This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/DSzDYKP0Eliter60MSyPBC3uoBo.roa File: DSzDYKP0Eliter60MSyPBC3uoBo.roa (raw, json) Hash identifier: VTzEolbK7gpli6RLBjkEbGLC+e38wfEzm+yoXW+fNwY= Subject key identifier: 0D:2C:C3:60:A3:F4:12:58:AD:7A:BE:B4:31:2C:8F:04:2D:EE:A0:1A Certificate issuer: /CN=293e0cd8b3e044edb823aef688aafb0b75de8675 Certificate serial: 019B7A5B2A48CF103B8793DFEF11013F6886 Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/DSzDYKP0Eliter60MSyPBC3uoBo.roa Signing time: Thu 01 Jan 2026 16:19:13 +0000 ROA not before: Thu 01 Jan 2026 16:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208555 IP address blocks: 45.129.36.0/22 maxlen: 22 45.129.36.0/24 maxlen: 24 45.129.37.0/24 maxlen: 24 45.129.38.0/23 maxlen: 23 45.129.38.0/24 maxlen: 24 45.129.39.0/24 maxlen: 24 185.53.140.0/22 maxlen: 24 185.53.140.0/23 maxlen: 23 185.53.140.0/24 maxlen: 24 185.53.141.0/24 maxlen: 24 185.53.142.0/23 maxlen: 23 185.53.142.0/24 maxlen: 24 185.53.143.0/24 maxlen: 24 185.126.202.0/23 maxlen: 23 185.126.202.0/24 maxlen: 24 185.126.203.0/24 maxlen: 24 2a0a:2fc4::/64 maxlen: 64 2a0d:9680::/48 maxlen: 48 2a0e:4a40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:2a:48:cf:10:3b:87:93:df:ef:11:01:3f:68:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675 Validity Not Before: Jan 1 16:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d2cc360a3f41258ad7abeb4312c8f042deea01a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d7:72:2a:32:1c:d2:31:0c:24:55:ac:6a:19: 6e:03:5c:93:ef:97:a6:a3:ff:f0:1e:28:9f:14:8d: c1:9f:59:3a:a8:c5:eb:7f:52:4a:7a:d0:73:18:b5: f6:8c:a7:36:e4:a0:44:b4:a5:9a:18:30:bf:e8:0b: e9:ec:5c:bf:40:13:31:2f:ae:ff:9c:fe:ab:b6:89: f8:9a:74:04:48:b0:aa:ba:b6:78:ca:20:17:9e:a6: 7b:6f:7f:4c:f6:f3:68:04:64:c5:d7:ae:d1:70:cf: 20:5a:3d:40:46:d7:a1:7e:a7:82:8b:39:0c:54:2a: 9d:38:d8:2a:25:24:b2:93:68:21:cb:6e:a2:fc:53: 50:f8:a7:8a:c7:7a:45:11:0b:4b:fc:2b:4e:22:50: ef:70:da:3b:06:b1:e4:4e:a7:40:cc:d5:39:b2:bc: 05:3b:c3:18:4f:5b:1d:aa:b2:d6:96:1d:19:f2:9b: 15:27:7a:f0:e0:52:23:6c:1e:b9:67:b1:5b:6f:6c: 48:a4:1f:bc:37:35:a0:51:47:9d:2d:94:91:c0:1e: 9c:11:1d:ca:f3:ff:47:87:6e:c6:89:bf:3a:30:56: d6:00:bb:80:4a:69:41:a7:f5:1a:12:72:87:39:2d: f0:46:1c:ba:75:1a:c1:ba:74:21:a0:b2:c1:19:2b: cf:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:2C:C3:60:A3:F4:12:58:AD:7A:BE:B4:31:2C:8F:04:2D:EE:A0:1A X509v3 Authority Key Identifier: keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/DSzDYKP0Eliter60MSyPBC3uoBo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.36.0/22 185.53.140.0/22 185.126.202.0/23 IPv6: 2a0a:2fc4::/64 2a0d:9680::/48 2a0e:4a40::/29 