This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2klwTHkX8YWtCXX0-x-aAJ4DjUs.roa File: 2klwTHkX8YWtCXX0-x-aAJ4DjUs.roa (raw, json) Hash identifier: dGmWDorJiUqFdvn89yia6pdD9jD1VMpp9LysWqvC6G4= Subject key identifier: DA:49:70:4C:79:17:F1:85:AD:09:75:F4:FB:1F:9A:00:9E:03:8D:4B Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E391EB8DD0C1DF572786DE09C458E19 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2klwTHkX8YWtCXX0-x-aAJ4DjUs.roa Signing time: Fri 02 Jan 2026 10:20:31 +0000 ROA not before: Fri 02 Jan 2026 10:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29066 IP address blocks: 163.5.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:1e:b8:dd:0c:1d:f5:72:78:6d:e0:9c:45:8e:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da49704c7917f185ad0975f4fb1f9a009e038d4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:80:33:35:d0:5d:09:bc:57:c4:66:9a:a8:d2: 44:7f:89:77:76:37:57:32:31:a4:f0:95:d6:66:ec: 55:72:b7:9e:a6:3f:59:25:96:ff:b3:bd:5a:5d:a0: c7:ea:6a:fa:34:c8:ba:3d:b3:3c:43:7b:f7:5a:e8: 94:ed:4c:50:3c:a9:39:6d:c8:47:70:fe:f0:2d:81: ed:f8:33:34:3c:12:e5:05:3f:49:4d:a5:36:4c:a5: b6:95:d1:ad:1e:f6:fc:9d:91:dd:4d:5c:b3:c9:7a: 28:ba:b5:8d:c1:d7:e1:68:79:b7:1a:79:76:8c:a8: 5d:8a:21:85:ab:9b:24:90:4b:64:e9:d6:66:1c:4a: e2:34:48:ef:24:b2:56:be:e4:ed:5b:8c:52:0d:40: 4d:d3:e4:de:f7:20:c3:a7:a7:0c:f1:61:b5:c9:6c: 7a:8b:c7:1e:f4:12:52:65:a2:1e:1e:2b:dc:f5:bf: 56:8c:95:e6:ab:6a:d6:f0:0a:b8:e2:6d:12:b8:60: 86:54:f9:20:79:f9:4e:05:23:4a:07:bb:99:1c:18: 2d:e0:f7:11:b9:7d:56:d0:3f:4c:c6:4b:12:af:c2: 0c:d3:7f:fd:17:a2:b3:14:6f:94:c4:81:60:01:29: 90:6c:65:b2:72:c1:a8:29:9d:a3:89:a0:dc:c2:89: 39:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:49:70:4C:79:17:F1:85:AD:09:75:F4:FB:1F:9A:00:9E:03:8D:4B X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2klwTHkX8YWtCXX0-x-aAJ4DjUs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.65.0/24 Signature Algorithm: sha256WithRSAEncryption 97:5c:d5:f0:65:0d:7d:c9:dd:70:0e:8f:1d:dd:a4:eb:16:77: a8:97:a5:b9:6c:f2:9a:38:7f:35:c1:6d:28:08:18:86:24:92: 45:72:1b:98:0d:4b:60:8d:bd:63:d9:e4:6c:04:14:bb:3b:e6: a6:77:01:f0:25:48:40:fc:7a:a0:1b:f2:8f:89:08:43:cd:e8: b0:60:ca:15:d8:04:c2:11:d9:8a:39:5a:3b:94:41:af:3b:9e: 63:34:24:f3:f0:15:27:0e:52:35:0d:b0:39:78:0e:d6:89:d0: 9e:cb:f9:98:b6:a1:8a:82:10:69:16:b7:0d:30:2a:2c:27:b9: 90:a3:e8:a0:57:9c:cf:bc:3a:ef:4d:b7:c0:7d:e3:63:5e:1f: 4c:3a:fe:3c:37:f7:8f:60:81:92:53:4b:e0:c7:61:82:e4:34: bf:da:6c:32:bd:8f:67:5a:96:33:ae:be:50:11:cb:f6:aa:72: 65:58:3b:6a:26:50:78:95:c8:fc:53:97:97:ff:68:ea:18:e0: a3:f0:3e:89:16:5a:06:01:68:df:5d:b4:87:bb:7d:da:ac:d0: 0a:83:a4:f4:27:e0:fa:d4:57:8e:fc:b6:60:66:fa:7c:58:70: 38:0d:5a:73:71:b5:aa:02:6a:32:59:4a:b7:bc:8f:f5:b6:d0: 6b:e8:21:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OR643Qwd9XJ4beCcRY4ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTQ5NzA0Yzc5MTdmMTg1YWQwOTc1ZjRmYjFmOWEwMDllMDM4ZDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YAzNdBdCbxXxGaaqNJEf4l3djdX MjGk8JXWZuxVcreepj9ZJZb/s71aXaDH6mr6NMi6PbM8Q3v3WuiU7UxQPKk5bchH cP7wLYHt+DM0PBLlBT9JTaU2TKW2ldGtHvb8nZHdTVyzyXoourWNwdfhaHm3Gnl2 jKhdiiGFq5skkEtk6dZmHEriNEjvJLJWvuTtW4xSDUBN0+Te9yDDp6cM8WG1yWx6 i8ce9BJSZaIeHivc9b9WjJXmq2rW8Aq44m0SuGCGVPkgeflOBSNKB7uZHBgt4PcR uX1W0D9MxksSr8IM03/9F6KzFG+UxIFgASmQbGWycsGoKZ2jiaDcwok5LwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNpJcEx5F/GFrQl19PsfmgCeA41LMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvMmtsd1RIa1g4WVd0Q1hYMC14LWFBSjREalVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowVBMA0G CSqGSIb3DQEBCwUAA4IBAQCXXNXwZQ19yd1wDo8d3aTrFneol6W5bPKaOH81wW0o CBiGJJJFchuYDUtgjb1j2eRsBBS7O+amdwHwJUhA/HqgG/KPiQhDzeiwYMoV2ATC EdmKOVo7lEGvO55jNCTz8BUnDlI1DbA5eA7WidCey/mYtqGKghBpFrcNMCosJ7mQ o+igV5zPvDrvTbfAfeNjXh9MOv48N/ePYIGSU0vgx2GC5DS/2mwyvY9nWpYzrr5Q Ecv2qnJlWDtqJlB4lcj8U5eX/2jqGOCj8D6JFloGAWjfXbSHu33arNAKg6T0J+D6 1FeO/LZgZvp8WHA4DVpzcbWqAmoyWUq3vI/1ttBr6CGj -----END CERTIFICATE-----Generated at Mon Jan 19 17:32:55 2026 by rpki-client