This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/DlLXddAis5e2NiYpDlPFgCC2fqQ.roa File: DlLXddAis5e2NiYpDlPFgCC2fqQ.roa (raw, json) Hash identifier: wChHj1a1SOAqKO2XbDKNiJzmDLWZ4VK+PUQtszQXCaA= Subject key identifier: 0E:52:D7:75:D0:22:B3:97:B6:36:26:29:0E:53:C5:80:20:B6:7E:A4 Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Certificate serial: 019B7A5B8F2F59C0DE22C1B272AECF42B835 Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/DlLXddAis5e2NiYpDlPFgCC2fqQ.roa Signing time: Thu 01 Jan 2026 16:19:39 +0000 ROA not before: Thu 01 Jan 2026 16:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44325 IP address blocks: 2001:1af0:9000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:8f:2f:59:c0:de:22:c1:b2:72:ae:cf:42:b8:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Validity Not Before: Jan 1 16:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e52d775d022b397b63626290e53c58020b67ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e7:9e:54:a0:c5:41:f8:b5:aa:e9:e6:d8:b8: 00:85:e0:b4:e4:7b:35:1c:17:54:10:4e:5c:c4:da: af:de:c7:c2:42:36:92:f3:d5:13:bd:0b:40:e8:af: 63:a4:2f:74:aa:7f:67:db:13:54:42:45:f3:f6:42: 3e:20:c9:88:48:54:ba:5b:d8:2b:e8:d6:dc:e9:d7: 50:cb:1c:81:51:46:f5:91:bf:58:65:98:ea:7f:98: a9:8a:a4:7a:6d:53:91:8a:a0:a3:f6:d4:e1:ad:90: 2c:7b:39:46:a5:b2:91:37:3b:1b:f9:ef:c2:57:f7: 7c:a4:7f:f8:8b:53:5d:73:3b:bc:3c:e7:5d:87:0e: 71:f6:a1:69:4f:39:42:c3:01:6d:f2:6b:b6:5c:c9: a7:c0:b7:bf:a1:a9:fc:9f:c8:95:d3:5d:f0:91:39: a6:24:d4:62:37:9b:8f:95:9d:92:e3:0a:d1:bc:9b: c9:b8:c2:4f:74:53:15:63:87:fe:cb:75:85:71:b1: a5:98:46:a3:30:f3:cf:dc:3c:4e:7a:88:99:e7:fb: 1a:11:f6:bc:be:37:22:f9:53:54:a5:57:f9:65:71: e6:28:3e:d1:ba:f7:f7:86:cc:d9:09:27:54:d3:49: 6f:df:c3:13:8f:b4:d5:c6:8a:66:fe:9a:d7:62:b9: 3e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:52:D7:75:D0:22:B3:97:B6:36:26:29:0E:53:C5:80:20:B6:7E:A4 X509v3 Authority Key Identifier: keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/DlLXddAis5e2NiYpDlPFgCC2fqQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:1af0:9000::/48 Signature Algorithm: sha256WithRSAEncryption 16:15:b7:5b:c7:30:2d:a3:39:1d:18:ae:28:34:7a:79:aa:15: 0a:55:2e:48:e8:c5:d2:a9:f1:2c:a7:85:96:8b:2d:3c:d4:7a: a8:73:21:c3:da:c1:90:20:18:8d:f3:e6:6f:6e:af:c7:bb:87: 66:51:04:28:c9:f1:42:12:5d:54:a3:31:c0:5b:38:a5:c2:d5: 29:25:92:30:92:23:4b:e4:b7:64:af:be:2f:62:8a:c9:7e:30: 45:b1:24:2b:bc:98:dc:e5:c4:20:63:43:fa:d0:17:49:da:4d: 8f:9f:5c:59:00:b0:f2:8c:7f:2f:e0:f4:cd:a3:37:a0:91:68: 18:4a:15:1c:ec:fa:c2:d5:1f:4a:a8:a5:46:c9:4b:27:d5:8b: ff:43:98:62:f5:8b:5a:be:78:e7:a8:f4:76:2d:a7:05:64:a3: 77:54:72:7d:b6:0b:c1:8f:81:c7:12:a8:76:d0:a7:98:41:f3: 3c:12:4a:9a:12:b1:f8:36:47:9d:4a:b1:15:35:b5:35:9e:4c: f8:69:e9:39:a1:3b:63:1f:fe:6f:83:2f:6b:01:23:17:a5:8c: 8c:e1:c9:29:07:b4:f1:c0:26:cb:28:6d:ad:00:bb:1c:69:2e: 99:ff:5a:0e:b6:d6:1f:d5:82:2b:c0:2a:80:aa:11:80:08:b0: e5:d9:25:06 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6W48vWcDeIsGycq7PQrg1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm MDIwMjAwHhcNMjYwMTAxMTYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTUyZDc3NWQwMjJiMzk3YjYzNjI2MjkwZTUzYzU4MDIwYjY3ZWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteeeVKDFQfi1qunm2LgAheC05Hs1 HBdUEE5cxNqv3sfCQjaS89UTvQtA6K9jpC90qn9n2xNUQkXz9kI+IMmISFS6W9gr 6Nbc6ddQyxyBUUb1kb9YZZjqf5ipiqR6bVORiqCj9tThrZAsezlGpbKRNzsb+e/C V/d8pH/4i1Ndczu8POddhw5x9qFpTzlCwwFt8mu2XMmnwLe/oan8n8iV013wkTmm JNRiN5uPlZ2S4wrRvJvJuMJPdFMVY4f+y3WFcbGlmEajMPPP3DxOeoiZ5/saEfa8 vjci+VNUpVf5ZXHmKD7Ruvf3hszZCSdU00lv38MTj7TVxopm/prXYrk+PQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFA5S13XQIrOXtjYmKQ5TxYAgtn6kMB8GA1UdIwQY MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt NGI2YzFjZjlmZTRmLzEvRGxMWGRkQWlzNWUyTmlZcERsUEZnQ0MyZnFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEa8JAA MA0GCSqGSIb3DQEBCwUAA4IBAQAWFbdbxzAtozkdGK4oNHp5qhUKVS5I6MXSqfEs p4WWiy081HqocyHD2sGQIBiN8+Zvbq/Hu4dmUQQoyfFCEl1UozHAWzilwtUpJZIw kiNL5Ldkr74vYorJfjBFsSQrvJjc5cQgY0P60BdJ2k2Pn1xZALDyjH8v4PTNozeg kWgYShUc7PrC1R9KqKVGyUsn1Yv/Q5hi9YtavnjnqPR2LacFZKN3VHJ9tgvBj4HH Eqh20KeYQfM8EkqaErH4NkedSrEVNbU1nkz4aek5oTtjH/5vgy9rASMXpYyM4ckp B7TxwCbLKG2tALscaS6Z/1oOttYf1YIrwCqAqhGACLDl2SUG -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:42 2026 by rpki-client