This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/LniVIZPVqDjtGqQsgtfECMvLFiI.roa File: LniVIZPVqDjtGqQsgtfECMvLFiI.roa (raw, json) Hash identifier: nWPmaor4o5xx2suv6AtUtVGt3Gd+FGEs6l29HyDkYVA= Subject key identifier: 2E:78:95:21:93:D5:A8:38:ED:1A:A4:2C:82:D7:C4:08:CB:CB:16:22 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B201ED4E3685F403EA5A91850DBCEA1A1 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/LniVIZPVqDjtGqQsgtfECMvLFiI.roa Signing time: Mon 15 Dec 2025 03:47:30 +0000 ROA not before: Mon 15 Dec 2025 03:47:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401776 IP address blocks: 212.134.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:1e:d4:e3:68:5f:40:3e:a5:a9:18:50:db:ce:a1:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Dec 15 03:47:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2e78952193d5a838ed1aa42c82d7c408cbcb1622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cd:c3:ce:cd:55:67:8d:55:88:ff:fc:f4:c6: 92:77:64:e8:6f:41:e9:a8:1a:f1:e3:83:86:af:2a: a5:0c:74:97:c6:18:5e:28:52:55:30:72:cf:da:b9: 0a:47:a5:95:5e:48:d4:77:87:4c:f7:aa:60:ce:8f: 3e:e9:f5:d3:f7:89:f1:a3:a4:5e:8c:c8:52:ac:e8: 99:60:c9:1b:01:e3:45:4c:d3:34:f2:5c:a6:f2:0c: 8a:3a:8e:5e:e6:53:e7:54:20:4a:d9:56:75:d8:b8: 6e:88:57:76:be:67:3f:f8:2e:5f:b8:f9:8f:10:cc: 65:10:00:e0:99:fb:78:f0:0e:db:67:a4:d9:7c:9c: 9b:e5:d9:fa:77:c5:c8:83:58:28:50:0d:c0:1d:a2: ba:b6:89:3a:bc:e0:25:1b:4b:ed:0d:af:11:fd:2e: f8:7f:89:6e:e7:30:b0:64:8b:d2:14:a3:33:10:48: 25:76:b0:6f:1f:39:7f:1d:63:3f:53:8b:a2:af:c6: b3:09:15:d1:eb:7e:3d:cf:66:4c:24:c7:70:36:aa: de:e3:89:5b:51:b4:6e:b7:99:d8:02:dc:27:2d:aa: 63:4a:30:df:9b:95:bf:75:ef:17:f0:74:0d:9c:97: c9:94:1e:51:b2:41:7f:a5:00:9b:6b:f0:d2:bf:9d: 11:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:78:95:21:93:D5:A8:38:ED:1A:A4:2C:82:D7:C4:08:CB:CB:16:22 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/LniVIZPVqDjtGqQsgtfECMvLFiI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.18.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:d8:da:4f:c8:39:07:58:00:4d:41:87:db:33:de:04:86:2f: fd:54:99:da:90:ff:95:37:28:96:a4:75:cc:e8:62:6a:61:fc: 8a:54:bb:fe:f9:b8:fe:49:e8:64:ab:21:c6:30:a0:c5:94:0e: 30:74:f0:e8:b6:00:37:86:a9:d9:56:b1:1d:ce:e7:1b:9f:27: b4:dc:57:16:3e:08:92:5b:1a:10:e2:f9:1c:d6:1c:e2:c3:2f: 33:28:51:09:c7:bf:0d:e0:84:4f:75:4c:ae:56:c0:e6:3e:d1: b4:f5:45:9d:d1:c1:6f:fb:bc:32:f8:32:df:63:cd:69:4a:ab: 2d:50:dd:e6:89:ef:ca:4c:fc:67:92:f0:2f:f0:9b:e8:76:1b: cd:73:2d:fb:5f:64:cd:3c:b5:3e:a8:0c:49:30:82:a8:ea:75: 4a:d5:d0:32:f8:f5:99:1e:51:40:da:8a:99:aa:44:46:47:76: a4:c1:25:8d:02:63:14:74:dc:c3:bc:c9:2b:84:d8:4a:a7:1a: f3:2b:1f:af:75:3d:a2:19:fd:0b:be:4e:9d:45:25:43:65:46: 5c:d6:42:6c:05:65:db:7a:c0:d1:05:0d:59:e1:13:52:84:f1: 9c:79:26:54:9b:eb:6c:47:4a:4b:7b:be:77:13:a4:ff:7a:a7: 4b:35:d1:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsgHtTjaF9APqWpGFDbzqGhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMjE1MDM0NzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTc4OTUyMTkzZDVhODM4ZWQxYWE0MmM4MmQ3YzQwOGNiY2IxNjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM3Dzs1VZ41ViP/89MaSd2Tob0Hp qBrx44OGryqlDHSXxhheKFJVMHLP2rkKR6WVXkjUd4dM96pgzo8+6fXT94nxo6Re jMhSrOiZYMkbAeNFTNM08lym8gyKOo5e5lPnVCBK2VZ12LhuiFd2vmc/+C5fuPmP EMxlEADgmft48A7bZ6TZfJyb5dn6d8XIg1goUA3AHaK6tok6vOAlG0vtDa8R/S74 f4lu5zCwZIvSFKMzEEgldrBvHzl/HWM/U4uir8azCRXR6349z2ZMJMdwNqre44lb UbRut5nYAtwnLapjSjDfm5W/de8X8HQNnJfJlB5RskF/pQCba/DSv50RBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC54lSGT1ag47RqkLILXxAjLyxYiMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvTG5pVklaUFZxRGp0R3FRc2d0ZkVDTXZMRmlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IYSMA0G CSqGSIb3DQEBCwUAA4IBAQA72NpPyDkHWABNQYfbM94Ehi/9VJnakP+VNyiWpHXM 6GJqYfyKVLv++bj+SehkqyHGMKDFlA4wdPDotgA3hqnZVrEdzucbnye03FcWPgiS WxoQ4vkc1hziwy8zKFEJx78N4IRPdUyuVsDmPtG09UWd0cFv+7wy+DLfY81pSqst UN3mie/KTPxnkvAv8JvodhvNcy37X2TNPLU+qAxJMIKo6nVK1dAy+PWZHlFA2oqZ qkRGR3akwSWNAmMUdNzDvMkrhNhKpxrzKx+vdT2iGf0Lvk6dRSVDZUZc1kJsBWXb esDRBQ1Z4RNShPGceSZUm+tsR0pLe753E6T/eqdLNdFC -----END CERTIFICATE-----Generated at Sat Dec 20 07:42:56 2025 by rpki-client