This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/rOf-HDDDWUjLrbyMntCj7Zxr5hQ.roa File: rOf-HDDDWUjLrbyMntCj7Zxr5hQ.roa (raw, json) Hash identifier: nH33C7dbdrbXUnx2qhd+AcU6xtieasJAwf4EGexUyEQ= Subject key identifier: AC:E7:FE:1C:30:C3:59:48:CB:AD:BC:8C:9E:D0:A3:ED:9C:6B:E6:14 Certificate issuer: /CN=2f15d78b256d28459b869b726f23294ab3ff173f Certificate serial: 019B7F85180EFDDCF2C6613E6760D39D2896 Authority key identifier: 2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/rOf-HDDDWUjLrbyMntCj7Zxr5hQ.roa Signing time: Fri 02 Jan 2026 16:23:07 +0000 ROA not before: Fri 02 Jan 2026 16:23:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39704 IP address blocks: 194.13.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:18:0e:fd:dc:f2:c6:61:3e:67:60:d3:9d:28:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f15d78b256d28459b869b726f23294ab3ff173f Validity Not Before: Jan 2 16:23:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ace7fe1c30c35948cbadbc8c9ed0a3ed9c6be614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ba:2f:99:96:af:34:a1:9e:20:7c:bb:d5:98: f4:d9:e5:6b:4f:6b:7c:65:cf:f5:52:bc:ef:27:c5: d1:46:99:7c:07:75:cd:aa:14:6d:90:99:13:b0:99: 46:2a:7e:22:92:1a:a2:f7:67:fc:4a:8a:18:60:ac: ce:5e:28:bf:6e:e8:2e:41:02:1e:62:be:9b:78:2e: 87:d1:91:3b:83:3e:65:b4:25:d5:5b:03:f6:63:3b: 5d:73:56:cf:38:5b:2c:38:d1:e8:3e:ff:77:6f:a9: 86:fe:7f:34:8c:66:7d:0e:0e:00:58:e7:a6:77:49: 49:a5:04:70:86:fe:e6:d8:a7:ff:57:c8:e7:2a:35: 6a:10:11:a8:a5:db:b3:e9:72:74:b1:6d:bd:6a:5b: be:07:e1:5b:ec:f5:32:71:5f:36:0d:35:7f:75:13: 67:5c:b3:78:3a:be:d5:59:be:00:56:2e:57:c3:30: e3:b4:88:5a:1b:54:1f:8d:f9:16:14:54:96:a8:54: c6:07:d7:63:30:1d:e3:8e:9b:d5:28:b1:71:f8:b6: 75:9a:c5:bc:57:64:95:15:27:14:be:2d:1b:8e:1d: 81:27:ca:4d:6c:1c:1a:a4:fc:02:1c:6d:a2:67:41: 8d:92:cf:c9:37:f7:85:46:77:e1:4a:c8:17:0b:36: 46:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E7:FE:1C:30:C3:59:48:CB:AD:BC:8C:9E:D0:A3:ED:9C:6B:E6:14 X509v3 Authority Key Identifier: keyid:2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/rOf-HDDDWUjLrbyMntCj7Zxr5hQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.13.66.0/24 Signature Algorithm: sha256WithRSAEncryption 07:80:ff:38:1a:26:50:67:22:8c:da:bc:a1:32:5c:1f:eb:d1: cd:3f:dc:e2:69:90:9e:44:b7:c2:7f:80:0f:07:7d:ef:df:df: 9a:62:64:fe:8f:79:1e:9f:46:ec:ac:33:64:af:67:73:db:80: 