This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/dhl80uzcc-87fo0spsBFmcs6UH8.roa File: dhl80uzcc-87fo0spsBFmcs6UH8.roa (raw, json) Hash identifier: cF0fEkOn4DVXvMJud4PWhvcHH9EStSkmcBLtoulP7QM= Subject key identifier: 76:19:7C:D2:EC:DC:73:EF:3B:7E:8D:2C:A6:C0:45:99:CB:3A:50:7F Certificate issuer: /CN=449b18e3296d795d3a9c959be25c70aaab365200 Certificate serial: 019B7B35D073BD5776436A2EBCB4A0BC81F3 Authority key identifier: 44:9B:18:E3:29:6D:79:5D:3A:9C:95:9B:E2:5C:70:AA:AB:36:52:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/dhl80uzcc-87fo0spsBFmcs6UH8.roa Signing time: Thu 01 Jan 2026 20:18:02 +0000 ROA not before: Thu 01 Jan 2026 20:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56672 IP address blocks: 194.107.140.0/23 maxlen: 23 195.189.198.0/24 maxlen: 24 195.189.199.0/24 maxlen: 24 2a00:4680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.mft rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:d0:73:bd:57:76:43:6a:2e:bc:b4:a0:bc:81:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=449b18e3296d795d3a9c959be25c70aaab365200 Validity Not Before: Jan 1 20:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76197cd2ecdc73ef3b7e8d2ca6c04599cb3a507f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c1:dd:a0:14:0d:b1:11:d9:e8:eb:b7:7c:7b: 85:c3:f7:2b:bc:d4:0e:dd:96:45:2f:5e:f2:05:24: d8:96:33:08:4e:75:32:57:00:b7:9b:e7:55:d6:81: a4:31:1a:fa:fe:7c:16:6b:7e:c2:db:6c:f2:fc:33: 3b:60:e5:61:fb:a2:5b:90:96:d0:75:44:0a:3b:9a: 17:a2:5b:28:43:b0:65:db:c5:67:02:e7:bf:40:97: 04:46:91:9f:01:16:12:24:6a:4f:5f:e3:18:c1:30: fe:e6:c4:64:7d:ab:77:1f:b0:53:15:22:d8:8a:84: 42:0c:f4:9d:61:b6:05:3e:93:86:fa:2d:b9:d2:7e: 1a:4e:8a:43:92:66:90:38:79:e9:d9:b2:47:4e:58: ef:cf:63:5b:c5:14:0b:cd:40:e8:98:2c:52:a6:7e: 9b:08:dc:a0:8a:13:ba:e0:91:8d:f6:81:18:a7:ab: b7:c1:0e:e0:f0:30:84:60:d3:fb:3c:1e:21:ac:fb: 29:15:1a:83:48:a4:b5:92:f5:12:73:1b:2d:65:d2: 1f:dd:ca:0c:2e:7d:b1:62:9b:12:cd:4f:8b:cc:42: f6:c9:88:5a:8d:d9:43:d3:f4:43:39:c6:bd:d3:7c: b6:c0:18:1d:0e:f9:5d:94:c7:08:eb:b7:7f:37:a6: c1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:19:7C:D2:EC:DC:73:EF:3B:7E:8D:2C:A6:C0:45:99:CB:3A:50:7F X509v3 Authority Key Identifier: keyid:44:9B:18:E3:29:6D:79:5D:3A:9C:95:9B:E2:5C:70:AA:AB:36:52:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/dhl80uzcc-87fo0spsBFmcs6UH8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.107.140.0/23 195.189.198.0/23 IPv6: 2a00:4680::/32 Signature Algorithm: sha256WithRSAEncryption