This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/dal6AFPAMOKunkfF7hTY8Cuz5HU.roa File: dal6AFPAMOKunkfF7hTY8Cuz5HU.roa (raw, json) Hash identifier: IVF4Tz8JdO1RxYBDwDE4cvUkOAHOkcCD98baar1MrRo= Subject key identifier: 75:A9:7A:00:53:C0:30:E2:AE:9E:47:C5:EE:14:D8:F0:2B:B3:E4:75 Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748 Certificate serial: 019B791130F49FD85799217C6B2FE65DE536 Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/dal6AFPAMOKunkfF7hTY8Cuz5HU.roa Signing time: Thu 01 Jan 2026 10:18:48 +0000 ROA not before: Thu 01 Jan 2026 10:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42870 IP address blocks: 217.22.168.0/22 maxlen: 22 217.22.168.0/24 maxlen: 24 217.22.169.0/24 maxlen: 24 217.22.170.0/24 maxlen: 24 217.22.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:30:f4:9f:d8:57:99:21:7c:6b:2f:e6:5d:e5:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748 Validity Not Before: Jan 1 10:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75a97a0053c030e2ae9e47c5ee14d8f02bb3e475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:16:f6:34:45:e0:6a:9d:14:fd:92:98:5a:6c: 05:41:88:b6:92:3b:a5:23:be:3e:b1:e2:35:91:e6: b6:f9:43:b0:4e:89:63:56:50:08:39:b3:cb:bd:04: bc:31:04:19:16:d4:5a:c0:be:97:a2:41:a8:61:39: e4:dd:e1:dc:92:26:6a:f2:79:dc:3e:86:87:7e:69: 21:20:ce:a8:6a:d3:57:ae:4f:4b:7c:c1:3c:48:cf: 8f:88:8d:35:68:39:48:37:59:8c:5d:0f:30:19:a4: e1:ec:d1:98:4b:fd:e9:7a:99:d6:9c:db:4a:03:fb: 89:fa:6d:ae:65:80:37:8e:14:73:69:71:8d:33:83: 7c:08:7a:2b:f3:d1:20:fe:0c:15:4e:f6:90:4a:d2: 2f:6c:3c:b9:d4:6a:2c:7b:75:7c:d1:ee:3e:9f:ee: 88:b3:e4:10:a8:e5:76:76:d0:42:95:48:cb:bf:2b: 7b:78:70:92:e3:a8:7b:87:94:4b:fe:4d:9e:0c:da: 97:31:44:1f:dd:0e:c0:ee:24:59:fe:28:83:e7:93: 1b:63:8d:56:2c:cd:bc:9c:11:36:8b:2b:13:ee:dd: fb:79:3a:b5:0a:97:10:5d:bf:47:4c:53:6c:9f:5a: 72:49:b6:23:4d:94:cb:9b:74:cb:c3:b0:f5:f5:35: 63:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A9:7A:00:53:C0:30:E2:AE:9E:47:C5:EE:14:D8:F0:2B:B3:E4:75 X509v3 Authority Key Identifier: keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/dal6AFPAMOKunkfF7hTY8Cuz5HU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.22.168.0/22 Signature Algorithm: sha256WithRSAEncryption b3:66:0e:a2:ed:a2:0b:b2:a3:72:23:2b:19:e7:a0:47:72:e2: ae:43:f7:44:6d:12:ae:61:a7:52:25:f0:5f:75:26:c5:2a:e9: 34:ba:02:1e:04:56:03:c7:54:9a:a8:f7:19:7c:f0:cb:44:99: 4c:9e:a2:8e:5b:4c:cd:42:d8:59:b9:f2:3a:e0:50:9a:40:de: 5a:0f:f6:07:4b:53:78:ce:13:18:df:10:b9:0b:d0:50:c0:6b: d0:56:4f:c7:fa:7c:73:4b:89:08:7c:be:f1:9d:15:e4:37:cb: b7:cb:9a:13:84:6d:bd:03:8b:f7:86:8d:2d:2b:1b:e0:8a:d7: 17:42:68:42:be:f2:54:4c:3b:a4:62:b4:95:81:81:15:71:ee: 2d:45:61:6b:b3:b7:13:a8:13:16:80:1c:15:05:f1:0f:cd:e2: 34:7d:9b:7c:5c:2e:98:15:08:64:aa:9d:0e:09:b6:30:81:3a: 76:bf:ac:39:49:d7:17:72:c6:3e:8e:0e:3b:d2:41:f4:35:6a: 65:7b:60:35:d4:a8:f5:92:c5:e7:69:33:4d:3e:be:1b:c9:49: e9:ee:2d:7e:a5:ec:a1:a2:fa:57:52:3b:7a:1b:d0:38:79:ef: 84:5a:20:46:19:80:be:d6:66:38:c3:7e:4c:e7:59:97:7d:91: e3:d9:14:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ETD0n9hXmSF8ay/mXeU2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYzM0MmMwNmFhY2MzNTlkMzk0MzlmZjU4ZGVmYThlYTE4 NzU3NDgwHhcNMjYwMTAxMTAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWE5N2EwMDUzYzAzMGUyYWU5ZTQ3YzVlZTE0ZDhmMDJiYjNlNDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhb2NEXgap0U/ZKYWmwFQYi2kjul I74+seI1kea2+UOwToljVlAIObPLvQS8MQQZFtRawL6XokGoYTnk3eHckiZq8nnc PoaHfmkhIM6oatNXrk9LfME8SM+PiI01aDlIN1mMXQ8wGaTh7NGYS/3pepnWnNtK A/uJ+m2uZYA3jhRzaXGNM4N8CHor89Eg/gwVTvaQStIvbDy51Gose3V80e4+n+6I s+QQqOV2dtBClUjLvyt7eHCS46h7h5RL/k2eDNqXMUQf3Q7A7iRZ/iiD55MbY41W LM28nBE2iysT7t37eTq1CpcQXb9HTFNsn1pySbYjTZTLm3TLw7D19TVjEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHWpegBTwDDirp5Hxe4U2PArs+R1MB8GA1UdIwQY MBaAFDPDQsBqrMNZ05Q5/1je+o6hh1dIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUt N2YyMzMzNjA0OTk3LzEvZGFsNkFGUEFNT0t1bmtmRjdoVFk4Q3V6NUhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUtN2YyMzMzNjA0OTk3 LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2RaoMA0G CSqGSIb3DQEBCwUAA4IBAQCzZg6i7aILsqNyIysZ56BHcuKuQ/dEbRKuYadSJfBf dSbFKuk0ugIeBFYDx1SaqPcZfPDLRJlMnqKOW0zNQthZufI64FCaQN5aD/YHS1N4 zhMY3xC5C9BQwGvQVk/H+nxzS4kIfL7xnRXkN8u3y5oThG29A4v3ho0tKxvgitcX QmhCvvJUTDukYrSVgYEVce4tRWFrs7cTqBMWgBwVBfEPzeI0fZt8XC6YFQhkqp0O CbYwgTp2v6w5SdcXcsY+jg470kH0NWple2A11Kj1ksXnaTNNPr4byUnp7i1+peyh ovpXUjt6G9A4ee+EWiBGGYC+1mY4w35M51mXfZHj2RRP -----END CERTIFICATE-----Generated at Mon Jan 26 07:40:26 2026 by rpki-client