This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/dls_8eGlW5noEKaT1vWyI3L6kis.roa File: dls_8eGlW5noEKaT1vWyI3L6kis.roa (raw, json) Hash identifier: Pm8+FvhXP2lEJSCgMp+/lPklylAzLJsm9W0xN+5smos= Subject key identifier: 76:5B:3F:F1:E1:A5:5B:99:E8:10:A6:93:D6:F5:B2:23:72:FA:92:2B Certificate issuer: /CN=350cce1b9d06dcce8856659536499c1603391370 Certificate serial: 019B78A2848203E62569EFB8049B63A886FD Authority key identifier: 35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/dls_8eGlW5noEKaT1vWyI3L6kis.roa Signing time: Thu 01 Jan 2026 08:17:55 +0000 ROA not before: Thu 01 Jan 2026 08:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51815 IP address blocks: 91.209.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:84:82:03:e6:25:69:ef:b8:04:9b:63:a8:86:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=350cce1b9d06dcce8856659536499c1603391370 Validity Not Before: Jan 1 08:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=765b3ff1e1a55b99e810a693d6f5b22372fa922b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6a:4a:b7:cf:a4:2a:1a:25:c9:74:fa:3c:58: 1f:b5:58:8a:7d:91:ef:f3:cb:66:12:15:6f:a4:8a: 04:41:2a:8c:53:59:ae:d7:3e:4a:14:a5:29:ca:af: 5b:a9:e0:9c:48:c6:27:f6:4e:3e:2d:cf:d1:0f:01: 53:be:77:77:4a:b9:76:69:d4:27:c3:09:62:b5:35: 23:96:38:2d:5e:b5:4c:e6:bd:95:77:3a:f7:01:c3: ac:b9:7d:b2:33:c2:48:35:72:4b:6f:d8:f7:4b:e6: a2:15:1e:76:8f:33:d4:9d:8b:06:17:91:bc:0e:64: 8f:6b:e5:a4:e9:b8:31:40:52:7e:31:67:e9:50:a8: 65:1e:a8:a5:4c:0e:87:7c:94:73:ff:00:47:ee:d5: 19:0a:36:d0:9f:41:8e:a6:46:40:e1:68:22:ee:3e: 00:38:0e:08:bf:83:35:36:73:66:b1:53:10:56:46: 30:80:59:23:fe:29:a0:72:14:b2:2d:13:e1:a4:dc: 3c:fb:58:82:a0:ab:77:90:16:74:a1:a2:7f:01:a1: 31:6f:7f:50:99:9d:46:6f:0b:b9:38:13:1b:0c:75: 5e:da:72:b8:c9:2b:bf:74:78:40:35:2a:fc:7a:22: e6:0d:20:b1:9a:92:f5:98:e7:48:90:6f:49:04:79: ca:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5B:3F:F1:E1:A5:5B:99:E8:10:A6:93:D6:F5:B2:23:72:FA:92:2B X509v3 Authority Key Identifier: keyid:35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/dls_8eGlW5noEKaT1vWyI3L6kis.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.88.0/24 Signature Algorithm: sha256WithRSAEncryption ba:cc:af:88:73:db:fb:79:fb:36:e7:29:5e:fa:3d:b0:5f:ce: b7:d9:05:a6:15:37:7e:83:e2:ea:2f:48:cb:8e:cf:ee:0c:47: 41:5b:9e:73:68:6b:b7:70:ec:cf:57:61:a7:8f:5b:17:e6:80: 57:fc:f8:00:30:78:71:a7:c9:1a:1e:f6:4b:f7:23:30:83:9a: b2:bb:ba:84:c3:39:17:26:7e:3c:d5:c9:f2:e6:7c:91:1c:c5: 67:42:dd:9e:a4:ee:0a:12:69:7b:ba:52:ff:8b:6a:13:c5:88: 33:d1:a0:c2:0b:35:b2:d5:bb:58:60:78:38:54:ad:f8:d3:0e: 7f:0c:19:66:9e:3d:d5:5b:ea:c9:f9:4e:cc:80:93:5a:21:71: 33:d8:1f:fa:db:46:1a:92:c0:a8:36:ca:ef:d2:94:9f:01:87: 4e:cf:df:9b:67:3f:3a:71:d0:61:f5:95:a4:8a:62:c0:05:a3: dc:e5:fd:83:f5:f5:d3:e2:22:c3:d0:1f:53:1f:77:d5:f8:e7: a9:c5:53:a3:af:23:07:d7:ec:98:8b:1b:51:ab:9f:24:00:fd: 5f:2f:3f:4e:4b:d8:35:74:68:4f:e5:71:92:f8:3c:f9:63:f0: 45:b2:aa:85:97:bb:72:93:ae:af:c9:6d:a0:6b:23:7d:34:46: e3:54:61:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ooSCA+Ylae+4BJtjqIb9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MGNjZTFiOWQwNmRjY2U4ODU2NjU5NTM2NDk5YzE2MDMz OTEzNzAwHhcNMjYwMTAxMDgxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjViM2ZmMWUxYTU1Yjk5ZTgxMGE2OTNkNmY1YjIyMzcyZmE5MjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GpKt8+kKholyXT6PFgftViKfZHv 88tmEhVvpIoEQSqMU1mu1z5KFKUpyq9bqeCcSMYn9k4+Lc/RDwFTvnd3Srl2adQn wwlitTUjljgtXrVM5r2Vdzr3AcOsuX2yM8JINXJLb9j3S+aiFR52jzPUnYsGF5G8 DmSPa+Wk6bgxQFJ+MWfpUKhlHqilTA6HfJRz/wBH7tUZCjbQn0GOpkZA4Wgi7j4A OA4Iv4M1NnNmsVMQVkYwgFkj/imgchSyLRPhpNw8+1iCoKt3kBZ0oaJ/AaExb39Q mZ1Gbwu5OBMbDHVe2nK4ySu/dHhANSr8eiLmDSCxmpL1mOdIkG9JBHnKVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHZbP/HhpVuZ6BCmk9b1siNy+pIrMB8GA1UdIwQY MBaAFDUMzhudBtzOiFZllTZJnBYDORNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlF6T0c1MEczTTZJVm1XVk5rbWNGZ001RTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mNTJkYjktOGUyNS00Mjk3LTkzZmQt NTU0MTVhMGJhNzNiLzEvZGxzXzhlR2xXNW5vRUthVDF2V3lJM0w2a2lzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9mNTJkYjktOGUyNS00Mjk3LTkzZmQtNTU0MTVhMGJhNzNi LzEvTlF6T0c1MEczTTZJVm1XVk5rbWNGZ001RTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9FYMA0G CSqGSIb3DQEBCwUAA4IBAQC6zK+Ic9v7efs25yle+j2wX8632QWmFTd+g+LqL0jL js/uDEdBW55zaGu3cOzPV2Gnj1sX5oBX/PgAMHhxp8kaHvZL9yMwg5qyu7qEwzkX Jn481cny5nyRHMVnQt2epO4KEml7ulL/i2oTxYgz0aDCCzWy1btYYHg4VK340w5/ DBlmnj3VW+rJ+U7MgJNaIXEz2B/620YaksCoNsrv0pSfAYdOz9+bZz86cdBh9ZWk imLABaPc5f2D9fXT4iLD0B9TH3fV+OepxVOjryMH1+yYixtRq58kAP1fLz9OS9g1 dGhP5XGS+Dz5Y/BFsqqFl7tyk66vyW2gayN9NEbjVGFB -----END CERTIFICATE-----Generated at Mon Jan 26 20:26:02 2026 by rpki-client