This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/En1KIQbddn-gsmEjswuSLP1jYEg.roa File: En1KIQbddn-gsmEjswuSLP1jYEg.roa (raw, json) Hash identifier: Wut1mowSPzc77QnA/HxL+IFOvGCYPgPuNRrg3afrOIM= Subject key identifier: 12:7D:4A:21:06:DD:76:7F:A0:B2:61:23:B3:0B:92:2C:FD:63:60:48 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019A74BDF6491CC26E1B8BA9A7F91ABDD8AB Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/En1KIQbddn-gsmEjswuSLP1jYEg.roa Signing time: Tue 11 Nov 2025 21:06:37 +0000 ROA not before: Tue 11 Nov 2025 21:06:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 61317 IP address blocks: 163.5.34.0/24 maxlen: 24 163.5.39.0/24 maxlen: 24 163.5.60.0/24 maxlen: 24 163.5.88.0/24 maxlen: 24 163.5.90.0/24 maxlen: 24 163.5.93.0/24 maxlen: 24 163.5.100.0/24 maxlen: 24 163.5.101.0/24 maxlen: 24 163.5.108.0/24 maxlen: 24 163.5.114.0/24 maxlen: 24 163.5.116.0/24 maxlen: 24 163.5.117.0/24 maxlen: 24 163.5.130.0/24 maxlen: 24 163.5.147.0/24 maxlen: 24 163.5.174.0/24 maxlen: 24 163.5.189.0/24 maxlen: 24 163.5.192.0/24 maxlen: 24 163.5.225.0/24 maxlen: 24 163.5.226.0/24 maxlen: 24 163.5.227.0/24 maxlen: 24 163.5.228.0/24 maxlen: 24 163.5.240.0/24 maxlen: 24 163.5.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 21:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:74:bd:f6:49:1c:c2:6e:1b:8b:a9:a7:f9:1a:bd:d8:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Nov 11 21:06:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=127d4a2106dd767fa0b26123b30b922cfd636048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:94:b3:26:dd:c2:b9:12:e4:03:67:12:05:91: c4:0a:44:cf:42:96:4c:9f:43:90:eb:6e:2c:4b:cc: b9:e4:36:89:33:5c:4d:49:2a:30:6e:cb:dc:1c:c8: a6:fc:04:69:aa:79:50:ad:56:b4:dc:86:e4:67:94: fc:bc:e4:06:01:29:80:ea:d0:41:1c:26:c8:d2:bf: a7:8f:f3:ef:40:e0:99:a5:01:5b:40:44:ce:bd:7d: 98:05:04:f7:98:b8:36:d4:1c:b7:ca:58:10:8a:8e: 22:44:ef:72:29:70:a3:52:32:4d:cc:e9:75:2c:ac: 1c:c4:0c:95:7e:a6:6e:b0:3e:19:8f:f7:25:e3:0f: 12:f0:2e:05:b4:0f:95:33:64:63:de:8d:84:6c:03: ba:a5:2d:6b:ee:35:82:87:6f:2f:24:6b:80:11:c8: f9:4d:4e:97:d1:fb:38:4c:cc:d7:1c:da:fb:58:7b: e2:86:ec:e9:a5:60:c3:4e:b8:f6:77:07:1d:25:60: 1d:32:8c:4c:0c:a7:d3:d1:be:96:7f:a5:69:35:02: de:11:fc:93:38:89:8c:d6:46:9c:03:a4:71:eb:43: 4d:3f:90:35:40:a7:cd:66:c7:bf:48:cb:59:af:bf: 55:3a:bb:11:84:49:98:c1:a8:59:df:4c:2d:f1:35: 9a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:7D:4A:21:06:DD:76:7F:A0:B2:61:23:B3:0B:92:2C:FD:63:60:48 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/En1KIQbddn-gsmEjswuSLP1jYEg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.34.0/24 