This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/DLBww-zqIhQllewFuiQa1fvj4RM.roa File: DLBww-zqIhQllewFuiQa1fvj4RM.roa (raw, json) Hash identifier: O1Alk3RK+8x7vbkqLEwNAkJ0vv3sx/hGXGgnO73ZNcA= Subject key identifier: 0C:B0:70:C3:EC:EA:22:14:25:95:EC:05:BA:24:1A:D5:FB:E3:E1:13 Certificate issuer: /CN=f899aea56f50ff8f4342cbee2af2f288a168c930 Certificate serial: 019B7AC8C342E2A9B5D8EC8766D67FEE1114 Authority key identifier: F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/DLBww-zqIhQllewFuiQa1fvj4RM.roa Signing time: Thu 01 Jan 2026 18:18:56 +0000 ROA not before: Thu 01 Jan 2026 18:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62412 IP address blocks: 45.150.216.0/22 maxlen: 24 185.36.208.0/23 maxlen: 24 185.183.220.0/22 maxlen: 24 188.214.240.0/23 maxlen: 24 193.31.68.0/22 maxlen: 24 193.202.122.0/24 maxlen: 24 2a04:6c00::/29 maxlen: 64 2a0b:1f80::/29 maxlen: 64 2a0b:2f80::/29 maxlen: 64 2a0d:5fc0::/29 maxlen: 64 2a0f:4f00::/29 maxlen: 64 2a0f:f940::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 07:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:c3:42:e2:a9:b5:d8:ec:87:66:d6:7f:ee:11:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f899aea56f50ff8f4342cbee2af2f288a168c930 Validity Not Before: Jan 1 18:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0cb070c3ecea22142595ec05ba241ad5fbe3e113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:92:c2:09:fa:5c:3d:27:ea:18:30:59:0f:16: f7:fe:87:79:60:cc:f6:87:f0:9e:05:0f:ad:c1:8e: b3:9e:48:39:18:96:9c:5d:54:5c:29:39:9f:6b:7d: 17:cb:75:65:e3:44:36:9c:f2:c5:bf:71:a5:6d:9d: 5d:e9:b1:89:b8:65:06:5e:23:98:3b:35:00:bd:36: 12:6b:94:5d:4b:80:6e:df:b6:bd:dc:18:b3:17:ce: 3a:53:9f:5f:13:fd:71:d5:11:c2:d6:7c:ff:aa:92: 11:2c:f9:e3:0e:db:5a:a6:bc:bf:06:0e:ce:fe:0a: 18:eb:f7:ea:37:46:e8:18:03:dd:c6:f5:90:df:8f: c4:38:1a:36:7c:39:db:a7:fe:79:86:b9:0c:29:ca: d2:b5:a9:04:30:26:9d:5d:74:02:90:b7:ea:3d:c2: f6:34:66:c1:2d:73:a1:39:54:d7:e4:e0:c8:e2:d2: 8c:e4:8f:7c:ec:c6:ab:0a:e0:cf:c4:ec:8a:21:2b: 97:e5:3b:76:f6:b6:85:2d:01:5d:73:d1:c6:e9:ba: e7:11:c7:1f:25:92:62:95:f2:75:98:8a:62:e7:4c: 0d:5a:d3:1a:74:d2:85:4d:84:83:9a:ab:20:04:3f: 14:a2:4e:9e:00:01:57:15:36:7d:08:91:f7:53:f7: f2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B0:70:C3:EC:EA:22:14:25:95:EC:05:BA:24:1A:D5:FB:E3:E1:13 X509v3 Authority Key Identifier: keyid:F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/DLBww-zqIhQllewFuiQa1fvj4RM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.216.0/22 185.36.208.0/23 185.183.220.0/22 188.214.240.0/23 193.31.68.0/22 193.202.122.0/24 IPv6: 2a04:6c00::/29 2a0b:1f80::/29 2a0b:2f80::/29 2a0d:5fc0::/29 2a0f:4f00::/29 2a0f:f940::/29 