This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/Dlfm24LP5wlgq5TaKgF_n7IDYTs.roa File: Dlfm24LP5wlgq5TaKgF_n7IDYTs.roa (raw, json) Hash identifier: 9S11ik1c9x5MNyytM/xAMoFxFIiS4CmWDgKaLHfv5r8= Subject key identifier: 0E:57:E6:DB:82:CF:E7:09:60:AB:94:DA:2A:01:7F:9F:B2:03:61:3B Certificate issuer: /CN=6f0b15193816fd15dcfd047db4eeca672912bb60 Certificate serial: 019AEDCA9C2F06EC2C1922F7EE5003F81C52 Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/Dlfm24LP5wlgq5TaKgF_n7IDYTs.roa Signing time: Fri 05 Dec 2025 09:14:29 +0000 ROA not before: Fri 05 Dec 2025 09:14:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57465 IP address blocks: 134.90.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:ca:9c:2f:06:ec:2c:19:22:f7:ee:50:03:f8:1c:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60 Validity Not Before: Dec 5 09:14:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0e57e6db82cfe70960ab94da2a017f9fb203613b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:06:5c:0c:72:ed:a4:c6:b2:d3:1f:5f:e5:d0: 5b:73:3e:7a:19:35:46:85:31:01:32:43:75:5b:28: eb:a0:3b:79:9a:30:a3:98:a6:56:6f:d4:34:1b:73: e8:9f:30:39:5e:8d:8e:26:8d:5d:de:63:16:b6:a9: 68:5c:e2:4d:79:19:2c:52:17:9a:ce:82:c1:43:9c: 9b:d6:a3:ef:54:71:25:f8:02:ef:24:91:fa:0f:fd: 71:f1:6a:8f:97:32:59:2f:24:fa:e3:93:c8:20:4e: 18:1c:73:69:33:ca:cf:e7:66:9f:dc:fd:cd:54:00: ab:db:b5:59:ba:b6:cb:23:3f:e9:e8:04:1e:ac:a5: 64:87:98:a3:2a:8b:40:89:98:55:95:73:56:a4:71: c7:4c:4e:85:df:f4:76:88:b6:c5:40:13:23:2b:b7: 00:82:a3:e0:c2:88:2a:67:9a:70:2b:55:ea:6f:57: 70:b4:ef:9c:ab:54:be:fd:a9:22:60:e9:58:e0:c7: df:69:36:7c:e6:03:86:b5:91:ed:2d:34:26:d4:52: dc:65:80:2b:a9:c4:15:59:60:64:dd:df:4e:1c:2e: 6d:8f:29:33:52:c6:0e:49:77:c1:84:7f:97:d4:4c: 0a:c4:a4:6c:f9:a3:66:c4:14:b8:d7:00:d8:00:ea: 9e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:57:E6:DB:82:CF:E7:09:60:AB:94:DA:2A:01:7F:9F:B2:03:61:3B X509v3 Authority Key Identifier: keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/Dlfm24LP5wlgq5TaKgF_n7IDYTs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.90.216.0/22 Signature Algorithm: sha256WithRSAEncryption 92:02:36:bd:0d:af:7c:0e:23:61:93:72:87:d0:25:2b:80:03: f9:7e:47:d4:bd:2e:a4:83:6c:aa:7a:87:2c:bf:a1:b9:f8:6e: c8:9c:0a:63:4a:19:93:12:0b:8f:19:ed:15:89:9f:56:57:94: 7a:3e:7d:77:6d:b9:35:72:a9:c6:cf:04:70:2b:56:cb:c7:7a: 9e:63:fe:2b:66:d4:9b:ec:30:e5:eb:94:af:37:a0:2f:2d:2b: dc:82:0b:0d:05:5d:a2:2a:ec:87:51:36:97:ed:82:8a:0c:5b: db:4d:cd:df:49:ca:2b:b7:ed:65:67:2f:0d:4c:43:ec:bd:34: ff:0d:b7:45:80:4f:9c:1c:80:2e:c8:3d:80:96:02:9e:e6:12: bf:14:20:8b:4e:2e:df:f1:e8:5c:70:32:81:ed:db:54:5f:5a: 55:71:cb:93:4a:1c:51:b8:55:23:41:60:04:82:99:27:8b:cd: c2:53:da:b0:d4:72:c1:0e:92:d0:3a:f7:bd:99:10:68:10:29: d7:74:44:f7:fc:9f:19:7a:ff:92:55:8b:bb:b1:ea:d4:c1:ab: 4e:46:63:c7:31:bb:54:43:84:03:73:df:fd:71:4a:b7:77:43: 4a:de:1d:cd:bf:7c:95:70:b4:2f:f9:42:03:9e:ba:06:ed:bd: 11:20:df:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrtypwvBuwsGSL37lAD+BxSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMGIxNTE5MzgxNmZkMTVkY2ZkMDQ3ZGI0ZWVjYTY3Mjkx MmJiNjAwHhcNMjUxMjA1MDkxNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTU3ZTZkYjgyY2ZlNzA5NjBhYjk0ZGEyYTAxN2Y5ZmIyMDM2MTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgZcDHLtpMay0x9f5dBbcz56GTVG hTEBMkN1WyjroDt5mjCjmKZWb9Q0G3PonzA5Xo2OJo1d3mMWtqloXOJNeRksUhea zoLBQ5yb1qPvVHEl+ALvJJH6D/1x8WqPlzJZLyT645PIIE4YHHNpM8rP52af3P3N VACr27VZurbLIz/p6AQerKVkh5ijKotAiZhVlXNWpHHHTE6F3/R2iLbFQBMjK7cA gqPgwogqZ5pwK1Xqb1dwtO+cq1S+/akiYOlY4MffaTZ85gOGtZHtLTQm1FLcZYAr qcQVWWBk3d9OHC5tjykzUsYOSXfBhH+X1EwKxKRs+aNmxBS41wDYAOqejwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA5X5tuCz+cJYKuU2ioBf5+yA2E7MB8GA1UdIwQY MBaAFG8LFRk4Fv0V3P0EfbTuymcpErtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYt OWNmODQzZjA1NjcwLzEvRGxmbTI0TFA1d2xncTVUYUtnRl9uN0lEWVRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYtOWNmODQzZjA1Njcw LzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChlrYMA0G CSqGSIb3DQEBCwUAA4IBAQCSAja9Da98DiNhk3KH0CUrgAP5fkfUvS6kg2yqeocs v6G5+G7InApjShmTEguPGe0ViZ9WV5R6Pn13bbk1cqnGzwRwK1bLx3qeY/4rZtSb 7DDl65SvN6AvLSvcggsNBV2iKuyHUTaX7YKKDFvbTc3fScort+1lZy8NTEPsvTT/ DbdFgE+cHIAuyD2AlgKe5hK/FCCLTi7f8ehccDKB7dtUX1pVccuTShxRuFUjQWAE gpkni83CU9qw1HLBDpLQOve9mRBoECnXdET3/J8Zev+SVYu7serUwatORmPHMbtU Q4QDc9/9cUq3d0NK3h3Nv3yVcLQv+UIDnroG7b0RIN8X -----END CERTIFICATE-----Generated at Tue Dec 9 08:02:43 2025 by rpki-client