This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/DALU3tcvOFTYsZrsDs2f4e9axOI.roa File: DALU3tcvOFTYsZrsDs2f4e9axOI.roa (raw, json) Hash identifier: ebFcRHw5U0MTTaA0PwzsRWLgtLL3PnreXj9riBF5Jv0= Subject key identifier: 0C:02:D4:DE:D7:2F:38:54:D8:B1:9A:EC:0E:CD:9F:E1:EF:5A:C4:E2 Certificate issuer: /CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3 Certificate serial: 019B77C7150CE31030C3FA0229E27AED003D Authority key identifier: 03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/DALU3tcvOFTYsZrsDs2f4e9axOI.roa Signing time: Thu 01 Jan 2026 04:18:14 +0000 ROA not before: Thu 01 Jan 2026 04:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211403 IP address blocks: 213.110.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:15:0c:e3:10:30:c3:fa:02:29:e2:7a:ed:00:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3 Validity Not Before: Jan 1 04:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c02d4ded72f3854d8b19aec0ecd9fe1ef5ac4e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ba:35:b6:57:b7:8b:bc:14:18:45:b6:bb:d9: cd:96:ed:49:ab:9e:e4:5c:3c:49:e6:eb:cb:da:9e: 58:2c:19:71:1c:2a:99:f6:68:66:a2:08:80:54:a9: 7f:b4:e9:00:46:72:94:2c:fb:f3:e5:69:dc:a0:3b: 6d:fe:03:e8:0d:4a:7a:b1:5b:65:4b:49:37:98:17: b0:5f:2e:9b:de:d2:73:dd:e1:57:c6:84:ce:0d:e7: f9:9d:59:48:84:40:fa:53:89:ef:a5:19:13:c6:fc: 67:39:eb:4d:4b:a7:55:3a:52:56:54:c3:e1:11:06: 4a:5f:73:4f:d5:f7:08:c1:41:b9:7b:ed:9d:1e:cd: c5:e8:8c:69:08:08:bb:3f:e3:58:a5:bb:13:b2:ee: cb:99:a0:c6:30:4f:d4:81:28:5e:44:ac:37:fc:23: 09:24:53:c9:16:bb:c3:d5:ae:0a:92:d2:20:9b:b4: 8e:60:a1:bf:90:30:ca:c9:10:b9:12:95:f5:e1:35: 4b:91:1a:29:75:7c:83:db:5c:fb:bd:db:1d:c3:18: 2e:44:fe:4a:0f:66:25:83:70:22:ae:c5:24:59:cb: 3f:a8:95:66:ec:d2:db:76:bf:df:f6:e5:a3:b6:5f: a7:04:32:81:1f:cf:d7:9d:50:83:cc:94:89:2d:0e: 64:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:02:D4:DE:D7:2F:38:54:D8:B1:9A:EC:0E:CD:9F:E1:EF:5A:C4:E2 X509v3 Authority Key Identifier: keyid:03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/DALU3tcvOFTYsZrsDs2f4e9axOI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.110.238.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:55:3f:7a:67:87:06:71:8f:f9:33:51:44:62:07:0e:8f:24: 28:3e:93:ee:f6:af:76:fa:2f:c7:d0:75:d6:78:2e:c6:31:94: df:f7:f6:31:dd:bc:be:ab:34:8c:b0:05:94:f3:68:a4:32:45: a0:a6:36:47:43:59:a9:b6:f9:86:da:d3:4b:0e:72:5d:5e:1e: a8:d9:5c:ec:27:28:da:c0:66:c4:95:80:5a:7b:9e:0a:01:c1: cb:8c:47:91:b4:27:e8:52:ef:37:f2:9a:b6:81:e4:af:54:5e: 92:98:5d:3b:c1:57:dd:99:5e:2f:80:16:ed:71:6f:4b:5d:88: da:24:60:0a:7a:cb:6d:7b:40:34:36:e2:00:73:5e:32:1f:74: f5:8c:f5:48:55:d1:a7:7a:3f:30:3e:70:56:bf:aa:91:27:48: 8f:6e:4d:ea:c2:d5:0d:5c:b9:c2:aa:42:13:68:7e:f0:06:b8: cc:41:00:e2:63:5d:9f:ac:db:63:83:5d:f5:bb:78:fe:0a:31: b0:17:55:12:65:ef:b5:dd:3e:90:76:49:a9:97:a4:7a:f9:ad: f3:ef:75:78:57:1a:4d:ef:a7:82:55:a2:65:2e:c0:15:87:46: 48:e7:bc:3f:39:2a:84:67:f7:6b:e2:49:63:83:72:c8:cb:40: 4e:61:39:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xxUM4xAww/oCKeJ67QA9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzOTgzMWY3YmEzZGUyZmJlZjE2ZDQ2NDlmZDQ4NjBjMTVl OWQ2YzMwHhcNMjYwMTAxMDQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzAyZDRkZWQ3MmYzODU0ZDhiMTlhZWMwZWNkOWZlMWVmNWFjNGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLo1tle3i7wUGEW2u9nNlu1Jq57k XDxJ5uvL2p5YLBlxHCqZ9mhmogiAVKl/tOkARnKULPvz5WncoDtt/gPoDUp6sVtl S0k3mBewXy6b3tJz3eFXxoTODef5nVlIhED6U4nvpRkTxvxnOetNS6dVOlJWVMPh EQZKX3NP1fcIwUG5e+2dHs3F6IxpCAi7P+NYpbsTsu7LmaDGME/UgSheRKw3/CMJ JFPJFrvD1a4KktIgm7SOYKG/kDDKyRC5EpX14TVLkRopdXyD21z7vdsdwxguRP5K D2Ylg3AirsUkWcs/qJVm7NLbdr/f9uWjtl+nBDKBH8/XnVCDzJSJLQ5kNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAwC1N7XLzhU2LGa7A7Nn+HvWsTiMB8GA1UdIwQY MBaAFAOYMfe6PeL77xbUZJ/UhgwV6dbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTVneDk3bzk0dnZ2RnRSa245U0dEQlhwMXNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lNDQ5NGUtMWUzMy00NDM3LTg0MzMt MDM3YjVhN2I5NTQ0LzEvREFMVTN0Y3ZPRlRZc1pyc0RzMmY0ZTlheE9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9lNDQ5NGUtMWUzMy00NDM3LTg0MzMtMDM3YjVhN2I5NTQ0 LzEvQTVneDk3bzk0dnZ2RnRSa245U0dEQlhwMXNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1W7uMA0G CSqGSIb3DQEBCwUAA4IBAQA/VT96Z4cGcY/5M1FEYgcOjyQoPpPu9q92+i/H0HXW eC7GMZTf9/Yx3by+qzSMsAWU82ikMkWgpjZHQ1mptvmG2tNLDnJdXh6o2VzsJyja wGbElYBae54KAcHLjEeRtCfoUu838pq2geSvVF6SmF07wVfdmV4vgBbtcW9LXYja JGAKestte0A0NuIAc14yH3T1jPVIVdGnej8wPnBWv6qRJ0iPbk3qwtUNXLnCqkIT aH7wBrjMQQDiY12frNtjg131u3j+CjGwF1USZe+13T6Qdkmpl6R6+a3z73V4VxpN 76eCVaJlLsAVh0ZI57w/OSqEZ/dr4kljg3LIy0BOYTkb -----END CERTIFICATE-----Generated at Tue Feb 10 00:01:59 2026 by rpki-client