Signature Algorithm: sha256WithRSAEncryption 1a:d7:4d:d2:72:c5:3e:f3:1f:a8:b1:ae:fd:55:41:25:47:31: 1f:ae:91:fe:63:be:48:65:bf:d6:a6:89:42:51:fd:27:09:72: b4:65:d2:98:eb:a9:e4:32:db:24:c6:b1:99:0b:3f:7d:76:4a: 98:f6:9f:b4:28:18:c3:47:06:87:1e:82:2e:bb:31:ed:ad:3a: c5:2e:89:35:2f:d0:cc:2b:97:30:e5:a5:48:14:04:de:06:4c: 51:66:2c:3a:14:ea:a9:cd:d5:e8:4f:4c:60:ca:91:21:1b:5e: 23:1c:9e:6a:b1:64:06:62:2f:e5:aa:63:e9:6f:76:2c:88:fb: 7e:96:2f:58:40:64:9c:02:90:e7:f9:7b:67:e3:f7:64:ee:61: 53:13:cf:e2:24:ac:7b:e0:f8:ef:18:2b:35:47:59:23:0d:fb: 52:06:3a:fe:45:de:8b:44:29:ac:87:ca:87:d1:87:f2:6d:99: d1:01:de:ff:6c:e7:35:8f:0f:64:a9:f8:c1:19:77:c9:45:08: 18:db:1e:a3:ff:f6:28:8d:47:ee:97:d2:8f:be:0f:b6:9d:f5: 9e:fe:78:2c:6e:42:d2:2b:62:7e:69:a3:8f:07:a4:2e:62:d5: 72:18:26:6c:56:44:dc:5a:4f:7e:f4:7e:d9:1b:0d:ae:d9:92: 81:59:fa:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgISAZt6yMNC4qm12OyHZtZ/7hEUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4OTlhZWE1NmY1MGZmOGY0MzQyY2JlZTJhZjJmMjg4YTE2 OGM5MzAwHhcNMjYwMTAxMTgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2IwNzBjM2VjZWEyMjE0MjU5NWVjMDViYTI0MWFkNWZiZTNlMTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5LCCfpcPSfqGDBZDxb3/od5YMz2 h/CeBQ+twY6znkg5GJacXVRcKTmfa30Xy3Vl40Q2nPLFv3GlbZ1d6bGJuGUGXiOY OzUAvTYSa5RdS4Bu37a93BizF846U59fE/1x1RHC1nz/qpIRLPnjDttapry/Bg7O /goY6/fqN0boGAPdxvWQ34/EOBo2fDnbp/55hrkMKcrStakEMCadXXQCkLfqPcL2 NGbBLXOhOVTX5ODI4tKM5I987MarCuDPxOyKISuX5Tt29raFLQFdc9HG6brnEccf JZJilfJ1mIpi50wNWtMadNKFTYSDmqsgBD8Uok6eAAFXFTZ9CJH3U/fyZQIDAQAB o4ICWzCCAlcwHQYDVR0OBBYEFAywcMPs6iIUJZXsBbokGtX74+ETMB8GA1UdIwQY MBaAFPiZrqVvUP+PQ0LL7iry8oihaMkwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1KbXVwVzlRXzQ5RFFzdnVLdkx5aUtGb3lUQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvMmMyZTYxLTcyNzktNDgzYy04NDc1 LTliZjE5ZDg0MjIwZi8xL0RMQnd3LXpxSWhRbGxld0Z1aVFhMWZ2ajRSTS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDYvMmMyZTYxLTcyNzktNDgzYy04NDc1LTliZjE5ZDg0MjIw Zi8xLzEtSm11cFc5UV80OURRc3Z1S3ZMeWlLRm95VEEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwbwYIKwYBBQUHAQcBAf8EYDBeMCoEAgABMCQDBAItltgD BAG5JNADBAK5t9wDBAG81vADBALBH0QDBADBynowMAQCAAIwKgMFAyoEbAADBQMq Cx+AAwUDKgsvgAMFAyoNX8ADBQMqD08AAwUDKg/5QDANBgkqhkiG9w0BAQsFAAOC AQEAGtdN0nLFPvMfqLGu/VVBJUcxH66R/mO+SGW/1qaJQlH9JwlytGXSmOup5DLb JMaxmQs/fXZKmPaftCgYw0cGhx6CLrsx7a06xS6JNS/QzCuXMOWlSBQE3gZMUWYs OhTqqc3V6E9MYMqRIRteIxyearFkBmIv5apj6W92LIj7fpYvWEBknAKQ5/l7Z+P3 ZO5hUxPP4iSse+D47xgrNUdZIw37UgY6/kXei0QprIfKh9GH8m2Z0QHe/2znNY8P ZKn4wRl3yUUIGNseo//2KI1H7pfSj74Ptp31nv54LG5C0itifmmjjwekLmLVchgm bFZE3FpPfvR+2RsNrtmSgVn65w== -----END CERTIFICATE-----Generated at Wed Jan 7 10:41:55 2026 by rpki-client