jStXK8LaPUJFc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.156.153.0/24 212.73.146.0/24 Signature Algorithm: sha256WithRSAEncryption 52:bd:44:e5:b6:6e:4f:ed:20:76:d0:f2:a7:7a:b2:13:6a:22: 85:ce:d9:7d:0f:36:7e:9a:b0:81:97:b7:8a:0d:7c:86:d3:c1: 87:4e:29:35:da:90:b9:0b:9f:aa:0e:42:51:00:17:f0:ba:83: 8f:0d:8b:79:4a:a4:63:81:70:25:45:e1:06:c0:1b:f6:65:f0: 31:ac:d9:56:ea:5e:fb:57:71:97:9c:f5:f5:2e:8e:e2:0a:c4: d3:1b:ce:fc:a6:07:3a:75:af:d3:ce:b4:4b:24:cd:2b:1d:61: ac:e3:61:6d:c8:83:00:46:96:76:c6:ec:53:49:69:49:53:db: 8c:41:83:bb:ce:ed:06:9f:bb:1a:35:d0:df:b0:d1:86:42:8a: e8:4a:4b:eb:49:7c:25:1b:60:32:77:71:bb:c9:ed:ae:55:f0: d0:e6:63:34:b8:e5:77:8f:52:84:d1:6a:7e:c7:7a:f0:94:62: fa:13:74:f2:2b:3d:9d:98:3d:ac:92:c5:42:cb:ac:cd:04:12: 6c:ac:45:a4:4e:4c:cb:15:75:41:c6:e0:26:ad:cb:33:e6:99: ed:22:64:d5:ef:80:0d:91:c0:af:59:7b:9e:0f:a1:f0:64:9c: 58:6a:52:4e:76:6c:43:da:89:a9:8a:0e:16:2e:e1:bf:4f:85: 36:1b:46:70 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsmXkPaCXZNuDLfXB5oxI2LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUxMjE2MDg1NDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDhjZjBiOTYxNjljZjEzZjE2ZmQ4ZDJiNTcyYmMyZGEzZDQyNDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD9erZvkJblNgtmoorrnyLn1wHgJ VV8y1SHTLTUavYRPHt7yFPdbuY08JUZtc6B3/KGOWYtLY9Gf6Y4Kx0taTTiDabQT yW2BSvETMPi/qN4Wg72+yV5e8T8yjouw4DypD/2vlkJwcMw0XQMvAggm5c1aadNd 0RZuvDFtZYoDBu0AfQ0ITUi353utgS+VcyqpW+YFTevHyWaurfGv6oKiET8wX7C6 mZOeVZJsyw1YcijDVZkBsZ1LH2j9D+Q3iqGEtesoA7GuaItkMdTu5nwV6A+za7p5 acecGnNoLOucA1PloPucol5D20u4LVxA/wnhPV6e4/1+SOrZ8JY9YKxAPwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJSM8Llhac8T8W/Y0rVyvC2j1CRXMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvbEl6d3VXRnB6eFB4YjlqU3RYSzhMYVBVSkZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXpyZAwQA 1EmSMA0GCSqGSIb3DQEBCwUAA4IBAQBSvUTltm5P7SB20PKnerITaiKFztl9DzZ+ mrCBl7eKDXyG08GHTik12pC5C5+qDkJRABfwuoOPDYt5SqRjgXAlReEGwBv2ZfAx rNlW6l77V3GXnPX1Lo7iCsTTG878pgc6da/TzrRLJM0rHWGs42FtyIMARpZ2xuxT SWlJU9uMQYO7zu0Gn7saNdDfsNGGQoroSkvrSXwlG2Ayd3G7ye2uVfDQ5mM0uOV3 j1KE0Wp+x3rwlGL6E3TyKz2dmD2sksVCy6zNBBJsrEWkTkzLFXVBxuAmrcsz5pnt ImTV74ANkcCvWXueD6HwZJxYalJOdmxD2ompig4WLuG/T4U2G0Zw -----END CERTIFICATE-----Generated at Thu Dec 18 17:28:31 2025 by rpki-client