This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/dnlzr7T-KrzC8dTpRdaUUBCb42k.roa File: dnlzr7T-KrzC8dTpRdaUUBCb42k.roa (raw, json) Hash identifier: FlF41xrTHYEZQDWnwHhEl5bQr7qiicPhhj7kefuMDlI= Subject key identifier: 76:79:73:AF:B4:FE:2A:BC:C2:F1:D4:E9:45:D6:94:50:10:9B:E3:69 Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Certificate serial: 019B7E384CCA96235111CA16AAD77E53E414 Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/dnlzr7T-KrzC8dTpRdaUUBCb42k.roa Signing time: Fri 02 Jan 2026 10:19:37 +0000 ROA not before: Fri 02 Jan 2026 10:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48147 IP address blocks: 45.135.241.0/24 maxlen: 24 176.97.220.0/24 maxlen: 24 185.229.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:4c:ca:96:23:51:11:ca:16:aa:d7:7e:53:e4:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Validity Not Before: Jan 2 10:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=767973afb4fe2abcc2f1d4e945d69450109be369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f1:ee:84:5d:0a:1c:81:47:58:6b:bc:dd:96: b8:86:a2:6f:ec:d7:8e:1e:1d:ce:b4:f6:e0:44:a1: 1c:3b:74:39:a6:69:d5:9e:64:90:e5:15:37:87:7f: ef:a1:25:35:d3:3e:77:9a:35:b6:57:06:a6:20:d1: b6:38:f2:a9:88:de:a4:91:c5:be:33:ac:fe:75:80: 1c:19:d7:c9:42:d0:6c:92:bb:bc:32:4f:21:0a:9b: ac:a8:a7:37:b8:1d:4e:94:e2:89:07:c7:fb:24:69: f2:0b:37:18:b6:9e:c2:b9:7f:d4:d1:08:e0:b9:3e: 0d:2e:14:17:9e:29:61:4c:10:0b:c9:7b:e9:cf:27: c7:08:5a:36:9f:41:f9:4f:31:3a:21:d4:77:ce:74: e7:02:e0:1c:ed:00:c4:a5:1a:49:02:ae:2a:d1:df: 92:8d:4f:7b:d9:99:2b:94:2a:e0:74:39:82:75:4d: e5:78:8c:2f:b0:7f:c0:13:05:b6:60:78:37:1b:2a: ae:bf:f4:d4:a1:dc:a1:18:b5:c8:3b:c9:3a:ba:16: 3d:b2:46:47:59:a8:53:2c:94:18:1d:86:c0:e4:f7: 0f:85:14:91:77:c8:5f:36:54:3f:58:c7:65:2f:fd: 66:c9:87:2a:74:c1:f0:10:92:43:3d:2b:55:a1:e4: 28:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:79:73:AF:B4:FE:2A:BC:C2:F1:D4:E9:45:D6:94:50:10:9B:E3:69 X509v3 Authority Key Identifier: keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/dnlzr7T-KrzC8dTpRdaUUBCb42k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.241.0/24 176.97.220.0/24 185.229.204.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:2a:e7:f5:23:5c:54:03:8a:f6:6d:2d:90:20:28:1c:10:6c: 10:b8:97:36:77:a7:7f:2f:11:28:ea:21:52:40:3c:0a:87:61: 8e:2d:a2:3c:64:09:f8:42:ab:77:f2:30:af:73:be:b7:4f:e7: bb:72:a7:1d:af:3a:82:09:5d:f4:e8:3e:0d:f9:72:39:2e:c6: 10:ae:17:1e:9d:fd:0d:54:60:9b:f6:c9:d2:03:cb:eb:46:ad: 26:2a:c5:26:e7:29:93:dc:51:ab:0a:48:01:8b:e1:37:00:32: c6:5b:d9:b6:99:d1:62:f5:1d:b4:7b:5c:cd:42:c5:cd:4f:75: e0:76:59:49:11:f4:6b:23:7a:32:22:ce:33:46:e2:e5:f9:69: 0e:92:76:2a:e1:42:68:69:6b:ce:ce:54:d5:cc:ac:df:1a:1e: d5:87:34:32:30:dd:4b:b2:e7:62:0a:92:35:a8:7d:a9:6f:8b: cc:51:c3:1d:49:19:4b:0a:7b:68:56:9b:7a:1e:d9:a2:e1:6a: dc:e1:a5:d1:b9:f1:d9:fb:f0:32:7d:7d:9e:e8:3c:f3:d1:34: ea:3a:a2:b3:0e:72:f9:82:fc:6c:c2:a5:92:61:08:16:5a:c7: 14:53:15:bf:9c:d1:b3:fe:e5:66:bc:12:cf:f1:33:0d:b2:7a: 74:b2:98:1c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OEzKliNREcoWqtd+U+QUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YzE2N2RmYTk4ODJiMmFhOGY4NDU5NWY1OGE5N2MzMDVj YTQzYzUwHhcNMjYwMTAyMTAxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Njc5NzNhZmI0ZmUyYWJjYzJmMWQ0ZTk0NWQ2OTQ1MDEwOWJlMzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufHuhF0KHIFHWGu83Za4hqJv7NeO Hh3OtPbgRKEcO3Q5pmnVnmSQ5RU3h3/voSU10z53mjW2VwamING2OPKpiN6kkcW+ M6z+dYAcGdfJQtBskru8Mk8hCpusqKc3uB1OlOKJB8f7JGnyCzcYtp7CuX/U0Qjg uT4NLhQXnilhTBALyXvpzyfHCFo2n0H5TzE6IdR3znTnAuAc7QDEpRpJAq4q0d+S jU972ZkrlCrgdDmCdU3leIwvsH/AEwW2YHg3Gyquv/TUodyhGLXIO8k6uhY9skZH WahTLJQYHYbA5PcPhRSRd8hfNlQ/WMdlL/1myYcqdMHwEJJDPStVoeQoAwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHZ5c6+0/iq8wvHU6UXWlFAQm+NpMB8GA1UdIwQY MBaAFLbBZ9+piCsqqPhFlfWKl8MFykPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUt YWNmYzNkMmMyNTIyLzEvZG5senI3VC1LcnpDOGRUcFJkYVVVQkNiNDJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUtYWNmYzNkMmMyNTIy LzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALYfxAwQA sGHcAwQAueXMMA0GCSqGSIb3DQEBCwUAA4IBAQAaKuf1I1xUA4r2bS2QICgcEGwQ uJc2d6d/LxEo6iFSQDwKh2GOLaI8ZAn4Qqt38jCvc763T+e7cqcdrzqCCV306D4N +XI5LsYQrhcenf0NVGCb9snSA8vrRq0mKsUm5ymT3FGrCkgBi+E3ADLGW9m2mdFi 9R20e1zNQsXNT3XgdllJEfRrI3oyIs4zRuLl+WkOknYq4UJoaWvOzlTVzKzfGh7V hzQyMN1LsudiCpI1qH2pb4vMUcMdSRlLCntoVpt6Htmi4Wrc4aXRufHZ+/AyfX2e 6Dzz0TTqOqKzDnL5gvxswqWSYQgWWscUUxW/nNGz/uVmvBLP8TMNsnp0spgc -----END CERTIFICATE-----Generated at Mon Jan 26 16:22:10 2026 by rpki-client