This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/dlxBkhDBp6NSs-TK_Z6erdMzQTo.roa File: dlxBkhDBp6NSs-TK_Z6erdMzQTo.roa (raw, json) Hash identifier: PbGDghsUx2VuV/Qi655kVWVON4S8LLL9qUjVO61ngtg= Subject key identifier: 76:5C:41:92:10:C1:A7:A3:52:B3:E4:CA:FD:9E:9E:AD:D3:33:41:3A Certificate issuer: /CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4 Certificate serial: 019B79112CA58FCFFD1B50E0C1DA6DD53B4B Authority key identifier: 8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/dlxBkhDBp6NSs-TK_Z6erdMzQTo.roa Signing time: Thu 01 Jan 2026 10:18:47 +0000 ROA not before: Thu 01 Jan 2026 10:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199276 IP address blocks: 77.247.88.0/24 maxlen: 24 77.247.89.0/24 maxlen: 24 77.247.90.0/24 maxlen: 24 77.247.91.0/24 maxlen: 24 77.247.92.0/24 maxlen: 24 77.247.93.0/24 maxlen: 24 77.247.94.0/24 maxlen: 24 77.247.95.0/24 maxlen: 24 2a13:bc00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2c:a5:8f:cf:fd:1b:50:e0:c1:da:6d:d5:3b:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4 Validity Not Before: Jan 1 10:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=765c419210c1a7a352b3e4cafd9e9eadd333413a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:93:7e:8a:43:ea:f2:22:cb:48:31:15:c5:07: a6:14:a0:f8:24:70:ef:9e:fc:6c:0e:6d:bf:e3:2a: 33:eb:55:81:45:8d:26:7b:be:38:a3:f3:91:32:80: 75:a0:9e:2b:5a:e2:67:6d:03:27:cd:f7:af:ad:be: f7:93:39:df:9e:10:ef:6a:6a:f2:ee:0d:0f:0e:96: 69:92:bd:73:26:24:07:f4:42:d9:77:f8:b7:36:19: fe:5d:9d:3b:cf:cf:e6:9e:0a:ae:35:1c:d2:2b:54: 72:e3:4a:20:51:91:4d:33:5b:1a:76:d7:a6:89:5e: 41:30:e4:85:77:d0:73:62:2a:c2:2c:79:b6:0b:05: 7b:06:d4:3e:91:99:67:b3:db:df:6a:dc:06:d7:3c: ea:53:10:81:fe:34:cb:c7:2e:db:2a:b3:e5:e8:9f: 78:b2:51:e8:66:35:fa:f4:7c:cd:0b:44:45:6c:e0: ba:c0:e7:d9:cc:65:40:23:b8:dc:28:db:4d:e5:d2: fe:08:6b:ed:19:93:9a:65:0d:45:ab:e8:06:c9:a3: 90:77:41:8e:36:f2:d0:bd:73:6a:f2:3c:66:81:ea: 49:be:1a:ef:af:b8:82:65:42:5b:a5:a7:8a:2b:58: eb:a6:a4:fa:14:ea:13:64:47:34:d6:c5:bc:f1:f9: 9a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5C:41:92:10:C1:A7:A3:52:B3:E4:CA:FD:9E:9E:AD:D3:33:41:3A X509v3 Authority Key Identifier: keyid:8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/dlxBkhDBp6NSs-TK_Z6erdMzQTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.247.88.0/21 IPv6: 2a13:bc00::/29 Signature Algorithm: sha256WithRSAEncryption 6e:a9:fc:c2:1c:1e:d0:02:14:ed:90:39:6c:2b:d6:25:25:c6: