This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4GbpI64AQmaJu6PFNOpFSLUKbO4.roa File: 4GbpI64AQmaJu6PFNOpFSLUKbO4.roa (raw, json) Hash identifier: 7MkzcaeJ6MODZXWU0Cvpivl9Erm7C40oyoV7Ke1D8Ko= Subject key identifier: E0:66:E9:23:AE:00:42:66:89:BB:A3:C5:34:EA:45:48:B5:0A:6C:EE Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E393BCC84FD75DA9CE06860B183A0F8 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4GbpI64AQmaJu6PFNOpFSLUKbO4.roa Signing time: Fri 02 Jan 2026 10:20:38 +0000 ROA not before: Fri 02 Jan 2026 10:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212669 IP address blocks: 163.5.113.0/24 maxlen: 24 163.5.146.0/24 maxlen: 24 163.5.224.0/24 maxlen: 24 163.5.234.0/24 maxlen: 24 163.5.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:3b:cc:84:fd:75:da:9c:e0:68:60:b1:83:a0:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e066e923ae00426689bba3c534ea4548b50a6cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8f:44:6a:b8:96:c4:44:89:2a:08:04:8d:07: d7:f1:06:62:91:21:59:79:49:c2:ce:1b:a9:fd:13: 95:59:2f:aa:3c:f9:f0:d0:70:a0:13:32:e3:93:1a: 8a:8f:f8:b7:a3:9e:35:ba:be:82:63:42:96:39:ca: 71:b7:5c:67:24:b0:0b:55:d1:76:9b:cb:2b:c2:73: 5c:aa:2f:b8:1b:af:63:3f:89:1b:69:dc:15:86:9e: 68:e3:11:64:8d:c8:6c:e7:23:9a:62:8b:e6:79:e7: dc:61:95:d6:02:3a:2b:60:e2:3c:fb:c3:ea:23:78: 28:42:dc:aa:53:01:a5:86:8a:39:27:a9:2b:c0:b0: 06:e6:f3:ea:bc:fd:6f:59:27:c6:c7:f9:fb:83:02: 64:b8:6c:d9:5e:97:aa:54:fe:8d:57:f5:ec:da:2f: a9:8b:b3:a6:bc:c6:fe:ea:58:d3:69:2b:9d:e2:0d: 06:e1:0f:99:82:ce:9a:b9:50:a1:17:83:43:71:fe: c7:62:a6:d2:c4:c7:51:ea:34:64:6d:bb:e0:f4:22: 46:7a:17:05:86:fc:39:1f:7d:54:78:59:3d:ec:8e: 80:3d:f1:a3:d5:55:12:af:d2:fa:f3:9b:94:92:ee: f1:31:e2:d1:b3:89:51:7f:4f:01:b8:af:6d:b7:38: 6c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:66:E9:23:AE:00:42:66:89:BB:A3:C5:34:EA:45:48:B5:0A:6C:EE X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4GbpI64AQmaJu6PFNOpFSLUKbO4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.113.0/24 163.5.146.0/24 163.5.224.0/24 163.5.234.0/24 163.5.236.0/24 Signature Algorithm: sha256WithRSAEncryption 05:bb:3c:47:88:ec:78:3e:97:49:90:7a:e0:89:b5:6e:a7:4e: 3e:2b:40:cc:c0:6d:5b:a5:46:ab:7a:ab:01:82:0b:f4:39:c0: a6:66:d4:67:09:b4:b5:41:f9:37:16:2b:b0:27:e0:e7:e5:97: 2d:64:54:53:32:b1:34:1b:d1:60:0b:33:42:70:6e:af:cb:96: 8e:ae:c7:46:bb:70:25:d2:1a:75:b2:1c:c3:4e:0b:b9:58:e6: 32:7a:ca:8a:b4:63:99:71:b4:a5:60:18:3c:0f:43:35:83:bc: b3:b1:25:85:69:a2:76:78:c1:c8:27:c6:e4:ed:e5:6e:34:e5: ca:2f:57:d5:1d:b1:e8:69:8e:43:91:89:2e:a6:1a:57:9a:52: 25:8d:4d:e2:7f:a7:bf:74:c8:69:fd:53:86:ad:1e:a1:48:9b: 65:76:e5:a6:b3:25:e7:c0:1f:3a:8b:a2:c2:d5:79:42:7b:bd: d6:69:b2:c1:87:37:5d:ba:ea:f5:b2:ce:51:30:37:53:f2:10: 0d:8f:4d:e4:24:a9:41:ea:58:2f:cd:47:27:cf:8a:bc:d9:94: d2:00:79:fa:43:ba:dd:8f:1a:16:93:8c:43:71:aa:be:3a:6e: 3c:eb:8f:19:7b:8e:8d:7c:ca:92:ff:f9:f9:1a:99:ad:14:50: 81:d9:33:3f -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt+OTvMhP112pzgaGCxg6D4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDY2ZTkyM2FlMDA0MjY2ODliYmEzYzUzNGVhNDU0OGI1MGE2Y2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI9EariWxESJKggEjQfX8QZikSFZ eUnCzhup/ROVWS+qPPnw0HCgEzLjkxqKj/i3o541ur6CY0KWOcpxt1xnJLALVdF2 m8srwnNcqi+4G69jP4kbadwVhp5o4xFkjchs5yOaYovmeefcYZXWAjorYOI8+8Pq I3goQtyqUwGlhoo5J6krwLAG5vPqvP1vWSfGx/n7gwJkuGzZXpeqVP6NV/Xs2i+p i7OmvMb+6ljTaSud4g0G4Q+Zgs6auVChF4NDcf7HYqbSxMdR6jRkbbvg9CJGehcF hvw5H31UeFk97I6APfGj1VUSr9L685uUku7xMeLRs4lRf08BuK9ttzhs8QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFOBm6SOuAEJmibujxTTqRUi1CmzuMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvNEdicEk2NEFRbWFKdTZQRk5PcEZTTFVLYk80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAowVxAwQA owWSAwQAowXgAwQAowXqAwQAowXsMA0GCSqGSIb3DQEBCwUAA4IBAQAFuzxHiOx4 PpdJkHrgibVup04+K0DMwG1bpUareqsBggv0OcCmZtRnCbS1Qfk3FiuwJ+Dn5Zct ZFRTMrE0G9FgCzNCcG6vy5aOrsdGu3Al0hp1shzDTgu5WOYyesqKtGOZcbSlYBg8 D0M1g7yzsSWFaaJ2eMHIJ8bk7eVuNOXKL1fVHbHoaY5DkYkuphpXmlIljU3if6e/ dMhp/VOGrR6hSJtlduWmsyXnwB86i6LC1XlCe73WabLBhzdduur1ss5RMDdT8hAN j03kJKlB6lgvzUcnz4q82ZTSAHn6Q7rdjxoWk4xDcaq+Om48648Ze46NfMqS//n5 GpmtFFCB2TM/ -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:00 2026 by rpki-client