Signature Algorithm: sha256WithRSAEncryption 22:3f:53:ef:15:3b:ab:31:f5:5e:c0:47:20:f7:1b:d2:9a:b6: ed:03:63:e3:57:8e:7a:6b:68:0f:fe:ae:24:de:e4:bc:01:c3: 73:eb:b2:0d:7e:16:76:78:88:46:d1:3e:33:39:58:1e:06:a5: e3:ab:07:4f:b5:56:f4:1b:7b:01:2f:d7:7e:16:63:4a:1b:9e: ce:28:39:de:21:09:60:7f:04:27:7b:5b:de:9b:df:a1:5e:88: 1f:e7:ab:2d:9c:65:31:f9:d6:eb:36:f0:ce:53:fb:65:a9:38: 24:b0:44:88:2f:75:64:59:92:1b:50:be:00:5c:7e:e0:1a:54: 9d:ca:3e:ea:01:42:5d:f2:e9:ad:08:de:72:36:98:64:a4:ff: b4:20:25:96:d3:eb:36:70:fb:a1:85:85:44:57:05:ee:82:78: 61:26:42:8c:ed:dc:b8:6d:58:60:cb:5a:59:a7:6c:e4:6e:2a: 4a:87:26:b6:2b:67:dd:55:77:a9:81:b3:fa:dd:ac:1f:b4:76: 34:96:f6:72:50:7f:c7:99:d0:30:e6:7b:18:a1:2a:b8:f0:9f: e5:f7:31:d9:b5:f4:cf:e5:fb:84:d1:78:ff:c6:48:77:ae:f6: f4:bb:de:77:49:37:4f:91:27:6b:4c:13:48:73:86:9c:ab:2c: db:e7:ff:82 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt6WypIzxA7h5Pf7xEBP2iGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5M2UwY2Q4YjNlMDQ0ZWRiODIzYWVmNjg4YWFmYjBiNzVk ZTg2NzUwHhcNMjYwMTAxMTYxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDJjYzM2MGEzZjQxMjU4YWQ3YWJlYjQzMTJjOGYwNDJkZWVhMDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NdyKjIc0jEMJFWsahluA1yT75em o//wHiifFI3Bn1k6qMXrf1JKetBzGLX2jKc25KBEtKWaGDC/6Avp7Fy/QBMxL67/ nP6rton4mnQESLCqurZ4yiAXnqZ7b39M9vNoBGTF167RcM8gWj1ARtehfqeCizkM VCqdONgqJSSyk2ghy26i/FNQ+KeKx3pFEQtL/CtOIlDvcNo7BrHkTqdAzNU5srwF O8MYT1sdqrLWlh0Z8psVJ3rw4FIjbB65Z7Fbb2xIpB+8NzWgUUedLZSRwB6cER3K 8/9Hh27Gib86MFbWALuASmlBp/UaEnKHOS3wRhy6dRrBunQhoLLBGSvPeQIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFA0sw2Cj9BJYrXq+tDEsjwQt7qAaMB8GA1UdIwQY MBaAFCk+DNiz4ETtuCOu9oiq+wt13oZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1Q0TTJMUGdSTzI0STY3MmlLcjdDM1hlaG5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82ZGExYzItMjUyZC00YmQyLWI1NmMt YmIyMTdjYzNiNzhkLzEvRFN6RFlLUDBFbGl0ZXI2ME1TeVBCQzN1b0JvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC82ZGExYzItMjUyZC00YmQyLWI1NmMtYmIyMTdjYzNiNzhk LzEvS1Q0TTJMUGdSTzI0STY3MmlLcjdDM1hlaG5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAYBAIAATASAwQCLYEkAwQC uTWMAwQBuX7KMCEEAgACMBsDCQAqCi/EAAAAAAMHACoNloAAAAMFAyoOSkAwDQYJ KoZIhvcNAQELBQADggEBACI/U+8VO6sx9V7ARyD3G9Katu0DY+NXjnpraA/+riTe 5LwBw3Prsg1+FnZ4iEbRPjM5WB4GpeOrB0+1VvQbewEv134WY0obns4oOd4hCWB/ BCd7W96b36FeiB/nqy2cZTH51us28M5T+2WpOCSwRIgvdWRZkhtQvgBcfuAaVJ3K PuoBQl3y6a0I3nI2mGSk/7QgJZbT6zZw+6GFhURXBe6CeGEmQozt3LhtWGDLWlmn bORuKkqHJrYrZ91Vd6mBs/rdrB+0djSW9nJQf8eZ0DDmexihKrjwn+X3Mdm19M/l +4TReP/GSHeu9vS73ndJN0+RJ2tME0hzhpyrLNvn/4I= -----END CERTIFICATE-----Generated at Mon Jan 26 22:48:58 2026 by rpki-client