This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/Zu63Ow6HIL-cM_My8KJ_oXolMPU.roa File: Zu63Ow6HIL-cM_My8KJ_oXolMPU.roa (raw, json) Hash identifier: wpqllHKhhs+9B3WcGLDKMWL4IN9CvMn3Xo3gy5XniVk= Subject key identifier: 66:EE:B7:3B:0E:87:20:BF:9C:33:F3:32:F0:A2:7F:A1:7A:25:30:F5 Certificate issuer: /CN=0e44f133f387593aafa2beab38884904fac9bd19 Certificate serial: 019B79EC6C4B0E113F5ACF7D5484082B32AE Authority key identifier: 0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/Zu63Ow6HIL-cM_My8KJ_oXolMPU.roa Signing time: Thu 01 Jan 2026 14:18:15 +0000 ROA not before: Thu 01 Jan 2026 14:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42999 IP address blocks: 193.200.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:6c:4b:0e:11:3f:5a:cf:7d:54:84:08:2b:32:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e44f133f387593aafa2beab38884904fac9bd19 Validity Not Before: Jan 1 14:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66eeb73b0e8720bf9c33f332f0a27fa17a2530f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d6:12:b9:09:9a:47:2e:67:54:92:3d:ca:69: 64:ee:ad:14:2c:20:cb:14:be:52:8e:d4:87:ec:cb: 48:30:7c:73:c7:6b:1f:d9:99:cc:ad:33:a8:dd:25: d7:29:28:ac:25:c9:ff:dd:8d:c4:26:d2:aa:c0:1d: 64:bc:e0:ea:a9:25:9a:ac:3b:b9:3d:2c:a4:47:64: 01:82:45:19:e7:3e:3f:9e:7f:14:c3:8d:b2:41:6f: 15:28:07:dc:91:c4:4e:05:1d:0c:b1:29:64:b5:3d: f1:0d:96:2a:44:80:a1:70:a3:74:7a:78:57:0b:40: 2b:22:8e:de:86:b8:14:ca:85:ba:01:2b:da:b9:11: 89:98:5a:0d:da:dc:57:f2:02:f3:f3:b7:8d:aa:d5: 8f:04:69:56:70:dd:7e:96:5e:cd:cc:07:03:f7:e1: 62:8a:35:8c:7e:dc:19:4c:4d:f5:b9:c2:fc:bc:74: ed:23:fb:17:79:2f:f5:22:64:0f:eb:fc:17:60:77: 8f:85:6b:b5:fc:23:50:a2:61:e8:e9:f4:f8:3d:2e: a0:ea:19:91:db:8d:f1:f1:19:f6:e2:3a:98:68:ee: e1:5b:7e:8a:d2:84:b2:20:03:e3:61:68:fa:46:28: 16:a3:67:03:86:b6:20:2b:57:0c:65:3b:01:a0:47: 1c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:EE:B7:3B:0E:87:20:BF:9C:33:F3:32:F0:A2:7F:A1:7A:25:30:F5 X509v3 Authority Key Identifier: keyid:0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/Zu63Ow6HIL-cM_My8KJ_oXolMPU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.188.0/24 Signature Algorithm: sha256WithRSAEncryption e4:f2:59:02:40:53:85:08:63:bb:4a:08:56:d9:85:d9:0f:8e: 6b:42:e9:94:f9:c3:ca:94:7a:03:76:0d:49:64:98:67:b6:72: 31:fe:46:ca:e0:50:c7:78:fe:89:4b:19:aa:b0:77:1f:3e:e4: 89:20:16:56:fc:10:06:b2:49:9a:05:71:cb:a3:73:de:45:69: 2e:23:2e:e7:68:54:88:dd:86:ed:70:9d:4f:1e:cb:54:09:88: da:74:1e:bf:b8:e5:6b:b4:9d:f7:44:1e:93:3a:d6:37:38:3c: 5d:bf:02:3f:57:0a:a9:3a:74:74:f1:82:fa:65:19:34:03:d1: 39:bd:eb:2d:c9:3d:f1:7b:98:a0:ee:fa:df:7d:f7:ea:e2:8a: 29:02:01:4f:90:5c:f6:95:ec:85:ed:28:5e:66:4b:cf:e3:ea: 6c:7a:79:9a:d5:2e:e9:3f:26:ef:ed:64:db:84:b1:c4:09:d2: 58:76:91:60:b0:86:b4:fb:09:1f:04:36:21:d9:6b:17:a1:8a: bd:28:93:af:12:5e:60:f9:6e:55:25:7a:32:74:0b:06:a2:7c: e9:9b:4c:88:9f:da:4d:e0:fc:b6:64:bf:cb:40:56:f9:3a:08: 86:4e:6d:32:99:fd:7c:72:0e:4f:e5:7c:49:35:f9:a1:62:6c: 14:c4:c0:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57GxLDhE/Ws99VIQIKzKuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNDRmMTMzZjM4NzU5M2FhZmEyYmVhYjM4ODg0OTA0ZmFj OWJkMTkwHhcNMjYwMTAxMTQxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmVlYjczYjBlODcyMGJmOWMzM2YzMzJmMGEyN2ZhMTdhMjUzMGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tYSuQmaRy5nVJI9ymlk7q0ULCDL FL5SjtSH7MtIMHxzx2sf2ZnMrTOo3SXXKSisJcn/3Y3EJtKqwB1kvODqqSWarDu5 PSykR2QBgkUZ5z4/nn8Uw42yQW8VKAfckcROBR0MsSlktT3xDZYqRIChcKN0enhX C0ArIo7ehrgUyoW6ASvauRGJmFoN2txX8gLz87eNqtWPBGlWcN1+ll7NzAcD9+Fi ijWMftwZTE31ucL8vHTtI/sXeS/1ImQP6/wXYHePhWu1/CNQomHo6fT4PS6g6hmR 243x8Rn24jqYaO7hW36K0oSyIAPjYWj6RigWo2cDhrYgK1cMZTsBoEccOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGbutzsOhyC/nDPzMvCif6F6JTD1MB8GA1UdIwQY MBaAFA5E8TPzh1k6r6K+qziISQT6yb0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGtUeE1fT0hXVHF2b3I2ck9JaEpCUHJKdlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wYjY4ZGMtYzVjOS00MGRkLTlkOGYt ZGJmZjBlZTFlMDllLzEvWnU2M093NkhJTC1jTV9NeThLSl9vWG9sTVBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8wYjY4ZGMtYzVjOS00MGRkLTlkOGYtZGJmZjBlZTFlMDll LzEvRGtUeE1fT0hXVHF2b3I2ck9JaEpCUHJKdlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwci8MA0G CSqGSIb3DQEBCwUAA4IBAQDk8lkCQFOFCGO7SghW2YXZD45rQumU+cPKlHoDdg1J ZJhntnIx/kbK4FDHeP6JSxmqsHcfPuSJIBZW/BAGskmaBXHLo3PeRWkuIy7naFSI 3YbtcJ1PHstUCYjadB6/uOVrtJ33RB6TOtY3ODxdvwI/VwqpOnR08YL6ZRk0A9E5 vestyT3xe5ig7vrffffq4oopAgFPkFz2leyF7SheZkvP4+psenma1S7pPybv7WTb hLHECdJYdpFgsIa0+wkfBDYh2WsXoYq9KJOvEl5g+W5VJXoydAsGonzpm0yIn9pN 4Py2ZL/LQFb5OgiGTm0ymf18cg5P5XxJNfmhYmwUxMBu -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:21 2026 by rpki-client