This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FFug6CasUSzUzD9cw1JiCN_Cgnw.roa File: FFug6CasUSzUzD9cw1JiCN_Cgnw.roa (raw, json) Hash identifier: UMunN5u3YyTFPAhv+rg0vIxRK/FsIoV2C7g1+bdKjv0= Subject key identifier: 14:5B:A0:E8:26:AC:51:2C:D4:CC:3F:5C:C3:52:62:08:DF:C2:82:7C Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019AA0197D0A86143E1D9CD1A4779C5AC37D Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FFug6CasUSzUzD9cw1JiCN_Cgnw.roa Signing time: Thu 20 Nov 2025 07:10:16 +0000 ROA not before: Thu 20 Nov 2025 07:10:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216159 IP address blocks: 163.5.192.0/24 maxlen: 24 163.5.193.0/24 maxlen: 24 163.5.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 00:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:19:7d:0a:86:14:3e:1d:9c:d1:a4:77:9c:5a:c3:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Nov 20 07:10:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=145ba0e826ac512cd4cc3f5cc3526208dfc2827c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c9:6c:55:88:48:73:ec:73:4c:e1:2d:ba:25: a9:ac:77:27:f1:7b:38:d4:cb:55:66:69:ab:56:e7: d4:a3:40:f3:19:1b:2d:a5:07:58:b7:25:a9:59:73: 99:6b:13:b7:1b:81:66:58:da:17:f5:6e:4d:df:4e: a7:6c:df:0f:d4:5d:ab:89:1b:04:bf:5c:06:fc:37: 72:64:1b:ac:8d:f7:c2:6e:fb:c0:39:de:00:7b:fc: 28:54:eb:d2:cc:a0:60:4e:51:7d:e7:d0:22:a1:1c: 7b:fe:af:06:86:cb:3e:88:d5:99:d0:91:28:2b:0e: d4:89:83:87:90:8e:f6:a2:ee:b8:0d:0a:56:ca:38: 2d:8a:e0:fe:47:ad:b7:38:88:8e:f9:87:89:56:cc: 3e:36:cb:1c:73:5c:01:75:1a:79:4b:e4:36:e5:8e: 15:ab:c6:3c:2b:d0:a3:19:34:12:64:f4:39:c7:09: 9d:9c:ae:c4:27:50:fa:26:a1:af:8d:94:08:85:91: 92:f0:4f:61:1c:bb:fe:0d:7f:ff:ed:52:17:9d:9c: 03:6f:af:75:cb:4c:31:bd:4d:3f:cc:fe:28:3a:4d: 74:5f:55:57:ff:a8:29:5d:a7:9c:ff:f8:10:db:f3: 51:96:8b:ce:5d:25:b0:56:55:cc:07:48:82:7c:62: e4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:5B:A0:E8:26:AC:51:2C:D4:CC:3F:5C:C3:52:62:08:DF:C2:82:7C X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FFug6CasUSzUzD9cw1JiCN_Cgnw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.192.0/23 163.5.213.0/24 Signature Algorithm: sha256WithRSAEncryption 59:49:60:3c:de:b2:f5:02:2e:02:32:19:4f:4c:bd:71:97:59: c8:db:ff:7b:59:55:2d:bb:4e:0b:fa:28:04:23:ae:c6:4e:d7: 29:37:09:3b:80:3a:d6:7a:59:4f:95:a7:de:b3:ae:d9:02:18: c5:87:93:72:a3:a9:1e:a3:a0:20:f0:f4:78:52:d3:82:55:80: a9:56:41:b6:8e:ee:b5:28:21:75:8d:a4:bf:e8:75:21:bd:99: 99:20:99:c1:8e:af:e0:7e:c3:3b:e2:d4:8b:64:32:2d:c0:cd: b2:29:2b:9c:96:cc:72:c9:a5:3e:8b:be:d9:55:55:74:9a:ec: ba:22:87:33:c5:48:99:c4:60:58:65:12:c3:c4:d0:bc:26:b5: 01:77:38:3a:b8:1a:ab:ae:a6:98:a1:79:a2:1b:91:43:a3:a9: cf:0a:75:61:1e:75:8e:bc:f3:99:b4:25:9b:4c:cd:e8:24:d1: 90:94:b5:4a:a3:84:05:50:c3:9a:62:35:cb:14:5f:c6:86:bd: e3:16:00:75:2d:7a:47:9a:f6:04:98:2c:4b:0a:28:f7:c2:83: 32:57:b9:b2:f4:0d:72:a9:64:54:44:ae:e8:08:7c:37:8f:8e: 28:14:cd:6a:d1:c2:84:40:3d:c6:5f:f7:56:46:45:ad:84:b0: 35:79:00:f6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqgGX0KhhQ+HZzRpHecWsN9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMTIwMDcxMDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDViYTBlODI2YWM1MTJjZDRjYzNmNWNjMzUyNjIwOGRmYzI4MjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnslsVYhIc+xzTOEtuiWprHcn8Xs4 1MtVZmmrVufUo0DzGRstpQdYtyWpWXOZaxO3G4FmWNoX9W5N306nbN8P1F2riRsE v1wG/DdyZBusjffCbvvAOd4Ae/woVOvSzKBgTlF959AioRx7/q8Ghss+iNWZ0JEo Kw7UiYOHkI72ou64DQpWyjgtiuD+R623OIiO+YeJVsw+Nsscc1wBdRp5S+Q25Y4V q8Y8K9CjGTQSZPQ5xwmdnK7EJ1D6JqGvjZQIhZGS8E9hHLv+DX//7VIXnZwDb691 y0wxvU0/zP4oOk10X1VX/6gpXaec//gQ2/NRlovOXSWwVlXMB0iCfGLkQQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBRboOgmrFEs1Mw/XMNSYgjfwoJ8MB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvRkZ1ZzZDYXNVU3pVekQ5Y3cxSmlDTl9DZ253LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBowXAAwQA owXVMA0GCSqGSIb3DQEBCwUAA4IBAQBZSWA83rL1Ai4CMhlPTL1xl1nI2/97WVUt u04L+igEI67GTtcpNwk7gDrWellPlafes67ZAhjFh5Nyo6keo6Ag8PR4UtOCVYCp VkG2ju61KCF1jaS/6HUhvZmZIJnBjq/gfsM74tSLZDItwM2yKSuclsxyyaU+i77Z VVV0muy6IoczxUiZxGBYZRLDxNC8JrUBdzg6uBqrrqaYoXmiG5FDo6nPCnVhHnWO vPOZtCWbTM3oJNGQlLVKo4QFUMOaYjXLFF/Ghr3jFgB1LXpHmvYEmCxLCij3woMy V7my9A1yqWRURK7oCHw3j44oFM1q0cKEQD3GX/dWRkWthLA1eQD2 -----END CERTIFICATE-----Generated at Fri Dec 5 07:30:37 2025 by rpki-client