This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/dhlvPCZXb2EkhMlEiuEIkVAgyec.roa File: dhlvPCZXb2EkhMlEiuEIkVAgyec.roa (raw, json) Hash identifier: 8F9BXDtvGEBkwGg2A4bRIhZ8Kc7R53vk/fY6rvM59Ro= Subject key identifier: 76:19:6F:3C:26:57:6F:61:24:84:C9:44:8A:E1:08:91:50:20:C9:E7 Certificate issuer: /CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996 Certificate serial: 019B7EA6932BB1F32AA558A92C1EC6B10715 Authority key identifier: 84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/dhlvPCZXb2EkhMlEiuEIkVAgyec.roa Signing time: Fri 02 Jan 2026 12:20:04 +0000 ROA not before: Fri 02 Jan 2026 12:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60405 IP address blocks: 37.156.69.0/24 maxlen: 24 37.156.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:93:2b:b1:f3:2a:a5:58:a9:2c:1e:c6:b1:07:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996 Validity Not Before: Jan 2 12:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76196f3c26576f612484c9448ae108915020c9e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:00:66:34:1c:bb:3b:2b:bb:7c:95:3e:75:ff: 32:8e:b8:a8:7d:13:e5:54:88:95:46:0e:bb:ec:fd: 04:b9:ab:17:89:47:49:da:4e:11:e4:30:ab:d9:ca: 6b:81:d3:62:d3:71:af:e3:cb:c6:07:2d:54:8e:7d: 72:8e:2f:a2:0d:1c:80:1e:35:be:3e:71:e9:4c:01: 16:4d:f3:b8:11:4c:a1:da:07:0f:9c:6d:12:85:b4: bc:1f:ca:8b:b7:36:92:12:e3:a8:24:98:be:36:74: c0:a5:3a:31:25:bd:3e:b3:2e:8c:5c:00:1a:3b:50: 05:dc:9a:09:5b:2f:7c:0b:3c:8f:42:29:a9:b3:63: 61:05:80:c2:0e:cd:fd:74:44:0c:05:b8:c4:46:62: c6:8d:bd:bf:01:a5:79:bd:bc:66:bf:98:39:41:a0: fd:c5:69:47:cb:46:f5:e1:f6:00:f2:43:bf:a0:c0: 65:35:58:0c:02:6a:ed:c3:3c:6e:93:cd:0e:4f:51: 53:b0:61:36:57:8b:42:8a:f7:59:63:7f:ad:d0:8f: fa:65:6b:5f:5a:57:8e:88:48:2e:6e:f0:4a:e9:e8: f5:62:24:53:bb:fe:da:a5:ae:3a:6e:24:05:cd:0e: 02:c7:2f:bf:bf:13:9f:ab:03:3c:5a:37:c2:ec:ec: 63:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:19:6F:3C:26:57:6F:61:24:84:C9:44:8A:E1:08:91:50:20:C9:E7 X509v3 Authority Key Identifier: keyid:84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/dhlvPCZXb2EkhMlEiuEIkVAgyec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.156.69.0-37.156.70.255 Signature Algorithm: sha256WithRSAEncryption 64:e6:8c:55:dc:76:61:1f:0e:e2:e9:bd:70:3e:fd:3c:ee:f8: 64:3a:b5:dd:22:f7:60:12:99:15:5f:73:f9:a5:6c:e1:8b:cc: 37:95:15:d9:d9:26:3c:c1:1c:5f:6f:f7:43:80:bd:78:b4:60: b8:72:8d:58:a3:19:67:6e:10:20:c9:63:0d:f2:b2:98:67:29: 38:42:3c:c5:56:0e:2d:89:15:d7:f4:5b:f2:28:8a:b0:f1:76: 54:2b:da:07:ce:d7:74:b6:4f:0c:b0:8c:a0:d0:16:6b:76:17: c8:c3:5a:65:d6:a3:a9:9a:e5:72:1a:e9:c3:89:9c:95:de:38: 27:72:f9:bb:40:5a:fb:89:66:14:16:8e:b7:75:fb:4f:be:16: 42:6e:37:5d:e8:ef:1a:ca:89:6e:cc:d1:4a:2b:57:e7:c1:b6: 41:f9:2f:d2:71:d8:51:8f:e1:55:34:7a:7d:9e:3d:91:a0:76: 0a:08:16:2c:23:9b:e6:03:d9:f8:f8:27:f1:63:2f:73:f4:b1: df:9d:05:b2:98:3e:b7:66:9e:60:c0:aa:f3:5c:7d:1f:e7:ec: 67:7c:ca:50:ba:92:29:c3:d9:d8:82:bd:f2:f0:c4:3d:46:6a: 26:09:2b:5e:d7:d2:43:e2:83:b3:48:a9:72:cf:16:09:9f:3c: ff:31:86:5a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+ppMrsfMqpVipLB7GsQcVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YmZjNDUxZmM0ZjI0MTFhZGRkMDBhOWZiYjE3MzQ2YWQ2 ZTg5OTYwHhcNMjYwMTAyMTIyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjE5NmYzYzI2NTc2ZjYxMjQ4NGM5NDQ4YWUxMDg5MTUwMjBjOWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ABmNBy7Oyu7fJU+df8yjriofRPl VIiVRg677P0EuasXiUdJ2k4R5DCr2cprgdNi03Gv48vGBy1Ujn1yji+iDRyAHjW+ PnHpTAEWTfO4EUyh2gcPnG0ShbS8H8qLtzaSEuOoJJi+NnTApToxJb0+sy6MXAAa O1AF3JoJWy98CzyPQimps2NhBYDCDs39dEQMBbjERmLGjb2/AaV5vbxmv5g5QaD9 xWlHy0b14fYA8kO/oMBlNVgMAmrtwzxuk80OT1FTsGE2V4tCivdZY3+t0I/6ZWtf WleOiEgubvBK6ej1YiRTu/7apa46biQFzQ4Cxy+/vxOfqwM8WjfC7OxjgwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHYZbzwmV29hJITJRIrhCJFQIMnnMB8GA1UdIwQY MBaAFIS/xFH8TyQRrd0Aqfuxc0atbomWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExfRVVmeFBKQkd0M1FDcC03RnpScTF1aVpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9iN2JlNjQtODZkNC00NDNiLTk2ODYt ZjY2MzE3OTc3OTY4LzEvZGhsdlBDWlhiMkVraE1sRWl1RUlrVkFneWVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9iN2JlNjQtODZkNC00NDNiLTk2ODYtZjY2MzE3OTc3OTY4 LzEvaExfRVVmeFBKQkd0M1FDcC03RnpScTF1aVpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAlnEUD BAAlnEYwDQYJKoZIhvcNAQELBQADggEBAGTmjFXcdmEfDuLpvXA+/Tzu+GQ6td0i 92ASmRVfc/mlbOGLzDeVFdnZJjzBHF9v90OAvXi0YLhyjVijGWduECDJYw3ysphn KThCPMVWDi2JFdf0W/IoirDxdlQr2gfO13S2TwywjKDQFmt2F8jDWmXWo6ma5XIa 6cOJnJXeOCdy+btAWvuJZhQWjrd1+0++FkJuN13o7xrKiW7M0UorV+fBtkH5L9Jx 2FGP4VU0en2ePZGgdgoIFiwjm+YD2fj4J/FjL3P0sd+dBbKYPrdmnmDAqvNcfR/n 7Gd8ylC6kinD2diCvfLwxD1GaiYJK17X0kPig7NIqXLPFgmfPP8xhlo= -----END CERTIFICATE-----Generated at Mon Jan 26 10:53:29 2026 by rpki-client