163.5.39.0/24 163.5.60.0/24 163.5.88.0/24 163.5.90.0/24 163.5.93.0/24 163.5.100.0/23 163.5.108.0/24 163.5.114.0/24 163.5.116.0/23 163.5.130.0/24 163.5.147.0/24 163.5.174.0/24 163.5.189.0/24 163.5.192.0/24 163.5.225.0-163.5.228.255 163.5.240.0/24 163.5.243.0/24 Signature Algorithm: sha256WithRSAEncryption ae:5e:93:8e:71:7b:bb:46:ad:15:fc:68:cb:ac:a8:eb:c8:96: 6f:d7:14:2f:bc:65:c9:25:60:b4:31:26:be:94:09:41:50:ae: 69:e2:e7:90:58:73:16:98:b7:c0:c1:05:b6:03:9d:9d:d2:1b: b6:51:27:b3:6b:8d:b4:a4:3e:7a:c4:07:30:b9:f3:6f:f2:e3: 1d:90:ca:fe:1c:3d:0f:ec:a4:42:d4:73:ab:ba:7e:fd:ed:ab: 05:95:2b:1d:34:6a:e3:f9:c8:da:a1:f0:4a:48:14:2c:ea:d1: 01:12:21:64:a0:0d:fc:4e:c4:70:19:79:fe:17:5a:79:e3:65: ef:36:96:6c:a5:1e:fc:13:6d:9a:83:57:24:86:c7:ef:6e:53: 39:03:7f:44:dc:46:cb:3e:c7:77:5c:b3:35:ed:05:c5:db:45: 5f:4a:af:05:00:e2:0e:0b:1e:40:bd:65:73:6c:6f:42:54:86: 28:a9:8b:79:96:f8:6c:dc:8c:be:51:c9:e4:73:3a:05:4f:82: f5:83:a4:d8:ba:a2:33:a6:00:6a:e8:9f:a2:b5:be:00:4f:7e: 37:90:3a:5c:5f:30:48:c7:39:d5:97:c2:58:ff:3d:1e:3f:4b: c9:f5:56:e3:f7:62:2d:4f:01:1e:af:9f:e8:cc:c5:62:60:b7: 53:83:e1:5f -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgISAZp0vfZJHMJuG4upp/kavdirMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMTExMjEwNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjdkNGEyMTA2ZGQ3NjdmYTBiMjYxMjNiMzBiOTIyY2ZkNjM2MDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJSzJt3CuRLkA2cSBZHECkTPQpZM n0OQ624sS8y55DaJM1xNSSowbsvcHMim/ARpqnlQrVa03IbkZ5T8vOQGASmA6tBB HCbI0r+nj/PvQOCZpQFbQETOvX2YBQT3mLg21By3ylgQio4iRO9yKXCjUjJNzOl1 LKwcxAyVfqZusD4Zj/cl4w8S8C4FtA+VM2Rj3o2EbAO6pS1r7jWCh28vJGuAEcj5 TU6X0fs4TMzXHNr7WHvihuzppWDDTrj2dwcdJWAdMoxMDKfT0b6Wf6VpNQLeEfyT OImM1kacA6Rx60NNP5A1QKfNZse/SMtZr79VOrsRhEmYwahZ30wt8TWaBQIDAQAB o4ICeDCCAnQwHQYDVR0OBBYEFBJ9SiEG3XZ/oLJhI7MLkiz9Y2BIMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvRW4xS0lRYmRkbi1nc21FanN3dVNMUDFqWUVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEAKMFIgME AKMFJwMEAKMFPAMEAKMFWAMEAKMFWgMEAKMFXQMEAaMFZAMEAKMFbAMEAKMFcgME AaMFdAMEAKMFggMEAKMFkwMEAKMFrgMEAKMFvQMEAKMFwDAMAwQAowXhAwQAowXk AwQAowXwAwQAowXzMA0GCSqGSIb3DQEBCwUAA4IBAQCuXpOOcXu7Rq0V/GjLrKjr yJZv1xQvvGXJJWC0MSa+lAlBUK5p4ueQWHMWmLfAwQW2A52d0hu2USeza420pD56 xAcwufNv8uMdkMr+HD0P7KRC1HOrun797asFlSsdNGrj+cjaofBKSBQs6tEBEiFk oA38TsRwGXn+F1p542XvNpZspR78E22ag1ckhsfvblM5A39E3EbLPsd3XLM17QXF 20VfSq8FAOIOCx5AvWVzbG9CVIYoqYt5lvhs3Iy+UcnkczoFT4L1g6TYuqIzpgBq 6J+itb4AT343kDpcXzBIxznVl8JY/z0eP0vJ9Vbj92ItTwEer5/ozMViYLdTg+Ff -----END CERTIFICATE-----Generated at Sun Nov 23 05:27:22 2025 by rpki-client