This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0riTABLywV_SOnJkv5EHuEEsDRM.roa File: 0riTABLywV_SOnJkv5EHuEEsDRM.roa (raw, json) Hash identifier: cw0ZAL7VdjxuZC7neQC+MwTr1PvtH9dp1yFtKfh67q4= Subject key identifier: D2:B8:93:00:12:F2:C1:5F:D2:3A:72:64:BF:91:07:B8:41:2C:0D:13 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E391A78278D1E93080CE7B49DBEEDAF Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0riTABLywV_SOnJkv5EHuEEsDRM.roa Signing time: Fri 02 Jan 2026 10:20:30 +0000 ROA not before: Fri 02 Jan 2026 10:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22516 IP address blocks: 163.5.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:1a:78:27:8d:1e:93:08:0c:e7:b4:9d:be:ed:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2b8930012f2c15fd23a7264bf9107b8412c0d13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:98:75:87:04:f3:4e:c8:4e:9d:3b:99:8a:7a: d7:bb:0c:06:11:57:24:c1:64:f4:4c:cc:07:b3:9e: 60:f7:c5:e7:55:2a:36:dd:fb:8f:ae:fc:3b:d2:b5: e1:db:f2:6c:38:87:d6:90:0c:fa:9a:84:a6:4c:84: ee:cf:45:8d:dd:80:49:95:fb:e5:09:6e:71:aa:b1: fd:5c:1d:9b:09:61:69:ce:11:cf:7d:f2:50:de:1c: 84:79:4e:e4:99:91:26:3e:81:35:c3:33:f1:3a:fb: 54:ff:c2:07:6f:c5:13:17:1a:66:31:70:b6:39:ca: f5:74:64:9a:b2:c4:bb:77:e2:25:1e:19:83:00:4e: f8:b0:06:f9:35:60:79:7d:d7:0f:fc:8d:80:ef:1f: 6e:86:f6:dc:a9:3e:24:24:a6:67:5c:6b:5e:14:f6: 41:ad:98:49:a7:82:9b:37:e3:4c:63:be:1a:99:79: 66:d9:73:a0:a8:ce:7f:6b:ee:3d:5e:65:7a:51:8f: 47:44:cb:dc:33:3e:85:45:d2:a1:fd:cb:ad:46:b7: f2:92:0e:12:a3:41:77:37:58:23:b0:77:26:7c:8a: bb:f8:d8:aa:86:35:99:2a:e0:b9:ac:e0:60:91:e7: 03:56:3f:c7:de:38:96:b6:24:1c:e5:19:9d:ff:13: ee:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B8:93:00:12:F2:C1:5F:D2:3A:72:64:BF:91:07:B8:41:2C:0D:13 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0riTABLywV_SOnJkv5EHuEEsDRM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.33.0/24 Signature Algorithm: sha256WithRSAEncryption 84:67:63:fb:f5:b4:dd:41:f6:c1:5a:1b:c5:16:86:7b:4a:16: 3e:e0:20:3b:e5:c8:d8:c8:bf:59:36:91:b8:57:7b:a5:14:92: 25:8a:65:37:65:a1:04:1f:65:6f:fa:f5:f4:e5:6c:b4:6e:8a: 13:38:bc:79:46:6c:73:f9:1e:f6:2c:7e:3d:9c:c0:de:15:84: c1:fd:fe:0d:64:6d:74:d1:43:4f:39:63:c7:25:a2:76:b3:05: 17:9c:22:5a:02:53:52:d5:f7:e1:2f:74:9e:5a:c1:be:d9:21: ca:1f:b4:79:dc:be:4d:08:43:cf:a7:12:a9:e2:b7:7c:17:e8: a5:7b:d4:db:dd:eb:b1:66:0c:7a:87:e3:c3:cf:2a:ef:19:93: 13:b5:e3:31:0f:01:a4:70:18:2c:c9:cf:8b:19:58:12:46:f4: 88:cc:d9:09:13:89:a0:b0:2e:57:23:e8:01:0f:92:16:9b:0c: 97:b2:0a:ec:91:b2:8a:26:3f:08:eb:e9:ab:22:34:bc:94:11: 41:bf:02:9a:21:c9:2b:9d:24:01:4b:c3:da:8b:49:14:c5:ff: 19:47:ec:d2:51:dd:3d:3d:b6:91:1e:61:4d:a2:4e:58:b3:61: ae:6d:25:a8:31:f2:ec:83:44:81:13:ee:6b:c3:1c:e0:9f:6a: 9a:d5:d9:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ORp4J40ekwgM57Sdvu2vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmI4OTMwMDEyZjJjMTVmZDIzYTcyNjRiZjkxMDdiODQxMmMwZDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Zh1hwTzTshOnTuZinrXuwwGEVck wWT0TMwHs55g98XnVSo23fuPrvw70rXh2/JsOIfWkAz6moSmTITuz0WN3YBJlfvl CW5xqrH9XB2bCWFpzhHPffJQ3hyEeU7kmZEmPoE1wzPxOvtU/8IHb8UTFxpmMXC2 Ocr1dGSassS7d+IlHhmDAE74sAb5NWB5fdcP/I2A7x9uhvbcqT4kJKZnXGteFPZB rZhJp4KbN+NMY74amXlm2XOgqM5/a+49XmV6UY9HRMvcMz6FRdKh/cutRrfykg4S o0F3N1gjsHcmfIq7+NiqhjWZKuC5rOBgkecDVj/H3jiWtiQc5Rmd/xPudwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNK4kwAS8sFf0jpyZL+RB7hBLA0TMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvMHJpVEFCTHl3Vl9TT25Ka3Y1RUh1RUVzRFJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowUhMA0G CSqGSIb3DQEBCwUAA4IBAQCEZ2P79bTdQfbBWhvFFoZ7ShY+4CA75cjYyL9ZNpG4 V3ulFJIlimU3ZaEEH2Vv+vX05Wy0booTOLx5Rmxz+R72LH49nMDeFYTB/f4NZG10 0UNPOWPHJaJ2swUXnCJaAlNS1ffhL3SeWsG+2SHKH7R53L5NCEPPpxKp4rd8F+il e9Tb3euxZgx6h+PDzyrvGZMTteMxDwGkcBgsyc+LGVgSRvSIzNkJE4mgsC5XI+gB D5IWmwyXsgrskbKKJj8I6+mrIjS8lBFBvwKaIckrnSQBS8Pai0kUxf8ZR+zSUd09 PbaRHmFNok5Ys2GubSWoMfLsg0SBE+5rwxzgn2qa1dnG -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:17 2026 by rpki-client