This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5HWTrZDm4PlfqLpU-OtNuDjXzaE.roa File: 5HWTrZDm4PlfqLpU-OtNuDjXzaE.roa (raw, json) Hash identifier: Mc171ExpqNEWnDKUhYtDMlHUlph6AC9qA2ixRlE6KEM= Subject key identifier: E4:75:93:AD:90:E6:E0:F9:5F:A8:BA:54:F8:EB:4D:B8:38:D7:CD:A1 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E390AFDBE09A2E456FE47E50376F634 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5HWTrZDm4PlfqLpU-OtNuDjXzaE.roa Signing time: Fri 02 Jan 2026 10:20:26 +0000 ROA not before: Fri 02 Jan 2026 10:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 163.5.1.0/24 maxlen: 24 163.5.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:0a:fd:be:09:a2:e4:56:fe:47:e5:03:76:f6:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e47593ad90e6e0f95fa8ba54f8eb4db838d7cda1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fa:dc:78:3b:ca:3b:d1:08:9f:10:37:82:6e: 34:d4:17:d1:c9:62:68:fc:7e:f0:d6:77:91:ea:23: 88:f9:ca:4f:54:b8:80:27:2c:69:b3:b7:82:9b:4a: 6b:4f:89:6f:53:e8:df:dd:be:ea:56:8b:3b:bf:c2: 74:68:2f:08:78:f3:21:89:03:1c:75:62:2b:e3:76: 3b:f9:e4:25:db:84:6c:75:29:7f:79:c7:2f:01:a3: c9:89:08:2d:43:04:23:49:42:be:e3:d1:a1:80:1a: 28:67:1e:41:36:fd:57:0c:c7:6b:01:2e:7b:44:a0: 93:58:b2:1f:ac:72:d1:21:39:e5:74:f5:62:c8:26: 7a:4a:91:c4:c5:43:3a:b4:6d:95:ba:9b:2a:42:0b: 7e:22:c7:64:25:f6:ec:ab:24:e2:3d:27:ea:1d:cb: 77:72:b1:64:46:68:90:4a:2e:72:b7:77:ff:7c:77: ef:db:80:ef:37:69:44:64:58:9e:8a:65:2d:d8:1f: 7b:6f:33:40:c2:e6:2f:89:60:46:50:7d:3d:84:f8: 86:13:ce:a0:fb:16:db:f1:9c:21:c0:51:1c:b0:28: 26:83:50:15:0c:e1:fd:6e:b9:f9:29:d2:82:e4:7a: 74:82:21:66:b5:96:1e:8a:cd:54:de:96:4c:92:c5: d1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:75:93:AD:90:E6:E0:F9:5F:A8:BA:54:F8:EB:4D:B8:38:D7:CD:A1 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5HWTrZDm4PlfqLpU-OtNuDjXzaE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.1.0/24 163.5.43.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:a0:15:b8:18:f0:06:38:57:ae:ac:74:f8:18:ca:0f:65:a8: 68:63:56:fc:ec:51:30:4a:b4:e4:bc:56:69:dc:62:8e:4e:59: 9c:57:21:b9:ea:f0:dc:fd:97:92:17:61:9b:a6:d4:76:b8:00: 9a:08:9d:19:06:22:1e:cc:a1:3e:34:e1:36:8c:5a:d8:74:93: f5:a8:29:d3:5e:59:b3:af:78:9c:85:4f:88:80:e4:cc:ab:f3: 58:ac:0c:80:bb:2d:16:63:1f:d3:60:f3:7d:c2:12:9b:12:3e: ac:4a:66:54:51:4d:2e:ad:c6:d9:fd:26:d1:ef:83:e3:24:0b: aa:eb:fc:1c:5a:d1:95:9f:79:6a:c1:e6:a7:09:88:81:a9:ab: 4f:01:44:21:29:fe:be:5b:cf:bb:6d:00:35:9d:cc:b4:15:d6: 0b:47:12:9a:a4:06:1a:bc:e2:27:23:0a:77:6d:0c:75:5e:bc: f2:c6:4e:0c:6e:ee:bb:e6:57:a7:e9:71:03:0a:19:34:df:26: 0a:d9:c4:90:cd:db:01:bc:b4:e0:42:ea:4b:86:92:cf:04:a8: d9:1f:62:60:b2:e0:72:11:92:c2:0f:34:30:a5:46:3d:82:f1: 68:d2:7b:c4:62:48:c1:e5:08:f9:da:d7:65:a6:a8:e0:da:6d: 8b:69:d8:c6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OQr9vgmi5Fb+R+UDdvY0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDc1OTNhZDkwZTZlMGY5NWZhOGJhNTRmOGViNGRiODM4ZDdjZGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvrceDvKO9EInxA3gm401BfRyWJo /H7w1neR6iOI+cpPVLiAJyxps7eCm0prT4lvU+jf3b7qVos7v8J0aC8IePMhiQMc dWIr43Y7+eQl24RsdSl/eccvAaPJiQgtQwQjSUK+49GhgBooZx5BNv1XDMdrAS57 RKCTWLIfrHLRITnldPViyCZ6SpHExUM6tG2VupsqQgt+IsdkJfbsqyTiPSfqHct3 crFkRmiQSi5yt3f/fHfv24DvN2lEZFieimUt2B97bzNAwuYviWBGUH09hPiGE86g +xbb8ZwhwFEcsCgmg1AVDOH9brn5KdKC5Hp0giFmtZYeis1U3pZMksXRFwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOR1k62Q5uD5X6i6VPjrTbg4182hMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvNUhXVHJaRG00UGxmcUxwVS1PdE51RGpYemFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowUBAwQA owUrMA0GCSqGSIb3DQEBCwUAA4IBAQA7oBW4GPAGOFeurHT4GMoPZahoY1b87FEw SrTkvFZp3GKOTlmcVyG56vDc/ZeSF2GbptR2uACaCJ0ZBiIezKE+NOE2jFrYdJP1 qCnTXlmzr3ichU+IgOTMq/NYrAyAuy0WYx/TYPN9whKbEj6sSmZUUU0urcbZ/SbR 74PjJAuq6/wcWtGVn3lqweanCYiBqatPAUQhKf6+W8+7bQA1ncy0FdYLRxKapAYa vOInIwp3bQx1Xrzyxk4Mbu675len6XEDChk03yYK2cSQzdsBvLTgQupLhpLPBKjZ H2JgsuByEZLCDzQwpUY9gvFo0nvEYkjB5Qj52tdlpqjg2m2LadjG -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:50 2026 by rpki-client