This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EbbbDpQrTw_jqvVPqSX7ZRfvQOE.roa File: EbbbDpQrTw_jqvVPqSX7ZRfvQOE.roa (raw, json) Hash identifier: EfZNbpA85uc1GI+oKM8K0knL8h+Fqy4B/6C/LEk5GtY= Subject key identifier: 11:B6:DB:0E:94:2B:4F:0F:E3:AA:F5:4F:A9:25:FB:65:17:EF:40:E1 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E3943106FCE1B4F1B0DF0D8A7FFB0FB Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EbbbDpQrTw_jqvVPqSX7ZRfvQOE.roa Signing time: Fri 02 Jan 2026 10:20:40 +0000 ROA not before: Fri 02 Jan 2026 10:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216089 IP address blocks: 163.5.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:43:10:6f:ce:1b:4f:1b:0d:f0:d8:a7:ff:b0:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11b6db0e942b4f0fe3aaf54fa925fb6517ef40e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6a:dd:13:68:1e:03:97:43:56:02:74:86:ca: 18:e8:29:c3:22:46:69:12:f8:40:30:f3:35:20:a8: 87:fb:87:bb:1f:d9:4e:66:11:e3:6f:77:e5:ef:49: d4:47:43:67:70:90:f2:5a:e9:15:89:15:38:a3:94: f1:ad:22:a9:6c:ed:c1:93:57:62:a5:09:a2:09:31: 98:08:f3:be:5b:53:f9:1a:2d:0d:8c:b7:bd:05:62: b6:9f:67:d5:47:e0:43:d4:6a:17:fd:9e:38:df:11: 99:a4:54:c6:36:46:52:fa:7f:3c:26:7e:4f:2b:2c: 13:35:fc:94:3b:e9:93:a0:00:8e:75:14:05:f8:c5: 0c:53:71:2d:c0:0d:0f:b4:a0:4d:a9:94:4f:4d:6d: 66:3b:ec:d5:dd:f8:37:3a:66:a3:61:37:b2:af:d1: 27:b3:58:13:61:14:eb:74:6a:fa:cb:b6:34:c2:bb: 40:17:37:10:72:40:be:6d:85:4c:0a:64:8f:7c:78: 89:f3:01:ef:26:e2:a8:3d:b4:04:8a:ad:24:0c:97: cd:65:60:36:d8:2a:5b:cf:43:c8:41:19:57:31:75: e2:d1:4a:09:ad:a0:37:a0:8a:ae:e0:33:97:ef:12: ae:fb:ed:51:4f:e9:08:78:2e:f4:b9:8e:4e:a0:45: cf:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B6:DB:0E:94:2B:4F:0F:E3:AA:F5:4F:A9:25:FB:65:17:EF:40:E1 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EbbbDpQrTw_jqvVPqSX7ZRfvQOE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.251.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:f5:a6:95:e8:cb:97:8c:e8:60:d5:57:ae:d3:3b:7c:29:67: 9d:57:9a:9f:e4:95:13:e4:d9:3a:a6:32:49:25:e7:4a:62:31: c3:b5:39:f0:51:f5:11:6e:15:71:a4:84:82:db:8e:8c:3b:f6: b8:e4:73:e5:59:46:d4:0d:c9:8f:77:54:5d:78:0d:3f:65:72: e6:15:fc:88:e8:74:e0:7e:1b:1c:78:af:c6:bc:3c:d8:45:00: 37:1c:3b:83:76:8f:d4:f1:dd:00:2c:a1:a2:6f:1c:38:96:c7: 41:c8:e1:26:59:0a:61:63:5f:f4:95:8f:29:a2:83:5c:e7:cb: 70:ce:e8:e6:e3:f0:50:c0:48:3b:ee:7f:be:e2:6a:07:67:98: 83:69:6e:cd:86:ec:0e:e7:52:b7:50:00:d2:c0:d5:3b:02:fa: c1:54:fd:10:35:58:83:5e:6b:55:b9:14:de:f7:4f:57:79:98: 18:37:b1:4e:a7:ff:15:19:1d:93:0d:f1:1a:f5:d8:c3:80:e1: 3f:a3:90:80:5f:0d:73:e6:f8:84:43:fc:20:42:35:2b:8b:3e: de:bd:75:af:46:bb:2e:70:8a:34:1c:8e:dc:3d:48:a3:07:1b: 4e:fb:3c:e3:40:14:c7:bf:3c:e6:81:8e:b2:ef:4c:8a:a9:1b: 9e:ce:a1:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OUMQb84bTxsN8Nin/7D7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWI2ZGIwZTk0MmI0ZjBmZTNhYWY1NGZhOTI1ZmI2NTE3ZWY0MGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mrdE2geA5dDVgJ0hsoY6CnDIkZp EvhAMPM1IKiH+4e7H9lOZhHjb3fl70nUR0NncJDyWukViRU4o5TxrSKpbO3Bk1di pQmiCTGYCPO+W1P5Gi0NjLe9BWK2n2fVR+BD1GoX/Z443xGZpFTGNkZS+n88Jn5P KywTNfyUO+mToACOdRQF+MUMU3EtwA0PtKBNqZRPTW1mO+zV3fg3OmajYTeyr9En s1gTYRTrdGr6y7Y0wrtAFzcQckC+bYVMCmSPfHiJ8wHvJuKoPbQEiq0kDJfNZWA2 2Cpbz0PIQRlXMXXi0UoJraA3oIqu4DOX7xKu++1RT+kIeC70uY5OoEXPLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBG22w6UK08P46r1T6kl+2UX70DhMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvRWJiYkRwUXJUd19qcXZWUHFTWDdaUmZ2UU9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowX7MA0G CSqGSIb3DQEBCwUAA4IBAQAr9aaV6MuXjOhg1Veu0zt8KWedV5qf5JUT5Nk6pjJJ JedKYjHDtTnwUfURbhVxpISC246MO/a45HPlWUbUDcmPd1RdeA0/ZXLmFfyI6HTg fhsceK/GvDzYRQA3HDuDdo/U8d0ALKGibxw4lsdByOEmWQphY1/0lY8pooNc58tw zujm4/BQwEg77n++4moHZ5iDaW7NhuwO51K3UADSwNU7AvrBVP0QNViDXmtVuRTe 909XeZgYN7FOp/8VGR2TDfEa9djDgOE/o5CAXw1z5viEQ/wgQjUriz7evXWvRrsu cIo0HI7cPUijBxtO+zzjQBTHvzzmgY6y70yKqRuezqEq -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:24 2026 by rpki-client