This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/dLSSiZeltba729G3UFGH0XwLSho.roa File: dLSSiZeltba729G3UFGH0XwLSho.roa (raw, json) Hash identifier: 4MsOLvl+y1vyg93nB2nnBksXqFnl7fNEnQs0xIF73hU= Subject key identifier: 74:B4:92:89:97:A5:B5:B6:BB:DB:D1:B7:50:51:87:D1:7C:0B:4A:1A Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Certificate serial: 019B76EB309FD27224A53017E1296A6EAB01 Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/dLSSiZeltba729G3UFGH0XwLSho.roa Signing time: Thu 01 Jan 2026 00:18:03 +0000 ROA not before: Thu 01 Jan 2026 00:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215678 IP address blocks: 91.195.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:30:9f:d2:72:24:a5:30:17:e1:29:6a:6e:ab:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Validity Not Before: Jan 1 00:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74b4928997a5b5b6bbdbd1b7505187d17c0b4a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2e:5a:0c:38:65:c2:93:6f:c9:68:5c:6a:86: 7a:7f:f9:db:58:19:29:8c:23:13:a0:95:c5:c4:16: bb:87:4e:ce:7f:e0:39:c2:24:f8:30:5b:6f:d4:d0: d3:e3:d6:4a:82:61:e6:3e:ad:4f:b8:22:0a:ee:85: 4b:2d:d9:6d:ad:11:7f:f7:6c:58:8d:59:2a:e3:49: d3:82:72:64:f5:4a:85:d0:88:a7:27:73:f2:dc:5c: ad:79:ab:92:6e:9a:67:36:d3:04:5c:cd:83:81:2d: 43:63:a9:7f:0c:dd:71:a2:46:4b:6c:db:b6:4c:0c: 04:64:40:c6:b7:7e:a5:96:f2:23:40:74:f3:85:8f: 39:d7:55:e0:ec:e1:dd:3f:34:07:75:5c:3b:dc:04: 3f:30:5d:bd:5c:b3:97:da:12:6a:c4:79:bc:d9:31: f2:60:59:9b:0c:f5:24:47:9f:93:e5:73:c0:39:a3: 85:c2:e6:38:9e:19:de:55:1d:8a:dc:68:51:26:be: d9:d8:37:c4:8c:3d:c9:60:02:7d:6a:24:19:4d:1d: 22:58:72:b5:ff:1a:ad:c2:f6:39:72:4a:69:c2:a2: be:21:c5:4c:59:aa:c2:8f:c9:cc:81:4f:19:2e:37: 72:78:13:e9:f8:35:94:8c:06:62:76:ef:be:6d:72: 6d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B4:92:89:97:A5:B5:B6:BB:DB:D1:B7:50:51:87:D1:7C:0B:4A:1A X509v3 Authority Key Identifier: keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/dLSSiZeltba729G3UFGH0XwLSho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.124.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:2f:4e:29:0b:9d:2e:c8:a5:41:cc:f6:3f:00:88:f3:10:ab: 67:d1:1a:2a:ee:93:cb:b1:e8:f8:1b:8a:8c:0f:04:ff:33:56: 70:73:1d:be:07:27:35:2c:c2:c8:b2:a1:63:3e:f4:b7:8a:ca: 95:37:8d:9c:3b:05:c8:63:cb:29:77:43:0a:06:8d:ba:9e:37: 57:b6:be:09:ec:a4:19:fb:0e:18:34:d2:75:bb:8c:bb:4c:37: ff:06:2e:70:e1:61:85:21:3c:d3:73:37:f0:74:b9:d7:2b:6a: 97:70:99:a8:d0:9c:38:ed:3e:f1:15:f7:48:c8:e1:43:db:56: 5b:7f:88:1c:40:26:a1:4f:55:67:2d:72:59:b5:9e:57:49:2c: b9:80:28:eb:24:2e:51:d7:03:31:b0:ff:35:49:03:9c:a1:bd: 82:c3:a8:92:91:6a:5e:c8:fa:72:93:e6:96:c7:a4:a2:cb:c8: e3:70:c6:ab:f7:2d:3e:4c:f6:00:dd:de:00:a0:16:b8:1a:6c: 7c:44:f5:b7:3b:e5:15:c0:9c:71:69:a5:ee:ba:a8:27:b9:29: ff:fa:4c:e5:70:ea:d8:8e:f7:4c:74:0c:4d:28:51:c4:33:03: cf:2c:f9:a0:da:ad:a0:3f:31:70:9d:fd:7f:3d:14:eb:45:54: d2:4f:72:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26zCf0nIkpTAX4SlqbqsBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2 Njk0NmYwHhcNMjYwMTAxMDAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGI0OTI4OTk3YTViNWI2YmJkYmQxYjc1MDUxODdkMTdjMGI0YTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi5aDDhlwpNvyWhcaoZ6f/nbWBkp jCMToJXFxBa7h07Of+A5wiT4MFtv1NDT49ZKgmHmPq1PuCIK7oVLLdltrRF/92xY jVkq40nTgnJk9UqF0IinJ3Py3FyteauSbppnNtMEXM2DgS1DY6l/DN1xokZLbNu2 TAwEZEDGt36llvIjQHTzhY8511Xg7OHdPzQHdVw73AQ/MF29XLOX2hJqxHm82THy YFmbDPUkR5+T5XPAOaOFwuY4nhneVR2K3GhRJr7Z2DfEjD3JYAJ9aiQZTR0iWHK1 /xqtwvY5ckppwqK+IcVMWarCj8nMgU8ZLjdyeBPp+DWUjAZidu++bXJtQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHS0komXpbW2u9vRt1BRh9F8C0oaMB8GA1UdIwQY MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct MDhhZDk0MTAxZDdlLzEvZExTU2laZWx0YmE3MjlHM1VGR0gwWHdMU2hvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8N8MA0G CSqGSIb3DQEBCwUAA4IBAQA8L04pC50uyKVBzPY/AIjzEKtn0Roq7pPLsej4G4qM DwT/M1Zwcx2+Byc1LMLIsqFjPvS3isqVN42cOwXIY8spd0MKBo26njdXtr4J7KQZ +w4YNNJ1u4y7TDf/Bi5w4WGFITzTczfwdLnXK2qXcJmo0Jw47T7xFfdIyOFD21Zb f4gcQCahT1VnLXJZtZ5XSSy5gCjrJC5R1wMxsP81SQOcob2Cw6iSkWpeyPpyk+aW x6Siy8jjcMar9y0+TPYA3d4AoBa4Gmx8RPW3O+UVwJxxaaXuuqgnuSn/+kzlcOrY jvdMdAxNKFHEMwPPLPmg2q2gPzFwnf1/PRTrRVTST3Iv -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:12 2026 by rpki-client