This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/D4LM_-yMapw5el8niCLWD3O15zs.roa File: D4LM_-yMapw5el8niCLWD3O15zs.roa (raw, json) Hash identifier: fm1csnGJtCUdbxvyMsvPSvwlp32QsYfLZeDz4aX3VyA= Subject key identifier: 0F:82:CC:FF:EC:8C:6A:9C:39:7A:5F:27:88:22:D6:0F:73:B5:E7:3B Certificate issuer: /CN=7c590b733c56e14ebac69f7b44d4bc954e9370e3 Certificate serial: 019B7B3543DC5714E8312A73E22F823E441E Authority key identifier: 7C:59:0B:73:3C:56:E1:4E:BA:C6:9F:7B:44:D4:BC:95:4E:93:70:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/D4LM_-yMapw5el8niCLWD3O15zs.roa Signing time: Thu 01 Jan 2026 20:17:26 +0000 ROA not before: Thu 01 Jan 2026 20:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197602 IP address blocks: 91.224.178.0/23 maxlen: 24 91.224.178.0/24 maxlen: 24 91.224.179.0/24 maxlen: 24 2001:678:f58::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:43:dc:57:14:e8:31:2a:73:e2:2f:82:3e:44:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c590b733c56e14ebac69f7b44d4bc954e9370e3 Validity Not Before: Jan 1 20:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f82ccffec8c6a9c397a5f278822d60f73b5e73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2f:ef:6e:3d:a2:81:f5:ac:3a:c2:4f:bf:ae: 10:4c:e2:70:b9:5d:83:0f:2d:1d:88:d1:1b:1a:79: 64:78:bf:53:73:21:35:b0:b9:08:38:e7:d7:6c:6a: dd:50:09:96:74:65:fa:44:e8:78:dc:15:0b:0a:63: 85:55:89:88:a8:dc:d6:d3:ed:50:4a:31:e6:b5:4f: 2e:20:79:b2:d5:fc:7d:35:0f:ac:78:56:ae:f0:1a: 79:c3:d4:20:03:74:a0:80:bb:80:4e:3c:bb:4e:21: 97:f2:28:60:a1:da:c6:55:b7:ff:5e:c7:ac:4b:51: 03:2c:2f:fc:ab:ac:f8:2d:64:e7:28:4e:4e:a3:c2: b8:a4:b3:5b:58:a5:32:f5:44:e6:4a:89:31:8a:0d: 2f:81:be:e6:8d:1e:3e:72:9c:b1:bc:82:ff:90:b2: 99:f6:45:ec:7b:f4:7e:03:06:ec:6c:85:4f:56:0d: 10:fd:53:ac:2f:fe:dd:a5:c8:e2:6f:9c:7d:08:c6: e1:33:6f:e8:7b:06:56:47:8d:ee:79:56:15:40:8b: 1b:14:ff:63:52:ac:ac:c8:84:4e:f7:41:8b:6e:3b: 01:31:30:eb:63:e4:a2:33:a5:75:3b:b6:48:fb:6b: 89:f0:9b:b9:d5:b0:0e:7f:19:26:f2:50:23:f6:c7: 46:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:82:CC:FF:EC:8C:6A:9C:39:7A:5F:27:88:22:D6:0F:73:B5:E7:3B X509v3 Authority Key Identifier: keyid:7C:59:0B:73:3C:56:E1:4E:BA:C6:9F:7B:44:D4:BC:95:4E:93:70:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/D4LM_-yMapw5el8niCLWD3O15zs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.178.0/23 IPv6: 2001:678:f58::/48 Signature Algorithm: sha256WithRSAEncryption 11:db:4c:6d:6b:1e:21:6c:c0:af:1e:7d:13:ad:e6:40:dd:9e: 