This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/dLEe-hpFpK3PFRGM9YsgzqZnVVw.roa File: dLEe-hpFpK3PFRGM9YsgzqZnVVw.roa (raw, json) Hash identifier: A8Gw34BWQlcPCQ8+pvbsJ7XROVKk5nyiB7eyYgFiR4g= Subject key identifier: 74:B1:1E:FA:1A:45:A4:AD:CF:15:11:8C:F5:8B:20:CE:A6:67:55:5C Certificate issuer: /CN=02b610cd43bafced91480fabfdcaae82049fbf71 Certificate serial: 019B7F1604BDBB77D3A8D9416B1E09210AEA Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/dLEe-hpFpK3PFRGM9YsgzqZnVVw.roa Signing time: Fri 02 Jan 2026 14:21:47 +0000 ROA not before: Fri 02 Jan 2026 14:21:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51115 IP address blocks: 81.161.98.0/23 maxlen: 24 178.248.232.0/21 maxlen: 24 185.65.148.0/22 maxlen: 24 185.94.108.0/22 maxlen: 24 2a03:70c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:16:04:bd:bb:77:d3:a8:d9:41:6b:1e:09:21:0a:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71 Validity Not Before: Jan 2 14:21:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74b11efa1a45a4adcf15118cf58b20cea667555c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c7:ab:a8:0d:67:79:dd:ac:0f:c9:d2:9e:35: 31:7e:f0:8e:75:13:dd:7a:bb:34:a5:ee:68:4b:97: 72:44:84:87:20:e8:ab:66:ff:8d:ee:46:ac:0b:b5: 1e:76:bc:00:0c:f5:54:81:c5:ee:2f:b9:87:3b:7a: 51:af:87:c7:3e:c5:39:97:a0:bc:ff:61:38:34:5a: ca:96:8f:10:8b:fc:e0:2a:ae:7d:2a:6d:e9:1f:a3: fe:01:0e:9e:91:a8:36:59:5d:2f:e0:eb:96:61:2d: bb:e4:26:cb:68:b3:3d:0d:d5:fa:65:a6:ed:71:76: 04:f1:13:e4:49:6c:22:5c:fc:49:c3:8c:02:72:a5: 3f:fc:72:33:bf:2f:6e:62:39:1a:9e:fa:2f:2d:4a: 62:2e:bb:c0:af:07:64:5f:9f:3d:8f:21:8a:bf:21: 45:75:ac:1a:86:af:13:d9:15:ee:b6:eb:af:3e:d5: 86:fe:ca:a9:6f:87:e9:5c:e0:c5:5e:61:f1:8a:aa: 98:d8:d6:53:cb:25:76:fd:ff:30:dc:c6:40:9f:4f: d9:6e:64:72:23:50:a0:36:5e:e6:49:da:bf:c4:68: b4:8e:b7:94:d3:cb:b8:a1:ff:f6:7f:ec:83:07:e9: 9f:ca:18:a2:28:a4:c3:67:f5:48:ee:8c:25:b4:e6: cd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B1:1E:FA:1A:45:A4:AD:CF:15:11:8C:F5:8B:20:CE:A6:67:55:5C X509v3 Authority Key Identifier: keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/dLEe-hpFpK3PFRGM9YsgzqZnVVw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.161.98.0/23 178.248.232.0/21 185.65.148.0/22 185.94.108.0/22 IPv6: 2a03:70c0::/32 Signature Algorithm: sha256WithRSAEncryption b2:52:8a:86:aa:94:38:fb:39:e9:ff:22:eb:65:a7:d6:73:86: a3:9f:5d:f1:38:f3:a4:65:f2:62:d9:9e:fa:ad:97:32:56:b7: 