This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/DlYdZNTLvfx2OD11UfQRnD3hK2o.roa File: DlYdZNTLvfx2OD11UfQRnD3hK2o.roa (raw, json) Hash identifier: Yz+AdjCjCsAlEW+BjCHTyQFo7Owy/uvBTZnF71MgcBA= Subject key identifier: 0E:56:1D:64:D4:CB:BD:FC:76:38:3D:75:51:F4:11:9C:3D:E1:2B:6A Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2 Certificate serial: 019B79105C2F42CDF7992A101ADE25451CA9 Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/DlYdZNTLvfx2OD11UfQRnD3hK2o.roa Signing time: Thu 01 Jan 2026 10:17:53 +0000 ROA not before: Thu 01 Jan 2026 10:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12843 IP address blocks: 185.66.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:5c:2f:42:cd:f7:99:2a:10:1a:de:25:45:1c:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2 Validity Not Before: Jan 1 10:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e561d64d4cbbdfc76383d7551f4119c3de12b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b7:64:93:8c:aa:d8:2a:f0:64:ca:88:cc:7a: 4b:13:77:34:40:15:b5:2a:b5:7a:3f:7a:01:2c:c5: c4:1c:d4:9e:35:91:7e:61:b8:40:90:5d:21:f1:d4: 52:33:31:8e:7a:ca:ea:29:fa:f4:78:24:59:17:37: 79:d6:8d:5a:e3:a2:4a:d3:28:0c:89:21:cf:f8:ee: 8f:4a:2f:a4:b0:da:2c:88:2c:30:6a:7a:ba:2d:d4: 96:5b:c4:97:a2:4f:b3:b3:d8:60:40:12:71:c9:53: d2:03:4b:b2:dc:bf:11:69:f0:1a:cf:95:c7:6f:e9: ed:a4:22:fb:ec:e9:f6:42:74:cc:f4:b4:be:ab:68: f9:52:12:07:cb:7e:aa:0a:a4:a8:d1:4c:57:3e:ab: 40:ed:6c:3d:fe:32:cf:66:38:d1:d9:c4:70:db:ac: 80:85:5e:69:29:06:44:68:c9:5b:67:9b:f7:d8:de: 37:cf:32:e4:7b:d4:22:f4:8b:16:fe:84:ef:bb:05: a4:c0:62:53:ce:d9:27:d1:83:f1:3a:f1:1c:87:97: df:3b:5a:e0:c5:ad:79:dc:9f:7d:9a:14:04:e4:e0: e4:4a:83:17:f4:ed:62:3f:40:62:0e:31:84:55:0b: d4:77:81:be:85:4b:a1:64:a0:0d:f6:5e:f7:e7:14: 33:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:56:1D:64:D4:CB:BD:FC:76:38:3D:75:51:F4:11:9C:3D:E1:2B:6A X509v3 Authority Key Identifier: keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/DlYdZNTLvfx2OD11UfQRnD3hK2o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.66.196.0/22 Signature Algorithm: sha256WithRSAEncryption 43:a1:65:9b:ed:7c:3a:8d:e1:9f:60:a2:2c:53:cb:75:4a:2c: 46:ce:e5:0c:a4:30:61:6d:13:4f:d5:d8:46:1f:2d:e7:72:3a: 93:f8:67:7f:3e:3b:9f:54:9c:7a:04:55:d7:7d:04:02:49:0e: 7a:e2:62:bf:e3:cb:6c:c8:a5:34:8f:ef:34:ea:2c:61:ae:ce: 66:7c:98:e8:10:42:3e:d7:8d:49:02:55:73:9c:7b:55:83:08: eb:6e:83:2e:1d:ad:b3:0e:3a:d6:a5:39:38:d4:60:bd:96:8d: 30:77:cb:8b:05:35:62:72:13:40:4b:42:ea:df:9d:b0:2b:69: 33:12:45:9a:a7:f6:c4:ff:cd:37:f0:8d:77:ce:80:bf:c1:40: eb:b5:50:77:a3:83:ce:ee:f6:ce:9f:40:01:9a:2e:ee:a8:2d: 53:c0:2b:65:9b:bc:b2:cc:a1:3a:75:34:a8:a1:a3:4d:ba:11: da:53:99:41:6e:a1:ac:ef:1e:de:59:e5:12:4c:af:63:be:00: d9:90:ce:fd:e1:f0:4a:28:60:2c:fe:fa:16:9f:e9:62:9e:da: 13:71:b8:d1:c7:4f:e2:91:d0:a9:43:4e:ce:06:e4:e1:fb:22: a3:3b:a3:b9:9f:18:3e:c4:17:20:e2:9a:c8:18:ff:8a:11:2b: 80:ed:42:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EFwvQs33mSoQGt4lRRypMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NDYxZmJlZTFjMDZlM2VhZmFjMGYyZjk1MjUzY2E4NjAz YWNjZjIwHhcNMjYwMTAxMTAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTU2MWQ2NGQ0Y2JiZGZjNzYzODNkNzU1MWY0MTE5YzNkZTEyYjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrdkk4yq2CrwZMqIzHpLE3c0QBW1 KrV6P3oBLMXEHNSeNZF+YbhAkF0h8dRSMzGOesrqKfr0eCRZFzd51o1a46JK0ygM iSHP+O6PSi+ksNosiCwwanq6LdSWW8SXok+zs9hgQBJxyVPSA0uy3L8RafAaz5XH b+ntpCL77On2QnTM9LS+q2j5UhIHy36qCqSo0UxXPqtA7Ww9/jLPZjjR2cRw26yA hV5pKQZEaMlbZ5v32N43zzLke9Qi9IsW/oTvuwWkwGJTztkn0YPxOvEch5ffO1rg xa153J99mhQE5ODkSoMX9O1iP0BiDjGEVQvUd4G+hUuhZKAN9l735xQz2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA5WHWTUy738djg9dVH0EZw94StqMB8GA1UdIwQY MBaAFJVGH77hwG4+r6wPL5UlPKhgOszyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lNWNlOGYtNWVhMC00NzlmLTkzZTkt ODlkNWM2MGY1MDFmLzEvRGxZZFpOVEx2ZngyT0QxMVVmUVJuRDNoSzJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9lNWNlOGYtNWVhMC00NzlmLTkzZTktODlkNWM2MGY1MDFm LzEvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuULEMA0G CSqGSIb3DQEBCwUAA4IBAQBDoWWb7Xw6jeGfYKIsU8t1SixGzuUMpDBhbRNP1dhG Hy3ncjqT+Gd/PjufVJx6BFXXfQQCSQ564mK/48tsyKU0j+806ixhrs5mfJjoEEI+ 141JAlVznHtVgwjrboMuHa2zDjrWpTk41GC9lo0wd8uLBTVichNAS0Lq352wK2kz EkWap/bE/8038I13zoC/wUDrtVB3o4PO7vbOn0ABmi7uqC1TwCtlm7yyzKE6dTSo oaNNuhHaU5lBbqGs7x7eWeUSTK9jvgDZkM794fBKKGAs/voWn+lintoTcbjRx0/i kdCpQ07OBuTh+yKjO6O5nxg+xBcg4prIGP+KESuA7UKl -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:36 2026 by rpki-client