40:80:b6:24:9d:88:58:33:8d:a2:82:8c:2d:3b:2a:18:14:37: 4f:20:7a:f1:1a:7c:a1:9e:4d:79:0c:86:6d:1a:ed:00:7d:d2: 7e:94:2a:3d:cd:71:55:16:b6:d0:a5:77:23:96:bd:99:0a:73: 3f:ec:15:2f:dc:16:28:5f:c5:3a:d0:a9:d9:cd:ef:ee:60:9b: 33:ab:8d:b1:55:ce:c8:45:58:71:f1:78:c2:07:1c:11:33:bb: 92:d9:63:97:b6:0f:e8:e4:76:b3:e7:7c:bf:df:04:08:55:e9: f6:3d:d7:61:3f:17:ba:c3:ac:a0:a8:b5:58:09:da:3a:4a:0c: 64:da:17:38:b4:dc:11:8c:e6:aa:90:c4:ee:c9:34:84:d6:e9: 7c:0c:73:37:07:85:5e:23:51:4a:df:47:c1:60:47:cc:d9:c6: 8d:6d:a7:39:de:74:6b:12:aa:c9:8f:3e:86:00:07:eb:36:1a: b7:f6:ed:0f:37:6c:a1:0d:a1:4c:b4:b7:a9:1d:74:a0:b0:92: 91:d6:96:03:7e:c8:ce:e6:1d:55:77:cb:6d:ec:67:65:98:02: bc:4c:62:30:5e:9a:c3:03:90:83:da:04:f8:86:3c:08:5b:c1: 7b:84:f3:3f -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7NUPcVxToMSpz4i+CPkQeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNTkwYjczM2M1NmUxNGViYWM2OWY3YjQ0ZDRiYzk1NGU5 MzcwZTMwHhcNMjYwMTAxMjAxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjgyY2NmZmVjOGM2YTljMzk3YTVmMjc4ODIyZDYwZjczYjVlNzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi/vbj2igfWsOsJPv64QTOJwuV2D Dy0diNEbGnlkeL9TcyE1sLkIOOfXbGrdUAmWdGX6ROh43BULCmOFVYmIqNzW0+1Q SjHmtU8uIHmy1fx9NQ+seFau8Bp5w9QgA3SggLuATjy7TiGX8ihgodrGVbf/Xses S1EDLC/8q6z4LWTnKE5Oo8K4pLNbWKUy9UTmSokxig0vgb7mjR4+cpyxvIL/kLKZ 9kXse/R+AwbsbIVPVg0Q/VOsL/7dpcjib5x9CMbhM2/oewZWR43ueVYVQIsbFP9j UqysyIRO90GLbjsBMTDrY+SiM6V1O7ZI+2uJ8Ju51bAOfxkm8lAj9sdGYwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFA+CzP/sjGqcOXpfJ4gi1g9ztec7MB8GA1UdIwQY MBaAFHxZC3M8VuFOusafe0TUvJVOk3DjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkZrTGN6eFc0VTY2eHA5N1JOUzhsVTZUY09NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lM2I2ZmMtZWY2My00YzA2LWEzMDQt ZjNiNWU4MDI1MGRkLzEvRDRMTV8teU1hcHc1ZWw4bmlDTFdEM08xNXpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9lM2I2ZmMtZWY2My00YzA2LWEzMDQtZjNiNWU4MDI1MGRk LzEvZkZrTGN6eFc0VTY2eHA5N1JOUzhsVTZUY09NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBW+CyMA8E AgACMAkDBwAgAQZ4D1gwDQYJKoZIhvcNAQELBQADggEBABHbTG1rHiFswK8efROt 5kDdnkCAtiSdiFgzjaKCjC07KhgUN08gevEafKGeTXkMhm0a7QB90n6UKj3NcVUW ttCldyOWvZkKcz/sFS/cFihfxTrQqdnN7+5gmzOrjbFVzshFWHHxeMIHHBEzu5LZ Y5e2D+jkdrPnfL/fBAhV6fY912E/F7rDrKCotVgJ2jpKDGTaFzi03BGM5qqQxO7J NITW6XwMczcHhV4jUUrfR8FgR8zZxo1tpznedGsSqsmPPoYAB+s2Grf27Q83bKEN oUy0t6kddKCwkpHWlgN+yM7mHVV3y23sZ2WYArxMYjBemsMDkIPaBPiGPAhbwXuE 8z8= -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:18 2026 by rpki-client