This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/DLPawj2OgKUwkgMYVqxK640ZM5M.roa File: DLPawj2OgKUwkgMYVqxK640ZM5M.roa (raw, json) Hash identifier: j4U5ZtGc0iAMwMjKy2gODe5wP1RecXvOyD9/RnVr/+s= Subject key identifier: 0C:B3:DA:C2:3D:8E:80:A5:30:92:03:18:56:AC:4A:EB:8D:19:33:93 Certificate issuer: /CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a Certificate serial: 019B7EA746940B5627517E8757A4CEF1F402 Authority key identifier: 23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/DLPawj2OgKUwkgMYVqxK640ZM5M.roa Signing time: Fri 02 Jan 2026 12:20:50 +0000 ROA not before: Fri 02 Jan 2026 12:20:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1759 IP address blocks: 193.143.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:46:94:0b:56:27:51:7e:87:57:a4:ce:f1:f4:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a Validity Not Before: Jan 2 12:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0cb3dac23d8e80a53092031856ac4aeb8d193393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4d:f3:aa:f9:0b:32:18:42:24:a8:e7:01:47: e6:0b:4b:6d:23:28:fc:ed:2e:04:16:53:21:bb:e1: eb:96:f6:e9:3f:2c:02:72:85:ac:f9:62:5e:d1:22: ef:a4:33:22:ab:d8:83:ce:1e:e6:ce:9a:fa:0e:e5: b8:84:30:53:3d:e5:a3:bc:18:d9:51:ca:60:26:91: cb:a5:bc:e4:78:2d:da:58:9c:a9:dd:3f:15:fc:8a: c5:1a:8a:46:33:1d:9e:d8:d3:32:1e:9f:6e:32:3c: 83:01:e8:26:3f:48:86:a4:79:f4:3c:a6:46:69:29: 06:3f:93:f0:08:78:b9:46:9a:19:2c:26:45:ac:a5: c1:c7:c4:84:65:98:4d:38:25:de:7d:0b:c2:87:10: d9:e5:a9:c9:e6:e7:ae:3b:ad:2d:43:01:98:6e:c5: 4c:19:b8:c9:6f:0e:64:b5:4a:f3:5b:d5:0d:80:31: 3d:ec:af:ac:08:09:95:57:c8:4d:a1:b9:0f:f6:83: 0f:df:95:90:5c:eb:8e:65:52:98:a6:82:54:18:7f: 9b:c0:b1:7e:d8:56:26:37:21:54:61:05:25:ca:cc: b3:db:b3:11:ff:ea:5f:b6:49:5f:e9:bd:69:80:7d: 40:f0:a7:c2:ed:fe:6b:c4:25:32:07:94:d2:18:2a: b1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B3:DA:C2:3D:8E:80:A5:30:92:03:18:56:AC:4A:EB:8D:19:33:93 X509v3 Authority Key Identifier: keyid:23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/DLPawj2OgKUwkgMYVqxK640ZM5M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.143.115.0/24 Signature Algorithm: sha256WithRSAEncryption 37:a1:67:a4:5d:5d:54:1e:ec:fd:6d:f3:63:26:30:76:38:78: e5:0d:49:34:54:9d:c0:6d:49:ba:4e:d1:c1:4e:72:1c:b6:63: 14:7e:c7:6f:c2:a1:45:09:28:2a:c8:ee:f1:92:c8:3d:8f:39: 9f:07:03:7c:61:c0:a3:f7:81:5f:bc:b4:76:cf:ae:1a:10:04: ab:27:91:3d:c7:d3:3d:9e:1d:86:bc:50:c8:38:f3:91:82:f5: cb:29:df:f2:1e:a7:90:c7:3f:7a:bf:dd:6f:68:3d:f5:41:d5: 1d:6e:04:a8:42:ad:5f:07:ba:f2:9b:f3:3f:aa:ce:5d:31:7f: fd:04:63:bd:47:ed:79:09:d4:f8:b5:7b:e1:19:9d:81:dc:9d: f3:7b:28:7e:d7:cf:df:cd:68:bd:3e:62:28:a6:05:64:a8:da: a5:bc:a9:6f:fa:68:ac:c8:b2:21:91:98:5b:5c:b0:50:32:0e: 4f:72:6f:a5:54:79:8d:cb:ef:95:04:8f:f1:57:99:70:89:fb: 7b:c4:b3:62:4a:a7:7c:74:e7:ea:c1:fe:b5:46:23:c5:74:63: 21:0a:59:a6:be:db:07:d5:81:88:d1:af:13:db:07:1e:66:13: 8c:6f:9b:ec:07:50:59:a2:4c:f5:8e:86:70:63:57:4d:d1:9c: d0:a6:06:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p0aUC1YnUX6HV6TO8fQCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzYTk4NjdlYTYwM2ZjOGNmOTJiYjViYWM2ZjI1NTcxMGUz YmYzNmEwHhcNMjYwMTAyMTIyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2IzZGFjMjNkOGU4MGE1MzA5MjAzMTg1NmFjNGFlYjhkMTkzMzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn03zqvkLMhhCJKjnAUfmC0ttIyj8 7S4EFlMhu+HrlvbpPywCcoWs+WJe0SLvpDMiq9iDzh7mzpr6DuW4hDBTPeWjvBjZ UcpgJpHLpbzkeC3aWJyp3T8V/IrFGopGMx2e2NMyHp9uMjyDAegmP0iGpHn0PKZG aSkGP5PwCHi5RpoZLCZFrKXBx8SEZZhNOCXefQvChxDZ5anJ5ueuO60tQwGYbsVM GbjJbw5ktUrzW9UNgDE97K+sCAmVV8hNobkP9oMP35WQXOuOZVKYpoJUGH+bwLF+ 2FYmNyFUYQUlysyz27MR/+pftklf6b1pgH1A8KfC7f5rxCUyB5TSGCqxBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAyz2sI9joClMJIDGFasSuuNGTOTMB8GA1UdIwQY MBaAFCOphn6mA/yM+Su1usbyVXEOO/NqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTZtR2ZxWURfSXo1SzdXNnh2SlZjUTQ3ODJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82ZWNlNWItMzYwZi00YmU0LWFhNjEt NTk0YTI3ZGIxNDZiLzEvRExQYXdqMk9nS1V3a2dNWVZxeEs2NDBaTTVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi82ZWNlNWItMzYwZi00YmU0LWFhNjEtNTk0YTI3ZGIxNDZi LzEvSTZtR2ZxWURfSXo1SzdXNnh2SlZjUTQ3ODJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwY9zMA0G CSqGSIb3DQEBCwUAA4IBAQA3oWekXV1UHuz9bfNjJjB2OHjlDUk0VJ3AbUm6TtHB TnIctmMUfsdvwqFFCSgqyO7xksg9jzmfBwN8YcCj94FfvLR2z64aEASrJ5E9x9M9 nh2GvFDIOPORgvXLKd/yHqeQxz96v91vaD31QdUdbgSoQq1fB7rym/M/qs5dMX/9 BGO9R+15CdT4tXvhGZ2B3J3zeyh+18/fzWi9PmIopgVkqNqlvKlv+misyLIhkZhb XLBQMg5Pcm+lVHmNy++VBI/xV5lwift7xLNiSqd8dOfqwf61RiPFdGMhClmmvtsH 1YGI0a8T2wceZhOMb5vsB1BZokz1joZwY1dN0ZzQpgYK -----END CERTIFICATE-----Generated at Mon Jan 26 00:15:57 2026 by rpki-client