This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/DlR6FMEy3ZUziL2f115eqSpFrd4.roa File: DlR6FMEy3ZUziL2f115eqSpFrd4.roa (raw, json) Hash identifier: J9OrCx1qVO5sGSizz9znnHCasguafUQbwLqTM5GhEVc= Subject key identifier: 0E:54:7A:14:C1:32:DD:95:33:88:BD:9F:D7:5E:5E:A9:2A:45:AD:DE Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA76C3832B410A757EFDEC5A2276DAE Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/DlR6FMEy3ZUziL2f115eqSpFrd4.roa Signing time: Fri 02 Jan 2026 12:20:59 +0000 ROA not before: Fri 02 Jan 2026 12:20:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34168 IP address blocks: 84.53.192.0/18 maxlen: 18 2a02:960::/32 maxlen: 32 2a02:960:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:6c:38:32:b4:10:a7:57:ef:de:c5:a2:27:6d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e547a14c132dd953388bd9fd75e5ea92a45adde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2e:ae:02:6e:32:b5:dc:08:d2:fd:c0:e2:af: 4e:74:41:1a:ee:de:cd:a0:6d:07:f0:b8:79:60:52: 10:7e:bd:a0:4d:e0:13:79:44:1b:e0:3c:79:b0:63: 12:79:56:4d:3a:02:fc:71:72:43:28:50:04:66:15: 96:b5:f2:d9:53:8f:2a:88:41:e9:8f:93:12:e0:3b: c8:71:1d:1c:a9:26:a0:17:71:0f:bb:f0:9e:68:3e: 79:ba:ec:3c:30:27:51:fd:71:82:51:08:80:ca:ee: aa:10:04:4a:48:35:8c:d3:6e:5a:90:ba:fc:f1:ee: ec:30:19:93:72:40:cd:d8:5a:73:13:96:ec:0b:cb: 86:b0:ba:d9:bc:f1:fe:97:1d:e6:8f:79:a1:df:5a: ee:84:4d:5c:e9:60:5d:27:52:bd:6a:79:47:78:87: f6:f2:33:00:e8:d8:ea:67:a1:70:08:ad:d4:90:93: 40:6c:e0:11:eb:9b:80:da:80:bc:89:7a:b4:70:f3: 9d:a2:8b:57:9f:58:e5:a9:33:1b:47:8b:27:65:fe: 6a:27:53:eb:07:15:30:0f:c3:e5:24:5f:d3:bd:67: a8:5d:ad:41:ad:c5:2b:29:de:5d:dc:2d:8b:96:7b: ea:6d:bf:f6:c5:fe:7c:dd:b8:f6:b0:88:62:92:95: 04:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:54:7A:14:C1:32:DD:95:33:88:BD:9F:D7:5E:5E:A9:2A:45:AD:DE X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/DlR6FMEy3ZUziL2f115eqSpFrd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.53.192.0/18 IPv6: 2a02:960::/32 Signature Algorithm: sha256WithRSAEncryption 82:b6:7e:88:d0:e0:f5:5a:1e:e1:ba:8b:95:be:9c:cf:e4:d5: cd:91:67:a4:34:5e:89:5f:69:79:b5:63:ba:3b:db:40:93:05: 4d:c6:26:7c:3f:46:a2:dd:9a:01:41:54:9d:b4:1c:51:39:91: f5:10:3f:f9:38:9e:24:38:0c:5f:da:d3:c1:8b:3e:da:13:52: 79:98:17:da:74:d1:a4:be:7e:28:3e:13:df:49:64:86:1c:ca: b7:8b:21:6a:7e:16:36:11:cb:d6:71:c6:80:f7:05:77:83:d5: c2:6a:6a:bf:f3:c6:22:5d:60:7a:e6:ab:e9:fe:9e:48:bb:8c: 07:16:9f:bd:14:a3:c0:0c:cb:da:39:2f:56:41:92:3a:43:0e: 17:d0:c5:e6:2d:d2:e5:40:f0:4e:6d:68:85:bf:f2:2e:8f:43: a3:a4:12:58:b6:53:22:22:51:ce:e6:27:12:60:c8:82:2f:d1: 8e:28:5c:a1:18:e4:c6:ff:86:34:b5:96:2a:86:cb:8a:cb:cb: 80:60:94:8b:a5:0f:49:e8:ec:1e:5f:3e:93:fe:2f:59:2a:ae: 38:61:a2:11:b6:2d:be:4b:c5:c8:f7:4b:75:9d:38:73:d9:8f: b1:7c:3a:63:03:55:c4:38:6d:d9:53:3f:f3:ae:4a:16:5e:6e: 8c:5d:87:df -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+p2w4MrQQp1fv3sWiJ22uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTU0N2ExNGMxMzJkZDk1MzM4OGJkOWZkNzVlNWVhOTJhNDVhZGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1S6uAm4ytdwI0v3A4q9OdEEa7t7N oG0H8Lh5YFIQfr2gTeATeUQb4Dx5sGMSeVZNOgL8cXJDKFAEZhWWtfLZU48qiEHp j5MS4DvIcR0cqSagF3EPu/CeaD55uuw8MCdR/XGCUQiAyu6qEARKSDWM025akLr8 8e7sMBmTckDN2FpzE5bsC8uGsLrZvPH+lx3mj3mh31ruhE1c6WBdJ1K9anlHeIf2 8jMA6NjqZ6FwCK3UkJNAbOAR65uA2oC8iXq0cPOdootXn1jlqTMbR4snZf5qJ1Pr BxUwD8PlJF/TvWeoXa1BrcUrKd5d3C2Llnvqbb/2xf583bj2sIhikpUExQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFA5UehTBMt2VM4i9n9deXqkqRa3eMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvRGxSNkZNRXkzWlV6aUwyZjExNWVxU3BGcmQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQGVDXAMA0E AgACMAcDBQAqAglgMA0GCSqGSIb3DQEBCwUAA4IBAQCCtn6I0OD1Wh7huouVvpzP 5NXNkWekNF6JX2l5tWO6O9tAkwVNxiZ8P0ai3ZoBQVSdtBxROZH1ED/5OJ4kOAxf 2tPBiz7aE1J5mBfadNGkvn4oPhPfSWSGHMq3iyFqfhY2EcvWccaA9wV3g9XCamq/ 88YiXWB65qvp/p5Iu4wHFp+9FKPADMvaOS9WQZI6Qw4X0MXmLdLlQPBObWiFv/Iu j0OjpBJYtlMiIlHO5icSYMiCL9GOKFyhGOTG/4Y0tZYqhsuKy8uAYJSLpQ9J6Owe Xz6T/i9ZKq44YaIRti2+S8XI90t1nThz2Y+xfDpjA1XEOG3ZUz/zrkoWXm6MXYff -----END CERTIFICATE-----Generated at Mon Jan 26 01:39:57 2026 by rpki-client