This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/DOD5qI-P3bpZWxbpEfJc0KLvVyo.roa File: DOD5qI-P3bpZWxbpEfJc0KLvVyo.roa (raw, json) Hash identifier: W0rNIyBEFVhXx/n2AztKg7R5ocbVDsSXMidn5DVXJl4= Subject key identifier: 0C:E0:F9:A8:8F:8F:DD:BA:59:5B:16:E9:11:F2:5C:D0:A2:EF:57:2A Certificate issuer: /CN=f7bc29f353852d180d23410997d0f047ec1778d3 Certificate serial: 019B7F15EF3FA798FF410AD0848C079AE0AA Authority key identifier: F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/DOD5qI-P3bpZWxbpEfJc0KLvVyo.roa Signing time: Fri 02 Jan 2026 14:21:42 +0000 ROA not before: Fri 02 Jan 2026 14:21:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 87.77.0.0/16 maxlen: 16 130.133.0.0/16 maxlen: 16 160.45.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 08:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ef:3f:a7:98:ff:41:0a:d0:84:8c:07:9a:e0:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7bc29f353852d180d23410997d0f047ec1778d3 Validity Not Before: Jan 2 14:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ce0f9a88f8fddba595b16e911f25cd0a2ef572a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e5:3a:fb:01:95:4c:54:6c:65:64:0b:5c:f2: 92:cf:22:ac:a9:81:2d:b8:e1:d1:ee:2b:b4:19:24: d1:46:46:48:52:6c:cb:4a:a1:83:82:11:b1:07:8d: 9e:69:b4:99:99:1c:11:3a:ce:90:98:74:7f:00:08: b5:18:0f:eb:d1:9d:5b:49:a0:db:6e:d0:59:aa:6d: 95:35:c3:82:5f:26:cf:90:58:68:ac:c4:b1:18:22: ab:b9:0a:63:4c:b4:62:e4:83:18:e9:e3:6e:89:df: 17:27:f3:51:e8:48:7c:bf:7a:64:2d:84:8a:e6:03: 37:dc:60:e6:c0:3b:4b:23:48:98:3e:07:b3:ff:ee: 69:88:ca:f6:95:8c:21:5c:76:c7:37:8a:cf:5c:ba: 39:b9:d0:bf:84:ad:e5:3d:1c:dc:6e:e3:48:ee:91: 2b:60:de:f9:5c:8f:4d:20:73:13:e9:7f:eb:2b:ab: d0:e0:2e:3c:1a:a2:03:24:2a:7c:5c:66:d6:30:a7: f1:89:3b:0c:1d:92:67:38:d2:a2:10:80:46:85:8c: 8c:eb:0b:a0:9d:cb:03:f5:65:cc:00:8d:ba:86:22: 40:b9:5d:36:3a:d1:45:16:db:d6:ed:08:40:96:e3: 5c:3e:dc:01:11:58:15:42:92:66:84:42:e6:7a:f8: af:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E0:F9:A8:8F:8F:DD:BA:59:5B:16:E9:11:F2:5C:D0:A2:EF:57:2A X509v3 Authority Key Identifier: keyid:F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/DOD5qI-P3bpZWxbpEfJc0KLvVyo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.77.0.0/16 130.133.0.0/16 160.45.0.0/16 Signature Algorithm: sha256WithRSAEncryption 39:34:26:3a:83:ca:39:51:36:d0:bb:bf:c6:09:a1:3e:95:90: 8a:54:ff:78:30:a0:a2:c3:86:bc:ed:fb:ba:f4:12:0f:ad:aa: 