39:40:0e:f8:f5:e4:f8:45:02:69:4d:51:d1:87:b8:74:ae:e9: 54:cf:c0:fc:9d:c6:10:b3:ba:49:7a:68:4e:76:53:79:24:d3: f8:1d:32:64:f7:12:07:73:02:a8:1b:36:38:d5:4c:eb:c3:76: a2:2c:74:3d:3d:e7:18:e4:02:ff:32:d4:89:50:b6:2f:6a:c5: 00:88:9d:e3:56:a9:1c:22:06:34:b2:22:93:ea:1d:20:e7:44: 2f:65:e2:49:4b:0f:b5:0b:23:23:dd:5b:e7:5f:5e:51:aa:fd: 77:00:01:ea:38:1a:e8:53:cb:79:df:86:6b:53:f3:e3:a3:f1: 55:2e:38:70:1d:cd:a5:dc:be:44:5f:19:4c:5e:43:ad:77:59: fe:f0:9e:e9:9b:2d:91:f3:08:47:b9:01:06:fd:84:37:7c:65: ae:81:1b:b6:62:75:2e:2f:8b:af:04:65:91:72:8b:c3:ea:22: 3b:e9:36:bd:9d:88:77:f4:c4:53:bf:fb:62:4c:96:f7:3f:00: 3a:65:46:b3:71:b5:6b:aa:4e:49:9d:ae:cc:32:d5:13:8c:96: 4d:5c:90:96 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt/FgS9u3fTqNlBax4JIQrqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYjYxMGNkNDNiYWZjZWQ5MTQ4MGZhYmZkY2FhZTgyMDQ5 ZmJmNzEwHhcNMjYwMTAyMTQyMTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGIxMWVmYTFhNDVhNGFkY2YxNTExOGNmNThiMjBjZWE2Njc1NTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMerqA1ned2sD8nSnjUxfvCOdRPd ers0pe5oS5dyRISHIOirZv+N7kasC7UedrwADPVUgcXuL7mHO3pRr4fHPsU5l6C8 /2E4NFrKlo8Qi/zgKq59Km3pH6P+AQ6ekag2WV0v4OuWYS275CbLaLM9DdX6Zabt cXYE8RPkSWwiXPxJw4wCcqU//HIzvy9uYjkanvovLUpiLrvArwdkX589jyGKvyFF dawahq8T2RXutuuvPtWG/sqpb4fpXODFXmHxiqqY2NZTyyV2/f8w3MZAn0/ZbmRy I1CgNl7mSdq/xGi0jreU08u4of/2f+yDB+mfyhiiKKTDZ/VI7owltObNDQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFHSxHvoaRaStzxURjPWLIM6mZ1VcMB8GA1UdIwQY MBaAFAK2EM1DuvztkUgPq/3KroIEn79xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXJZUXpVTzZfTzJSU0Etcl9jcXVnZ1NmdjNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lM2RlY2MtM2VmNy00Y2IyLTgxZDEt OTAxM2NhOTk2YjE2LzEvZExFZS1ocEZwSzNQRlJHTTlZc2d6cVpuVlZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lM2RlY2MtM2VmNy00Y2IyLTgxZDEtOTAxM2NhOTk2YjE2 LzEvQXJZUXpVTzZfTzJSU0Etcl9jcXVnZ1NmdjNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBUaFiAwQD svjoAwQCuUGUAwQCuV5sMA0EAgACMAcDBQAqA3DAMA0GCSqGSIb3DQEBCwUAA4IB AQCyUoqGqpQ4+znp/yLrZafWc4ajn13xOPOkZfJi2Z76rZcyVrc5QA749eT4RQJp TVHRh7h0rulUz8D8ncYQs7pJemhOdlN5JNP4HTJk9xIHcwKoGzY41Uzrw3aiLHQ9 PecY5AL/MtSJULYvasUAiJ3jVqkcIgY0siKT6h0g50QvZeJJSw+1CyMj3VvnX15R qv13AAHqOBroU8t534ZrU/Pjo/FVLjhwHc2l3L5EXxlMXkOtd1n+8J7pmy2R8whH uQEG/YQ3fGWugRu2YnUuL4uvBGWRcovD6iI76Ta9nYh39MRTv/tiTJb3PwA6ZUaz cbVrqk5Jna7MMtUTjJZNXJCW -----END CERTIFICATE-----Generated at Sat Jan 10 22:38:56 2026 by rpki-client