This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3ZzEb7tpDqLNegFz13FqIjTmC_E.roa File: 3ZzEb7tpDqLNegFz13FqIjTmC_E.roa (raw, json) Hash identifier: YlJPjJVWPrgpJ0HZ8A1iXt3ygfdUtkATIF3xQLEMJKk= Subject key identifier: DD:9C:C4:6F:BB:69:0E:A2:CD:7A:01:73:D7:71:6A:22:34:E6:0B:F1 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E3917CCE9FDFBBE967E77E0F600A5D7 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3ZzEb7tpDqLNegFz13FqIjTmC_E.roa Signing time: Fri 02 Jan 2026 10:20:29 +0000 ROA not before: Fri 02 Jan 2026 10:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 163.5.41.0/24 maxlen: 24 163.5.46.0/24 maxlen: 24 163.5.190.0/24 maxlen: 24 163.5.247.0/24 maxlen: 24 163.5.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:17:cc:e9:fd:fb:be:96:7e:77:e0:f6:00:a5:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd9cc46fbb690ea2cd7a0173d7716a2234e60bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:03:4a:8a:28:7c:1b:f2:6f:6b:34:f0:e8:6b: 92:d6:30:7c:1f:bf:f0:91:d3:dd:7b:93:27:1a:47: 6c:0e:2e:81:fe:48:96:3b:3b:55:3a:70:36:7e:fe: 0f:22:ff:85:b2:fe:f7:fd:b4:30:fa:58:3b:7c:4f: c3:ed:9e:87:2d:b4:1b:4a:bf:ef:25:cb:f9:6a:db: d2:a5:87:5f:c5:04:7d:f2:1f:6d:c1:eb:9e:80:7b: ce:4c:47:51:db:fc:01:47:7f:d7:7e:98:5e:09:a3: e6:ba:bb:7e:50:63:7a:a3:82:46:ac:9a:30:7e:b0: b7:6f:53:82:2a:1f:ce:c7:60:94:70:ee:17:aa:02: 9f:38:c8:fb:98:94:40:85:18:2d:34:8d:ed:25:80: ba:be:94:20:ce:b8:22:5f:f4:c1:19:3a:6d:25:ba: 4d:5f:7b:b4:04:94:55:a4:e9:60:42:45:c7:6f:c2: 22:14:32:a5:61:41:a1:28:0a:73:cf:b5:e2:61:9f: 8c:d3:1b:82:86:02:54:f8:3f:cd:5e:81:54:1f:24: 2e:49:c8:65:a0:0f:68:83:3a:44:f6:eb:da:2b:20: 30:14:4a:7b:fa:28:ea:04:8d:84:7d:d6:c8:e2:c6: 10:56:d3:ae:9a:da:f9:80:47:8c:26:77:fc:1f:16: ab:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9C:C4:6F:BB:69:0E:A2:CD:7A:01:73:D7:71:6A:22:34:E6:0B:F1 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3ZzEb7tpDqLNegFz13FqIjTmC_E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.41.0/24 163.5.46.0/24 163.5.190.0/24 163.5.247.0-163.5.248.255 Signature Algorithm: sha256WithRSAEncryption 79:cd:dc:f0:e7:8e:4c:4e:0b:0c:9d:a7:92:03:9c:ce:55:2c: da:f6:e4:54:70:a9:ab:2d:48:3a:87:3c:a6:fc:c5:cf:59:60: bb:59:91:67:d2:4d:eb:39:88:af:1b:d4:87:b6:d2:df:1d:99: 7a:1c:b5:b1:c2:09:0d:21:08:cc:75:5e:1b:02:8d:53:43:4c: 84:f8:38:d4:bc:d1:ec:84:4e:6d:dc:ed:58:ee:0e:c4:0c:4b: bd:dd:cb:11:e5:80:0a:ef:52:dc:fe:cd:48:f0:6f:84:83:dc: c4:9e:40:15:81:6a:61:bc:80:dc:de:90:6e:40:1f:1a:21:fe: 45:93:d8:9d:40:3d:fe:a4:6d:65:93:8e:c9:66:25:e6:53:4c: 69:0a:9d:2c:65:c3:70:d9:8f:d6:18:83:ed:2f:73:95:87:32: 65:4e:9d:73:51:13:71:b0:28:16:79:9e:a1:24:7d:24:12:d0: c8:b6:4a:fb:3f:fb:5a:f6:86:97:bf:b1:4f:11:a7:3f:3c:97: 67:26:2c:2c:5e:2b:f7:c7:9a:f3:e0:37:5f:50:cc:6d:71:d9: 90:a8:37:cb:0e:5a:52:68:d1:8f:2c:cf:c6:9f:af:f0:63:2e: 1b:77:dd:42:19:1f:4b:5e:9e:9b:b9:58:f3:43:d2:a5:73:68: 00:92:5e:59 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt+ORfM6f37vpZ+d+D2AKXXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDljYzQ2ZmJiNjkwZWEyY2Q3YTAxNzNkNzcxNmEyMjM0ZTYwYmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QNKiih8G/JvazTw6GuS1jB8H7/w kdPde5MnGkdsDi6B/kiWOztVOnA2fv4PIv+Fsv73/bQw+lg7fE/D7Z6HLbQbSr/v Jcv5atvSpYdfxQR98h9tweuegHvOTEdR2/wBR3/XfpheCaPmurt+UGN6o4JGrJow frC3b1OCKh/Ox2CUcO4XqgKfOMj7mJRAhRgtNI3tJYC6vpQgzrgiX/TBGTptJbpN X3u0BJRVpOlgQkXHb8IiFDKlYUGhKApzz7XiYZ+M0xuChgJU+D/NXoFUHyQuSchl oA9ogzpE9uvaKyAwFEp7+ijqBI2EfdbI4sYQVtOumtr5gEeMJnf8HxarvQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFN2cxG+7aQ6izXoBc9dxaiI05gvxMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvM1p6RWI3dHBEcUxOZWdGejEzRnFJalRtQ19FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAowUpAwQA owUuAwQAowW+MAwDBACjBfcDBACjBfgwDQYJKoZIhvcNAQELBQADggEBAHnN3PDn jkxOCwydp5IDnM5VLNr25FRwqastSDqHPKb8xc9ZYLtZkWfSTes5iK8b1Ie20t8d mXoctbHCCQ0hCMx1XhsCjVNDTIT4ONS80eyETm3c7VjuDsQMS73dyxHlgArvUtz+ zUjwb4SD3MSeQBWBamG8gNzekG5AHxoh/kWT2J1APf6kbWWTjslmJeZTTGkKnSxl w3DZj9YYg+0vc5WHMmVOnXNRE3GwKBZ5nqEkfSQS0Mi2Svs/+1r2hpe/sU8Rpz88 l2cmLCxeK/fHmvPgN19QzG1x2ZCoN8sOWlJo0Y8sz8afr/BjLht33UIZH0tenpu5 WPND0qVzaACSXlk= -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:20 2026 by rpki-client