This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/AtL5xQftks1B3guVB0paiujuhB8.roa File: AtL5xQftks1B3guVB0paiujuhB8.roa (raw, json) Hash identifier: 0Ox4m1NJufwznK7JVbM2glaZyBmgdYBs/w7xB87+m5U= Subject key identifier: 02:D2:F9:C5:07:ED:92:CD:41:DE:0B:95:07:4A:5A:8A:E8:EE:84:1F Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019BA71F72E87264433003DCC188777B9C43 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/AtL5xQftks1B3guVB0paiujuhB8.roa Signing time: Sat 10 Jan 2026 08:56:54 +0000 ROA not before: Sat 10 Jan 2026 08:56:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202736 IP address blocks: 163.5.8.0/24 maxlen: 24 163.5.13.0/24 maxlen: 24 163.5.106.0/24 maxlen: 24 163.5.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a7:1f:72:e8:72:64:43:30:03:dc:c1:88:77:7b:9c:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 10 08:56:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02d2f9c507ed92cd41de0b95074a5a8ae8ee841f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8d:dc:27:63:0b:c4:52:01:e8:c7:54:81:f3: 05:32:ca:2f:99:24:95:50:82:43:0b:e2:d9:99:24: b4:7a:1e:64:11:8d:e7:49:59:63:30:e0:b6:bb:35: 02:71:15:95:ed:a2:98:c5:a2:71:c2:5b:d8:66:e6: 9e:41:7c:ee:14:68:ad:56:64:31:03:10:2f:0f:44: 27:ea:61:7d:ce:1b:29:93:54:0e:c3:9b:0f:49:2c: 0b:08:bf:38:12:a0:c5:ab:c5:84:fa:90:88:31:6d: cc:a9:34:95:a9:8c:85:e8:60:f9:6d:2b:f4:10:69: 1f:d9:a9:c8:36:28:7e:1e:69:42:a7:6b:a9:77:67: c2:45:4b:9a:f5:45:df:31:f0:30:3b:24:be:b6:ca: ae:d3:1b:1f:0d:c5:b0:3e:4f:5e:5b:96:a3:90:2d: 69:30:fc:9f:e5:71:6f:00:7f:19:43:87:cd:de:cf: a2:4c:d9:7b:5a:48:8f:32:59:22:65:29:49:e1:a8: b1:d3:4a:2a:f8:2a:ea:40:e8:f9:43:9a:d8:76:d1: 9e:b3:95:c9:14:52:59:ca:21:05:b6:83:cc:20:96: 53:bd:ca:54:3e:78:53:bd:1b:cb:6e:07:30:54:c6: a7:8e:23:f0:21:c7:22:74:1f:07:c5:c4:62:7e:e8: 8d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D2:F9:C5:07:ED:92:CD:41:DE:0B:95:07:4A:5A:8A:E8:EE:84:1F X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/AtL5xQftks1B3guVB0paiujuhB8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.8.0/24 163.5.13.0/24 163.5.106.0/24 163.5.127.0/24 Signature Algorithm: sha256WithRSAEncryption 14:68:09:82:ae:dd:d9:6e:7f:91:50:b3:f6:7c:33:6c:e1:b2: cf:69:a5:69:50:99:a7:2d:61:76:a3:8a:64:29:59:f1:84:1d: 76:bf:52:ee:22:22:75:13:2f:0d:02:1c:49:62:ae:8d:a7:6a: d8:f3:65:0e:df:a7:f6:91:25:49:67:70:79:7f:0b:07:fa:3b: a9:3f:d3:14:96:b7:ac:c3:a3:2a:c8:2e:98:28:0f:a8:d2:7a: 13:8d:1b:47:1b:ee:59:a0:c8:88:94:5f:c3:be:06:8c:7f:91: 65:63:d8:c7:4e:92:11:ae:1d:8b:4b:39:d8:54:c2:4c:00:5a: d8:39:82:61:b7:cb:2c:61:06:98:fa:70:f0:5a:4f:16:9f:bc: 3e:4a:50:9f:35:b8:54:a0:41:f3:3f:c7:a7:4a:d5:bd:cf:f4: 8f:50:6d:6d:4c:dc:73:09:fc:4e:13:19:f4:18:94:92:f1:40: 47:e5:5f:08:bb:d3:71:a4:b5:95:35:33:00:3f:87:da:0f:76: 18:06:4a:88:22:b1:cf:6f:c0:65:22:63:e5:41:39:05:d1:4e: cb:b9:72:c6:40:1f:fa:dd:af:f1:f9:fb:19:ca:93:ba:21:c7: a9:79:61:c7:38:42:5c:a7:7d:1f:04:2e:66:26:e5:4a:b8:b4: 08:e7:80:b9 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZunH3LocmRDMAPcwYh3e5xDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTEwMDg1NjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmQyZjljNTA3ZWQ5MmNkNDFkZTBiOTUwNzRhNWE4YWU4ZWU4NDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2o3cJ2MLxFIB6MdUgfMFMsovmSSV UIJDC+LZmSS0eh5kEY3nSVljMOC2uzUCcRWV7aKYxaJxwlvYZuaeQXzuFGitVmQx AxAvD0Qn6mF9zhspk1QOw5sPSSwLCL84EqDFq8WE+pCIMW3MqTSVqYyF6GD5bSv0 EGkf2anINih+HmlCp2upd2fCRUua9UXfMfAwOyS+tsqu0xsfDcWwPk9eW5ajkC1p MPyf5XFvAH8ZQ4fN3s+iTNl7WkiPMlkiZSlJ4aix00oq+CrqQOj5Q5rYdtGes5XJ FFJZyiEFtoPMIJZTvcpUPnhTvRvLbgcwVManjiPwIccidB8HxcRifuiNFwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFALS+cUH7ZLNQd4LlQdKWoro7oQfMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvQXRMNXhRZnRrczFCM2d1VkIwcGFpdWp1aEI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAowUIAwQA owUNAwQAowVqAwQAowV/MA0GCSqGSIb3DQEBCwUAA4IBAQAUaAmCrt3Zbn+RULP2 fDNs4bLPaaVpUJmnLWF2o4pkKVnxhB12v1LuIiJ1Ey8NAhxJYq6Np2rY82UO36f2 kSVJZ3B5fwsH+jupP9MUlresw6MqyC6YKA+o0noTjRtHG+5ZoMiIlF/DvgaMf5Fl Y9jHTpIRrh2LSznYVMJMAFrYOYJht8ssYQaY+nDwWk8Wn7w+SlCfNbhUoEHzP8en StW9z/SPUG1tTNxzCfxOExn0GJSS8UBH5V8Iu9NxpLWVNTMAP4faD3YYBkqIIrHP b8BlImPlQTkF0U7LuXLGQB/63a/x+fsZypO6IcepeWHHOEJcp30fBC5mJuVKuLQI 54C5 -----END CERTIFICATE-----Generated at Sun Jan 11 07:31:13 2026 by rpki-client