This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CTPbDDwYzBH-LMigg6D1fnIe-s8.roa File: CTPbDDwYzBH-LMigg6D1fnIe-s8.roa (raw, json) Hash identifier: u7IiFYBH7dQZ6UjwTpUWghb2go2IskuBtkn8nZZP/Xo= Subject key identifier: 09:33:DB:0C:3C:18:CC:11:FE:2C:C8:A0:83:A0:F5:7E:72:1E:FA:CF Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B121CB618B7CA81C9D63595DDEDF0F00D Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CTPbDDwYzBH-LMigg6D1fnIe-s8.roa Signing time: Fri 12 Dec 2025 10:30:30 +0000 ROA not before: Fri 12 Dec 2025 10:30:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216138 IP address blocks: 163.5.13.0/24 maxlen: 24 163.5.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:1c:b6:18:b7:ca:81:c9:d6:35:95:dd:ed:f0:f0:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Dec 12 10:30:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0933db0c3c18cc11fe2cc8a083a0f57e721efacf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d2:e5:27:5f:5e:32:43:79:5c:59:f8:ca:2d: 1b:b2:11:9a:f8:f2:14:12:6b:20:6f:c2:52:e2:27: 17:54:86:4d:62:ce:23:f4:40:f9:dd:0b:0d:89:1e: 48:30:66:f7:cd:bf:3d:2e:16:ce:1a:9a:6f:98:a1: c3:e7:b8:b3:02:02:c2:4d:49:de:d5:60:48:b8:ed: 4e:30:91:3c:9f:e1:39:a7:df:01:23:0e:1c:94:bb: a0:af:38:47:c1:fd:9d:7f:9d:7f:a2:5a:39:95:e3: 8c:f8:47:8b:d1:48:fd:1f:a7:c4:6f:a6:74:d8:ff: bb:f4:3e:c3:ad:1a:7e:5d:2d:20:8a:22:79:d2:73: 0c:d3:fd:0d:00:ec:c1:3d:48:1e:47:8d:7c:70:4d: f1:85:47:97:ba:97:bf:45:29:3b:6c:c2:7d:6a:97: a5:97:46:63:90:fc:ce:dc:ff:e7:3e:86:c1:03:2e: b2:e3:55:e8:39:9c:23:54:56:5e:b0:37:76:34:e1: ee:45:02:a8:dc:0a:13:5e:03:1a:7e:43:e3:66:b5: 6c:03:bf:f7:63:9e:7d:a9:4b:63:d7:ef:00:2f:6c: 3c:a7:d1:cf:62:e7:e1:6b:f6:42:9e:5a:a5:0f:3c: 09:20:cc:b5:3d:31:77:65:0d:bb:eb:e3:52:4e:00: 78:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:33:DB:0C:3C:18:CC:11:FE:2C:C8:A0:83:A0:F5:7E:72:1E:FA:CF X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CTPbDDwYzBH-LMigg6D1fnIe-s8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.13.0/24 163.5.127.0/24 Signature Algorithm: sha256WithRSAEncryption 26:2a:5b:75:f8:cf:27:32:fd:16:ee:6d:ff:60:14:8f:15:3c: 9f:84:eb:19:f3:f9:df:04:f2:d2:a5:79:e8:bd:94:4c:2d:d6: a3:6a:02:58:e0:f6:e5:34:66:91:60:4f:68:67:5b:6b:fb:42: ff:77:68:ed:58:ad:bd:eb:a6:d6:56:b9:18:b8:2e:58:3f:7a: 52:a8:f5:cd:16:9d:34:85:ad:27:5a:7a:cf:de:37:19:3a:00: 04:5c:b5:6f:26:31:f8:1d:1b:56:a7:80:9c:5a:6f:50:ed:8f: d6:d9:36:c8:e5:32:df:5b:88:e8:b0:96:90:5d:ea:69:2a:54: 66:8e:fe:07:7a:cd:6e:fd:57:de:f0:ec:b8:6f:e8:d0:e1:bd: b7:18:a6:02:8f:5a:a7:d7:cc:12:a5:77:d1:a3:37:03:c4:d5: 0b:3d:b1:5b:ea:fe:8e:c0:8e:0a:05:a9:f4:95:1f:e3:0b:40: fa:f2:dd:82:94:ec:d0:b8:5d:15:fa:f1:37:c1:61:8a:18:96: 88:6a:90:fc:51:73:ac:20:7d:fb:50:c5:ed:3d:32:9d:f1:67: f8:73:08:61:cf:0d:fa:b6:de:67:31:67:59:3d:10:f9:94:78: a9:a5:df:0e:fa:1e:fd:e8:eb:c7:9b:a3:a0:21:8c:3b:e2:89: ba:ef:9e:43 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsSHLYYt8qBydY1ld3t8PANMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMjEyMTAzMDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTMzZGIwYzNjMThjYzExZmUyY2M4YTA4M2EwZjU3ZTcyMWVmYWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdLlJ19eMkN5XFn4yi0bshGa+PIU Emsgb8JS4icXVIZNYs4j9ED53QsNiR5IMGb3zb89LhbOGppvmKHD57izAgLCTUne 1WBIuO1OMJE8n+E5p98BIw4clLugrzhHwf2df51/olo5leOM+EeL0Uj9H6fEb6Z0 2P+79D7DrRp+XS0giiJ50nMM0/0NAOzBPUgeR418cE3xhUeXupe/RSk7bMJ9apel l0ZjkPzO3P/nPobBAy6y41XoOZwjVFZesDd2NOHuRQKo3AoTXgMafkPjZrVsA7/3 Y559qUtj1+8AL2w8p9HPYufha/ZCnlqlDzwJIMy1PTF3ZQ276+NSTgB4PwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAkz2ww8GMwR/izIoIOg9X5yHvrPMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvQ1RQYkREd1l6QkgtTE1pZ2c2RDFmbkllLXM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowUNAwQA owV/MA0GCSqGSIb3DQEBCwUAA4IBAQAmKlt1+M8nMv0W7m3/YBSPFTyfhOsZ8/nf BPLSpXnovZRMLdajagJY4PblNGaRYE9oZ1tr+0L/d2jtWK2966bWVrkYuC5YP3pS qPXNFp00ha0nWnrP3jcZOgAEXLVvJjH4HRtWp4CcWm9Q7Y/W2TbI5TLfW4josJaQ XeppKlRmjv4Hes1u/Vfe8Oy4b+jQ4b23GKYCj1qn18wSpXfRozcDxNULPbFb6v6O wI4KBan0lR/jC0D68t2ClOzQuF0V+vE3wWGKGJaIapD8UXOsIH37UMXtPTKd8Wf4 cwhhzw36tt5nMWdZPRD5lHippd8O+h796OvHm6OgIYw74om6755D -----END CERTIFICATE-----Generated at Fri Dec 19 19:42:25 2025 by rpki-client