af:b3:49:fa:4b:f4:f3:29:58:d8:db:7b:cb:98:5d:62:f1:ac: 02:9e:8d:34:95:f8:dc:10:37:71:a7:a6:03:a4:62:3a:0e:09: 3f:32:cc:b8:83:3a:a5:c6:2d:19:06:38:13:4b:0a:2c:d0:e4: 49:6b:bf:08:41:9d:6e:e3:c7:5c:88:1a:51:e3:94:2c:5d:d6: 14:22:8c:83:9a:7b:88:a4:00:70:e9:d1:bf:ab:c9:20:3e:fe: 09:b1:5a:a7:7d:0a:27:d6:49:b6:cb:0f:c3:7e:83:e0:a8:10: 52:12:2e:d3:c5:15:67:d3:4d:b2:e3:22:3a:1f:80:55:d5:4a: 77:35:4b:49:dd:52:65:82:fa:d8:12:cc:f6:25:42:b3:52:27: fc:fc:aa:cc:74:c1:48:8c:eb:79:d9:12:ff:80:51:58:57:3f: 4c:67:38:92:6d:bf:46:27:6b:dd:80:44:51:16:1e:83:34:37: 31:5a:1a:1b:f7:73:f8:74:3a:8e:b9:86:f8:36:19:f0:01:24: 8b:68:66:76:ab:48:79:e5:df:fe:f4:ad:d5:7a:c3:f5:a9:c2: f5:4f:62:46:c4:77:c6:17:a4:3c:71:d9:66:bf:a9:97:f2:49: a0:8d:88:bd:33:c7:14:7f:01:84:7c:35:6f:64:76:46:0d:d4: 58:29:a9:f9 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7NdBzvVd2Q2ouvLSgvIHzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0OWIxOGUzMjk2ZDc5NWQzYTljOTU5YmUyNWM3MGFhYWIz NjUyMDAwHhcNMjYwMTAxMjAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjE5N2NkMmVjZGM3M2VmM2I3ZThkMmNhNmMwNDU5OWNiM2E1MDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8HdoBQNsRHZ6Ou3fHuFw/crvNQO 3ZZFL17yBSTYljMITnUyVwC3m+dV1oGkMRr6/nwWa37C22zy/DM7YOVh+6JbkJbQ dUQKO5oXolsoQ7Bl28VnAue/QJcERpGfARYSJGpPX+MYwTD+5sRkfat3H7BTFSLY ioRCDPSdYbYFPpOG+i250n4aTopDkmaQOHnp2bJHTljvz2NbxRQLzUDomCxSpn6b CNygihO64JGN9oEYp6u3wQ7g8DCEYNP7PB4hrPspFRqDSKS1kvUScxstZdIf3coM Ln2xYpsSzU+LzEL2yYhajdlD0/RDOca903y2wBgdDvldlMcI67d/N6bBCwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFHYZfNLs3HPvO36NLKbARZnLOlB/MB8GA1UdIwQY MBaAFESbGOMpbXldOpyVm+JccKqrNlIAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkpzWTR5bHRlVjA2bkpXYjRseHdxcXMyVWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9mYjM5ZWQtN2M3My00NDc4LTkwMWQt NjVhODk5YTYwMzY2LzEvZGhsODB1emNjLTg3Zm8wc3BzQkZtY3M2VUg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9mYjM5ZWQtN2M3My00NDc4LTkwMWQtNjVhODk5YTYwMzY2 LzEvUkpzWTR5bHRlVjA2bkpXYjRseHdxcXMyVWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBwmuMAwQB w73GMA0EAgACMAcDBQAqAEaAMA0GCSqGSIb3DQEBCwUAA4IBAQCvs0n6S/TzKVjY 23vLmF1i8awCno00lfjcEDdxp6YDpGI6Dgk/Msy4gzqlxi0ZBjgTSwos0ORJa78I QZ1u48dciBpR45QsXdYUIoyDmnuIpABw6dG/q8kgPv4JsVqnfQon1km2yw/DfoPg qBBSEi7TxRVn002y4yI6H4BV1Up3NUtJ3VJlgvrYEsz2JUKzUif8/KrMdMFIjOt5 2RL/gFFYVz9MZziSbb9GJ2vdgERRFh6DNDcxWhob93P4dDqOuYb4NhnwASSLaGZ2 q0h55d/+9K3VesP1qcL1T2JGxHfGF6Q8cdlmv6mX8kmgjYi9M8cUfwGEfDVvZHZG DdRYKan5 -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:22 2026 by rpki-client