7f:ae:55:d6:5f:a5:62:89:bb:cb:5b:57:d7:da:6f:7c:c3:60: b6:43:af:46:cf:13:d6:16:3c:ad:cb:67:92:15:4d:25:e9:b8: 7f:78:00:17:43:62:18:7c:6d:c3:92:dd:7a:2e:26:ea:4c:19: 1e:a5:82:c4:de:4a:b1:4e:f1:5b:52:1d:66:1c:5d:ca:b6:d9: 69:c4:75:c1:61:c3:9f:f6:11:1d:43:70:37:f0:f8:82:66:1e: 20:a8:33:a5:0a:04:42:20:d3:cc:f0:26:a3:2b:68:24:c8:f3: 2d:7e:be:8e:2d:f5:36:46:e2:b5:ec:c0:d1:32:33:1e:49:d3: dc:97:c4:2a:56:e0:68:40:21:e6:e5:ea:79:89:e5:c7:00:7f: e5:9b:15:9d:ca:25:08:42:53:8b:eb:26:3c:da:5c:2e:24:24: be:3b:5e:90:7d:0f:53:33:cd:3f:56:c2:7c:86:3d:79:3c:19: 23:8d:65:94:56:bb:84:3d:94:7c:f5:0b:14:3a:f3:20:99:ad: 0b:da:c3:56:58:b3:a6:cd:f0:29:7a:02:67:f5:a6:ec:23:0b: 91:36:b4:fe -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgISAZt/Fe8/p5j/QQrQhIwHmuCqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YmMyOWYzNTM4NTJkMTgwZDIzNDEwOTk3ZDBmMDQ3ZWMx Nzc4ZDMwHhcNMjYwMTAyMTQyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2UwZjlhODhmOGZkZGJhNTk1YjE2ZTkxMWYyNWNkMGEyZWY1NzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OU6+wGVTFRsZWQLXPKSzyKsqYEt uOHR7iu0GSTRRkZIUmzLSqGDghGxB42eabSZmRwROs6QmHR/AAi1GA/r0Z1bSaDb btBZqm2VNcOCXybPkFhorMSxGCKruQpjTLRi5IMY6eNuid8XJ/NR6Eh8v3pkLYSK 5gM33GDmwDtLI0iYPgez/+5piMr2lYwhXHbHN4rPXLo5udC/hK3lPRzcbuNI7pEr YN75XI9NIHMT6X/rK6vQ4C48GqIDJCp8XGbWMKfxiTsMHZJnONKiEIBGhYyM6wug ncsD9WXMAI26hiJAuV02OtFFFtvW7QhAluNcPtwBEVgVQpJmhELmevivGQIDAQAB o4ICEjCCAg4wHQYDVR0OBBYEFAzg+aiPj926WVsW6RHyXNCi71cqMB8GA1UdIwQY MBaAFPe8KfNThS0YDSNBCZfQ8EfsF3jTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTd3cDgxT0ZMUmdOSTBFSmw5RHdSLXdYZU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS83ZWQwOGItNDkyZC00NGJmLTllNGUt ZmU1NzNiMDIzZmQyLzEvRE9ENXFJLVAzYnBaV3hicEVmSmMwS0x2VnlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS83ZWQwOGItNDkyZC00NGJmLTllNGUtZmU1NzNiMDIzZmQy LzEvOTd3cDgxT0ZMUmdOSTBFSmw5RHdSLXdYZU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAATAPAwMAV00DAwCC hQMDAKAtMA0GCSqGSIb3DQEBCwUAA4IBAQA5NCY6g8o5UTbQu7/GCaE+lZCKVP94 MKCiw4a87fu69BIPrap/rlXWX6ViibvLW1fX2m98w2C2Q69GzxPWFjyty2eSFU0l 6bh/eAAXQ2IYfG3Dkt16LibqTBkepYLE3kqxTvFbUh1mHF3KttlpxHXBYcOf9hEd Q3A38PiCZh4gqDOlCgRCINPM8CajK2gkyPMtfr6OLfU2RuK17MDRMjMeSdPcl8Qq VuBoQCHm5ep5ieXHAH/lmxWdyiUIQlOL6yY82lwuJCS+O16QfQ9TM80/VsJ8hj15 PBkjjWWUVruEPZR89QsUOvMgma0L2sNWWLOmzfApegJn9absIwuRNrT+ -----END CERTIFICATE-----Generated at Tue Jan 27 11:25:54 2026 by rpki-client