This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/dZLilwWHDcTBgw2vlgqQEo8wXmI.roa File: dZLilwWHDcTBgw2vlgqQEo8wXmI.roa (raw, json) Hash identifier: vNrKzB7jLGfmCB0/mX4ygPzITD3M9syDqPUvmlc8/PY= Subject key identifier: 75:92:E2:97:05:87:0D:C4:C1:83:0D:AF:96:0A:90:12:8F:30:5E:62 Certificate issuer: /CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876 Certificate serial: 019B79ED3CD1729B28B25137B4EB256B7750 Authority key identifier: EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/dZLilwWHDcTBgw2vlgqQEo8wXmI.roa Signing time: Thu 01 Jan 2026 14:19:09 +0000 ROA not before: Thu 01 Jan 2026 14:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51483 IP address blocks: 46.235.112.0/21 maxlen: 21 46.235.119.0/24 maxlen: 24 46.254.136.0/21 maxlen: 21 95.142.64.0/20 maxlen: 20 128.0.192.0/21 maxlen: 21 185.74.224.0/22 maxlen: 22 2a00:1100::/29 maxlen: 29 2a00:1100::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:3c:d1:72:9b:28:b2:51:37:b4:eb:25:6b:77:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876 Validity Not Before: Jan 1 14:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7592e29705870dc4c1830daf960a90128f305e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:65:47:af:fd:78:7c:06:59:39:41:3f:1a:a0: 6d:d1:0b:a6:e3:c0:e3:df:31:8d:4b:14:4d:7d:47: a8:eb:41:3b:ae:56:08:ec:89:87:3f:43:47:bd:09: eb:df:38:ba:a2:cf:a2:b5:89:69:fe:c8:07:e7:d2: 7c:75:80:a6:96:72:3f:fd:32:eb:97:dc:10:85:24: 25:6f:9d:0f:a3:c0:9a:e9:27:a2:78:a3:ea:e1:dd: fa:44:3d:8f:eb:67:b0:5f:93:2d:14:0d:49:28:08: cf:cc:af:ce:18:fa:57:fc:bb:18:2c:a4:b4:b0:4f: 30:d0:50:07:a2:fb:64:f9:e3:43:16:39:89:87:c0: 96:ba:5b:f5:bf:2b:96:ff:c9:ab:d2:22:f5:ee:e4: 08:17:0c:59:6c:fe:dc:d2:7b:31:3b:1b:85:c6:32: 41:6b:a5:84:98:35:93:79:9c:1e:37:7d:91:a0:0e: d5:e4:84:d0:ac:4a:64:a7:84:95:05:e1:92:8b:30: 33:b3:37:73:8a:ea:3e:0b:c5:df:f4:6c:c3:d9:e5: 33:ef:b5:1c:09:d3:68:03:1c:5a:a8:cc:e6:98:02: f4:c3:bd:45:93:94:e2:30:47:94:ab:15:c4:fa:9e: 94:25:0a:84:e5:24:01:22:93:a0:e4:89:59:82:f4: 5f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:92:E2:97:05:87:0D:C4:C1:83:0D:AF:96:0A:90:12:8F:30:5E:62 X509v3 Authority Key Identifier: keyid:EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/dZLilwWHDcTBgw2vlgqQEo8wXmI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.235.112.0/21 46.254.136.0/21 95.142.64.0/20 128.0.192.0/21 185.74.224.0/22 IPv6: 2a00:1100::/29 Signature Algorithm: sha256WithRSAEncryption 15:e3:44:79:64:de:dc:e9:6f:3d:f9:e0:3d:01:19:ba:fb:1e: 