This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/DlvU8_WaLXLWZCngsSC2uo1UEUk.roa File: DlvU8_WaLXLWZCngsSC2uo1UEUk.roa (raw, json) Hash identifier: mGmFxi2fO4+GF7L0EqpatnXr3G5FZO1tD4h6QLXhyjQ= Subject key identifier: 0E:5B:D4:F3:F5:9A:2D:72:D6:64:29:E0:B1:20:B6:BA:8D:54:11:49 Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Certificate serial: 019B7F1592E1E4F6CF32B1250BCFAE7BCD43 Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/DlvU8_WaLXLWZCngsSC2uo1UEUk.roa Signing time: Fri 02 Jan 2026 14:21:18 +0000 ROA not before: Fri 02 Jan 2026 14:21:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3292 IP address blocks: 2.21.28.0/22 maxlen: 22 2a02:26f0:116::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:92:e1:e4:f6:cf:32:b1:25:0b:cf:ae:7b:cd:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Validity Not Before: Jan 2 14:21:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e5bd4f3f59a2d72d66429e0b120b6ba8d541149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ef:4e:5a:cb:b8:d2:9e:cd:cc:bb:c4:0a:95: 41:ea:4c:87:49:c6:80:4a:cd:2c:98:f9:8f:00:15: 5c:10:b1:64:34:11:3b:ba:d6:d4:c6:a3:0f:48:a6: 91:39:00:52:e3:29:f5:9a:4c:b3:69:f8:79:22:25: a5:0d:ce:40:c2:fc:e0:b2:b4:67:67:82:f0:4a:4a: 39:8e:de:09:9e:e0:8e:8e:8e:af:43:af:c5:17:dd: ad:71:e0:d3:8e:71:10:cc:98:4a:ef:ab:c9:d3:1c: 38:32:a2:32:87:5e:04:b6:c4:61:ab:f1:01:40:75: b7:4f:04:0b:6a:cf:b0:d3:b3:50:97:e1:2c:0a:6e: c9:0a:24:54:f8:6d:a7:d4:87:cc:74:95:8a:37:63: 93:29:7c:11:9b:3b:4e:7f:98:55:17:20:05:17:79: 7a:1f:b4:29:45:9a:54:27:a3:3c:19:98:1d:a5:14: 06:d0:e5:86:25:18:1a:af:d7:4e:42:98:9f:2a:67: 0e:5c:d6:a4:4a:5a:74:b7:2c:cc:2d:e9:e6:36:50: 1b:b9:57:5d:69:4c:51:b4:e6:a8:2e:b4:d4:17:ff: 0a:44:6d:2c:d8:68:39:96:e8:d8:ee:d5:c7:94:8e: 9b:b8:c2:fd:7e:ae:e2:e2:ba:53:d8:2b:d3:6b:b5: d8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5B:D4:F3:F5:9A:2D:72:D6:64:29:E0:B1:20:B6:BA:8D:54:11:49 X509v3 Authority Key Identifier: keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/DlvU8_WaLXLWZCngsSC2uo1UEUk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.21.28.0/22 IPv6: 2a02:26f0:116::/48 Signature Algorithm: sha256WithRSAEncryption 3f:90:be:40:22:df:da:75:a2:62:f2:d1:6a:31:b2:b2:b7:ad: 83:85:4e:7d:81:32:f6:16:3b:3c:e1:4a:70:9e:6e:9c:d3:64: 21:2c:81:de:92:d5:be:3d:8f:9d:3d:04:9d:3c:7c:21:3c:38: f4:04:0d:91:24:98:f0:03:ea:a5:86:04:d4:c6:32:dc:47:7a: 4e:fc:29:f8:60:d5:1a:e6:0d:b8:03:26:f9:85:7b:ab:3a:15: 2f:89:04:93:d7:20:86:2f:d9:0a:5d:d2:6c:39:52:9f:3a:03: cd:99:fd:6f:00:f2:83:dd:2a:d0:37:5c:ac:9d:11:cb:02:58: 63:dd:ff:dc:a5:a7:c3:46:00:e8:67:fa:b8:f5:bc:24:27:51: 2d:a5:d5:8a:b9:a8:cc:e9:19:b8:62:fd:16:ea:27:1c:26:e4: bf:71:43:a1:db:65:2b:62:d8:1c:4c:7e:19:fb:7d:a0:34:2e: ce:c5:36:8e:e1:8d:03:29:2a:5b:b2:9d:53:2b:03:60:dd:07: a3:22:b5:13:99:6a:29:3a:c8:f4:25:0b:ca:87:0b:13:7a:f7: 6e:66:13:8b:84:0d:95:ec:b6:aa:51:7f:1f:3f:4e:ba:93:1b: 18:d8:af:fc:49:ed:6b:31:be:63:7a:02:6d:1c:24:55:d1:49: a5:f8:ed:65 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/FZLh5PbPMrElC8+ue81DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5 YmQ2YWEwHhcNMjYwMTAyMTQyMTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTViZDRmM2Y1OWEyZDcyZDY2NDI5ZTBiMTIwYjZiYThkNTQxMTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0e9OWsu40p7NzLvECpVB6kyHScaA Ss0smPmPABVcELFkNBE7utbUxqMPSKaROQBS4yn1mkyzafh5IiWlDc5AwvzgsrRn Z4LwSko5jt4JnuCOjo6vQ6/FF92tceDTjnEQzJhK76vJ0xw4MqIyh14EtsRhq/EB QHW3TwQLas+w07NQl+EsCm7JCiRU+G2n1IfMdJWKN2OTKXwRmztOf5hVFyAFF3l6 H7QpRZpUJ6M8GZgdpRQG0OWGJRgar9dOQpifKmcOXNakSlp0tyzMLenmNlAbuVdd aUxRtOaoLrTUF/8KRG0s2Gg5lujY7tXHlI6buML9fq7i4rpT2CvTa7XYdQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFA5b1PP1mi1y1mQp4LEgtrqNVBFJMB8GA1UdIwQY MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt ODhkMWNhYzllNGYxLzEvRGx2VThfV2FMWExXWkNuZ3NTQzJ1bzFVRVVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCAhUcMA8E AgACMAkDBwAqAibwARYwDQYJKoZIhvcNAQELBQADggEBAD+QvkAi39p1omLy0Wox srK3rYOFTn2BMvYWOzzhSnCebpzTZCEsgd6S1b49j509BJ08fCE8OPQEDZEkmPAD 6qWGBNTGMtxHek78Kfhg1RrmDbgDJvmFe6s6FS+JBJPXIIYv2Qpd0mw5Up86A82Z /W8A8oPdKtA3XKydEcsCWGPd/9ylp8NGAOhn+rj1vCQnUS2l1Yq5qMzpGbhi/Rbq Jxwm5L9xQ6HbZSti2BxMfhn7faA0Ls7FNo7hjQMpKluynVMrA2DdB6MitROZaik6 yPQlC8qHCxN6925mE4uEDZXstqpRfx8/TrqTGxjYr/xJ7WsxvmN6Am0cJFXRSaX4 7WU= -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:36 2026 by rpki-client