This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/DHLKNILgfx16JsrlSXMeY6f762E.roa File: DHLKNILgfx16JsrlSXMeY6f762E.roa (raw, json) Hash identifier: z5ydua2ZisWly8IjsMlT6pkwvFda1aV+qss6iF0vFOU= Subject key identifier: 0C:72:CA:34:82:E0:7F:1D:7A:26:CA:E5:49:73:1E:63:A7:FB:EB:61 Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Certificate serial: 019BEAE711A19DF1D31A4E91BDF7282296D4 Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/DHLKNILgfx16JsrlSXMeY6f762E.roa Signing time: Fri 23 Jan 2026 12:49:30 +0000 ROA not before: Fri 23 Jan 2026 12:49:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 80.174.114.0/24 maxlen: 24 80.174.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:e7:11:a1:9d:f1:d3:1a:4e:91:bd:f7:28:22:96:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Validity Not Before: Jan 23 12:49:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c72ca3482e07f1d7a26cae549731e63a7fbeb61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:01:ab:17:c5:c1:29:02:6c:e3:66:1e:03:61: 8c:e0:93:b5:e6:66:55:53:e1:c4:eb:a2:01:79:33: af:de:42:d8:de:4d:4e:81:ad:fe:c7:7c:95:34:ba: d2:ee:17:be:ef:fe:18:4c:5d:25:a7:d8:7c:8f:c7: 66:3d:52:e4:db:a0:d0:f0:2c:04:d4:34:d8:ef:fb: 15:d0:84:a5:2d:4a:45:a4:64:8c:66:5a:3b:69:ba: 20:b4:e4:e5:ba:33:05:29:4d:c0:05:47:08:08:b3: 17:6f:5e:64:5e:80:7b:d6:e0:cd:56:b4:14:1c:9d: 47:43:ec:eb:0a:a3:e1:70:39:e5:b4:48:d4:2e:11: 74:d5:68:5a:fb:cd:b4:8b:f5:76:bd:66:41:5a:1d: 8a:64:d7:e6:d7:bc:aa:dc:b6:b8:d1:4c:f9:8a:1f: 28:4c:c2:de:99:05:eb:d8:78:0c:e2:69:45:e9:a9: d8:e9:e4:a5:f9:2b:ef:37:f8:56:0f:fc:88:ae:21: 58:b2:56:97:de:62:72:a3:ef:44:21:88:72:60:26: f4:90:15:41:0f:23:3e:bf:a0:dc:b0:f9:b0:b2:20: d9:38:b1:e7:d9:9e:de:00:50:24:2b:bd:02:a6:4c: dd:b0:1a:83:d5:a3:c9:4a:c1:d1:62:20:0f:22:ae: 08:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:72:CA:34:82:E0:7F:1D:7A:26:CA:E5:49:73:1E:63:A7:FB:EB:61 X509v3 Authority Key Identifier: keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/DHLKNILgfx16JsrlSXMeY6f762E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.174.114.0/24 80.174.123.0/24 Signature Algorithm: sha256WithRSAEncryption 74:0d:71:41:a7:fe:1a:9c:d3:7d:11:aa:f2:62:84:1b:c3:03: 9b:72:a3:f2:e8:dd:f4:6e:63:01:67:2a:53:7f:80:5c:5f:f8: 20:46:7c:f3:2c:f1:8f:0f:43:f2:8f:38:98:92:59:b8:8a:fd: 0b:94:94:35:d7:8e:30:26:dc:ae:2e:15:d5:6b:aa:d6:6e:24: 9a:db:cc:0a:b5:4c:0a:cb:3d:9f:fb:c8:0e:a3:1a:f2:7f:8a: b5:2d:99:34:84:9b:02:83:ca:14:03:44:14:dd:b1:d4:c5:78: bb:0d:ec:3f:cf:5f:ad:56:49:66:04:02:16:b8:e6:a4:94:f3: ab:ee:35:f0:7b:cf:0e:b8:76:c1:40:6a:a9:d9:c3:ea:51:15: 2d:0b:a9:a8:3d:9a:79:04:3e:91:08:fd:14:8d:0c:fb:b8:43: 7a:6b:7a:f8:63:c4:4b:19:07:07:d7:14:c6:75:33:a8:e1:39: db:51:6c:5d:f6:46:a8:71:bd:e7:a1:d9:37:a8:60:ec:de:e0: e8:ac:69:aa:e8:5c:74:f5:e1:06:30:98:fd:7c:67:fd:be:0e: a8:6e:33:ba:f1:25:30:b9:be:1b:e3:99:c5:1b:7b:d4:7d:d4: 15:46:87:b7:d8:b2:43:fe:88:65:55:2f:24:7a:e0:f1:af:d0: 5f:88:06:92 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvq5xGhnfHTGk6RvfcoIpbUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj MDZiYmUwHhcNMjYwMTIzMTI0OTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzcyY2EzNDgyZTA3ZjFkN2EyNmNhZTU0OTczMWU2M2E3ZmJlYjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAGrF8XBKQJs42YeA2GM4JO15mZV U+HE66IBeTOv3kLY3k1Oga3+x3yVNLrS7he+7/4YTF0lp9h8j8dmPVLk26DQ8CwE 1DTY7/sV0ISlLUpFpGSMZlo7abogtOTlujMFKU3ABUcICLMXb15kXoB71uDNVrQU HJ1HQ+zrCqPhcDnltEjULhF01Wha+820i/V2vWZBWh2KZNfm17yq3La40Uz5ih8o TMLemQXr2HgM4mlF6anY6eSl+SvvN/hWD/yIriFYslaX3mJyo+9EIYhyYCb0kBVB DyM+v6DcsPmwsiDZOLHn2Z7eAFAkK70CpkzdsBqD1aPJSsHRYiAPIq4ImQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAxyyjSC4H8deibK5UlzHmOn++thMB8GA1UdIwQY MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt NzM0MjhmOWM3YmZmLzEvREhMS05JTGdmeDE2SnNybFNYTWVZNmY3NjJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUK5yAwQA UK57MA0GCSqGSIb3DQEBCwUAA4IBAQB0DXFBp/4anNN9EaryYoQbwwObcqPy6N30 bmMBZypTf4BcX/ggRnzzLPGPD0PyjziYklm4iv0LlJQ1144wJtyuLhXVa6rWbiSa 28wKtUwKyz2f+8gOoxryf4q1LZk0hJsCg8oUA0QU3bHUxXi7Dew/z1+tVklmBAIW uOaklPOr7jXwe88OuHbBQGqp2cPqURUtC6moPZp5BD6RCP0UjQz7uEN6a3r4Y8RL GQcH1xTGdTOo4TnbUWxd9kaocb3nodk3qGDs3uDorGmq6Fx09eEGMJj9fGf9vg6o bjO68SUwub4b45nFG3vUfdQVRoe32LJD/ohlVS8keuDxr9BfiAaS -----END CERTIFICATE-----Generated at Sun Jan 25 10:21:07 2026 by rpki-client