This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/OUFJxy-s9TAVicg_TPyt24njjok.roa File: OUFJxy-s9TAVicg_TPyt24njjok.roa (raw, json) Hash identifier: CcCuuymnsKxCH+FKsnrcE8VI1Z4HjrKesHC84Px54Dk= Subject key identifier: 39:41:49:C7:2F:AC:F5:30:15:89:C8:3F:4C:FC:AD:DB:89:E3:8E:89 Certificate issuer: /CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390 Certificate serial: 019B7C806BC4133051177C69B8E85F9F246B Authority key identifier: 0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/OUFJxy-s9TAVicg_TPyt24njjok.roa Signing time: Fri 02 Jan 2026 02:19:09 +0000 ROA not before: Fri 02 Jan 2026 02:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39686 IP address blocks: 171.25.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:6b:c4:13:30:51:17:7c:69:b8:e8:5f:9f:24:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390 Validity Not Before: Jan 2 02:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=394149c72facf5301589c83f4cfcaddb89e38e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6a:e7:e4:42:7f:f7:fa:f2:28:07:38:f9:2d: d9:fd:73:a6:b1:65:e9:cd:71:0d:3f:1a:87:10:bc: 3e:1e:c6:86:3f:80:28:4a:09:8c:fb:f1:bf:13:67: c4:60:32:08:84:9a:41:58:92:97:e2:b6:5e:ac:96: 54:ca:d9:41:ad:59:00:e8:f5:a1:cd:76:34:12:f7: 56:7d:a2:97:a5:c4:d6:da:87:3c:bb:a9:e0:6a:d8: da:fb:ba:aa:f2:f8:27:46:ca:51:aa:45:8f:47:30: 86:65:6a:fb:67:9c:6a:b4:12:ed:a9:9f:75:aa:a2: cd:cf:11:27:ef:59:73:63:a8:63:29:78:cc:86:0b: 3b:ea:20:52:56:1a:cf:a4:26:24:aa:b7:4c:31:60: 0e:6c:d4:46:be:09:c7:5d:69:31:fb:c8:45:ef:9c: 6b:24:d0:86:c1:b6:5d:69:65:11:b6:67:ec:79:c1: 20:3e:7a:5d:5a:90:ef:b6:b5:40:4c:68:6f:8f:6b: ea:ab:7a:1d:dd:8d:05:56:7a:87:55:09:6d:30:4f: 22:94:ad:ff:b0:8c:6b:46:b3:42:68:65:6c:3b:6d: 73:c7:d7:ad:6a:5a:a9:f3:f9:b0:c3:84:f5:51:a6: f2:b8:aa:e7:be:dc:8c:d8:66:ff:cf:4f:88:0e:67: b2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:41:49:C7:2F:AC:F5:30:15:89:C8:3F:4C:FC:AD:DB:89:E3:8E:89 X509v3 Authority Key Identifier: keyid:0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/OUFJxy-s9TAVicg_TPyt24njjok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.25.217.0/24 Signature Algorithm: sha256WithRSAEncryption 78:25:f5:18:9d:dc:49:7c:91:b5:b8:cc:2b:53:1f:10:40:62: 6c:ca:84:4e:f7:72:95:81:f0:82:5d:57:f5:77:0a:e5:e3:5a: f9:bd:bc:11:92:96:0b:9c:74:66:0a:ca:12:44:4e:73:bf:05: ad:e3:2f:85:99:43:2d:95:f8:e5:a0:09:52:c6:2c:8b:85:fc: 04:41:04:f8:1c:44:2a:02:c7:1d:51:80:84:75:f5:61:69:77: 62:d0:f4:71:30:fe:bd:35:ba:40:73:6a:50:a0:23:0f:e9:ae: 32:a2:04:f1:ab:6e:bf:0a:b7:36:b3:16:09:ae:11:cb:95:1b: 4a:c8:40:bd:3f:75:b4:6d:15:ab:b9:f1:21:be:88:21:6f:ae: f0:b5:ac:10:85:f4:b7:9d:74:e4:24:6a:dd:99:6c:8d:12:47: da:cd:d5:f3:de:59:3f:ad:9c:a3:a4:63:b5:75:57:54:87:d4: 05:28:56:7d:f8:69:81:d8:c1:25:ce:ca:0f:cd:12:e1:8f:62: c8:1a:8a:15:8e:30:35:9c:d5:d6:64:4f:d7:4a:c3:b1:71:8f: f0:82:93:5d:91:b3:ec:8b:99:f7:ac:28:cd:39:d3:ca:f1:ba: 55:59:c1:c5:cb:87:3c:3e:40:bd:c2:c0:c9:dd:b4:04:91:fb: 63:0e:e9:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gGvEEzBRF3xpuOhfnyRrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNGM2YjZhZTUwMDA3NzY5ZDI4ZDk4OTcwZDI0ZmJjZWUx YmEzOTAwHhcNMjYwMTAyMDIxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTQxNDljNzJmYWNmNTMwMTU4OWM4M2Y0Y2ZjYWRkYjg5ZTM4ZTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWrn5EJ/9/ryKAc4+S3Z/XOmsWXp zXENPxqHELw+HsaGP4AoSgmM+/G/E2fEYDIIhJpBWJKX4rZerJZUytlBrVkA6PWh zXY0EvdWfaKXpcTW2oc8u6ngatja+7qq8vgnRspRqkWPRzCGZWr7Z5xqtBLtqZ91 qqLNzxEn71lzY6hjKXjMhgs76iBSVhrPpCYkqrdMMWAObNRGvgnHXWkx+8hF75xr JNCGwbZdaWURtmfsecEgPnpdWpDvtrVATGhvj2vqq3od3Y0FVnqHVQltME8ilK3/ sIxrRrNCaGVsO21zx9etalqp8/mww4T1UabyuKrnvtyM2Gb/z0+IDmeypQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDlBSccvrPUwFYnIP0z8rduJ446JMB8GA1UdIwQY MBaAFA1Ma2rlAAd2nSjZiXDST7zuG6OQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFV4cmF1VUFCM2FkS05tSmNOSlB2TzRibzVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82MzY2N2ItN2EyNS00NDBmLTg0Zjkt MmFiOTU4N2U1ZjFkLzEvT1VGSnh5LXM5VEFWaWNnX1RQeXQyNG5qam9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi82MzY2N2ItN2EyNS00NDBmLTg0ZjktMmFiOTU4N2U1ZjFk LzEvRFV4cmF1VUFCM2FkS05tSmNOSlB2TzRibzVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqxnZMA0G CSqGSIb3DQEBCwUAA4IBAQB4JfUYndxJfJG1uMwrUx8QQGJsyoRO93KVgfCCXVf1 dwrl41r5vbwRkpYLnHRmCsoSRE5zvwWt4y+FmUMtlfjloAlSxiyLhfwEQQT4HEQq AscdUYCEdfVhaXdi0PRxMP69NbpAc2pQoCMP6a4yogTxq26/Crc2sxYJrhHLlRtK yEC9P3W0bRWrufEhvoghb67wtawQhfS3nXTkJGrdmWyNEkfazdXz3lk/rZyjpGO1 dVdUh9QFKFZ9+GmB2MElzsoPzRLhj2LIGooVjjA1nNXWZE/XSsOxcY/wgpNdkbPs i5n3rCjNOdPK8bpVWcHFy4c8PkC9wsDJ3bQEkftjDulg -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:13 2026 by rpki-client