This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EY83EwvdinVSeE0WazsL0Uopu1k.roa File: EY83EwvdinVSeE0WazsL0Uopu1k.roa (raw, json) Hash identifier: HKKyF5SLCucpJkxa2FxJ+J0CRwkaqyO8zw1rsscv2KM= Subject key identifier: 11:8F:37:13:0B:DD:8A:75:52:78:4D:16:6B:3B:0B:D1:4A:29:BB:59 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E390E63C56A56252254384D280AF862 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EY83EwvdinVSeE0WazsL0Uopu1k.roa Signing time: Fri 02 Jan 2026 10:20:26 +0000 ROA not before: Fri 02 Jan 2026 10:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6079 IP address blocks: 163.5.7.0/24 maxlen: 24 163.5.145.0/24 maxlen: 24 163.5.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:0e:63:c5:6a:56:25:22:54:38:4d:28:0a:f8:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=118f37130bdd8a7552784d166b3b0bd14a29bb59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:aa:7a:28:36:0a:a3:87:25:8f:7e:1f:12:98: 6e:65:82:b1:83:e9:cc:e6:d3:f4:05:48:aa:55:eb: d0:6a:e8:8f:5d:51:eb:a4:63:9a:39:98:71:74:72: fb:2e:e0:80:a5:09:c1:4f:73:ec:bb:bd:6f:6c:bf: 89:aa:98:72:7c:e6:02:9f:05:5a:99:b1:9b:d9:61: 17:0e:3c:17:5d:8b:a4:ed:0c:99:71:cb:16:31:4f: c9:76:65:19:3a:06:82:06:1d:92:53:dd:4d:fc:23: 66:f4:47:00:6f:40:9c:ed:4d:fd:0b:23:95:b6:7a: d7:2b:3b:d2:7f:47:11:08:58:0b:7f:9b:77:7f:e2: f7:3a:71:64:06:e0:27:c1:8d:20:cc:d3:5b:60:4e: aa:f6:5b:1d:32:21:b3:13:13:b0:26:07:ed:80:6c: d8:b4:02:2e:0d:39:a9:5b:ec:3f:dc:cf:55:5d:58: ab:58:8d:46:26:9e:14:5f:28:5e:9e:21:4d:dd:5e: 0d:01:a1:05:bb:e6:30:05:ef:17:24:0d:3d:1f:84: 16:cd:01:4f:9b:9d:cd:cf:10:5f:b4:77:0b:13:9a: cb:64:ac:02:62:6b:41:af:3a:95:5b:c9:3f:4e:01: cb:fd:83:b9:06:cc:e0:4d:f9:9f:c6:b8:c8:db:c2: 5a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8F:37:13:0B:DD:8A:75:52:78:4D:16:6B:3B:0B:D1:4A:29:BB:59 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EY83EwvdinVSeE0WazsL0Uopu1k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.7.0/24 163.5.145.0/24 163.5.250.0/24 Signature Algorithm: sha256WithRSAEncryption a8:ef:3f:ac:e5:a7:a5:1e:ce:b5:ab:14:84:db:cf:7b:26:cb: b7:af:1a:46:89:84:e0:63:8b:04:c4:e4:b3:7f:4f:77:dc:6e: 60:cf:93:23:12:ef:f8:e8:28:1f:21:a1:2f:d8:2f:e3:5d:7a: 16:6b:c4:cb:fa:19:75:df:cc:cf:6e:1f:10:c0:e0:25:39:59: 19:72:4d:8d:ff:41:0a:1b:d2:12:b5:d3:49:af:b8:4d:bc:5d: 1f:cf:a6:12:c3:10:b1:21:d4:bd:9f:f1:c1:74:83:ce:d2:dd: 44:cf:0c:be:13:c6:01:a0:77:8e:5d:67:65:a2:36:ca:c6:b4: 6b:b2:07:e5:84:69:bc:72:a1:38:0c:00:36:29:02:d8:a6:fd: 4f:ba:47:0e:d1:68:96:05:56:2a:19:dc:c0:27:07:b6:0d:a6: a1:ef:f4:cc:1a:81:78:31:5f:8c:ff:f3:46:cb:8b:6f:88:e0: e4:7b:41:86:9b:37:18:0c:8b:c6:2e:3e:4b:e4:54:f7:d1:76: 68:49:4b:7f:e0:ff:cc:d5:93:11:d8:16:71:13:fb:69:b4:92: b5:04:ed:d6:e3:15:be:79:7f:a6:46:9b:3d:55:fa:f1:8e:56: 35:55:2d:d7:77:5e:79:06:29:e7:7c:e8:ee:29:6e:69:7d:c0: 7f:23:4c:99 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OQ5jxWpWJSJUOE0oCvhiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMThmMzcxMzBiZGQ4YTc1NTI3ODRkMTY2YjNiMGJkMTRhMjliYjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKp6KDYKo4clj34fEphuZYKxg+nM 5tP0BUiqVevQauiPXVHrpGOaOZhxdHL7LuCApQnBT3Psu71vbL+JqphyfOYCnwVa mbGb2WEXDjwXXYuk7QyZccsWMU/JdmUZOgaCBh2SU91N/CNm9EcAb0Cc7U39CyOV tnrXKzvSf0cRCFgLf5t3f+L3OnFkBuAnwY0gzNNbYE6q9lsdMiGzExOwJgftgGzY tAIuDTmpW+w/3M9VXVirWI1GJp4UXyheniFN3V4NAaEFu+YwBe8XJA09H4QWzQFP m53NzxBftHcLE5rLZKwCYmtBrzqVW8k/TgHL/YO5BszgTfmfxrjI28JadQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBGPNxML3Yp1UnhNFms7C9FKKbtZMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvRVk4M0V3dmRpblZTZUUwV2F6c0wwVW9wdTFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAowUHAwQA owWRAwQAowX6MA0GCSqGSIb3DQEBCwUAA4IBAQCo7z+s5aelHs61qxSE2897Jsu3 rxpGiYTgY4sExOSzf0933G5gz5MjEu/46CgfIaEv2C/jXXoWa8TL+hl138zPbh8Q wOAlOVkZck2N/0EKG9IStdNJr7hNvF0fz6YSwxCxIdS9n/HBdIPO0t1Ezwy+E8YB oHeOXWdlojbKxrRrsgflhGm8cqE4DAA2KQLYpv1PukcO0WiWBVYqGdzAJwe2Daah 7/TMGoF4MV+M//NGy4tviODke0GGmzcYDIvGLj5L5FT30XZoSUt/4P/M1ZMR2BZx E/tptJK1BO3W4xW+eX+mRps9VfrxjlY1VS3Xd155BinnfOjuKW5pfcB/I0yZ -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:25 2026 by rpki-client