This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/E4p_QkXfyL5dQ3G60gAmTYmXm_4.roa File: E4p_QkXfyL5dQ3G60gAmTYmXm_4.roa (raw, json) Hash identifier: GabFVDisPjJDEJCZT+lRqbx4nWQjIewvnkIFiEMlku8= Subject key identifier: 13:8A:7F:42:45:DF:C8:BE:5D:43:71:BA:D2:00:26:4D:89:97:9B:FE Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019BD0B1EA4589C4B3444B7607BD62DDB98C Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/E4p_QkXfyL5dQ3G60gAmTYmXm_4.roa Signing time: Sun 18 Jan 2026 10:41:19 +0000 ROA not before: Sun 18 Jan 2026 10:41:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 163.5.9.0/24 maxlen: 24 163.5.28.0/24 maxlen: 24 163.5.30.0/24 maxlen: 24 163.5.59.0/24 maxlen: 24 163.5.97.0/24 maxlen: 24 163.5.102.0/24 maxlen: 24 163.5.109.0/24 maxlen: 24 163.5.112.0/24 maxlen: 24 163.5.118.0/24 maxlen: 24 163.5.121.0/24 maxlen: 24 163.5.129.0/24 maxlen: 24 163.5.139.0/24 maxlen: 24 163.5.143.0/24 maxlen: 24 163.5.146.0/24 maxlen: 24 163.5.151.0/24 maxlen: 24 163.5.160.0/24 maxlen: 24 163.5.167.0/24 maxlen: 24 163.5.178.0/24 maxlen: 24 163.5.189.0/24 maxlen: 24 163.5.199.0/24 maxlen: 24 163.5.201.0/24 maxlen: 24 163.5.203.0/24 maxlen: 24 163.5.204.0/24 maxlen: 24 163.5.205.0/24 maxlen: 24 163.5.218.0/24 maxlen: 24 163.5.224.0/24 maxlen: 24 163.5.228.0/24 maxlen: 24 163.5.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d0:b1:ea:45:89:c4:b3:44:4b:76:07:bd:62:dd:b9:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 18 10:41:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=138a7f4245dfc8be5d4371bad200264d89979bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:37:1c:a0:a0:3d:77:a2:88:f3:0d:e6:45:89: 05:2f:56:d6:76:77:c9:6c:35:71:fc:35:92:13:73: c7:52:a7:e9:ec:08:ef:27:9b:7a:35:b0:13:d3:ce: a3:d8:a8:4c:97:5a:35:c1:52:19:4d:de:5e:27:c1: 0b:21:1a:49:bc:28:68:36:12:a1:0d:f5:37:86:2f: c2:a5:a5:0b:8f:b7:27:a7:3c:49:63:52:50:24:71: 49:08:b0:42:97:ef:ac:18:fe:60:31:94:8f:b0:c9: 11:d2:b2:ff:d1:70:f5:3e:e7:45:5d:84:26:97:b5: 43:1d:0c:b9:7c:b1:a4:de:d7:f7:57:22:f4:19:a5: ef:46:cb:ef:84:8c:4d:65:2f:f2:a5:a2:cd:0e:9f: 53:92:17:10:ec:2e:c4:9b:32:0b:3c:7c:d7:f1:0b: ab:a7:69:c5:42:e0:d3:45:07:f1:3b:0d:3f:f7:38: 53:cc:70:3b:b2:b4:69:f7:8a:d7:67:40:b8:bf:e0: d5:4d:7d:69:a3:2a:78:e4:c1:10:e2:0f:f5:9d:2c: 8c:69:57:b2:de:e3:d9:4f:d9:20:58:a0:f1:09:37: 74:22:34:8e:3a:98:06:c9:19:55:ff:83:53:41:a6: 9d:65:54:03:16:a0:89:5e:85:61:5d:ce:9c:92:34: 8a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:8A:7F:42:45:DF:C8:BE:5D:43:71:BA:D2:00:26:4D:89:97:9B:FE X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/E4p_QkXfyL5dQ3G60gAmTYmXm_4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.9.0/24 163.5.28.0/24 163.5.30.0/24 163.5.59.0/24 163.5.97.0/24 163.5.102.0/24 