This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/DiLQ3eZ63QejRg20eifdk93Yy6U.roa File: DiLQ3eZ63QejRg20eifdk93Yy6U.roa (raw, json) Hash identifier: qnHrUbQPvPuYp+ZX7v/G+y+XPviRkjsxd6v5SyH+MSU= Subject key identifier: 0E:22:D0:DD:E6:7A:DD:07:A3:46:0D:B4:7A:27:DD:93:DD:D8:CB:A5 Certificate issuer: /CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686 Certificate serial: 019B7A5B87B40B54C9D1F8D796B7FFFA7826 Authority key identifier: FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/DiLQ3eZ63QejRg20eifdk93Yy6U.roa Signing time: Thu 01 Jan 2026 16:19:37 +0000 ROA not before: Thu 01 Jan 2026 16:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42487 IP address blocks: 46.235.176.0/21 maxlen: 24 85.95.192.0/19 maxlen: 24 185.55.244.0/22 maxlen: 22 2a03:d602::/31 maxlen: 31 2a03:d606::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:87:b4:0b:54:c9:d1:f8:d7:96:b7:ff:fa:78:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686 Validity Not Before: Jan 1 16:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e22d0dde67add07a3460db47a27dd93ddd8cba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d0:80:1a:b1:8a:29:ec:ae:be:28:7b:e3:99: 94:b0:26:a4:cf:9f:04:03:dc:fe:89:bb:e3:e3:21: 16:6f:99:96:93:73:dd:ff:4f:d9:6f:c5:15:06:1f: 25:4f:03:a3:56:c3:fe:a7:43:3e:ed:fa:ba:6e:81: c5:46:80:ef:3a:a8:c8:f5:b1:58:da:e5:bd:af:d4: 36:8d:79:6c:90:b4:c3:39:14:6a:06:59:a6:7f:27: 86:b8:a5:09:a7:01:b8:de:c2:81:14:3c:2b:41:e8: 6e:e4:be:d8:31:2f:5e:da:45:de:3b:53:08:75:cf: 2e:2b:f3:0e:07:5b:50:0c:d1:6b:2d:bd:d9:32:bb: 53:c0:ec:0f:61:d7:32:6d:32:e5:bb:99:41:0f:6c: 10:ae:bd:e9:2f:6c:b4:29:1f:af:3f:d8:58:20:32: 03:21:47:04:dc:c5:02:ab:04:da:0f:07:7d:fd:51: b8:a6:f1:ce:d5:02:dc:3b:1d:80:96:79:ec:87:70: 07:0d:e7:da:a0:a9:39:78:99:79:0f:34:a5:23:78: 27:ed:e7:c6:ed:9b:c9:75:ea:34:3c:b2:8f:e1:ff: d6:f8:e6:47:8a:12:a9:2a:fb:f7:c8:34:d6:1e:0f: c1:9c:ff:28:8c:99:9b:90:69:e8:14:d7:5f:ca:c3: be:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:22:D0:DD:E6:7A:DD:07:A3:46:0D:B4:7A:27:DD:93:DD:D8:CB:A5 X509v3 Authority Key Identifier: keyid:FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/DiLQ3eZ63QejRg20eifdk93Yy6U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.235.176.0/21 85.95.192.0/19 185.55.244.0/22 IPv6: 2a03:d602::/31 2a03:d606::/31 Signature Algorithm: sha256WithRSAEncryption 03:07:43:80:68:bb:bb:66:f1:dd:e7:32:df:ac:26:a6:ef:f4: 9e:9f:e5:6f:36:5e:cd:58:a8:93:d0:2a:7a:2c:ab:d3:df:b3: