This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/DlsgUx_zkNi2pPjWqZwrQw6D24o.roa File: DlsgUx_zkNi2pPjWqZwrQw6D24o.roa (raw, json) Hash identifier: EVqGILzQxIxgUUNelK85PnHTo4kqqnsSyA/DvDkmwWs= Subject key identifier: 0E:5B:20:53:1F:F3:90:D8:B6:A4:F8:D6:A9:9C:2B:43:0E:83:DB:8A Certificate issuer: /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97 Certificate serial: 019B7B35CB3E40F7AD93825D50EDF08AD3E5 Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/DlsgUx_zkNi2pPjWqZwrQw6D24o.roa Signing time: Thu 01 Jan 2026 20:18:01 +0000 ROA not before: Thu 01 Jan 2026 20:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51456 IP address blocks: 212.107.248.0/21 maxlen: 21 212.107.248.0/23 maxlen: 23 212.107.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:cb:3e:40:f7:ad:93:82:5d:50:ed:f0:8a:d3:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97 Validity Not Before: Jan 1 20:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e5b20531ff390d8b6a4f8d6a99c2b430e83db8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9c:59:f0:96:0d:33:a7:92:b1:16:91:fa:b8: 17:69:e1:2d:66:5b:94:56:ee:4d:43:cc:b2:58:a4: 5c:69:c9:b8:d1:39:8f:2c:07:9c:e6:0c:6b:d0:71: 4c:44:8a:fe:4d:1c:35:f4:db:7c:67:07:23:76:e8: 74:80:49:84:ae:7d:76:f4:37:da:21:a8:82:75:62: 36:1d:ed:7e:db:c3:17:a6:8a:b0:5d:86:e8:c1:f8: e2:89:35:6a:39:e8:0a:6c:1a:1e:2e:f6:96:eb:82: d5:9e:17:ae:2f:8f:d1:c9:5b:46:d6:cc:ba:0f:62: 08:c3:54:af:ab:32:82:cb:90:d9:3a:60:50:85:3d: b2:9b:1d:ee:96:b7:56:23:aa:8d:06:7b:6a:c5:59: fd:e6:c7:46:33:be:d4:fc:16:89:d2:c1:9d:6e:5b: 7d:34:5c:c5:d2:81:1e:6e:b8:69:19:e7:57:82:5d: f3:5a:75:ee:54:29:f6:fa:03:14:29:5e:dd:24:6e: a9:c3:b4:29:fd:08:19:ad:63:e6:59:58:d8:ff:89: 10:32:0c:1b:0b:3e:d8:3e:db:06:9b:53:ce:56:f1: 21:6b:3f:72:2d:f3:5a:49:12:f8:05:1b:5b:ac:6e: 41:71:68:cf:8b:a9:ff:05:9e:0e:6a:86:ed:9d:38: 3d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5B:20:53:1F:F3:90:D8:B6:A4:F8:D6:A9:9C:2B:43:0E:83:DB:8A X509v3 Authority Key Identifier: keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/DlsgUx_zkNi2pPjWqZwrQw6D24o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.107.248.0/21 Signature Algorithm: sha256WithRSAEncryption 9e:d2:0e:18:61:d9:0d:d9:6d:17:87:b5:d6:8d:4f:c4:80:a7: 09:62:8a:47:1c:f7:4d:1c:aa:b8:eb:53:14:b9:bc:24:01:42: ba:42:94:f7:6f:58:2d:10:c6:b1:5b:23:42:85:56:01:06:78: 85:35:c8:a6:55:5b:9f:61:58:b2:05:bc:c4:df:c8:58:a6:18: a5:94:81:fc:16:46:11:8c:07:2d:a5:3d:d7:2d:46:fd:bd:ed: d8:73:2f:d2:dd:66:56:12:c0:3d:48:60:c2:3d:c2:e2:67:1b: 65:99:b6:fe:7e:f8:8e:d0:92:09:f7:78:f5:53:52:28:4c:5b: 54:59:7e:24:48:a1:5b:06:aa:d7:af:c8:f3:b6:2f:90:c9:db: 49:fd:b8:ec:6a:6b:c6:f3:37:50:0d:39:7b:9f:52:ed:ea:70: 8a:77:f1:ac:65:9d:b6:95:8d:54:f7:6d:c5:24:ab:14:f2:4f: db:d4:a5:97:4c:72:b9:b6:5a:57:92:2c:19:21:2b:42:87:89: 21:e4:00:80:b8:7e:87:71:f6:78:8e:04:64:ac:8f:ce:77:3b: a2:6c:67:35:22:a1:0f:c6:3f:be:89:42:25:4b:8e:13:87:e5: 8b:52:13:7f:d6:c4:8c:a7:e6:92:b0:81:ce:b3:bb:9b:bf:0a: 60:39:22:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Ncs+QPetk4JdUO3witPlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NTNlNjVhMzA4N2I0Y2E4NWM4ODAyYjYwZmYwZjAyYjQx MDZkOTcwHhcNMjYwMTAxMjAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTViMjA1MzFmZjM5MGQ4YjZhNGY4ZDZhOTljMmI0MzBlODNkYjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5xZ8JYNM6eSsRaR+rgXaeEtZluU Vu5NQ8yyWKRcacm40TmPLAec5gxr0HFMRIr+TRw19Nt8Zwcjduh0gEmErn129Dfa IaiCdWI2He1+28MXpoqwXYbowfjiiTVqOegKbBoeLvaW64LVnheuL4/RyVtG1sy6 D2IIw1SvqzKCy5DZOmBQhT2ymx3ulrdWI6qNBntqxVn95sdGM77U/BaJ0sGdblt9 NFzF0oEebrhpGedXgl3zWnXuVCn2+gMUKV7dJG6pw7Qp/QgZrWPmWVjY/4kQMgwb Cz7YPtsGm1POVvEhaz9yLfNaSRL4BRtbrG5BcWjPi6n/BZ4OaobtnTg9PQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA5bIFMf85DYtqT41qmcK0MOg9uKMB8GA1UdIwQY MBaAFFhT5lowh7TKhciAK2D/DwK0EG2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQt ZTE4NjAyNzM5Y2Q1LzEvRGxzZ1V4X3prTmkycFBqV3Fad3JRdzZEMjRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQtZTE4NjAyNzM5Y2Q1 LzEvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD1Gv4MA0G CSqGSIb3DQEBCwUAA4IBAQCe0g4YYdkN2W0Xh7XWjU/EgKcJYopHHPdNHKq461MU ubwkAUK6QpT3b1gtEMaxWyNChVYBBniFNcimVVufYViyBbzE38hYphillIH8FkYR jActpT3XLUb9ve3Ycy/S3WZWEsA9SGDCPcLiZxtlmbb+fviO0JIJ93j1U1IoTFtU WX4kSKFbBqrXr8jzti+QydtJ/bjsamvG8zdQDTl7n1Lt6nCKd/GsZZ22lY1U923F JKsU8k/b1KWXTHK5tlpXkiwZIStCh4kh5ACAuH6HcfZ4jgRkrI/OdzuibGc1IqEP xj++iUIlS44Th+WLUhN/1sSMp+aSsIHOs7ubvwpgOSJz -----END CERTIFICATE-----Generated at Mon Jan 26 22:36:07 2026 by rpki-client