163.5.109.0/24 163.5.112.0/24 163.5.118.0/24 163.5.121.0/24 163.5.129.0/24 163.5.139.0/24 163.5.143.0/24 163.5.146.0/24 163.5.151.0/24 163.5.160.0/24 163.5.167.0/24 163.5.178.0/24 163.5.189.0/24 163.5.199.0/24 163.5.201.0/24 163.5.203.0-163.5.205.255 163.5.218.0/24 163.5.224.0/24 163.5.228.0/24 163.5.241.0/24 Signature Algorithm: sha256WithRSAEncryption 99:3b:83:0c:37:d7:3a:7d:cc:c0:52:e7:4d:f1:ca:d4:b6:cc: 0c:d6:5a:11:c9:09:a3:55:b5:9a:e6:ff:ed:0d:90:65:1a:d4: cc:8e:8e:65:e0:3a:00:8e:59:50:5a:5b:c9:d1:80:ea:71:ab: f4:38:0b:8d:97:77:64:12:0d:7c:11:c3:e5:36:bb:61:2b:30: 6f:f3:2a:d1:89:0c:14:6f:83:3f:05:f4:35:1e:40:1a:56:70: 87:e7:ef:20:00:a8:4d:8c:f1:5c:7d:a5:3e:b6:63:66:03:e9: 95:5e:e7:34:07:82:9c:c7:ae:5b:5e:5e:53:5c:6c:ee:c2:05: 91:0f:4e:8a:48:f1:a2:52:d8:4f:7c:c5:9d:c2:a4:39:aa:44: 32:4c:dc:2d:2c:ec:ac:db:fe:55:5b:88:3c:0f:37:72:a2:98: be:3a:a1:78:e1:14:58:b0:7e:3f:80:a6:68:ba:de:68:95:4b: 07:7b:cc:cf:ab:e7:45:65:a8:8c:a1:ce:a4:55:c1:5a:e7:ca: 9b:4b:b5:91:87:35:f7:b2:53:ec:47:f7:87:f2:2c:23:ad:74: e5:97:35:2c:79:f9:a2:9b:b1:97:5f:fb:ad:1e:c8:a5:85:a3: c9:0c:40:95:c5:49:52:d0:cf:10:5e:01:52:21:63:fa:fc:52: b9:58:ba:17 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZvQsepFicSzREt2B71i3bmMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTE4MTA0MTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzhhN2Y0MjQ1ZGZjOGJlNWQ0MzcxYmFkMjAwMjY0ZDg5OTc5YmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTccoKA9d6KI8w3mRYkFL1bWdnfJ bDVx/DWSE3PHUqfp7AjvJ5t6NbAT086j2KhMl1o1wVIZTd5eJ8ELIRpJvChoNhKh DfU3hi/CpaULj7cnpzxJY1JQJHFJCLBCl++sGP5gMZSPsMkR0rL/0XD1PudFXYQm l7VDHQy5fLGk3tf3VyL0GaXvRsvvhIxNZS/ypaLNDp9TkhcQ7C7EmzILPHzX8Qur p2nFQuDTRQfxOw0/9zhTzHA7srRp94rXZ0C4v+DVTX1poyp45MEQ4g/1nSyMaVey 3uPZT9kgWKDxCTd0IjSOOpgGyRlV/4NTQaadZVQDFqCJXoVhXc6ckjSKjwIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFBOKf0JF38i+XUNxutIAJk2Jl5v+MB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvRTRwX1FrWGZ5TDVkUTNHNjBnQW1UWW1YbV80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHBBggrBgEFBQcBBwEB/wSBsTCBrjCBqwQCAAEwgaQDBACj BQkDBACjBRwDBACjBR4DBACjBTsDBACjBWEDBACjBWYDBACjBW0DBACjBXADBACj BXYDBACjBXkDBACjBYEDBACjBYsDBACjBY8DBACjBZIDBACjBZcDBACjBaADBACj BacDBACjBbIDBACjBb0DBACjBccDBACjBckwDAMEAKMFywMEAaMFzAMEAKMF2gME AKMF4AMEAKMF5AMEAKMF8TANBgkqhkiG9w0BAQsFAAOCAQEAmTuDDDfXOn3MwFLn TfHK1LbMDNZaEckJo1W1mub/7Q2QZRrUzI6OZeA6AI5ZUFpbydGA6nGr9DgLjZd3 ZBINfBHD5Ta7YSswb/Mq0YkMFG+DPwX0NR5AGlZwh+fvIACoTYzxXH2lPrZjZgPp lV7nNAeCnMeuW15eU1xs7sIFkQ9OikjxolLYT3zFncKkOapEMkzcLSzsrNv+VVuI PA83cqKYvjqheOEUWLB+P4CmaLreaJVLB3vMz6vnRWWojKHOpFXBWufKm0u1kYc1 97JT7Ef3h/IsI6105Zc1LHn5opuxl1/7rR7IpYWjyQxAlcVJUtDPEF4BUiFj+vxS uVi6Fw== -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:15 2026 by rpki-client