This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/dLRmwhFl83bEy7zAcdX4mKmlXjY.roa File: dLRmwhFl83bEy7zAcdX4mKmlXjY.roa (raw, json) Hash identifier: VThAeMBueXR/zSSpQFMxHljw4NYIZkHXHe6JR0i+XFk= Subject key identifier: 74:B4:66:C2:11:65:F3:76:C4:CB:BC:C0:71:D5:F8:98:A9:A5:5E:36 Certificate issuer: /CN=15c18a2908cebd9085e01266bb02fb8af2247735 Certificate serial: 019B7FF2AC025B56BE7065AC96D89088E534 Authority key identifier: 15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/dLRmwhFl83bEy7zAcdX4mKmlXjY.roa Signing time: Fri 02 Jan 2026 18:22:48 +0000 ROA not before: Fri 02 Jan 2026 18:22:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43769 IP address blocks: 91.200.36.0/22 maxlen: 22 91.200.36.0/24 maxlen: 24 91.200.37.0/24 maxlen: 24 195.178.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:ac:02:5b:56:be:70:65:ac:96:d8:90:88:e5:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15c18a2908cebd9085e01266bb02fb8af2247735 Validity Not Before: Jan 2 18:22:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74b466c21165f376c4cbbcc071d5f898a9a55e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e4:a7:d9:74:4f:67:00:4b:58:db:54:33:1f: 8d:60:a6:17:3a:e2:0c:db:70:2b:15:8c:b6:ad:7b: e0:5d:4b:0b:b3:13:a1:ad:cf:19:52:54:be:2a:fd: 97:ed:ca:66:6a:b4:94:b1:cb:48:70:f7:8a:90:79: c7:25:8f:d0:17:68:c1:fd:b6:4a:09:31:70:d2:bb: 18:64:17:a5:26:90:5f:72:62:0c:5f:14:db:57:8e: 75:bf:52:3e:82:9b:2f:d7:47:b9:47:34:cf:47:76: 58:e5:4b:aa:e1:8e:8b:c6:e3:e0:23:5e:a6:e9:d1: ff:e7:17:69:6d:d3:e8:cf:e8:31:29:03:82:a9:4e: 18:d1:3d:52:dc:32:df:c2:d4:fd:94:4a:20:c3:da: ba:72:c8:28:d3:22:d6:4d:d6:5b:ca:1b:cd:a0:69: 07:d1:f1:25:02:a4:c6:0d:60:9c:ab:85:a5:d8:ac: dc:41:d2:f7:56:28:df:6e:3f:3c:33:4b:66:52:21: 67:ad:b8:27:56:af:33:8d:f8:83:4b:be:ef:6c:82: 9e:72:7d:ad:69:81:cd:57:a5:cc:ed:16:16:71:66: 02:d7:74:80:e7:06:87:33:23:4f:b2:36:91:5d:c2: 51:0e:f0:af:58:ad:f4:e5:87:dc:5f:ee:6a:c0:f6: 84:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B4:66:C2:11:65:F3:76:C4:CB:BC:C0:71:D5:F8:98:A9:A5:5E:36 X509v3 Authority Key Identifier: keyid:15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/dLRmwhFl83bEy7zAcdX4mKmlXjY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.36.0/22 195.178.26.0/23 Signature Algorithm: sha256WithRSAEncryption b7:fe:67:c1:25:73:f8:10:8e:56:4f:a8:78:9e:d5:40:32:10: a9:f9:43:7b:3e:dd:de:2d:98:fb:64:c2:f3:fe:51:fe:d2:90: 