This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/DlbWkC5JlObpaQbh5pYrcOuhUDo.roa File: DlbWkC5JlObpaQbh5pYrcOuhUDo.roa (raw, json) Hash identifier: 5ZY0b/IjheGn0WGAGieSGsGNwfBNcd9Ekci2Iu3Ck4M= Subject key identifier: 0E:56:D6:90:2E:49:94:E6:E9:69:06:E1:E6:96:2B:70:EB:A1:50:3A Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a Certificate serial: 019B7DCB3F97B80D47E053E60ADD4E6A5687 Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/DlbWkC5JlObpaQbh5pYrcOuhUDo.roa Signing time: Fri 02 Jan 2026 08:20:30 +0000 ROA not before: Fri 02 Jan 2026 08:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44812 IP address blocks: 185.65.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:3f:97:b8:0d:47:e0:53:e6:0a:dd:4e:6a:56:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a Validity Not Before: Jan 2 08:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e56d6902e4994e6e96906e1e6962b70eba1503a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:31:69:6d:c3:54:92:ea:ba:c6:47:d6:22:67: f5:cb:03:c0:8b:ff:b0:7b:27:87:65:14:31:1a:b7: 23:ab:96:d3:b3:f0:12:b6:5f:34:ba:a7:59:9e:a9: 5a:52:b8:bb:55:2c:41:db:d1:74:4f:75:4d:c8:53: 72:d6:38:f1:80:b1:6e:59:8c:a5:d2:98:43:96:7d: b2:8a:bd:f3:be:a4:36:bc:0f:51:cf:fe:0f:4a:e9: 0a:e8:1e:dc:20:b1:5a:62:8a:7f:48:a0:fb:05:3d: e5:c1:ee:44:e2:2c:8c:2c:c3:19:c1:f1:a9:c8:bf: 51:ad:e7:3c:7d:90:29:4c:81:3d:99:9a:1e:6b:22: 69:5d:4e:50:df:2a:7b:30:cc:0a:bb:be:c5:20:4b: 4d:5a:94:ae:8f:07:1a:36:13:2c:2a:68:25:3f:eb: b1:38:29:4c:89:20:35:8d:af:dd:2c:3d:9c:43:d6: 35:86:38:3a:5d:93:b4:b7:cc:cb:53:ee:b6:51:c7: e7:f2:5c:42:81:70:d4:8a:3e:97:3e:37:f9:0f:8e: 61:6f:03:32:60:a0:df:04:d6:0f:e7:05:b3:64:f7: ac:9c:60:ff:1d:92:33:20:b4:3e:d0:97:e6:2b:22: e1:de:c7:3e:1d:ed:b7:be:a1:04:b3:12:59:90:7e: 03:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:56:D6:90:2E:49:94:E6:E9:69:06:E1:E6:96:2B:70:EB:A1:50:3A X509v3 Authority Key Identifier: keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/DlbWkC5JlObpaQbh5pYrcOuhUDo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.65.201.0/24 Signature Algorithm: sha256WithRSAEncryption a6:a7:fe:d1:e0:0d:80:59:e0:62:7f:65:16:25:7f:c2:65:9c: 80:dc:a0:a3:16:f3:c2:38:9f:59:9e:a4:7a:bf:df:b9:c5:78: 89:ec:ea:48:97:4e:eb:39:d4:fb:f5:30:4f:a8:40:9b:5f:39: ba:dc:2f:87:20:eb:2c:16:1f:20:a6:39:41:9d:6d:45:7c:c0: af:08:00:db:14:31:be:36:d9:5b:b4:30:fa:98:26:1e:42:61: 51:cc:f0:39:04:e7:c4:3e:89:d4:e6:9b:6b:5e:cc:41:ac:42: d4:8e:02:df:a5:68:c6:77:16:91:55:2b:46:74:d8:33:e1:0a: 15:a4:a8:bc:1a:e8:90:50:0e:d9:23:c0:22:7b:3b:dd:6d:d4: 40:ac:a2:d5:17:47:6f:15:ea:46:6e:2f:36:20:d0:96:b5:4a: 9c:d3:78:f9:48:58:92:32:6c:c4:3a:63:d9:75:45:2b:cd:5b: b5:1b:62:69:97:a3:a6:66:fc:5b:5e:bb:b4:57:63:c5:82:65: 2b:b2:a1:bc:b0:75:b4:20:70:56:cd:8b:26:8f:c9:00:c0:7d: e5:e6:3c:ae:91:72:91:06:44:68:15:56:eb:3c:41:2e:3e:a9: a4:c1:9b:7b:ba:15:a5:c6:49:b5:da:3d:4b:1c:0c:cd:e2:97: 39:3a:f8:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yz+XuA1H4FPmCt1OalaHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm YmViOWEwHhcNMjYwMTAyMDgyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTU2ZDY5MDJlNDk5NGU2ZTk2OTA2ZTFlNjk2MmI3MGViYTE1MDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzFpbcNUkuq6xkfWImf1ywPAi/+w eyeHZRQxGrcjq5bTs/AStl80uqdZnqlaUri7VSxB29F0T3VNyFNy1jjxgLFuWYyl 0phDln2yir3zvqQ2vA9Rz/4PSukK6B7cILFaYop/SKD7BT3lwe5E4iyMLMMZwfGp yL9Rrec8fZApTIE9mZoeayJpXU5Q3yp7MMwKu77FIEtNWpSujwcaNhMsKmglP+ux OClMiSA1ja/dLD2cQ9Y1hjg6XZO0t8zLU+62Ucfn8lxCgXDUij6XPjf5D45hbwMy YKDfBNYP5wWzZPesnGD/HZIzILQ+0JfmKyLh3sc+He23vqEEsxJZkH4DkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA5W1pAuSZTm6WkG4eaWK3DroVA6MB8GA1UdIwQY MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt NmE0ZWNhZjhiM2IxLzEvRGxiV2tDNUpsT2JwYVFiaDVwWXJjT3VoVURvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUHJMA0G CSqGSIb3DQEBCwUAA4IBAQCmp/7R4A2AWeBif2UWJX/CZZyA3KCjFvPCOJ9ZnqR6 v9+5xXiJ7OpIl07rOdT79TBPqECbXzm63C+HIOssFh8gpjlBnW1FfMCvCADbFDG+ NtlbtDD6mCYeQmFRzPA5BOfEPonU5ptrXsxBrELUjgLfpWjGdxaRVStGdNgz4QoV pKi8GuiQUA7ZI8AiezvdbdRArKLVF0dvFepGbi82INCWtUqc03j5SFiSMmzEOmPZ dUUrzVu1G2Jpl6OmZvxbXru0V2PFgmUrsqG8sHW0IHBWzYsmj8kAwH3l5jyukXKR BkRoFVbrPEEuPqmkwZt7uhWlxkm12j1LHAzN4pc5Ovhi -----END CERTIFICATE-----Generated at Sun Jan 25 11:45:18 2026 by rpki-client