This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/DoU-RSbqHbcmA2DYj7zsr0tAEVk.roa File: DoU-RSbqHbcmA2DYj7zsr0tAEVk.roa (raw, json) Hash identifier: pdxpKRsCb/8YBP2FJ+k4bPhM6JUzQTx+ikb3uy3CSBM= Subject key identifier: 0E:85:3E:45:26:EA:1D:B7:26:03:60:D8:8F:BC:EC:AF:4B:40:11:59 Certificate issuer: /CN=d268d9a2a645d7cc2fd253b3670408055e56fff9 Certificate serial: 019B7D5C5CA730F6703F7FAFC1F2DA8E651F Authority key identifier: D2:68:D9:A2:A6:45:D7:CC:2F:D2:53:B3:67:04:08:05:5E:56:FF:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mjZoqZF18wv0lOzZwQIBV5W__k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/DoU-RSbqHbcmA2DYj7zsr0tAEVk.roa Signing time: Fri 02 Jan 2026 06:19:23 +0000 ROA not before: Fri 02 Jan 2026 06:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35480 IP address blocks: 193.192.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.mft rsync://rpki.ripe.net/repository/DEFAULT/0mjZoqZF18wv0lOzZwQIBV5W__k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:5c:a7:30:f6:70:3f:7f:af:c1:f2:da:8e:65:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d268d9a2a645d7cc2fd253b3670408055e56fff9 Validity Not Before: Jan 2 06:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e853e4526ea1db7260360d88fbcecaf4b401159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:78:43:38:76:70:e4:da:f2:a3:2f:b4:d5:30: 6a:af:bd:ba:da:db:6a:1a:8b:db:e9:33:c7:0e:8d: 4a:f8:e0:cb:56:11:e5:31:a1:6f:96:1c:51:dc:79: 0b:bc:ff:7f:30:6f:09:ed:9b:60:b4:f8:12:70:9f: 08:6c:d5:30:68:39:bd:44:04:97:3e:e3:fd:72:8a: 3e:e5:92:04:8a:0e:23:63:77:63:c9:68:e1:b3:44: a8:84:73:60:c8:30:bc:85:b8:8a:c5:ae:83:00:2c: 8b:c0:26:ad:e7:5a:8a:4f:d0:d3:cd:67:5a:7c:54: fc:32:aa:d9:0d:61:58:90:a8:e8:ef:1a:b6:af:d3: 58:ea:2a:25:61:5e:fe:80:80:72:76:ea:bd:90:92: 02:23:71:32:28:9a:00:1c:91:f2:b4:8d:a5:46:52: f6:a9:04:47:07:1a:f8:5b:2e:b2:34:bf:f9:89:2a: 4f:e7:2a:ec:67:df:f0:6d:6d:c4:d0:44:5a:e6:e9: 7d:34:56:41:aa:ac:1d:d4:a4:1e:da:94:ad:e5:7b: 3e:93:f7:96:89:d1:13:75:da:75:d2:72:eb:b1:f5: 9c:13:b3:09:a4:42:7f:eb:0f:52:49:02:e2:78:e2: fb:8c:fd:4e:3a:bf:ce:1c:61:14:a7:37:b2:6d:89: 97:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:85:3E:45:26:EA:1D:B7:26:03:60:D8:8F:BC:EC:AF:4B:40:11:59 X509v3 Authority Key Identifier: keyid:D2:68:D9:A2:A6:45:D7:CC:2F:D2:53:B3:67:04:08:05:5E:56:FF:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mjZoqZF18wv0lOzZwQIBV5W__k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/DoU-RSbqHbcmA2DYj7zsr0tAEVk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.192.48.0/23 