9a:7b:c5:bb:06:3c:85:b6:17:ba:9e:aa:f7:4b:8a:be:9d:22: 57:4b:73:bd:ec:f8:70:7a:76:94:05:ce:bd:ba:d1:65:4c:e7: fd:25:9f:0e:2f:d8:6c:0d:ae:5d:9c:dd:8c:b3:da:5c:9d:b8: d7:d9:e2:fa:d3:e9:e4:0a:e3:2b:42:17:a5:3f:89:dc:f0:5a: d4:9f:76:52:03:38:20:7b:a9:44:97:d6:87:88:88:09:44:60: d4:a9:a9:81:b6:b5:15:06:39:5d:b1:b7:ee:c4:39:18:ad:ed: c1:fd:d0:a2:38:3a:cc:4b:1d:39:af:28:dd:5f:77:b1:79:1d: b3:04:b4:6f:23:98:ad:84:9c:e9:c9:0f:03:c0:08:01:f4:50: 8a:ba:b4:98:30:89:83:85:52:da:47:25:3a:c6:be:ae:22:0f: 2f:1e:aa:3d:8b:f8:7e:20:a5:43:3f:21:89:52:82:82:e5:9b: 09:25:81:f8:b3:a5:c9:0c:89:39:b1:97:1b:9d:22:fd:f7:41: 7e:44:cb:d2:42:49:de:38:e1:14:8d:c8:07:58:65:78:93:6a: d0:ed:86:f8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8qwCW1a+cGWsltiQiOU0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1YzE4YTI5MDhjZWJkOTA4NWUwMTI2NmJiMDJmYjhhZjIy NDc3MzUwHhcNMjYwMTAyMTgyMjQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGI0NjZjMjExNjVmMzc2YzRjYmJjYzA3MWQ1Zjg5OGE5YTU1ZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuSn2XRPZwBLWNtUMx+NYKYXOuIM 23ArFYy2rXvgXUsLsxOhrc8ZUlS+Kv2X7cpmarSUsctIcPeKkHnHJY/QF2jB/bZK CTFw0rsYZBelJpBfcmIMXxTbV451v1I+gpsv10e5RzTPR3ZY5Uuq4Y6LxuPgI16m 6dH/5xdpbdPoz+gxKQOCqU4Y0T1S3DLfwtT9lEogw9q6csgo0yLWTdZbyhvNoGkH 0fElAqTGDWCcq4Wl2KzcQdL3Vijfbj88M0tmUiFnrbgnVq8zjfiDS77vbIKecn2t aYHNV6XM7RYWcWYC13SA5waHMyNPsjaRXcJRDvCvWK305YfcX+5qwPaEkwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHS0ZsIRZfN2xMu8wHHV+JippV42MB8GA1UdIwQY MBaAFBXBiikIzr2QheASZrsC+4ryJHc1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmNHS0tRak92WkNGNEJKbXV3TDdpdklrZHpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82ZjgxNTctOGQ3Ni00ZDNlLTg5Mzgt N2U1M2QxYzU1OGQ5LzEvZExSbXdoRmw4M2JFeTd6QWNkWDRtS21sWGpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC82ZjgxNTctOGQ3Ni00ZDNlLTg5MzgtN2U1M2QxYzU1OGQ5 LzEvRmNHS0tRak92WkNGNEJKbXV3TDdpdklrZHpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8gkAwQB w7IaMA0GCSqGSIb3DQEBCwUAA4IBAQC3/mfBJXP4EI5WT6h4ntVAMhCp+UN7Pt3e LZj7ZMLz/lH+0pCae8W7BjyFthe6nqr3S4q+nSJXS3O97PhwenaUBc69utFlTOf9 JZ8OL9hsDa5dnN2Ms9pcnbjX2eL60+nkCuMrQhelP4nc8FrUn3ZSAzgge6lEl9aH iIgJRGDUqamBtrUVBjldsbfuxDkYre3B/dCiODrMSx05ryjdX3exeR2zBLRvI5it hJzpyQ8DwAgB9FCKurSYMImDhVLaRyU6xr6uIg8vHqo9i/h+IKVDPyGJUoKC5ZsJ JYH4s6XJDIk5sZcbnSL990F+RMvSQkneOOEUjcgHWGV4k2rQ7Yb4 -----END CERTIFICATE-----Generated at Mon Jan 26 05:48:56 2026 by rpki-client