This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/DLH9dxwuMneQjnPbIX3EUVD5ESA.roa File: DLH9dxwuMneQjnPbIX3EUVD5ESA.roa (raw, json) Hash identifier: NHixE53qc6L0X4+vdGz+Ypf+VfUn3zTQxihxcY+VmWg= Subject key identifier: 0C:B1:FD:77:1C:2E:32:77:90:8E:73:DB:21:7D:C4:51:50:F9:11:20 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C6A158ADF10F4377B4B4D9333A4306 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/DLH9dxwuMneQjnPbIX3EUVD5ESA.roa Signing time: Thu 01 Jan 2026 04:17:44 +0000 ROA not before: Thu 01 Jan 2026 04:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56340 IP address blocks: 109.248.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a1:58:ad:f1:0f:43:77:b4:b4:d9:33:3a:43:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0cb1fd771c2e3277908e73db217dc45150f91120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:29:61:c0:a1:08:b9:56:f4:db:6e:05:43:df: a1:f9:1a:6d:68:6c:fe:2b:ac:63:67:b7:ed:bc:af: fd:f9:55:62:1f:01:0e:a3:d3:0f:0f:93:9d:29:d0: 02:85:6a:c7:91:c1:3b:77:1f:14:c8:fb:f9:85:27: 84:5d:2b:52:ef:aa:04:6c:48:6a:91:81:3a:35:68: c8:81:4f:71:ac:76:18:b2:d7:13:79:87:93:3f:e9: 78:14:45:ec:dc:2b:8f:58:3f:4f:96:3d:e8:13:67: 99:7e:79:ec:ee:45:76:f1:e6:42:5a:c1:c1:15:bb: 54:39:d3:c8:2c:83:16:68:d4:2f:1e:f8:f3:a1:94: 75:ac:44:8b:0c:91:d1:56:f9:5b:98:48:f4:71:d6: 47:9c:08:42:83:ff:82:d2:23:ff:e3:98:86:90:8b: 77:34:ca:95:08:5e:81:c5:0f:b5:62:d3:e2:15:72: b4:59:c9:36:68:45:26:40:03:20:0d:4d:7e:64:c3: 40:23:56:e7:49:9d:39:db:46:06:78:90:b1:e6:bc: 4e:0e:8a:ca:47:dd:df:2b:f4:07:ee:11:39:56:72: 22:8a:d8:28:79:b3:f1:5c:77:42:d1:dd:ec:69:08: d4:49:3e:1a:7a:01:43:71:fc:a5:59:ec:f6:0d:96: 72:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B1:FD:77:1C:2E:32:77:90:8E:73:DB:21:7D:C4:51:50:F9:11:20 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/DLH9dxwuMneQjnPbIX3EUVD5ESA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.248.171.0/24 Signature Algorithm: sha256WithRSAEncryption 07:b0:13:eb:62:f4:03:1f:aa:9a:d6:4e:7a:72:23:a7:c0:79: dc:d4:bc:fd:8e:58:13:da:25:ca:69:a7:c1:f1:11:de:a5:64: 4e:a3:da:74:85:2f:53:0b:d8:78:b9:95:16:72:a9:dc:d2:ca: c1:31:db:d2:5e:f7:5b:31:e3:0d:ca:75:96:af:67:eb:54:b4: 7a:07:4e:d7:ef:8b:18:03:a1:45:a0:51:e5:2b:ee:04:a5:50: 56:45:f0:69:f1:5c:1f:54:20:52:1f:7f:e9:19:d3:f9:c7:80: f7:8a:f7:bf:6f:9c:d7:d4:10:64:cd:e1:16:03:a7:71:49:ea: 8a:78:01:b4:45:ff:a7:8f:ca:32:de:01:ec:40:c9:45:ae:5f: f0:70:c8:c4:fe:43:c4:3e:19:a9:f7:3a:ea:58:c6:d5:43:3b: e8:d3:e9:4e:17:f9:05:1e:2a:96:28:a7:86:29:58:ce:dd:8e: 9e:7b:b3:d6:94:dd:a6:49:de:67:73:98:54:e3:d4:e5:56:6a: 50:e2:9a:a0:bb:e5:59:3e:50:c5:b2:33:ba:8f:58:a0:ea:c8: fd:c5:42:59:22:5e:ab:60:38:d3:32:b7:8b:49:11:8a:e7:72: 32:94:5b:70:84:51:f6:56:58:43:2e:fe:f2:5a:4c:f0:bf:84: 2b:b3:83:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xqFYrfEPQ3e0tNkzOkMGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2IxZmQ3NzFjMmUzMjc3OTA4ZTczZGIyMTdkYzQ1MTUwZjkxMTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSlhwKEIuVb0224FQ9+h+RptaGz+ K6xjZ7ftvK/9+VViHwEOo9MPD5OdKdAChWrHkcE7dx8UyPv5hSeEXStS76oEbEhq kYE6NWjIgU9xrHYYstcTeYeTP+l4FEXs3CuPWD9Plj3oE2eZfnns7kV28eZCWsHB FbtUOdPILIMWaNQvHvjzoZR1rESLDJHRVvlbmEj0cdZHnAhCg/+C0iP/45iGkIt3 NMqVCF6BxQ+1YtPiFXK0Wck2aEUmQAMgDU1+ZMNAI1bnSZ0520YGeJCx5rxODorK R93fK/QH7hE5VnIiitgoebPxXHdC0d3saQjUST4aegFDcfylWez2DZZyGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAyx/XccLjJ3kI5z2yF9xFFQ+REgMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvRExIOWR4d3VNbmVRam5QYklYM0VVVkQ1RVNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbfirMA0G CSqGSIb3DQEBCwUAA4IBAQAHsBPrYvQDH6qa1k56ciOnwHnc1Lz9jlgT2iXKaafB 8RHepWROo9p0hS9TC9h4uZUWcqnc0srBMdvSXvdbMeMNynWWr2frVLR6B07X74sY A6FFoFHlK+4EpVBWRfBp8VwfVCBSH3/pGdP5x4D3ive/b5zX1BBkzeEWA6dxSeqK eAG0Rf+nj8oy3gHsQMlFrl/wcMjE/kPEPhmp9zrqWMbVQzvo0+lOF/kFHiqWKKeG KVjO3Y6ee7PWlN2mSd5nc5hU49TlVmpQ4pqgu+VZPlDFsjO6j1ig6sj9xUJZIl6r YDjTMreLSRGK53IylFtwhFH2VlhDLv7yWkzwv4Qrs4NI -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:01 2026 by rpki-client