This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-TfuUnnJS6J6YehhnKVSB0veuR0.roa File: 1-TfuUnnJS6J6YehhnKVSB0veuR0.roa (raw, json) Hash identifier: 2FsoAwQU13wSIOFSXbTRlmzZRloEXrfurbrp9QlRLjY= Subject key identifier: F9:37:EE:52:79:C9:4B:A2:7A:61:E8:61:9C:A5:52:07:4B:DE:B9:1D Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019BB2225C09BBF609497B1578277E5ABBBF Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-TfuUnnJS6J6YehhnKVSB0veuR0.roa Signing time: Mon 12 Jan 2026 12:15:54 +0000 ROA not before: Mon 12 Jan 2026 12:15:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 163.5.53.0/24 maxlen: 24 163.5.58.0/24 maxlen: 24 163.5.119.0/24 maxlen: 24 163.5.136.0/24 maxlen: 24 163.5.157.0/24 maxlen: 24 163.5.161.0/24 maxlen: 24 163.5.175.0/24 maxlen: 24 163.5.179.0/24 maxlen: 24 163.5.182.0/24 maxlen: 24 163.5.200.0/24 maxlen: 24 163.5.215.0/24 maxlen: 24 163.5.223.0/24 maxlen: 24 163.5.238.0/24 maxlen: 24 163.5.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:22:5c:09:bb:f6:09:49:7b:15:78:27:7e:5a:bb:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 12 12:15:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f937ee5279c94ba27a61e8619ca552074bdeb91d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b6:a0:4b:62:d1:04:e8:20:d3:6c:af:9f:98: 31:a1:0d:e4:e2:05:12:be:0f:48:32:f0:de:cc:ad: cc:c4:47:ce:4a:f7:7a:a3:91:f0:0b:5d:de:bc:ac: b6:cb:38:28:b3:3d:cd:c0:80:40:99:64:f0:58:a9: ea:19:78:59:1e:a1:22:ab:9f:df:91:bd:14:8a:ec: 5d:3a:ba:2e:d0:1a:08:cf:47:85:cc:9e:e1:08:ae: cb:f3:c1:79:cf:a7:12:1c:4d:60:91:8f:31:4e:86: eb:38:58:a2:7a:36:6e:d9:bb:e8:7b:04:3d:93:fd: 63:5a:b9:72:f6:f3:c2:42:97:a7:0d:7e:21:b0:14: 71:b5:c8:c1:fa:05:0c:e6:48:85:64:d7:33:e2:a9: e0:fc:ae:bc:78:53:a7:bd:f4:ac:55:98:ac:78:0d: 91:e0:99:a4:32:26:6a:d5:25:01:80:5a:f7:4f:71: 29:48:e1:e8:3f:56:6a:93:36:1d:db:b7:41:89:0e: d9:9f:aa:95:6d:51:cd:f0:9a:e3:1d:9d:a8:b9:28: dd:14:96:af:d1:00:d7:97:e4:26:8c:4b:21:02:41: 54:e8:ec:bc:a5:0f:10:ca:f9:0e:13:3a:2d:fe:5e: a7:8b:b5:c3:cb:55:27:04:d9:82:c9:1f:fc:91:d8: aa:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:37:EE:52:79:C9:4B:A2:7A:61:E8:61:9C:A5:52:07:4B:DE:B9:1D X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-TfuUnnJS6J6YehhnKVSB0veuR0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.53.0/24 163.5.58.0/24 163.5.119.0/24 163.5.136.0/24 163.5.157.0/24 163.5.161.0/24 163.5.175.0/24 163.5.179.0/24 163.5.182.0/24 163.5.200.0/24 163.5.215.0/24 163.5.223.0/24 