2b:5b:02:98:fb:76:2f:95:17:3b:24:30:e6:b8:33:8a:ab:fd: 5e:b2:6b:98:3d:84:04:ed:2d:94:18:68:26:d4:7e:52:7a:19: 78:13:83:7e:e1:b9:c5:82:e1:03:39:0c:cf:a3:7d:8e:a9:f3: b0:cd:27:42:3a:15:82:52:92:08:39:3c:a5:4d:b6:a8:89:18: 90:8b:53:6b:02:88:9f:bc:08:d2:7b:f7:7e:64:5b:c0:7e:f5: 08:f5:96:9d:f5:66:90:2b:bb:a3:47:99:a4:b0:97:33:48:ce: d8:a2:7c:8a:26:ac:c1:76:e6:3a:ee:c6:23:de:6c:94:b3:75: 50:2e:c3:4b:bc:18:9a:7f:a2:f5:1e:34:b2:4c:7c:fe:8d:88: 55:fc:7e:81:d2:a3:58:51:a6:d0:a2:25:ba:8a:7f:3a:f6:3a: 2d:e0:d4:aa:87:02:c7:13:bb:04:32:c7:6f:7e:d7:0f:09:79: 77:be:70:78:0d:82:6b:be:f2:03:57:ae:e8:00:21:be:c8:d1: f2:15:1b:32:5e:ed:8b:75:83:ca:7b:99:73:1e:49:e1:f7:20: 77:45:76:9f:a0:c2:0e:95:d3:65:c3:13:8e:33:15:09:54:c4: 6f:81:99:e8 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt57TzRcpsoslE3tOsla3dQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjM2QzZDdlNWNiZjE4YWY2NmI3ZjViNGE1ZTBhYzE5ZWNk Mzk4NzYwHhcNMjYwMTAxMTQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTkyZTI5NzA1ODcwZGM0YzE4MzBkYWY5NjBhOTAxMjhmMzA1ZTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2VHr/14fAZZOUE/GqBt0Qum48Dj 3zGNSxRNfUeo60E7rlYI7ImHP0NHvQnr3zi6os+itYlp/sgH59J8dYCmlnI//TLr l9wQhSQlb50Po8Ca6SeieKPq4d36RD2P62ewX5MtFA1JKAjPzK/OGPpX/LsYLKS0 sE8w0FAHovtk+eNDFjmJh8CWulv1vyuW/8mr0iL17uQIFwxZbP7c0nsxOxuFxjJB a6WEmDWTeZweN32RoA7V5ITQrEpkp4SVBeGSizAzszdziuo+C8Xf9GzD2eUz77Uc CdNoAxxaqMzmmAL0w71Fk5TiMEeUqxXE+p6UJQqE5SQBIpOg5IlZgvRfMQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFHWS4pcFhw3EwYMNr5YKkBKPMF5iMB8GA1UdIwQY MBaAFOw9PX5cvxivZrf1tKXgrBns05h2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0QwOWZseV9HSzltdF9XMHBlQ3NHZXpUbUhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iNjU5ZmMtNmI5Yi00ODQ3LWI2YTMt NDY2MGZhZDgzOTg1LzEvZFpMaWx3V0hEY1RCZ3cydmxncVFFbzh3WG1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9iNjU5ZmMtNmI5Yi00ODQ3LWI2YTMtNDY2MGZhZDgzOTg1 LzEvN0QwOWZseV9HSzltdF9XMHBlQ3NHZXpUbUhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDLutwAwQD Lv6IAwQEX45AAwQDgADAAwQCuUrgMA0EAgACMAcDBQMqABEAMA0GCSqGSIb3DQEB CwUAA4IBAQAV40R5ZN7c6W89+eA9ARm6+x4rWwKY+3YvlRc7JDDmuDOKq/1esmuY PYQE7S2UGGgm1H5Sehl4E4N+4bnFguEDOQzPo32OqfOwzSdCOhWCUpIIOTylTbao iRiQi1NrAoifvAjSe/d+ZFvAfvUI9Zad9WaQK7ujR5mksJczSM7YonyKJqzBduY6 7sYj3myUs3VQLsNLvBiaf6L1HjSyTHz+jYhV/H6B0qNYUabQoiW6in869jot4NSq hwLHE7sEMsdvftcPCXl3vnB4DYJrvvIDV67oACG+yNHyFRsyXu2LdYPKe5lzHknh 9yB3RXafoMIOldNlwxOOMxUJVMRvgZno -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:26 2026 by rpki-client