This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/dclA3VMdZLtz34LpTMAR4SiwFQA.roa File: dclA3VMdZLtz34LpTMAR4SiwFQA.roa (raw, json) Hash identifier: RzeKpzl0YEsb0N/0nKCVIMEwOnJwgDR9R3LTON1hPxA= Subject key identifier: 75:C9:40:DD:53:1D:64:BB:73:DF:82:E9:4C:C0:11:E1:28:B0:15:00 Certificate issuer: /CN=73d31367608564d8783bb242486e93d6506e7f95 Certificate serial: 019B78A285A8EE49D938C8CA37103018E067 Authority key identifier: 73:D3:13:67:60:85:64:D8:78:3B:B2:42:48:6E:93:D6:50:6E:7F:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/dclA3VMdZLtz34LpTMAR4SiwFQA.roa Signing time: Thu 01 Jan 2026 08:17:55 +0000 ROA not before: Thu 01 Jan 2026 08:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204288 IP address blocks: 91.210.110.0/24 maxlen: 24 193.33.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft rsync://rpki.ripe.net/repository/DEFAULT/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:85:a8:ee:49:d9:38:c8:ca:37:10:30:18:e0:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73d31367608564d8783bb242486e93d6506e7f95 Validity Not Before: Jan 1 08:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75c940dd531d64bb73df82e94cc011e128b01500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:61:6a:8f:fe:12:51:60:2b:c7:09:6b:95:59: b5:e2:fd:be:5c:c5:41:3a:ff:23:bf:ca:6e:66:8c: 49:11:e4:99:60:4f:d9:27:3c:bd:9c:93:00:64:b4: cb:56:66:20:be:21:64:22:51:c8:1b:a9:bd:82:96: 85:00:78:3f:b9:86:70:5c:95:90:e3:e8:16:61:13: 29:b0:d1:82:8a:e7:0a:45:cd:ac:a8:bd:ea:e4:72: b0:2c:88:7e:a2:bc:3c:7f:17:ba:69:c7:82:9a:3c: f3:f7:74:ad:6d:91:84:87:8d:dc:d2:ee:a4:e2:28: 38:37:5b:a2:f1:1c:21:7d:92:ae:16:10:d3:c7:0f: 5e:a6:fe:e2:da:61:70:45:59:d2:2c:1a:97:01:87: 1c:bd:0c:d6:f4:6a:1c:ec:49:c2:e1:e1:49:7d:55: b7:45:9a:ee:ae:1a:59:a7:59:6a:cc:f4:17:65:25: 5c:3b:44:da:d1:c4:11:2c:eb:2d:11:47:10:e9:d5: 06:8f:06:4a:d3:61:c5:32:41:1a:59:76:6f:31:42: 19:5d:5b:3c:83:e1:9b:2f:21:b4:c1:a4:07:f2:4a: 42:0b:6d:29:2d:9f:58:bc:9e:b5:b9:4e:e2:db:00: 55:6c:28:29:77:f4:e0:e4:2e:1f:c2:a8:e1:58:3b: 4c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C9:40:DD:53:1D:64:BB:73:DF:82:E9:4C:C0:11:E1:28:B0:15:00 X509v3 Authority Key Identifier: keyid:73:D3:13:67:60:85:64:D8:78:3B:B2:42:48:6E:93:D6:50:6E:7F:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/dclA3VMdZLtz34LpTMAR4SiwFQA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.210.110.0/24 193.33.38.