This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/DO0j4v3mEz3qd5IvdV_Cnx8CXlg.roa File: DO0j4v3mEz3qd5IvdV_Cnx8CXlg.roa (raw, json) Hash identifier: utTjxlZWKu9J3DkdZuLkviiFIN8/pSjqYt+kL5WYAx4= Subject key identifier: 0C:ED:23:E2:FD:E6:13:3D:EA:77:92:2F:75:5F:C2:9F:1F:02:5E:58 Certificate issuer: /CN=fcee32279c16dacdb5349f1b87c57d74c50ea539 Certificate serial: 019B79114AF4923CC1B00785E4DE0E8C99BF Authority key identifier: FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/DO0j4v3mEz3qd5IvdV_Cnx8CXlg.roa Signing time: Thu 01 Jan 2026 10:18:55 +0000 ROA not before: Thu 01 Jan 2026 10:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207975 IP address blocks: 194.32.166.0/23 maxlen: 23 194.32.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:4a:f4:92:3c:c1:b0:07:85:e4:de:0e:8c:99:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcee32279c16dacdb5349f1b87c57d74c50ea539 Validity Not Before: Jan 1 10:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ced23e2fde6133dea77922f755fc29f1f025e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c7:9a:58:48:7f:01:e8:00:63:8b:d1:c9:f7: 2e:36:42:90:6e:9f:cb:11:fe:c3:2c:1a:2a:09:44: 49:9e:50:18:b4:38:3c:3d:f7:a4:83:0a:ec:dc:bc: 02:a4:c9:c6:db:dc:92:f4:ba:49:7a:74:eb:f6:9e: 2a:af:e3:e1:a8:be:4c:e3:e8:6d:bb:b8:c8:be:bb: 01:71:a5:d0:d6:85:74:1f:e1:32:5a:c3:1e:84:60: 64:81:cb:24:f6:85:ee:63:2d:9a:82:f5:4b:6b:ab: 6b:1b:8f:bd:2d:97:f0:7f:04:0b:02:dd:9f:aa:44: 53:13:1a:56:10:ed:af:32:89:fa:7e:14:3e:21:2f: 6a:43:b4:6c:74:4b:68:d1:6e:6e:e8:0c:f3:a2:11: 80:e7:00:98:9e:7b:3c:fd:d6:83:bd:50:bc:f3:bb: cc:78:b4:c7:06:c5:d1:2b:d8:bc:00:9e:6c:db:75: c8:6d:7b:83:f1:2e:71:9d:80:0f:5f:69:30:59:d5: af:e9:a9:49:4b:3a:88:a6:d0:28:30:d9:90:cd:33: 76:6c:12:70:77:a5:0e:95:bf:5c:8f:59:9f:cc:26: 72:91:01:07:cf:1c:d8:e4:7a:40:b0:fe:43:fa:db: a2:eb:41:93:26:ed:c8:01:ce:58:e7:4b:cc:2f:79: f1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:ED:23:E2:FD:E6:13:3D:EA:77:92:2F:75:5F:C2:9F:1F:02:5E:58 X509v3 Authority Key Identifier: keyid:FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/DO0j4v3mEz3qd5IvdV_Cnx8CXlg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.32.166.0/23 194.32.204.