Signature Algorithm: sha256WithRSAEncryption a6:5c:cd:c7:63:00:ba:a3:90:ce:b7:40:40:49:e7:6b:db:16: 6a:d0:3c:3d:d5:a6:ea:5d:81:1c:08:dc:f3:a3:22:f3:2b:7c: f1:b8:34:55:4b:53:71:1d:bf:40:22:bd:a0:62:25:35:71:95: 33:a5:e8:89:53:81:69:fb:c7:83:87:b9:91:85:c9:b5:4d:e0: 76:15:83:a1:35:48:0b:c9:16:1b:6a:88:0f:d0:3c:f1:07:be: 20:34:89:f5:50:8f:22:30:b4:fc:db:af:1d:80:b9:c1:bb:2d: aa:b7:cf:07:f6:e1:cb:8b:80:50:08:1e:ad:1b:52:30:a0:ac: bf:67:6a:08:b2:5e:96:2b:11:28:95:90:f5:81:00:4e:51:c7: c6:d4:0d:fb:f2:5e:0a:2e:73:d3:da:2b:23:8a:39:d0:e3:0c: 82:00:90:29:e7:b6:16:b6:f0:bf:ef:32:46:21:8b:8b:63:9a: b2:f5:23:11:ea:64:a5:56:95:66:d7:ab:81:2b:e9:8d:60:e4: de:fe:ed:f1:a1:60:0f:5b:fc:bd:08:77:cc:37:24:f8:c2:3e: 61:bf:24:bb:8c:81:80:ca:3a:f8:e4:c2:fe:29:eb:f1:43:41: aa:94:01:36:07:a1:e7:9e:c9:f7:a3:ff:55:29:78:83:47:0d: 08:da:81:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XFynMPZwP3+vwfLajmUfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNjhkOWEyYTY0NWQ3Y2MyZmQyNTNiMzY3MDQwODA1NWU1 NmZmZjkwHhcNMjYwMTAyMDYxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTg1M2U0NTI2ZWExZGI3MjYwMzYwZDg4ZmJjZWNhZjRiNDAxMTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynhDOHZw5Nryoy+01TBqr7262ttq Govb6TPHDo1K+ODLVhHlMaFvlhxR3HkLvP9/MG8J7ZtgtPgScJ8IbNUwaDm9RASX PuP9coo+5ZIEig4jY3djyWjhs0SohHNgyDC8hbiKxa6DACyLwCat51qKT9DTzWda fFT8MqrZDWFYkKjo7xq2r9NY6iolYV7+gIByduq9kJICI3EyKJoAHJHytI2lRlL2 qQRHBxr4Wy6yNL/5iSpP5yrsZ9/wbW3E0ERa5ul9NFZBqqwd1KQe2pSt5Xs+k/eW idETddp10nLrsfWcE7MJpEJ/6w9SSQLieOL7jP1OOr/OHGEUpzeybYmXHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA6FPkUm6h23JgNg2I+87K9LQBFZMB8GA1UdIwQY MBaAFNJo2aKmRdfML9JTs2cECAVeVv/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG1qWm9xWkYxOHd2MGxPelp3UUlCVjVXX19rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80NDAzOGItODAzMS00NGUwLTkxYzQt Y2M1Njc2YzdkZTlmLzEvRG9VLVJTYnFIYmNtQTJEWWo3enNyMHRBRVZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy80NDAzOGItODAzMS00NGUwLTkxYzQtY2M1Njc2YzdkZTlm LzEvMG1qWm9xWkYxOHd2MGxPelp3UUlCVjVXX19rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwcAwMA0G CSqGSIb3DQEBCwUAA4IBAQCmXM3HYwC6o5DOt0BASedr2xZq0Dw91abqXYEcCNzz oyLzK3zxuDRVS1NxHb9AIr2gYiU1cZUzpeiJU4Fp+8eDh7mRhcm1TeB2FYOhNUgL yRYbaogP0DzxB74gNIn1UI8iMLT8268dgLnBuy2qt88H9uHLi4BQCB6tG1IwoKy/ Z2oIsl6WKxEolZD1gQBOUcfG1A378l4KLnPT2isjijnQ4wyCAJAp57YWtvC/7zJG IYuLY5qy9SMR6mSlVpVm16uBK+mNYOTe/u3xoWAPW/y9CHfMNyT4wj5hvyS7jIGA yjr45ML+KevxQ0GqlAE2B6Hnnsn3o/9VKXiDRw0I2oH9 -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:18 2026 by rpki-client