This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/DOUk_awOvNAUgwdTbbtCOlqUYcs.roa File: DOUk_awOvNAUgwdTbbtCOlqUYcs.roa (raw, json) Hash identifier: uwIez3s0/x7iKX9W0vieR7j2sozQR3NNhVWcEOwKL6E= Subject key identifier: 0C:E5:24:FD:AC:0E:BC:D0:14:83:07:53:6D:BB:42:3A:5A:94:61:CB Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 019B7B365DDA0821EC940C89EE01F8BCE7C1 Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/DOUk_awOvNAUgwdTbbtCOlqUYcs.roa Signing time: Thu 01 Jan 2026 20:18:39 +0000 ROA not before: Thu 01 Jan 2026 20:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 154049 IP address blocks: 144.56.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 14:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:5d:da:08:21:ec:94:0c:89:ee:01:f8:bc:e7:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Jan 1 20:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ce524fdac0ebcd0148307536dbb423a5a9461cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:49:77:7a:64:3f:c6:5e:5b:7f:78:95:bf:4c: 88:58:68:df:85:c2:33:74:59:16:36:c3:80:1b:bc: 22:ff:1a:5e:78:e5:4a:84:de:c4:91:9e:ae:3e:5f: 4e:c3:44:d1:4b:f7:47:60:50:d5:6a:74:0e:14:77: 22:ef:1b:e1:fd:a7:18:a6:65:39:73:13:05:7a:c8: 47:41:0b:84:1a:b3:93:86:31:5e:15:78:e6:0b:b2: 5c:58:cd:9a:0b:a8:06:b9:95:aa:25:68:e7:d0:08: 93:53:eb:30:7c:b0:ed:ea:45:ba:f8:87:d8:f7:29: b1:61:41:33:7d:d6:5d:85:df:41:8c:b6:e8:e6:80: a2:9c:b4:fa:5e:b0:c2:53:fa:74:10:d5:80:0a:aa: 9d:49:5f:5b:17:57:24:37:11:8d:4b:30:06:d7:4a: c2:bf:2e:ce:2e:2b:9c:f7:79:3b:c9:35:80:5b:05: c1:68:50:a4:ba:4b:4a:b3:dc:96:f9:6c:c0:e8:e2: d0:16:89:66:0b:e7:0e:2b:04:9d:d6:86:04:9b:11: 74:9c:d0:c4:31:54:3c:af:a0:27:f8:f7:5d:9f:fb: 83:ab:d9:4a:28:87:d6:28:f3:55:12:48:6a:23:6a: e7:8e:c2:93:6d:0e:e6:4b:62:25:aa:a6:68:f6:a6: c9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E5:24:FD:AC:0E:BC:D0:14:83:07:53:6D:BB:42:3A:5A:94:61:CB X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/DOUk_awOvNAUgwdTbbtCOlqUYcs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.56.15.0/24 Signature Algorithm: sha256WithRSAEncryption c0:82:43:70:17:63:99:38:75:2f:0d:39:62:81:d6:ca:85:1d: 8b:16:9b:94:34:ed:70:8e:80:e6:21:87:8d:5e:07:c4:9f:01: f1:ef:de:8f:f7:0e:08:a1:4f:e6:d0:16:cd:95:a5:6c:47:44: 31:01:a2:24:c1:fd:96:ea:1f:32:ea:b7:25:15:45:f7:08:48: 26:5f:cd:04:84:85:c9:73:b0:d8:c5:43:f7:21:f0:b7:94:53: f5:8a:25:35:07:1c:8e:2d:53:61:f9:f5:81:9f:12:de:1b:6e: c0:f8:4f:d7:5d:43:50:e2:07:4e:55:13:4b:b4:12:d8:bd:8f: 63:7b:c6:f3:23:22:e4:3c:a0:3d:34:2b:16:01:2f:40:3b:59: c1:39:32:87:9e:9d:41:f7:31:16:47:f0:2e:64:dc:34:f7:59: ac:90:01:e4:e8:5c:72:ab:86:27:85:be:1f:58:11:7a:98:14: 7d:0e:26:5b:56:c6:71:53:00:4c:55:2e:58:7c:24:0c:c7:2f: 2f:d5:84:62:bf:bb:55:e6:29:47:b1:ba:33:11:1a:92:a1:31: fa:2d:df:98:64:34:26:12:29:7e:c5:97:5f:74:75:3c:9a:65: 7b:a0:5d:bd:c3:49:31:82:06:3b:18:60:c4:1b:07:be:f8:9c: e7:31:8d:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nl3aCCHslAyJ7gH4vOfBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjYwMTAxMjAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2U1MjRmZGFjMGViY2QwMTQ4MzA3NTM2ZGJiNDIzYTVhOTQ2MWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUl3emQ/xl5bf3iVv0yIWGjfhcIz dFkWNsOAG7wi/xpeeOVKhN7EkZ6uPl9Ow0TRS/dHYFDVanQOFHci7xvh/acYpmU5 cxMFeshHQQuEGrOThjFeFXjmC7JcWM2aC6gGuZWqJWjn0AiTU+swfLDt6kW6+IfY 9ymxYUEzfdZdhd9BjLbo5oCinLT6XrDCU/p0ENWACqqdSV9bF1ckNxGNSzAG10rC vy7OLiuc93k7yTWAWwXBaFCkuktKs9yW+WzA6OLQFolmC+cOKwSd1oYEmxF0nNDE MVQ8r6An+Pddn/uDq9lKKIfWKPNVEkhqI2rnjsKTbQ7mS2IlqqZo9qbJJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAzlJP2sDrzQFIMHU227QjpalGHLMB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvRE9Va19hd092TkFVZ3dkVGJidENPbHFVWWNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkDgPMA0G CSqGSIb3DQEBCwUAA4IBAQDAgkNwF2OZOHUvDTligdbKhR2LFpuUNO1wjoDmIYeN XgfEnwHx796P9w4IoU/m0BbNlaVsR0QxAaIkwf2W6h8y6rclFUX3CEgmX80EhIXJ c7DYxUP3IfC3lFP1iiU1BxyOLVNh+fWBnxLeG27A+E/XXUNQ4gdOVRNLtBLYvY9j e8bzIyLkPKA9NCsWAS9AO1nBOTKHnp1B9zEWR/AuZNw091mskAHk6Fxyq4Ynhb4f WBF6mBR9DiZbVsZxUwBMVS5YfCQMxy8v1YRiv7tV5ilHsbozERqSoTH6Ld+YZDQm Eil+xZdfdHU8mmV7oF29w0kxggY7GGDEGwe++JznMY12 -----END CERTIFICATE-----Generated at Fri Jan 9 23:45:23 2026 by rpki-client