This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/dl-axVZBNT2S2AVqq4VMy6ChvWw.roa File: dl-axVZBNT2S2AVqq4VMy6ChvWw.roa (raw, json) Hash identifier: 2vk0yMOZ6FOkePV9piQMN/wPC82gVBjRJ8M1zk6BgNo= Subject key identifier: 76:5F:9A:C5:56:41:35:3D:92:D8:05:6A:AB:85:4C:CB:A0:A1:BD:6C Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 019B7F8422A4304D09E12D4C9A18CE6BCF98 Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/dl-axVZBNT2S2AVqq4VMy6ChvWw.roa Signing time: Fri 02 Jan 2026 16:22:04 +0000 ROA not before: Fri 02 Jan 2026 16:22:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13195 IP address blocks: 89.6.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:22:a4:30:4d:09:e1:2d:4c:9a:18:ce:6b:cf:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Jan 2 16:22:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=765f9ac55641353d92d8056aab854ccba0a1bd6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fb:90:db:9a:47:16:cb:65:45:67:40:7c:ce: bb:ec:16:52:5f:54:f3:54:40:32:37:fb:11:ab:4c: d5:c1:0e:e9:51:31:b7:36:f7:79:aa:38:f9:42:01: 63:af:9d:10:f4:88:6d:5f:79:55:9e:c6:a7:47:46: b8:14:c7:34:90:9c:07:04:13:31:eb:da:8e:d9:d4: c8:15:4d:f8:5a:ef:8f:7b:4e:fa:64:3f:16:87:80: 24:74:96:5a:e6:ef:96:a2:fa:3e:b8:3b:b9:5a:95: 58:5c:48:42:32:cb:57:04:71:b8:b3:c7:a8:e1:84: 39:e6:92:f5:ca:63:cf:0a:19:48:76:cd:7e:2e:b4: 33:9c:f3:14:e2:2c:ee:85:1d:29:e0:60:24:ba:c6: dd:57:53:3e:87:de:8b:a9:10:6d:5d:d0:72:89:d5: 09:63:0d:3e:fa:26:95:ef:f7:70:83:c8:2a:8f:a1: 29:8d:51:ed:dc:92:76:52:b4:bd:0b:ec:b0:e6:ad: 9a:95:d3:2d:11:96:58:63:1d:e2:72:4a:4e:74:f5: 81:4c:ee:66:e3:6c:fd:81:84:55:66:f9:74:a1:4b: fd:0a:93:fe:ca:f0:57:4f:a2:24:17:8f:6d:4d:b1: 71:03:b1:89:9d:99:8a:16:7a:a1:8d:80:a4:13:14: 3f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5F:9A:C5:56:41:35:3D:92:D8:05:6A:AB:85:4C:CB:A0:A1:BD:6C X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/dl-axVZBNT2S2AVqq4VMy6ChvWw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.6.160.0/24 Signature Algorithm: sha256WithRSAEncryption ae:56:b5:ab:b8:08:83:f4:9f:25:1c:23:44:19:00:61:ba:78: 1c:8c:3e:ea:f6:92:80:e5:31:13:d1:3a:d0:70:96:59:78:87: 23:c7:0a:a7:dc:96:c4:e1:78:17:66:09:9d:97:bb:dd:fc:96: 09:e2:56:5a:3b:26:80:fa:c8:52:3f:5d:ee:2d:1e:1e:55:24: 83:d9:29:9b:40:e8:23:80:87:b6:79:8c:3b:88:3c:d3:33:6f: 02:da:1c:b8:c5:ca:09:f2:7c:67:58:8b:b3:22:b4:38:b8:f2: 99:8b:db:d1:c3:0e:4b:4a:56:3e:75:ed:f6:97:f9:fa:3b:da: 62:69:33:70:54:a9:29:df:c5:86:02:7b:e5:fc:fb:65:7a:d7: 3d:05:62:18:6f:42:bc:d6:a6:cd:d8:01:f9:5e:cd:72:d4:00: ca:9a:d4:ee:50:e5:a7:0c:8c:b9:c2:7c:4b:3d:1d:d3:d2:9a: d8:25:b5:53:be:31:af:cc:11:58:f5:eb:1a:a6:21:59:fd:82: 59:e3:73:56:a7:c9:c3:6b:71:62:a4:8c:e0:84:02:5a:00:c2: 52:c3:a6:44:4f:70:73:4d:7d:34:bd:20:62:9e:5b:6d:b6:4a: 76:df:aa:bc:fb:6b:44:f3:d7:07:59:bd:3e:f6:35:90:69:5e: 13:0e:ce:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hCKkME0J4S1MmhjOa8+YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjYwMTAyMTYyMjA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjVmOWFjNTU2NDEzNTNkOTJkODA1NmFhYjg1NGNjYmEwYTFiZDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvuQ25pHFstlRWdAfM677BZSX1Tz VEAyN/sRq0zVwQ7pUTG3Nvd5qjj5QgFjr50Q9IhtX3lVnsanR0a4FMc0kJwHBBMx 69qO2dTIFU34Wu+Pe076ZD8Wh4AkdJZa5u+Wovo+uDu5WpVYXEhCMstXBHG4s8eo 4YQ55pL1ymPPChlIds1+LrQznPMU4izuhR0p4GAkusbdV1M+h96LqRBtXdByidUJ Yw0++iaV7/dwg8gqj6EpjVHt3JJ2UrS9C+yw5q2aldMtEZZYYx3ickpOdPWBTO5m 42z9gYRVZvl0oUv9CpP+yvBXT6IkF49tTbFxA7GJnZmKFnqhjYCkExQ/CQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHZfmsVWQTU9ktgFaquFTMugob1sMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvZGwtYXhWWkJOVDJTMkFWcXE0Vk15NkNodld3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWQagMA0G CSqGSIb3DQEBCwUAA4IBAQCuVrWruAiD9J8lHCNEGQBhungcjD7q9pKA5TET0TrQ cJZZeIcjxwqn3JbE4XgXZgmdl7vd/JYJ4lZaOyaA+shSP13uLR4eVSSD2SmbQOgj gIe2eYw7iDzTM28C2hy4xcoJ8nxnWIuzIrQ4uPKZi9vRww5LSlY+de32l/n6O9pi aTNwVKkp38WGAnvl/Ptletc9BWIYb0K81qbN2AH5Xs1y1ADKmtTuUOWnDIy5wnxL PR3T0prYJbVTvjGvzBFY9esapiFZ/YJZ43NWp8nDa3FipIzghAJaAMJSw6ZET3Bz TX00vSBinltttkp236q8+2tE89cHWb0+9jWQaV4TDs4P -----END CERTIFICATE-----Generated at Mon Jan 26 08:58:20 2026 by rpki-client