This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4peyGou3xX-TwmrUq-DoFm7Voac.roa File: 4peyGou3xX-TwmrUq-DoFm7Voac.roa (raw, json) Hash identifier: WQW/MXerQE2c/Hy+S8gqiqg0vO8IUzeWLFj+R9gWUUQ= Subject key identifier: E2:97:B2:1A:8B:B7:C5:7F:93:C2:6A:D4:AB:E0:E8:16:6E:D5:A1:A7 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E3932DD7211DD9D5B115B183C5EC98D Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4peyGou3xX-TwmrUq-DoFm7Voac.roa Signing time: Fri 02 Jan 2026 10:20:36 +0000 ROA not before: Fri 02 Jan 2026 10:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200136 IP address blocks: 163.5.141.0/24 maxlen: 24 163.5.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:32:dd:72:11:dd:9d:5b:11:5b:18:3c:5e:c9:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e297b21a8bb7c57f93c26ad4abe0e8166ed5a1a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:48:03:03:1f:36:40:7b:6e:7f:55:e8:4d:f7: 18:6a:fa:22:bb:dd:4b:b1:50:94:50:5c:f2:90:82: 7d:7d:5a:8c:c4:31:12:4f:54:db:45:2d:4d:87:48: c0:7c:bc:d9:5c:f8:6d:bf:a8:3a:68:4b:44:6a:35: a9:c9:3c:4c:91:4e:18:8a:ba:f9:84:7f:4b:80:b1: 34:ff:b1:67:00:75:e0:7b:03:10:74:00:e2:2a:94: 3a:6a:37:b3:6c:13:87:2d:aa:b9:ed:40:b1:8b:2e: 1e:39:4d:39:22:07:b7:44:24:be:37:e9:ee:be:84: fc:5e:79:21:a2:fd:c4:bc:b8:15:08:22:14:e7:dd: 87:01:2b:07:d9:cc:1c:05:dc:10:75:f0:34:5b:95: 18:67:8b:04:e3:cc:22:15:3a:0f:f2:1e:38:7a:bd: d4:ff:1d:ec:2c:d4:2b:be:9c:59:ea:c4:0c:86:25: bb:db:71:ed:cf:66:bb:4e:5c:c2:a9:9a:cd:9a:79: 5e:c5:65:64:c3:fd:8e:ba:26:74:75:19:ff:2e:9d: 64:59:ca:e2:b1:de:2e:79:51:f2:57:94:9b:1c:e5: 2e:6d:9c:86:48:a8:52:0d:34:03:16:76:82:c3:38: 49:a9:ec:3a:d0:e6:2c:e7:91:02:85:6e:09:47:62: 44:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:97:B2:1A:8B:B7:C5:7F:93:C2:6A:D4:AB:E0:E8:16:6E:D5:A1:A7 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4peyGou3xX-TwmrUq-DoFm7Voac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.141.0/24 163.5.143.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:ca:ad:62:70:eb:7d:17:fe:d3:d3:8d:4d:89:80:ab:fd:85: 8d:e3:96:90:34:0d:d1:55:66:45:6c:b0:bc:9b:d8:df:d3:ba: f6:cb:ba:15:85:a5:2e:35:c7:0e:69:6c:c3:78:82:78:7e:69: ce:4e:8c:07:4d:ff:a6:1c:a6:e5:3b:69:38:c1:3a:43:8d:37: 66:5f:a0:cd:01:a3:a2:57:fc:3e:8b:6e:9d:5c:cb:62:70:1c: 8b:25:69:fe:59:9d:d9:4f:5c:35:bf:81:6b:99:b9:5d:ca:94: bc:a4:1e:ad:41:31:f2:b0:58:30:06:b9:12:3d:24:01:89:5e: fe:5e:8c:8c:39:33:9b:67:0a:f0:13:1d:57:48:79:02:ca:94: 58:67:d4:2a:09:bf:b6:5f:13:8a:38:3b:5e:f1:62:c0:09:5b: 43:66:78:a5:b3:17:61:f8:0d:50:65:bd:d1:4a:41:44:a6:30: b3:c7:46:8c:16:15:af:09:c9:7b:26:d5:c7:64:49:e0:f5:30: 37:7e:a3:02:26:1c:36:7f:13:51:5f:f2:23:85:34:a7:47:3e: 1c:12:cf:cb:81:1d:90:31:54:42:db:ce:61:42:aa:68:36:a4: 88:ed:28:5a:56:be:59:0e:b3:ca:f1:ed:64:6d:5c:30:5a:d8: 39:f5:b7:68 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OTLdchHdnVsRWxg8XsmNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjk3YjIxYThiYjdjNTdmOTNjMjZhZDRhYmUwZTgxNjZlZDVhMWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UgDAx82QHtuf1XoTfcYavoiu91L sVCUUFzykIJ9fVqMxDEST1TbRS1Nh0jAfLzZXPhtv6g6aEtEajWpyTxMkU4Yirr5 hH9LgLE0/7FnAHXgewMQdADiKpQ6ajezbBOHLaq57UCxiy4eOU05Ige3RCS+N+nu voT8Xnkhov3EvLgVCCIU592HASsH2cwcBdwQdfA0W5UYZ4sE48wiFToP8h44er3U /x3sLNQrvpxZ6sQMhiW723Htz2a7TlzCqZrNmnlexWVkw/2OuiZ0dRn/Lp1kWcri sd4ueVHyV5SbHOUubZyGSKhSDTQDFnaCwzhJqew60OYs55EChW4JR2JELQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOKXshqLt8V/k8Jq1Kvg6BZu1aGnMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvNHBleUdvdTN4WC1Ud21yVXEtRG9GbTdWb2FjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowWNAwQA owWPMA0GCSqGSIb3DQEBCwUAA4IBAQAayq1icOt9F/7T041NiYCr/YWN45aQNA3R VWZFbLC8m9jf07r2y7oVhaUuNccOaWzDeIJ4fmnOTowHTf+mHKblO2k4wTpDjTdm X6DNAaOiV/w+i26dXMticByLJWn+WZ3ZT1w1v4FrmbldypS8pB6tQTHysFgwBrkS PSQBiV7+XoyMOTObZwrwEx1XSHkCypRYZ9QqCb+2XxOKODte8WLACVtDZnilsxdh +A1QZb3RSkFEpjCzx0aMFhWvCcl7JtXHZEng9TA3fqMCJhw2fxNRX/IjhTSnRz4c Es/LgR2QMVRC285hQqpoNqSI7ShaVr5ZDrPK8e1kbVwwWtg59bdo -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:53 2026 by rpki-client