7c:83:92:85:b2:f7:bd:0c:6b:42:25:cb:55:d9:e4:a7:e2:db: 86:cb:c0:6f:12:c2:e8:bd:33:48:5d:f2:38:a0:46:b6:de:55: 1d:b6:b5:74:c5:f0:a8:65:53:9a:68:13:15:6f:73:fc:cc:b7: 89:82:44:c0:33:2e:e6:9c:7f:f4:ae:5d:b0:a1:f7:65:6b:32: d4:db:37:d3:08:25:6d:37:d1:8e:5b:31:cb:4b:c7:21:5a:6f: ed:b5:da:39:53:35:8b:6f:6b:ae:9d:cf:d7:cf:ce:f4:87:50: e9:8c:9f:c2:e9:b9:01:ae:40:61:65:e5:86:a2:41:93:ec:d9: 03:a5:c5:8e:ed:9e:c0:9d:93:d6:ee:28:9a:38:f4:58:23:9f: 18:9b:44:0d:c2:0c:53:68:38:0e:01:77:ae:f6:ce:17:40:7b: 22:f7:19:dc:8c:d1:d1:60:70:e5:90:75:84:a5:d3:e0:00:84: f1:c0:27:4f:f7:b5:1d:f4:7a:a2:55:bc:67:df:b0:c6:fb:c5: 99:57:c3:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hRgO/dzyxmE+Z2DTnSiWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMTVkNzhiMjU2ZDI4NDU5Yjg2OWI3MjZmMjMyOTRhYjNm ZjE3M2YwHhcNMjYwMTAyMTYyMzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2U3ZmUxYzMwYzM1OTQ4Y2JhZGJjOGM5ZWQwYTNlZDljNmJlNjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbovmZavNKGeIHy71Zj02eVrT2t8 Zc/1UrzvJ8XRRpl8B3XNqhRtkJkTsJlGKn4ikhqi92f8SooYYKzOXii/buguQQIe Yr6beC6H0ZE7gz5ltCXVWwP2Yztdc1bPOFssONHoPv93b6mG/n80jGZ9Dg4AWOem d0lJpQRwhv7m2Kf/V8jnKjVqEBGopduz6XJ0sW29alu+B+Fb7PUycV82DTV/dRNn XLN4Or7VWb4AVi5XwzDjtIhaG1QfjfkWFFSWqFTGB9djMB3jjpvVKLFx+LZ1msW8 V2SVFScUvi0bjh2BJ8pNbBwapPwCHG2iZ0GNks/JN/eFRnfhSsgXCzZG9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKzn/hwww1lIy628jJ7Qo+2ca+YUMB8GA1UdIwQY MBaAFC8V14slbShFm4abcm8jKUqz/xc/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHhYWGl5VnRLRVdiaHB0eWJ5TXBTclBfRno4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS82YmRmNmMtYTE4MS00MmZjLWI5YmYt ODNiYzdjYzQ2M2RlLzEvck9mLUhERERXVWpMcmJ5TW50Q2o3WnhyNWhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS82YmRmNmMtYTE4MS00MmZjLWI5YmYtODNiYzdjYzQ2M2Rl LzEvTHhYWGl5VnRLRVdiaHB0eWJ5TXBTclBfRno4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwg1CMA0G CSqGSIb3DQEBCwUAA4IBAQAHgP84GiZQZyKM2ryhMlwf69HNP9ziaZCeRLfCf4AP B33v39+aYmT+j3ken0bsrDNkr2dz24B8g5KFsve9DGtCJctV2eSn4tuGy8BvEsLo vTNIXfI4oEa23lUdtrV0xfCoZVOaaBMVb3P8zLeJgkTAMy7mnH/0rl2wofdlazLU 2zfTCCVtN9GOWzHLS8chWm/ttdo5UzWLb2uunc/Xz870h1DpjJ/C6bkBrkBhZeWG okGT7NkDpcWO7Z7AnZPW7iiaOPRYI58Ym0QNwgxTaDgOAXeu9s4XQHsi9xncjNHR YHDlkHWEpdPgAITxwCdP97Ud9HqiVbxn37DG+8WZV8MP -----END CERTIFICATE-----Generated at Tue Jan 27 03:53:21 2026 by rpki-client