f9:f7:ea:29:b4:35:0e:a3:6d:fe:86:b2:4f:59:8f:73:73:d1: 09:52:d2:35:58:8e:8f:84:ef:ea:3c:1a:3e:85:e0:53:14:42: 46:70:1e:79:53:08:bb:b9:9e:8f:bd:95:0c:30:2a:6c:32:31: 8b:55:f2:cd:6d:73:c5:05:34:81:f9:a0:73:fc:79:ef:5f:e9: f6:1c:b4:14:71:db:8f:8f:41:02:f2:0c:0c:14:7b:2a:74:c6: 8a:9f:f3:a8:29:2d:40:31:2c:fe:f1:70:af:75:8c:7b:da:e9: 46:73:a8:ea:91:50:60:e9:11:e4:4b:4b:c5:49:c5:4c:4b:9f: e8:b6:56:eb:bf:d5:b8:8e:1c:5d:16:f4:4b:11:7b:48:a6:58: 6c:95:4c:e0:33:22:56:62:e5:da:67:4e:a4:9a:26:87:7b:3a: e6:61:74:d5:3e:35:04:fd:53:50:53:db:e4:58:f4:a5:b6:c8: 97:da:c2:90:7c:12:84:b5:e3:b9:5d:a0:ce:41:06:95:e1:c5: 52:ec:75:ac:21:d5:68:5d:8e:34:b2:8e:c4:00:d2:3c:b9:08: e7:d7:e3:66 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt6W4e0C1TJ0fjXlrf/+ngmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNDg2YTBiYTliOWIwOWY0ZGU0Nzk2MmUyYzJhZTQxZmM1 NTc2ODYwHhcNMjYwMTAxMTYxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTIyZDBkZGU2N2FkZDA3YTM0NjBkYjQ3YTI3ZGQ5M2RkZDhjYmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNCAGrGKKeyuvih745mUsCakz58E A9z+ibvj4yEWb5mWk3Pd/0/Zb8UVBh8lTwOjVsP+p0M+7fq6boHFRoDvOqjI9bFY 2uW9r9Q2jXlskLTDORRqBlmmfyeGuKUJpwG43sKBFDwrQehu5L7YMS9e2kXeO1MI dc8uK/MOB1tQDNFrLb3ZMrtTwOwPYdcybTLlu5lBD2wQrr3pL2y0KR+vP9hYIDID IUcE3MUCqwTaDwd9/VG4pvHO1QLcOx2Alnnsh3AHDefaoKk5eJl5DzSlI3gn7efG 7ZvJdeo0PLKP4f/W+OZHihKpKvv3yDTWHg/BnP8ojJmbkGnoFNdfysO+/QIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFA4i0N3met0Ho0YNtHon3ZPd2MulMB8GA1UdIwQY MBaAFPtIagupubCfTeR5YuLCrkH8VXaGMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0waHFDNm01c0o5TjVIbGk0c0t1UWZ4VmRvWS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvNmFjNGRhLWY1NmEtNGMxYi1iNWJk LWZhYWM5MDgwMjkwOC8xL0RpTFEzZVo2M1FlalJnMjBlaWZkazkzWXk2VS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTcvNmFjNGRhLWY1NmEtNGMxYi1iNWJkLWZhYWM5MDgwMjkw OC8xLzEtMGhxQzZtNXNKOU41SGxpNHNLdVFmeFZkb1kuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwQQYIKwYBBQUHAQcBAf8EMjAwMBgEAgABMBIDBAMu67AD BAVVX8ADBAK5N/QwFAQCAAIwDgMFASoD1gIDBQEqA9YGMA0GCSqGSIb3DQEBCwUA A4IBAQADB0OAaLu7ZvHd5zLfrCam7/Sen+VvNl7NWKiT0Cp6LKvT37P59+optDUO o23+hrJPWY9zc9EJUtI1WI6PhO/qPBo+heBTFEJGcB55Uwi7uZ6PvZUMMCpsMjGL VfLNbXPFBTSB+aBz/HnvX+n2HLQUcduPj0EC8gwMFHsqdMaKn/OoKS1AMSz+8XCv dYx72ulGc6jqkVBg6RHkS0vFScVMS5/otlbrv9W4jhxdFvRLEXtIplhslUzgMyJW YuXaZ06kmiaHezrmYXTVPjUE/VNQU9vkWPSltsiX2sKQfBKEteO5XaDOQQaV4cVS 7HWsIdVoXY40so7EANI8uQjn1+Nm -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:44 2026 by rpki-client