f6:3e:01:e5:bf:36:31:9a:d8:0e:f9:ed:ff:d8:7a:ad:12:30: db:20:0c:4a:ff:5d:8c:cf:f1:c6:78:d9:4f:26:f4:85:dc:88: 63:c5:97:9c:94:08:d7:43:f3:9c:93:6b:7f:e2:8a:aa:e5:34: dd:88:7b:48:0c:44:97:a9:54:72:e7:de:c3:dd:1f:d6:b0:8f: b6:77:78:1f:d9:da:a6:57:b7:18:a1:4d:2c:e9:4c:6c:80:60: 25:54:61:99:9a:69:2f:f9:d6:df:71:4d:40:e8:f5:72:a2:c7: b3:62:2b:43:c9:6f:23:b0:ff:5a:16:ad:c7:1e:f4:c6:5f:65: bd:d6:85:ce:c3:55:20:08:5b:54:0e:4f:06:aa:29:98:24:25: e3:cb:50:8f:0e:b9:33:97:06:f2:48:65:77:2a:96:5c:6c:41: 5b:32:94:a7:a3:d0:21:43:64:5d:fd:a8:22:03:c0:5a:3e:a0: b1:4d:5e:3d:62:aa:01:81:54:a4:2b:31:df:bb:24:89:fc:6f: 10:d0:80:fc:f8:85:c4:b2:b7:b8:fb:02:6e:b0:49:2e:7d:f1: 75:b6:b9:5a:61:38:5f:e1:e8:97:23:94:25:c1:0a:14:6c:7e: a9:58:2d:d0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5ESylj8/9G1Dgwdpt1TtLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZDI5MzBkMWZlMWRkNDMwNDkxZmQ3YjgzMWRlOWM2MTY5 MmFkZTQwHhcNMjYwMTAxMTAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjVjNDE5MjEwYzFhN2EzNTJiM2U0Y2FmZDllOWVhZGQzMzM0MTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15N+ikPq8iLLSDEVxQemFKD4JHDv nvxsDm2/4yoz61WBRY0me744o/ORMoB1oJ4rWuJnbQMnzfevrb73kznfnhDvamry 7g0PDpZpkr1zJiQH9ELZd/i3Nhn+XZ07z8/mngquNRzSK1Ry40ogUZFNM1sadtem iV5BMOSFd9BzYirCLHm2CwV7BtQ+kZlns9vfatwG1zzqUxCB/jTLxy7bKrPl6J94 slHoZjX69HzNC0RFbOC6wOfZzGVAI7jcKNtN5dL+CGvtGZOaZQ1Fq+gGyaOQd0GO NvLQvXNq8jxmgepJvhrvr7iCZUJbpaeKK1jrpqT6FOoTZEc01sW88fmaPwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHZcQZIQwaejUrPkyv2enq3TM0E6MB8GA1UdIwQY MBaAFIrSkw0f4d1DBJH9e4Md6cYWkq3kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXRLVERSX2gzVU1Fa2YxN2d4M3B4aGFTcmVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9iZTc4OTQtMGNjYy00ZmJkLTg4MGIt OTc1OGNiMmI4NDRlLzEvZGx4QmtoREJwNk5Tcy1US19aNmVyZE16UVRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9iZTc4OTQtMGNjYy00ZmJkLTg4MGItOTc1OGNiMmI4NDRl LzEvaXRLVERSX2gzVU1Fa2YxN2d4M3B4aGFTcmVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDTfdYMA0E AgACMAcDBQMqE7wAMA0GCSqGSIb3DQEBCwUAA4IBAQBuqfzCHB7QAhTtkDlsK9Yl Jcb2PgHlvzYxmtgO+e3/2HqtEjDbIAxK/12Mz/HGeNlPJvSF3IhjxZeclAjXQ/Oc k2t/4oqq5TTdiHtIDESXqVRy597D3R/WsI+2d3gf2dqmV7cYoU0s6UxsgGAlVGGZ mmkv+dbfcU1A6PVyosezYitDyW8jsP9aFq3HHvTGX2W91oXOw1UgCFtUDk8GqimY JCXjy1CPDrkzlwbySGV3KpZcbEFbMpSno9AhQ2Rd/agiA8BaPqCxTV49YqoBgVSk KzHfuySJ/G8Q0ID8+IXEsre4+wJusEkuffF1trlaYThf4eiXI5QlwQoUbH6pWC3Q -----END CERTIFICATE-----Generated at Tue Feb 10 02:58:26 2026 by rpki-client