This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/dzLIS_uUBmT5ML31y6NFSMyd71k.roa File: dzLIS_uUBmT5ML31y6NFSMyd71k.roa (raw, json) Hash identifier: DlezeaLLQKyU+Fuzh+ngOJx/wOMos/kw2vfD167ugl8= Subject key identifier: 77:32:C8:4B:FB:94:06:64:F9:30:BD:F5:CB:A3:45:48:CC:9D:EF:59 Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Certificate serial: 019B7E384EF888DF6C899637EB0529DF0C3E Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/dzLIS_uUBmT5ML31y6NFSMyd71k.roa Signing time: Fri 02 Jan 2026 10:19:37 +0000 ROA not before: Fri 02 Jan 2026 10:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214993 IP address blocks: 45.135.242.0/24 maxlen: 24 2a01:4ac0:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:4e:f8:88:df:6c:89:96:37:eb:05:29:df:0c:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Validity Not Before: Jan 2 10:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7732c84bfb940664f930bdf5cba34548cc9def59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1c:b1:7b:f0:4e:a5:7e:41:b5:8a:36:60:49: d9:1e:58:bf:94:d6:d7:b0:03:4a:72:7e:e5:89:45: 36:25:91:a0:36:9b:7d:d0:76:be:13:73:f2:6b:b4: 49:98:d0:ca:aa:8c:0e:4c:17:ad:05:64:fb:ee:e1: 8f:db:48:da:4b:bb:ef:47:e9:68:af:7e:24:89:a0: c4:48:11:6f:82:6b:0b:de:be:47:73:96:93:64:b1: 2e:06:fa:da:30:2c:b5:76:25:a0:65:50:d6:b2:3b: d8:5e:0f:c2:78:76:df:f8:64:5b:4d:96:b0:14:36: 58:e9:d4:99:cb:5c:09:c8:6d:97:b5:3e:8e:70:e3: 0f:1c:33:0e:30:fe:72:89:d6:b7:30:85:c5:59:a5: 73:dd:05:5d:a4:93:52:3a:41:0b:44:fa:e6:c7:fe: e3:4c:57:6f:cf:18:12:91:9f:3b:52:8b:24:db:5a: a2:7b:1f:ee:b1:7a:15:c3:c5:a6:6e:9b:e5:7e:ec: ea:58:12:b2:ef:e7:d6:2b:8e:d4:80:46:3d:09:ac: 51:71:70:fa:2b:f8:a1:c9:9e:02:17:d8:2e:ef:77: d4:de:ce:88:3c:85:85:40:c3:89:69:55:17:62:8f: 74:df:03:de:47:a7:fa:73:57:87:8f:e6:14:b6:5d: 2d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:32:C8:4B:FB:94:06:64:F9:30:BD:F5:CB:A3:45:48:CC:9D:EF:59 X509v3 Authority Key Identifier: keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/dzLIS_uUBmT5ML31y6NFSMyd71k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.242.0/24 IPv6: 2a01:4ac0:6::/48 Signature Algorithm: sha256WithRSAEncryption 79:bf:56:ea:99:bf:93:d8:10:c6:76:90:78:e4:71:a1:cb:db: bd:e6:7a:f0:a2:1b:50:2a:be:e3:8b:c2:05:c0:68:3e:eb:7c: fd:f3:53:51:a6:01:ef:e7:9d:a5:14:83:ac:40:14:8b:3f:14: 09:5b:22:cb:ec:82:3e:a7:c6:4b:e1:6e:54:70:0d:2b:91:5a: c2:e8:c0:10:61:29:6f:da:9a:45:8f:d0:44:3c:eb:cf:9f:f8: 8f:a9:e5:6b:22:8b:93:3d:dd:08:81:b7:1a:02:74:47:d5:d8: 80:b5:1a:d2:ae:bc:d6:3c:43:3c:0e:2c:18:cb:17:5d:58:d6: 6e:2a:aa:f7:93:8b:4f:e9:1c:18:d0:cd:90:5d:50:e8:49:90: b3:07:54:93:9b:67:1f:58:df:ac:89:d5:d6:d7:05:c4:d6:03: 32:27:f8:9d:43:51:88:4b:ca:27:7e:de:a0:31:43:69:74:b4: 23:42:5e:42:fa:fb:7a:03:12:35:55:fa:0e:73:b2:b2:30:41: 58:5e:e0:ca:ce:21:83:5a:2e:56:ca:14:7a:97:23:84:1d:90: 32:f8:d4:71:55:52:03:fc:48:f1:de:94:30:52:ea:7d:88:ca: 8f:b2:92:dc:44:cf:02:6a:9c:a7:5f:e0:e6:11:50:25:80:ef: 52:af:1d:68 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+OE74iN9siZY36wUp3ww+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YzE2N2RmYTk4ODJiMmFhOGY4NDU5NWY1OGE5N2MzMDVj YTQzYzUwHhcNMjYwMTAyMTAxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzMyYzg0YmZiOTQwNjY0ZjkzMGJkZjVjYmEzNDU0OGNjOWRlZjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApByxe/BOpX5BtYo2YEnZHli/lNbX sANKcn7liUU2JZGgNpt90Ha+E3Pya7RJmNDKqowOTBetBWT77uGP20jaS7vvR+lo r34kiaDESBFvgmsL3r5Hc5aTZLEuBvraMCy1diWgZVDWsjvYXg/CeHbf+GRbTZaw FDZY6dSZy1wJyG2XtT6OcOMPHDMOMP5yida3MIXFWaVz3QVdpJNSOkELRPrmx/7j TFdvzxgSkZ87Uosk21qiex/usXoVw8WmbpvlfuzqWBKy7+fWK47UgEY9CaxRcXD6 K/ihyZ4CF9gu73fU3s6IPIWFQMOJaVUXYo903wPeR6f6c1eHj+YUtl0tXwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHcyyEv7lAZk+TC99cujRUjMne9ZMB8GA1UdIwQY MBaAFLbBZ9+piCsqqPhFlfWKl8MFykPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUt YWNmYzNkMmMyNTIyLzEvZHpMSVNfdVVCbVQ1TUwzMXk2TkZTTXlkNzFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUtYWNmYzNkMmMyNTIy LzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALYfyMA8E AgACMAkDBwAqAUrAAAYwDQYJKoZIhvcNAQELBQADggEBAHm/VuqZv5PYEMZ2kHjk caHL273mevCiG1AqvuOLwgXAaD7rfP3zU1GmAe/nnaUUg6xAFIs/FAlbIsvsgj6n xkvhblRwDSuRWsLowBBhKW/amkWP0EQ868+f+I+p5Wsii5M93QiBtxoCdEfV2IC1 GtKuvNY8QzwOLBjLF11Y1m4qqveTi0/pHBjQzZBdUOhJkLMHVJObZx9Y36yJ1dbX BcTWAzIn+J1DUYhLyid+3qAxQ2l0tCNCXkL6+3oDEjVV+g5zsrIwQVhe4MrOIYNa LlbKFHqXI4QdkDL41HFVUgP8SPHelDBS6n2Iyo+yktxEzwJqnKdf4OYRUCWA71Kv HWg= -----END CERTIFICATE-----Generated at Sat Jan 3 06:40:35 2026 by rpki-client