This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/B5PClqh9stalAQ6_UXeLZgO_90U.roa File: B5PClqh9stalAQ6_UXeLZgO_90U.roa (raw, json) Hash identifier: 5xk1BhpIMPC8TXucg1vThcpihlfl3Kt/gOr6LPm9RjM= Subject key identifier: 07:93:C2:96:A8:7D:B2:D6:A5:01:0E:BF:51:77:8B:66:03:BF:F7:45 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E3942A1AFEE4031E5C7E0C005AC7E55 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/B5PClqh9stalAQ6_UXeLZgO_90U.roa Signing time: Fri 02 Jan 2026 10:20:40 +0000 ROA not before: Fri 02 Jan 2026 10:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215727 IP address blocks: 163.5.123.0/24 maxlen: 24 163.5.192.0/24 maxlen: 24 163.5.193.0/24 maxlen: 24 163.5.195.0/24 maxlen: 24 163.5.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:42:a1:af:ee:40:31:e5:c7:e0:c0:05:ac:7e:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0793c296a87db2d6a5010ebf51778b6603bff745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:54:23:49:c2:50:f4:bc:98:f2:07:cd:06:df: 15:53:49:21:c8:13:2c:ef:b1:d9:bb:15:c4:d1:fb: 2e:c5:21:80:6f:e4:d9:b2:1b:a1:3c:32:bc:b2:78: 51:75:64:a7:a5:f8:73:37:90:b3:0a:6d:52:90:4e: e8:60:95:71:f2:b9:8f:b4:7a:e4:cc:c7:93:dd:8a: 5b:7d:03:de:00:05:1b:9c:2d:bc:ad:32:b6:77:5f: c0:9b:25:eb:66:47:87:18:9b:b1:ed:2a:8f:4c:bd: 5c:6e:e5:6c:d2:75:63:53:fd:14:1d:f7:40:a4:ed: d6:e4:fd:b1:44:41:46:58:83:65:fd:08:00:08:23: 28:6a:9f:79:18:d1:73:f6:78:2f:c2:75:d1:54:f4: 33:1c:8f:ba:2f:77:d0:a6:82:3a:0c:f3:89:b8:67: 8f:7f:99:3f:5d:76:fc:c5:6d:71:89:52:71:e4:ff: 84:dc:01:da:ff:9c:1a:25:a2:b7:91:62:00:74:bd: 7a:63:1f:f3:b1:b8:8a:29:6c:a3:b1:0f:99:12:8a: da:17:39:c6:eb:06:bf:23:aa:6a:c9:91:16:b2:28: 63:36:8e:a9:7a:1f:32:66:c8:b2:be:85:1d:ad:c4: 07:84:e6:19:51:27:4a:a2:a1:e0:b0:84:e6:a2:dd: 36:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:93:C2:96:A8:7D:B2:D6:A5:01:0E:BF:51:77:8B:66:03:BF:F7:45 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/B5PClqh9stalAQ6_UXeLZgO_90U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.123.0/24 163.5.192.0/23 163.5.195.0/24 163.5.213.0/24 Signature Algorithm: sha256WithRSAEncryption 44:5e:ac:23:2c:04:76:0d:af:1e:23:9a:a4:4b:f0:42:df:d6: 12:5b:8f:df:01:1c:69:84:c8:df:be:36:cf:9f:0b:c5:d8:92: ce:64:87:fd:01:65:46:ec:0a:e2:ae:69:1e:44:79:80:bf:0b: d5:9a:72:1e:52:cb:71:af:88:f0:46:56:7a:b9:2f:4c:69:3e: c9:12:b4:22:be:8f:54:5a:03:47:d4:a9:b2:23:f7:a4:c9:93: c1:64:18:37:9c:42:dc:44:94:82:ea:2e:85:da:82:ba:34:66: 62:d9:03:86:95:4d:7e:66:d3:81:5d:93:7a:f2:0c:1c:1e:45: a9:07:32:c0:d6:c7:7e:5e:e5:26:4e:08:75:ac:5e:5e:37:cd: 38:b2:a0:19:f0:95:48:2a:4b:43:88:d9:30:df:9d:51:6a:f8: 94:82:0d:15:c7:31:aa:37:7e:b1:a3:e6:01:2b:f2:bd:3e:eb: e9:cd:34:5d:92:2a:f0:50:2a:67:70:63:15:6c:69:bd:fe:05: 6d:81:9a:12:d7:fc:35:3c:5a:27:48:84:b8:3a:3d:1c:5a:95: 3a:b0:d9:31:05:fa:6e:c8:52:ad:88:aa:56:4c:8b:95:1c:6c: 70:e6:93:50:9b:4d:17:7c:4a:e6:85:11:f8:6a:36:cb:0f:da: 1c:ad:94:ec -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+OUKhr+5AMeXH4MAFrH5VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzkzYzI5NmE4N2RiMmQ2YTUwMTBlYmY1MTc3OGI2NjAzYmZmNzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlQjScJQ9LyY8gfNBt8VU0khyBMs 77HZuxXE0fsuxSGAb+TZshuhPDK8snhRdWSnpfhzN5CzCm1SkE7oYJVx8rmPtHrk zMeT3YpbfQPeAAUbnC28rTK2d1/AmyXrZkeHGJux7SqPTL1cbuVs0nVjU/0UHfdA pO3W5P2xREFGWINl/QgACCMoap95GNFz9ngvwnXRVPQzHI+6L3fQpoI6DPOJuGeP f5k/XXb8xW1xiVJx5P+E3AHa/5waJaK3kWIAdL16Yx/zsbiKKWyjsQ+ZEoraFznG 6wa/I6pqyZEWsihjNo6peh8yZsiyvoUdrcQHhOYZUSdKoqHgsITmot02qQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFAeTwpaofbLWpQEOv1F3i2YDv/dFMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvQjVQQ2xxaDlzdGFsQVE2X1VYZUxaZ09fOTBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAowV7AwQB owXAAwQAowXDAwQAowXVMA0GCSqGSIb3DQEBCwUAA4IBAQBEXqwjLAR2Da8eI5qk S/BC39YSW4/fARxphMjfvjbPnwvF2JLOZIf9AWVG7ArirmkeRHmAvwvVmnIeUstx r4jwRlZ6uS9MaT7JErQivo9UWgNH1KmyI/ekyZPBZBg3nELcRJSC6i6F2oK6NGZi 2QOGlU1+ZtOBXZN68gwcHkWpBzLA1sd+XuUmTgh1rF5eN804sqAZ8JVIKktDiNkw 351RaviUgg0VxzGqN36xo+YBK/K9PuvpzTRdkirwUCpncGMVbGm9/gVtgZoS1/w1 PFonSIS4Oj0cWpU6sNkxBfpuyFKtiKpWTIuVHGxw5pNQm00XfErmhRH4ajbLD9oc rZTs -----END CERTIFICATE-----Generated at Mon Jan 19 18:24:15 2026 by rpki-client