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:94:f8:e3:9d:19:b1:41:de:04:11:b4:43:8e:ba:31:99:ac: a2:7c:03:98:85:03:26:2f:b4:d7:72:df:92:89:88:e6:b1:47: 20:c8:4f:fc:0e:08:a0:00:02:75:07:33:22:e9:24:4f:12:7e: 27:e5:61:22:71:7b:64:de:71:61:87:2d:39:cf:d8:bc:4f:82: 4c:d5:58:18:c7:13:cf:e5:e3:39:70:79:06:9b:3c:d4:ba:07: 28:5a:62:cd:c9:54:aa:72:22:6b:73:e4:f9:96:a2:c8:c6:16: 40:36:3a:eb:a1:35:fb:2a:f1:0f:4d:73:5d:cc:bb:a4:70:1d: 24:53:de:59:62:18:71:80:93:2d:d8:ad:2d:b5:ce:48:65:5b: 15:2e:89:8e:18:04:4e:b1:db:f8:ff:fa:dd:8d:2c:8e:81:ac: b8:1f:30:0c:c0:70:a5:88:54:3b:20:63:47:b1:4f:1b:1e:45: 53:c6:4a:50:02:93:aa:63:df:d6:a0:b8:9a:d2:52:6d:c3:00: c3:37:ac:40:9b:57:2f:c3:71:8f:7d:30:24:1a:0a:16:dd:8f: e8:7f:eb:ac:87:60:2d:36:bd:be:03:2d:0f:09:0e:5e:38:a5: 43:bd:c6:9f:81:ef:30:d2:51:4e:dd:a7:d2:5b:3c:48:1b:f5: 1c:a0:a9:f5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EUr0kjzBsAeF5N4OjJm/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZWUzMjI3OWMxNmRhY2RiNTM0OWYxYjg3YzU3ZDc0YzUw ZWE1MzkwHhcNMjYwMTAxMTAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2VkMjNlMmZkZTYxMzNkZWE3NzkyMmY3NTVmYzI5ZjFmMDI1ZTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MeaWEh/AegAY4vRyfcuNkKQbp/L Ef7DLBoqCURJnlAYtDg8Pfekgwrs3LwCpMnG29yS9LpJenTr9p4qr+PhqL5M4+ht u7jIvrsBcaXQ1oV0H+EyWsMehGBkgcsk9oXuYy2agvVLa6trG4+9LZfwfwQLAt2f qkRTExpWEO2vMon6fhQ+IS9qQ7RsdEto0W5u6AzzohGA5wCYnns8/daDvVC887vM eLTHBsXRK9i8AJ5s23XIbXuD8S5xnYAPX2kwWdWv6alJSzqIptAoMNmQzTN2bBJw d6UOlb9cj1mfzCZykQEHzxzY5HpAsP5D+tui60GTJu3IAc5Y50vML3nxvwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAztI+L95hM96neSL3Vfwp8fAl5YMB8GA1UdIwQY MBaAFPzuMiecFtrNtTSfG4fFfXTFDqU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX080eUo1d1cyczIxTko4Ymg4VjlkTVVPcFRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9mNjA1MDItMjcwNC00ODM0LTlkNjgt MzA0NjZkZWMzOTA1LzEvRE8wajR2M21FejNxZDVJdmRWX0NueDhDWGxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9mNjA1MDItMjcwNC00ODM0LTlkNjgtMzA0NjZkZWMzOTA1 LzEvX080eUo1d1cyczIxTko4Ymg4VjlkTVVPcFRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwiCmAwQB wiDMMA0GCSqGSIb3DQEBCwUAA4IBAQBclPjjnRmxQd4EEbRDjroxmayifAOYhQMm L7TXct+SiYjmsUcgyE/8DgigAAJ1BzMi6SRPEn4n5WEicXtk3nFhhy05z9i8T4JM 1VgYxxPP5eM5cHkGmzzUugcoWmLNyVSqciJrc+T5lqLIxhZANjrroTX7KvEPTXNd zLukcB0kU95ZYhhxgJMt2K0ttc5IZVsVLomOGAROsdv4//rdjSyOgay4HzAMwHCl iFQ7IGNHsU8bHkVTxkpQApOqY9/WoLia0lJtwwDDN6xAm1cvw3GPfTAkGgoW3Y/o f+ush2AtNr2+Ay0PCQ5eOKVDvcafge8w0lFO3afSWzxIG/UcoKn1 -----END CERTIFICATE-----Generated at Mon Jan 12 23:44:31 2026 by rpki-client