163.5.238.0/24 163.5.244.0/24 Signature Algorithm: sha256WithRSAEncryption 06:e2:71:0a:21:fd:08:c0:46:0a:80:97:ef:df:ef:54:42:25: f4:7e:09:79:4e:57:88:40:7d:a2:66:3a:db:7e:d7:0b:12:f3: 68:66:13:fb:1e:98:06:34:63:b7:ba:a6:a5:19:c2:0c:01:db: 0b:77:9f:9b:26:65:20:78:1f:12:b0:3b:d1:73:43:c6:01:0d: 13:68:22:4b:81:1e:49:e0:02:5d:3d:44:88:43:99:80:ea:47: 4b:18:46:c4:c4:83:3a:d9:48:10:88:d2:34:0c:ad:79:fa:4c: 93:2b:a3:51:2f:87:3a:5b:63:bb:21:bc:1a:b7:02:75:9e:6c: 85:dc:02:1d:a4:e5:d5:bd:46:e2:88:c3:a6:03:c2:ed:2c:57: 06:97:03:51:c4:58:5d:58:d9:c5:06:2f:3e:db:85:92:4e:73: 9d:54:be:12:35:76:6e:de:fe:56:33:09:0a:b7:56:03:b1:19: 17:b4:57:67:d3:79:03:90:f0:79:79:f8:3b:6e:f8:ac:e5:f7: 63:8c:eb:7a:0d:43:e4:a4:b3:60:82:ae:7e:0d:72:ca:09:6c: 9c:cf:79:2c:26:58:82:03:ec:67:22:4a:3a:16:dd:e4:a1:8d: a6:e5:ab:19:5e:f0:86:58:62:e5:58:78:d3:0c:b5:8a:f6:04: 8c:c9:ab:e2 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgISAZuyIlwJu/YJSXsVeCd+Wru/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTEyMTIxNTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTM3ZWU1Mjc5Yzk0YmEyN2E2MWU4NjE5Y2E1NTIwNzRiZGViOTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgragS2LRBOgg02yvn5gxoQ3k4gUS vg9IMvDezK3MxEfOSvd6o5HwC13evKy2yzgosz3NwIBAmWTwWKnqGXhZHqEiq5/f kb0UiuxdOrou0BoIz0eFzJ7hCK7L88F5z6cSHE1gkY8xTobrOFiiejZu2bvoewQ9 k/1jWrly9vPCQpenDX4hsBRxtcjB+gUM5kiFZNcz4qng/K68eFOnvfSsVZiseA2R 4JmkMiZq1SUBgFr3T3EpSOHoP1ZqkzYd27dBiQ7Zn6qVbVHN8JrjHZ2ouSjdFJav 0QDXl+QmjEshAkFU6Oy8pQ8QyvkOEzot/l6ni7XDy1UnBNmCyR/8kdiq3QIDAQAB o4ICWDCCAlQwHQYDVR0OBBYEFPk37lJ5yUuiemHoYZylUgdL3rkdMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvMS1UZnVVbm5KUzZKNlllaGhuS1ZTQjB2ZXVSMC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTMvZDAyZGZiLTk2NzMtNDlhOC05NzFjLTlmZTk0MTA4ZmYw MS8xL0RPaFJ0dDFkTms3aG5nczRJQnMtamZKaVM4cy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBtBggrBgEFBQcBBwEB/wReMFwwWgQCAAEwVAMEAKMFNQME AKMFOgMEAKMFdwMEAKMFiAMEAKMFnQMEAKMFoQMEAKMFrwMEAKMFswMEAKMFtgME AKMFyAMEAKMF1wMEAKMF3wMEAKMF7gMEAKMF9DANBgkqhkiG9w0BAQsFAAOCAQEA BuJxCiH9CMBGCoCX79/vVEIl9H4JeU5XiEB9omY6237XCxLzaGYT+x6YBjRjt7qm pRnCDAHbC3efmyZlIHgfErA70XNDxgENE2giS4EeSeACXT1EiEOZgOpHSxhGxMSD OtlIEIjSNAytefpMkyujUS+HOltjuyG8GrcCdZ5shdwCHaTl1b1G4ojDpgPC7SxX BpcDUcRYXVjZxQYvPtuFkk5znVS+EjV2bt7+VjMJCrdWA7EZF7RXZ9N5A5DweXn4 O274rOX3Y4zreg1D5KSzYIKufg1yyglsnM95LCZYggPsZyJKOhbd5KGNpuWrGV7w hlhi5Vh40wy1ivYEjMmr4g== -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:42 2026 by rpki-client