This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5ajSFDq4_SvewNuDAf525hsWjaM.roa File: 5ajSFDq4_SvewNuDAf525hsWjaM.roa (raw, json) Hash identifier: yUiuF47juATRuzdSICB3SU+DBQfMa51LWZFlaA7iHcY= Subject key identifier: E5:A8:D2:14:3A:B8:FD:2B:DE:C0:DB:83:01:FE:76:E6:1B:16:8D:A3 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019AA6C7B0DB15F1D1992689C650AB3B2F64 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5ajSFDq4_SvewNuDAf525hsWjaM.roa Signing time: Fri 21 Nov 2025 14:18:15 +0000 ROA not before: Fri 21 Nov 2025 14:18:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20860 IP address blocks: 163.5.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:c7:b0:db:15:f1:d1:99:26:89:c6:50:ab:3b:2f:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Nov 21 14:18:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e5a8d2143ab8fd2bdec0db8301fe76e61b168da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:20:7d:15:63:97:b2:45:52:77:33:72:80:2c: 0a:f7:e0:d0:56:21:1d:82:ab:a0:9d:3b:0f:3a:37: 9f:d7:d8:e3:1a:89:88:ab:38:ff:dd:15:ed:cc:d4: 3e:29:5d:bb:1e:65:3f:87:b6:80:29:b3:5a:63:f6: db:b9:0b:c5:99:a5:97:76:ad:f1:05:46:a0:a1:21: 65:5d:1f:34:f9:8a:c5:56:08:df:38:88:c4:65:b3: 22:5e:b3:78:40:20:0b:fa:26:22:71:f1:eb:72:5d: c0:e4:43:b5:af:40:17:f7:5e:2b:52:57:25:8b:3c: 94:dc:4d:aa:f4:5d:39:43:1e:3a:4a:f8:d1:bd:83: 87:f6:32:0c:e3:bd:24:dd:1e:4e:8f:c3:c3:ee:ab: 63:36:2e:84:43:a1:6c:6d:31:36:99:5a:a7:71:39: 7d:31:b6:5b:a0:a3:bf:85:87:9a:be:b8:0e:af:11: 8f:72:18:0f:49:9c:80:15:62:91:93:e4:55:44:46: 4f:6c:8a:3c:ed:e4:a0:58:af:34:c4:06:bd:2a:c2: 84:57:73:c2:67:8c:78:d6:e7:27:be:4d:77:6c:7a: 43:ec:c8:47:d3:bb:d2:1b:5a:38:d3:7f:89:16:3f: a4:f9:d3:0b:13:91:31:be:a5:5f:6d:98:59:2d:9c: 68:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A8:D2:14:3A:B8:FD:2B:DE:C0:DB:83:01:FE:76:E6:1B:16:8D:A3 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5ajSFDq4_SvewNuDAf525hsWjaM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.94.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:c0:0c:7b:58:7d:a6:05:90:0d:62:33:fd:5e:72:65:5f:c1: 8b:b6:2c:bb:88:47:ff:cd:ee:96:56:96:f1:22:27:d1:62:ac: f8:a5:32:12:69:05:a2:dd:e8:1f:c2:46:60:8c:77:36:8f:38: 5a:f8:43:30:e5:c4:36:a7:d2:17:e1:0e:ee:0d:6a:fc:a1:cc: 05:38:49:bd:ac:51:d9:ae:aa:89:bb:c0:c0:c5:3f:43:79:cd: 2b:6b:ba:4a:48:a5:ca:80:23:5f:9d:15:e9:a7:0d:1f:51:80: 95:1b:dd:7c:47:d6:09:b7:75:22:fe:50:e6:47:b9:ae:59:f9: 10:81:a0:84:da:ef:2b:35:8f:e1:be:03:87:bd:a8:55:91:e4: 84:d5:1a:b8:ba:c3:89:22:46:44:e4:b5:7d:c4:a7:7b:21:86: 90:f2:18:2b:72:a8:ce:12:5e:27:50:f6:12:37:1f:bf:c9:0d: d8:15:0a:a4:79:8a:ad:84:74:1e:5b:6c:90:1d:88:2e:9f:aa: b0:f9:40:12:71:76:92:a3:ea:62:3d:21:0f:c2:4c:86:0c:bd: d6:53:e4:07:57:06:8e:a4:a9:60:64:09:5b:07:85:80:f8:a3: 79:6e:51:cb:8a:62:4c:e8:e4:4f:c4:33:bc:c1:44:6e:41:56: c8:6f:4a:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqmx7DbFfHRmSaJxlCrOy9kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMTIxMTQxODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWE4ZDIxNDNhYjhmZDJiZGVjMGRiODMwMWZlNzZlNjFiMTY4ZGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSB9FWOXskVSdzNygCwK9+DQViEd gqugnTsPOjef19jjGomIqzj/3RXtzNQ+KV27HmU/h7aAKbNaY/bbuQvFmaWXdq3x BUagoSFlXR80+YrFVgjfOIjEZbMiXrN4QCAL+iYicfHrcl3A5EO1r0AX914rUlcl izyU3E2q9F05Qx46SvjRvYOH9jIM470k3R5Oj8PD7qtjNi6EQ6FsbTE2mVqncTl9 MbZboKO/hYeavrgOrxGPchgPSZyAFWKRk+RVREZPbIo87eSgWK80xAa9KsKEV3PC Z4x41ucnvk13bHpD7MhH07vSG1o403+JFj+k+dMLE5ExvqVfbZhZLZxorQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOWo0hQ6uP0r3sDbgwH+duYbFo2jMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvNWFqU0ZEcTRfU3Zld051REFmNTI1aHNXamFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowVeMA0G CSqGSIb3DQEBCwUAA4IBAQBrwAx7WH2mBZANYjP9XnJlX8GLtiy7iEf/ze6WVpbx IifRYqz4pTISaQWi3egfwkZgjHc2jzha+EMw5cQ2p9IX4Q7uDWr8ocwFOEm9rFHZ rqqJu8DAxT9Dec0ra7pKSKXKgCNfnRXppw0fUYCVG918R9YJt3Ui/lDmR7muWfkQ gaCE2u8rNY/hvgOHvahVkeSE1Rq4usOJIkZE5LV9xKd7IYaQ8hgrcqjOEl4nUPYS Nx+/yQ3YFQqkeYqthHQeW2yQHYgun6qw+UAScXaSo+piPSEPwkyGDL3WU+QHVwaO pKlgZAlbB4WA+KN5blHLimJM6ORPxDO8wURuQVbIb0oU -----END CERTIFICATE-----Generated at Fri Dec 5 07:02:14 2025 by rpki-client