This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/8L-3PebvxuJKQgclpNLzB_fUS5k.roa File: 8L-3PebvxuJKQgclpNLzB_fUS5k.roa (raw, json) Hash identifier: IA+5fZFpIJNKnFRVe3Xxp92GLHqi0ZgxRDn6Q7R/L6o= Subject key identifier: F0:BF:B7:3D:E6:EF:C6:E2:4A:42:07:25:A4:D2:F3:07:F7:D4:4B:99 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E3926477AB1B02AAA250FC6652E2875 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/8L-3PebvxuJKQgclpNLzB_fUS5k.roa Signing time: Fri 02 Jan 2026 10:20:33 +0000 ROA not before: Fri 02 Jan 2026 10:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58061 IP address blocks: 163.5.26.0/24 maxlen: 24 163.5.150.0/24 maxlen: 24 163.5.180.0/24 maxlen: 24 163.5.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:26:47:7a:b1:b0:2a:aa:25:0f:c6:65:2e:28:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0bfb73de6efc6e24a420725a4d2f307f7d44b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c1:fe:43:3a:22:19:6b:9b:49:57:3c:e4:a3: 2a:22:2b:06:ff:61:d1:d2:3c:e9:ac:c8:64:d4:0c: 29:cb:a4:dc:c9:54:d7:e6:3c:ea:a4:13:44:15:c4: d4:e0:da:c9:2e:d6:5c:60:09:aa:f8:0c:98:a4:1b: e1:10:60:70:29:fd:ee:d7:18:c6:0e:d5:ba:03:e6: e9:31:32:ef:95:88:ef:dd:ac:57:61:00:78:c5:06: ba:ac:b4:42:ae:90:cf:b9:3b:36:1b:2e:63:8b:72: 3e:44:cb:69:1e:a5:1c:ee:39:1e:10:57:84:2e:67: 16:55:27:0f:62:33:c3:26:c7:ba:48:95:a6:96:42: 40:15:ab:d2:9e:14:ea:0b:54:4b:af:d6:6a:de:65: a7:a9:37:cb:a9:d1:90:51:d1:3e:e5:67:63:2f:90: 04:ec:df:2b:8c:81:14:18:39:76:73:0a:67:e1:41: f0:13:52:22:30:fa:5b:0e:77:88:8b:f9:89:2a:2e: 19:69:ab:38:05:6b:64:c7:f0:63:d2:98:d0:5a:7b: 11:a1:3c:81:02:cd:24:71:46:63:29:9c:bc:d5:0b: 62:21:55:ed:52:14:26:1d:c1:bc:05:d5:48:01:45: c1:35:ae:fd:0d:44:78:8b:51:f1:05:8c:c8:ee:b7: 68:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BF:B7:3D:E6:EF:C6:E2:4A:42:07:25:A4:D2:F3:07:F7:D4:4B:99 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/8L-3PebvxuJKQgclpNLzB_fUS5k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.26.0/24 163.5.150.0/24 163.5.180.0/24 163.5.183.0/24 Signature Algorithm: sha256WithRSAEncryption 29:4a:1b:6a:c8:5c:e9:e3:a1:4c:a7:21:13:13:77:d9:9f:73: fd:dc:ec:a4:18:39:c7:a0:c0:fa:f6:ff:85:f6:c4:6b:d9:e9: a6:f0:8c:f7:62:53:19:ad:60:46:3d:97:69:50:9c:58:48:32: 64:80:0d:50:ae:15:91:10:69:c7:e2:06:2f:fb:ed:91:2e:73: 8e:1d:13:ea:36:87:b1:75:fc:1d:fb:aa:10:1b:2a:c7:57:71: bf:62:8c:89:f3:56:15:e2:24:ca:23:a7:64:81:ae:fb:c2:c3: 8f:db:ed:5b:e9:98:ef:95:00:a0:42:18:ef:fa:a4:01:dd:4f: 8e:f3:b6:39:0c:8a:93:80:76:96:29:0a:ad:bc:6c:69:a3:15: 52:f8:e0:4f:91:a8:39:ed:ea:31:22:79:c2:1e:e4:36:9a:b4: 1e:28:e3:0c:7e:c2:af:4a:a2:11:fd:70:71:ad:94:41:af:e5: 08:7e:21:41:32:33:32:01:15:3b:3c:56:09:38:06:5c:7d:b3: 86:45:57:53:37:a5:1b:d8:5a:e2:32:b2:53:e5:09:2c:2b:74: 76:05:1e:43:9a:a9:e5:6e:59:d7:6b:3e:15:4a:6f:10:74:82: fd:0d:95:39:8d:fb:2f:08:69:89:ab:43:76:27:9a:d8:a9:b4: 71:1f:6c:b4 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+OSZHerGwKqolD8ZlLih1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGJmYjczZGU2ZWZjNmUyNGE0MjA3MjVhNGQyZjMwN2Y3ZDQ0Yjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcH+QzoiGWubSVc85KMqIisG/2HR 0jzprMhk1Awpy6TcyVTX5jzqpBNEFcTU4NrJLtZcYAmq+AyYpBvhEGBwKf3u1xjG DtW6A+bpMTLvlYjv3axXYQB4xQa6rLRCrpDPuTs2Gy5ji3I+RMtpHqUc7jkeEFeE LmcWVScPYjPDJse6SJWmlkJAFavSnhTqC1RLr9Zq3mWnqTfLqdGQUdE+5WdjL5AE 7N8rjIEUGDl2cwpn4UHwE1IiMPpbDneIi/mJKi4Zaas4BWtkx/Bj0pjQWnsRoTyB As0kcUZjKZy81QtiIVXtUhQmHcG8BdVIAUXBNa79DUR4i1HxBYzI7rdoFQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPC/tz3m78biSkIHJaTS8wf31EuZMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvOEwtM1BlYnZ4dUpLUWdjbHBOTHpCX2ZVUzVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAowUaAwQA owWWAwQAowW0AwQAowW3MA0GCSqGSIb3DQEBCwUAA4IBAQApShtqyFzp46FMpyET E3fZn3P93OykGDnHoMD69v+F9sRr2emm8Iz3YlMZrWBGPZdpUJxYSDJkgA1QrhWR EGnH4gYv++2RLnOOHRPqNoexdfwd+6oQGyrHV3G/YoyJ81YV4iTKI6dkga77wsOP 2+1b6ZjvlQCgQhjv+qQB3U+O87Y5DIqTgHaWKQqtvGxpoxVS+OBPkag57eoxInnC HuQ2mrQeKOMMfsKvSqIR/XBxrZRBr+UIfiFBMjMyARU7PFYJOAZcfbOGRVdTN6Ub 2FriMrJT5QksK3R2BR5DmqnlblnXaz4VSm8QdIL9DZU5jfsvCGmJq0N2J5rYqbRx H2y0 -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:57 2026 by rpki-client