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:02:14:03:84:19:86:48:1a:a1:e5:31:df:d3:1c:eb:c2:59: d6:4d:ac:2a:0e:2d:31:20:81:39:0a:9b:19:8c:70:ee:7c:f0: e5:2b:0b:6e:36:7b:95:a8:ed:5c:ce:45:eb:f4:ac:db:2b:e7: c5:11:28:a6:82:d6:dc:37:0f:fe:97:f6:a1:98:6f:53:3c:92: 85:67:a9:90:5b:93:3b:36:64:4d:bd:a0:6c:5b:44:00:cc:be: 40:43:a3:8c:fe:7f:a2:23:63:06:eb:b5:c6:57:af:9d:f4:59: 78:cf:4b:1b:22:cc:ed:5e:20:de:ff:7c:bc:7f:73:a8:e8:ba: 59:e2:ae:8f:48:6e:5a:2d:b1:60:7c:2f:24:14:98:50:f5:03: df:bb:d3:23:ec:6b:f7:0f:ed:4f:82:ff:99:39:66:f3:2b:81: 70:91:1a:fc:d0:87:a3:eb:d6:23:9c:3e:cf:c1:6c:6d:ab:2a: e6:db:5f:cf:1b:8c:22:0d:4d:a1:5c:44:8f:ff:32:ea:2e:fe: ba:55:58:b6:9b:48:d3:83:c0:b3:64:9b:fd:aa:88:a4:07:70: 96:29:ff:cd:7c:c5:93:28:8e:ee:48:26:17:8d:1f:33:3f:c7: 6a:84:14:d0:5c:72:a0:a6:9d:c7:ab:08:aa:4a:40:03:86:98: fd:d5:14:b3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ooWo7knZOMjKNxAwGOBnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZDMxMzY3NjA4NTY0ZDg3ODNiYjI0MjQ4NmU5M2Q2NTA2 ZTdmOTUwHhcNMjYwMTAxMDgxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWM5NDBkZDUzMWQ2NGJiNzNkZjgyZTk0Y2MwMTFlMTI4YjAxNTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGFqj/4SUWArxwlrlVm14v2+XMVB Ov8jv8puZoxJEeSZYE/ZJzy9nJMAZLTLVmYgviFkIlHIG6m9gpaFAHg/uYZwXJWQ 4+gWYRMpsNGCiucKRc2sqL3q5HKwLIh+orw8fxe6aceCmjzz93StbZGEh43c0u6k 4ig4N1ui8RwhfZKuFhDTxw9epv7i2mFwRVnSLBqXAYccvQzW9Goc7EnC4eFJfVW3 RZrurhpZp1lqzPQXZSVcO0Ta0cQRLOstEUcQ6dUGjwZK02HFMkEaWXZvMUIZXVs8 g+GbLyG0waQH8kpCC20pLZ9YvJ61uU7i2wBVbCgpd/Tg5C4fwqjhWDtMMQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHXJQN1THWS7c9+C6UzAEeEosBUAMB8GA1UdIwQY MBaAFHPTE2dghWTYeDuyQkhuk9ZQbn+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzlNVFoyQ0ZaTmg0TzdKQ1NHNlQxbEJ1ZjVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8wMmU0MTktZGQ4My00MDBiLWIxMTQt MDJjNTAwOGJjYzA5LzEvZGNsQTNWTWRaTHR6MzRMcFRNQVI0U2l3RlFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS8wMmU0MTktZGQ4My00MDBiLWIxMTQtMDJjNTAwOGJjYzA5 LzEvYzlNVFoyQ0ZaTmg0TzdKQ1NHNlQxbEJ1ZjVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9JuAwQB wSEmMA0GCSqGSIb3DQEBCwUAA4IBAQB/AhQDhBmGSBqh5THf0xzrwlnWTawqDi0x IIE5CpsZjHDufPDlKwtuNnuVqO1czkXr9KzbK+fFESimgtbcNw/+l/ahmG9TPJKF Z6mQW5M7NmRNvaBsW0QAzL5AQ6OM/n+iI2MG67XGV6+d9Fl4z0sbIsztXiDe/3y8 f3Oo6LpZ4q6PSG5aLbFgfC8kFJhQ9QPfu9Mj7Gv3D+1Pgv+ZOWbzK4FwkRr80Iej 69YjnD7PwWxtqyrm21/PG4wiDU2hXESP/zLqLv66VVi2m0jTg8CzZJv9qoikB3CW Kf/NfMWTKI7uSCYXjR8zP8dqhBTQXHKgpp3HqwiqSkADhpj91RSz -----END CERTIFICATE-----Generated at Mon Jan 12 01:11:53 2026 by rpki-client