This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-GmPHCVEKtCDCx4D3TGiqbelcsw.roa File: 1-GmPHCVEKtCDCx4D3TGiqbelcsw.roa (raw, json) Hash identifier: 1ucCSu5nlUy/6hGWh+FmJSyFqwVXWMJKNH3sTBkizM4= Subject key identifier: F8:69:8F:1C:25:44:2A:D0:83:0B:1E:03:DD:31:A2:A9:B7:A5:72:CC Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E393DCB6EB75ABA877A3507BF9642E5 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-GmPHCVEKtCDCx4D3TGiqbelcsw.roa Signing time: Fri 02 Jan 2026 10:20:39 +0000 ROA not before: Fri 02 Jan 2026 10:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214285 IP address blocks: 163.5.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:3d:cb:6e:b7:5a:ba:87:7a:35:07:bf:96:42:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8698f1c25442ad0830b1e03dd31a2a9b7a572cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fc:d9:5a:e9:60:3e:84:17:43:d6:92:a0:14: 48:4c:c4:63:9e:ee:bd:1e:d9:17:bd:d7:81:2f:ba: dd:62:42:c4:0d:a4:37:d5:c9:1c:21:21:a1:3d:b0: 63:c8:85:43:b0:d9:ab:29:02:74:d1:29:c3:72:a7: 5c:cc:45:18:3d:50:24:7f:39:21:9d:a1:a3:4c:dd: c6:74:fb:44:31:ac:82:fc:b2:ad:d6:66:8c:ee:0d: a1:45:66:33:ec:06:e3:20:73:f3:1f:39:75:38:f9: 46:0d:97:57:0f:32:89:c0:45:31:55:22:7a:7a:73: 4c:c2:db:9f:03:ab:3c:a8:11:83:77:21:9c:fd:aa: ae:ec:c1:c5:80:0b:8f:6d:49:8d:68:77:8d:3e:9e: 10:9a:96:8d:69:57:dd:fd:61:ef:6a:17:07:d4:81: 22:81:4c:c7:be:40:bd:7c:18:58:83:ba:73:ff:53: 49:df:50:15:98:81:84:9c:b6:29:26:ed:3a:47:e7: 68:b7:3c:21:4b:86:77:27:3e:3e:9b:4e:01:1f:30: 7e:3d:9f:3c:a9:11:d9:a7:8d:c2:17:8e:5d:b3:2a: c6:16:32:ba:e1:6a:97:84:d8:b8:99:07:25:79:30: 63:59:0d:6b:d4:4e:45:44:c0:90:5b:a0:ae:35:9c: 9c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:69:8F:1C:25:44:2A:D0:83:0B:1E:03:DD:31:A2:A9:B7:A5:72:CC X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-GmPHCVEKtCDCx4D3TGiqbelcsw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.138.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:e5:a7:4b:4a:15:33:df:d6:0f:10:01:15:50:f9:1e:02:b6: 15:12:8f:56:46:e3:c2:2f:a1:2a:a2:ce:8f:f4:0c:8b:ca:c9: 1a:34:7a:6c:40:08:40:60:3b:4f:bb:8f:57:c2:49:dc:12:4a: b0:01:de:cb:24:1e:9d:70:1e:02:3e:09:8e:31:be:09:e2:93: d3:02:7a:42:3e:51:3d:02:14:b0:46:b2:05:8b:b2:4b:f8:3a: 36:c2:91:d0:d3:40:e6:e1:c5:61:7e:73:16:2c:50:f2:b1:ca: 54:c0:ed:88:e2:92:a7:cb:9d:fd:65:9c:3d:c4:81:e9:2c:ce: 27:19:44:10:07:32:0c:02:ec:f9:38:ee:b1:ed:8b:1d:cd:f0: 7b:49:07:41:ba:6f:1e:ac:c9:09:e3:77:fb:6a:99:b4:a3:67: 64:a1:1c:69:cd:c3:29:95:71:69:47:b7:38:a5:f1:5d:90:7c: 49:fb:e9:d0:21:0f:28:3b:d0:5b:c7:81:23:d4:b4:cc:0a:3e: fd:c0:b8:ce:dc:2a:df:15:9f:ce:52:41:12:ce:17:c0:26:88: 33:43:41:46:10:0a:50:c2:0a:60:60:c1:bc:8a:40:99:c4:96: 25:0b:15:dd:90:8a:b7:0d:52:44:44:5e:05:e7:79:11:52:0b: a4:44:99:05 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+OT3Lbrdauod6NQe/lkLlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODY5OGYxYzI1NDQyYWQwODMwYjFlMDNkZDMxYTJhOWI3YTU3MmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvzZWulgPoQXQ9aSoBRITMRjnu69 HtkXvdeBL7rdYkLEDaQ31ckcISGhPbBjyIVDsNmrKQJ00SnDcqdczEUYPVAkfzkh naGjTN3GdPtEMayC/LKt1maM7g2hRWYz7AbjIHPzHzl1OPlGDZdXDzKJwEUxVSJ6 enNMwtufA6s8qBGDdyGc/aqu7MHFgAuPbUmNaHeNPp4QmpaNaVfd/WHvahcH1IEi gUzHvkC9fBhYg7pz/1NJ31AVmIGEnLYpJu06R+dotzwhS4Z3Jz4+m04BHzB+PZ88 qRHZp43CF45dsyrGFjK64WqXhNi4mQcleTBjWQ1r1E5FRMCQW6CuNZycEwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPhpjxwlRCrQgwseA90xoqm3pXLMMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvMS1HbVBIQ1ZFS3RDREN4NEQzVEdpcWJlbGNzdy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTMvZDAyZGZiLTk2NzMtNDlhOC05NzFjLTlmZTk0MTA4ZmYw MS8xL0RPaFJ0dDFkTms3aG5nczRJQnMtamZKaVM4cy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKMFijAN BgkqhkiG9w0BAQsFAAOCAQEAXuWnS0oVM9/WDxABFVD5HgK2FRKPVkbjwi+hKqLO j/QMi8rJGjR6bEAIQGA7T7uPV8JJ3BJKsAHeyyQenXAeAj4JjjG+CeKT0wJ6Qj5R PQIUsEayBYuyS/g6NsKR0NNA5uHFYX5zFixQ8rHKVMDtiOKSp8ud/WWcPcSB6SzO JxlEEAcyDALs+Tjuse2LHc3we0kHQbpvHqzJCeN3+2qZtKNnZKEcac3DKZVxaUe3 OKXxXZB8Sfvp0CEPKDvQW8eBI9S0zAo+/cC4ztwq3xWfzlJBEs4XwCaIM0NBRhAK UMIKYGDBvIpAmcSWJQsV3ZCKtw1SREReBed5EVILpESZBQ== -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:39 2026 by rpki-client