This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0-LCKdjTJ0765RaJkUwuz0MWnwc.roa File: 0-LCKdjTJ0765RaJkUwuz0MWnwc.roa (raw, json) Hash identifier: 16I/2Ln76cUaUmOhW5UqzYkxUB2YBmp7LqXLM45ArkQ= Subject key identifier: D3:E2:C2:29:D8:D3:27:4E:FA:E5:16:89:91:4C:2E:CF:43:16:9F:07 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019AA01A65A8653FC878DC78FCA7743E07CF Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0-LCKdjTJ0765RaJkUwuz0MWnwc.roa Signing time: Thu 20 Nov 2025 07:11:15 +0000 ROA not before: Thu 20 Nov 2025 07:11:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198883 IP address blocks: 163.5.192.0/24 maxlen: 24 163.5.193.0/24 maxlen: 24 163.5.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 09:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:1a:65:a8:65:3f:c8:78:dc:78:fc:a7:74:3e:07:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Nov 20 07:11:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d3e2c229d8d3274efae51689914c2ecf43169f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bf:cb:98:8b:8d:77:e9:fa:1f:f4:f5:c0:a6: e3:e4:d5:88:48:25:e0:63:02:75:13:5d:af:5c:22: 78:77:13:e4:68:ee:27:0e:aa:52:7d:6e:d6:ce:b5: 97:54:9e:93:d7:4d:87:04:04:ad:70:7d:ac:37:62: 1f:f1:07:63:04:02:b6:5b:84:8f:d5:8b:5e:d2:c4: 4c:17:c8:4c:21:e0:f2:c2:b7:8b:3e:24:ed:9a:1b: 10:42:7a:9f:a0:a9:4c:b7:38:a1:44:b3:71:78:66: fd:16:66:e3:e0:0a:e6:06:8f:0b:8e:f6:5a:8b:25: e0:e3:f4:1e:90:80:66:8d:28:85:0b:b2:c4:45:e5: 26:79:3b:49:98:54:54:2c:03:1e:6e:c8:e9:03:28: 72:af:3c:ef:9e:5b:46:77:a6:7b:65:b6:f3:91:ec: 87:fa:1d:c2:6d:f0:f8:70:5f:12:14:60:1a:87:37: 10:78:f3:cf:cd:d5:29:da:b2:23:86:10:dd:07:89: 77:3a:af:17:40:bc:e2:53:af:21:c7:fa:32:9c:11: 78:f7:f8:d7:d6:87:00:26:73:ba:ad:86:76:26:c9: 92:bb:41:7e:65:91:f3:e7:d9:21:96:a0:ea:f3:4c: 5f:f9:44:ec:29:10:c6:c6:12:29:ad:90:5a:e4:c5: 5e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E2:C2:29:D8:D3:27:4E:FA:E5:16:89:91:4C:2E:CF:43:16:9F:07 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0-LCKdjTJ0765RaJkUwuz0MWnwc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.192.0/23 163.5.213.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:f0:54:bf:08:20:73:3f:e7:57:ff:96:ca:ef:ab:d4:40:74: 38:1b:d3:8d:e0:26:ba:c0:4a:cd:ed:60:ac:73:48:db:f0:63: 31:3d:b8:af:bc:3d:4b:2e:0a:b5:f6:53:4b:1f:8c:2a:18:dc: f3:0b:f3:5f:c0:ea:f2:6e:9f:35:dc:4f:68:f5:80:ea:a9:40: e4:89:2c:86:f5:7c:4f:a0:dc:c0:c3:d1:30:29:95:75:c8:db: b4:c9:fe:08:9f:12:1e:cf:8d:6f:0b:11:a4:0d:ec:b9:6e:52: 0e:75:ef:15:fd:70:25:61:c0:ea:2b:4c:16:03:29:55:4e:d8: e8:de:a2:17:7b:f0:46:ab:7d:5d:39:6e:5e:71:3d:9b:60:4e: 7d:73:06:70:6f:2d:f2:ae:35:84:50:8d:ff:b8:4e:3a:9b:49: 48:e7:bb:35:be:a2:a2:ed:1a:8d:4c:ba:3c:6e:dd:4a:b8:f9: fd:bc:5e:36:86:ec:00:fb:0b:6b:95:3b:1e:9e:95:91:89:6b: 8d:57:4b:5f:1b:fb:ca:7c:bf:fd:27:43:68:50:7c:a8:22:ee: 33:fd:5a:11:7f:59:72:25:cb:13:e1:ee:e5:3e:92:98:a5:53: cf:4a:d2:b0:16:b9:f1:5e:95:c8:55:e4:99:5c:81:f4:12:e6: f7:c0:4f:6b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqgGmWoZT/IeNx4/Kd0PgfPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMTIwMDcxMTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2UyYzIyOWQ4ZDMyNzRlZmFlNTE2ODk5MTRjMmVjZjQzMTY5ZjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0b/LmIuNd+n6H/T1wKbj5NWISCXg YwJ1E12vXCJ4dxPkaO4nDqpSfW7WzrWXVJ6T102HBAStcH2sN2If8QdjBAK2W4SP 1Yte0sRMF8hMIeDywreLPiTtmhsQQnqfoKlMtzihRLNxeGb9Fmbj4ArmBo8LjvZa iyXg4/QekIBmjSiFC7LEReUmeTtJmFRULAMebsjpAyhyrzzvnltGd6Z7ZbbzkeyH +h3CbfD4cF8SFGAahzcQePPPzdUp2rIjhhDdB4l3Oq8XQLziU68hx/oynBF49/jX 1ocAJnO6rYZ2JsmSu0F+ZZHz59khlqDq80xf+UTsKRDGxhIprZBa5MVePQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNPiwinY0ydO+uUWiZFMLs9DFp8HMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvMC1MQ0tkalRKMDc2NVJhSmtVd3V6ME1XbndjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBowXAAwQA owXVMA0GCSqGSIb3DQEBCwUAA4IBAQB+8FS/CCBzP+dX/5bK76vUQHQ4G9ON4Ca6 wErN7WCsc0jb8GMxPbivvD1LLgq19lNLH4wqGNzzC/NfwOrybp813E9o9YDqqUDk iSyG9XxPoNzAw9EwKZV1yNu0yf4InxIez41vCxGkDey5blIOde8V/XAlYcDqK0wW AylVTtjo3qIXe/BGq31dOW5ecT2bYE59cwZwby3yrjWEUI3/uE46m0lI57s1vqKi 7RqNTLo8bt1KuPn9vF42huwA+wtrlTsenpWRiWuNV0tfG/vKfL/9J0NoUHyoIu4z /VoRf1lyJcsT4e7lPpKYpVPPStKwFrnxXpXIVeSZXIH0Eub3wE9r -----END CERTIFICATE-----Generated at Fri Dec 5 13:57:54 2025 by rpki-client