This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/doGoX02hMamF9DY5FkiK3Hz0L1A.roa
File: doGoX02hMamF9DY5FkiK3Hz0L1A.roa (raw, json)
Hash identifier: iVO738ggm8ZAbwUoGkG5FNzeeqtHgLdZjyBQ4SOavsk=
Subject key identifier: 76:81:A8:5F:4D:A1:31:A9:85:F4:36:39:16:48:8A:DC:7C:F4:2F:50
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 019A8388953F4FC320BBE5963F5043AF2A14
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/doGoX02hMamF9DY5FkiK3Hz0L1A.roa
Signing time: Fri 14 Nov 2025 18:02:37 +0000
ROA not before: Fri 14 Nov 2025 18:02:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34828
IP address blocks: 194.110.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:83:88:95:3f:4f:c3:20:bb:e5:96:3f:50:43:af:2a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Nov 14 18:02:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7681a85f4da131a985f4363916488adc7cf42f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2f:08:ec:b5:ea:07:5c:0d:51:9f:f1:88:db:
75:8f:38:c4:56:10:62:44:bb:ca:f2:5a:e9:55:b9:
df:bc:e1:ed:09:4a:29:98:5d:ec:72:f6:d1:83:2e:
22:00:30:a0:ef:3e:b1:9f:8c:86:7f:56:b5:58:bf:
1c:67:15:4a:90:9b:c2:4b:4e:64:86:22:56:0e:7b:
1c:c7:61:d0:96:84:a2:7f:4e:49:f1:5b:94:30:e3:
54:99:96:89:53:2c:b8:bf:8c:8f:81:21:eb:b2:8d:
7c:42:49:93:2e:2f:9a:10:ca:64:9c:44:f7:b3:0d:
b8:7b:55:06:42:d0:44:79:67:de:f6:e8:0c:7a:4a:
a5:20:d5:c4:3a:ba:39:b1:75:ab:24:75:4d:45:71:
9e:73:a9:ab:0c:b2:65:fd:83:47:17:9d:ea:b1:3e:
22:c1:7c:01:f3:d0:94:7a:a7:00:e3:24:97:6d:bc:
57:53:cc:dd:3f:4f:6f:98:28:dd:d9:f6:05:45:b3:
0b:16:be:93:3b:a8:68:8a:75:3c:29:e9:a1:22:e0:
2b:52:e7:5c:f7:da:84:fa:16:6c:20:5f:be:cd:ac:
83:28:2e:cb:9c:b1:67:27:19:c9:13:57:79:d3:6a:
58:0f:e3:95:f9:d0:39:d4:e6:e8:f7:57:9c:a9:91:
ad:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:81:A8:5F:4D:A1:31:A9:85:F4:36:39:16:48:8A:DC:7C:F4:2F:50
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/doGoX02hMamF9DY5FkiK3Hz0L1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.170.0/24
Signature Algorithm: sha256WithRSAEncryption
03:d7:3f:25:47:2b:9d:9a:fb:53:83:7c:f6:2b:97:91:7d:6d:
d4:2f:d7:cf:8a:0f:66:4b:1c:c3:29:d7:e1:42:ee:0f:81:66:
f0:64:5a:60:2e:95:56:cc:fe:fa:e1:59:c3:c8:24:ac:62:85:
29:1e:be:dd:63:ca:00:27:e7:25:18:ba:9b:11:35:07:5c:c1:
d1:0d:c9:a5:48:72:d9:10:4a:09:6d:b4:3c:4f:3f:be:d0:10:
d0:c8:0d:08:bd:d6:dd:6a:01:75:f5:e1:a6:b7:86:fe:e2:7b:
40:85:41:cf:52:96:d6:a4:91:25:79:8e:f9:7b:a2:2f:73:f6:
71:9f:32:1d:5d:f5:0c:35:1e:99:e3:ee:45:3f:c8:79:9f:d0:
a4:fd:a1:c8:6e:e6:29:2f:a0:9e:2f:c9:46:ca:86:62:40:29:
82:a1:9a:97:38:f0:50:81:7e:62:f1:dc:2a:77:0a:11:b0:96:
8c:66:e8:7b:59:6a:7a:29:13:a0:b5:a4:b2:77:6c:22:70:90:
00:e3:fa:07:0a:9c:71:e2:dc:8c:b0:1d:65:88:bc:f3:b9:7b:
c9:eb:5a:19:b0:00:b9:96:c8:fc:ba:eb:79:6e:aa:02:9f:b9:
97:35:3a:0a:dd:1c:35:a0:2f:f0:86:a3:f0:ee:8c:e6:48:06:
1c:e0:91:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZqDiJU/T8Mgu+WWP1BDryoUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MjUzODg2YTAyNTBhMDRlYzY5YmUwMGJiZjg0MzNjMmYw
MTRiN2MwHhcNMjUxMTE0MTgwMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjgxYTg1ZjRkYTEzMWE5ODVmNDM2MzkxNjQ4OGFkYzdjZjQyZjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvC8I7LXqB1wNUZ/xiNt1jzjEVhBi
RLvK8lrpVbnfvOHtCUopmF3scvbRgy4iADCg7z6xn4yGf1a1WL8cZxVKkJvCS05k
hiJWDnscx2HQloSif05J8VuUMONUmZaJUyy4v4yPgSHrso18QkmTLi+aEMpknET3
sw24e1UGQtBEeWfe9ugMekqlINXEOro5sXWrJHVNRXGec6mrDLJl/YNHF53qsT4i
wXwB89CUeqcA4ySXbbxXU8zdP09vmCjd2fYFRbMLFr6TO6hoinU8KemhIuArUudc
99qE+hZsIF++zayDKC7LnLFnJxnJE1d502pYD+OV+dA51Obo91ecqZGtrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHaBqF9NoTGphfQ2ORZIitx89C9QMB8GA1UdIwQY
MBaAFAklOIagJQoE7Gm+ALv4QzwvAUt8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zNmY4M2UtNmJlNi00MmM1LTgzODAt
MTE0YWQ0MWNmMzMxLzEvZG9Hb1gwMmhNYW1GOURZNUZraUszSHowTDFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8zNmY4M2UtNmJlNi00MmM1LTgzODAtMTE0YWQ0MWNmMzMx
LzEvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwm6qMA0G
CSqGSIb3DQEBCwUAA4IBAQAD1z8lRyudmvtTg3z2K5eRfW3UL9fPig9mSxzDKdfh
Qu4PgWbwZFpgLpVWzP764VnDyCSsYoUpHr7dY8oAJ+clGLqbETUHXMHRDcmlSHLZ
EEoJbbQ8Tz++0BDQyA0IvdbdagF19eGmt4b+4ntAhUHPUpbWpJEleY75e6Ivc/Zx
nzIdXfUMNR6Z4+5FP8h5n9Ck/aHIbuYpL6CeL8lGyoZiQCmCoZqXOPBQgX5i8dwq
dwoRsJaMZuh7WWp6KROgtaSyd2wicJAA4/oHCpxx4tyMsB1liLzzuXvJ61oZsAC5
lsj8uut5bqoCn7mXNToK3Rw1oC/whqPw7ozmSAYc4JER
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:16:13 2025 by rpki-client