This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/AZdhO6C7hFThCQvKrKC2Kw230is.roa File: AZdhO6C7hFThCQvKrKC2Kw230is.roa (raw, json) Hash identifier: mSSbHJJxj0QNkCFXgxVMO6OUH/uInRZZ7zuQgtZGWGg= Subject key identifier: 01:97:61:3B:A0:BB:84:54:E1:09:0B:CA:AC:A0:B6:2B:0D:B7:D2:2B Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E3924020BCA51FB9C65193E79147A7F Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/AZdhO6C7hFThCQvKrKC2Kw230is.roa Signing time: Fri 02 Jan 2026 10:20:32 +0000 ROA not before: Fri 02 Jan 2026 10:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55201 IP address blocks: 163.5.13.0/24 maxlen: 24 163.5.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:24:02:0b:ca:51:fb:9c:65:19:3e:79:14:7a:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0197613ba0bb8454e1090bcaaca0b62b0db7d22b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bf:89:b0:7c:d4:56:e7:6d:9e:ee:03:64:e1: 03:14:52:32:e7:2b:e6:8a:4c:99:7d:88:fa:81:98: 0a:b4:06:59:64:5e:62:ed:ed:ac:a7:fe:38:a8:5a: 29:63:6b:d6:19:7f:5f:c0:13:45:ce:81:46:3f:28: aa:11:09:48:6a:72:d5:43:af:13:51:54:a6:34:59: 85:3c:98:94:e2:a6:46:12:37:77:2c:44:cb:c0:37: 25:66:77:e0:14:58:5c:aa:9c:0d:21:e5:76:82:55: f9:ea:53:d3:62:ef:53:97:e5:d4:68:0d:7c:05:d3: f6:33:67:32:80:2c:c3:5d:e2:67:2f:4f:1d:9e:80: 27:eb:59:e5:14:e1:d0:65:b4:a3:5e:a7:bb:1e:26: 89:a5:86:3b:21:a5:da:a8:51:df:8a:05:8c:1d:5f: e0:ae:28:35:f6:37:56:e3:a5:31:e1:db:32:22:ba: ed:32:ef:65:86:e1:5f:f5:71:cb:d8:4a:b7:02:e6: 7b:a4:3f:f7:c2:5c:51:c1:af:a2:95:f2:d1:7d:b0: eb:6b:92:3f:eb:d2:1e:39:31:5c:34:3f:cd:fc:63: ea:ab:7d:f7:68:02:fe:a0:e0:d4:5c:91:9d:71:7c: c4:a7:ff:ce:a6:11:99:10:aa:50:bf:e6:be:9f:1a: 87:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:97:61:3B:A0:BB:84:54:E1:09:0B:CA:AC:A0:B6:2B:0D:B7:D2:2B X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/AZdhO6C7hFThCQvKrKC2Kw230is.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.13.0/24 163.5.127.0/24 Signature Algorithm: sha256WithRSAEncryption 52:2a:6b:09:bf:41:52:ee:40:bb:22:cc:e0:07:1a:af:42:24: cd:a5:4a:f4:27:0a:08:21:3f:fb:2a:84:36:09:39:4c:ba:65: 13:6f:fb:43:f9:4d:5a:53:9d:ae:b2:23:39:63:d9:50:38:29: 04:51:11:d3:ad:ad:de:d5:4b:c5:b8:9a:56:ee:86:30:28:66: 70:2d:05:af:19:f8:84:b2:9a:96:90:88:fe:b6:53:80:ca:d6: da:d4:4c:30:a4:af:07:25:16:90:97:c5:1b:fc:da:a7:1b:97: 50:2b:2e:12:7b:c8:b2:d5:2c:d5:03:41:c8:4c:a0:19:a6:08: dc:6c:43:9f:67:06:19:59:ae:3b:4a:d8:d6:fa:c4:66:7a:0d: d7:20:6b:26:ae:a5:10:dc:28:37:aa:96:a4:d5:21:2c:51:51: 43:18:ab:e0:7c:68:ae:a7:1e:47:8e:46:7b:2c:5e:83:e1:63: 80:7d:5f:df:7f:bf:c4:46:4b:a5:08:68:f9:29:ed:ca:f1:12: 68:2c:84:f4:13:cd:d6:1e:8b:91:6f:43:91:37:a2:2b:eb:05: c5:6d:f4:0f:f5:7d:5b:51:53:2a:3c:6c:3b:9c:6b:eb:e3:02: 49:a2:b0:9e:98:b5:43:4b:dd:28:77:2c:fd:32:57:63:2a:9f: 54:4b:fe:1c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OSQCC8pR+5xlGT55FHp/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTk3NjEzYmEwYmI4NDU0ZTEwOTBiY2FhY2EwYjYyYjBkYjdkMjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL+JsHzUVudtnu4DZOEDFFIy5yvm ikyZfYj6gZgKtAZZZF5i7e2sp/44qFopY2vWGX9fwBNFzoFGPyiqEQlIanLVQ68T UVSmNFmFPJiU4qZGEjd3LETLwDclZnfgFFhcqpwNIeV2glX56lPTYu9Tl+XUaA18 BdP2M2cygCzDXeJnL08dnoAn61nlFOHQZbSjXqe7HiaJpYY7IaXaqFHfigWMHV/g rig19jdW46Ux4dsyIrrtMu9lhuFf9XHL2Eq3AuZ7pD/3wlxRwa+ilfLRfbDra5I/ 69IeOTFcND/N/GPqq333aAL+oODUXJGdcXzEp//OphGZEKpQv+a+nxqHUQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAGXYTugu4RU4QkLyqygtisNt9IrMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvQVpkaE82QzdoRlRoQ1F2S3JLQzJLdzIzMGlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowUNAwQA owV/MA0GCSqGSIb3DQEBCwUAA4IBAQBSKmsJv0FS7kC7IszgBxqvQiTNpUr0JwoI IT/7KoQ2CTlMumUTb/tD+U1aU52usiM5Y9lQOCkEURHTra3e1UvFuJpW7oYwKGZw LQWvGfiEspqWkIj+tlOAytba1EwwpK8HJRaQl8Ub/NqnG5dQKy4Se8iy1SzVA0HI TKAZpgjcbEOfZwYZWa47StjW+sRmeg3XIGsmrqUQ3Cg3qpak1SEsUVFDGKvgfGiu px5HjkZ7LF6D4WOAfV/ff7/ERkulCGj5Ke3K8RJoLIT0E83WHouRb0ORN6Ir6wXF bfQP9X1bUVMqPGw7nGvr4wJJorCemLVDS90odyz9MldjKp9US/4c -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:23 2026 by rpki-client