This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FIv6JXg30OKQwOligT03U2vKB0k.roa File: FIv6JXg30OKQwOligT03U2vKB0k.roa (raw, json) Hash identifier: woroq2s3mKjsFr7TwHosRwqAz6YE87mdA67FlK16Keg= Subject key identifier: 14:8B:FA:25:78:37:D0:E2:90:C0:E9:62:81:3D:37:53:6B:CA:07:49 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019AA01A64AD0D49BB4BC96A5627445D3E26 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FIv6JXg30OKQwOligT03U2vKB0k.roa Signing time: Thu 20 Nov 2025 07:11:15 +0000 ROA not before: Thu 20 Nov 2025 07:11:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5511 IP address blocks: 163.5.192.0/24 maxlen: 24 163.5.193.0/24 maxlen: 24 163.5.195.0/24 maxlen: 24 163.5.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:1a:64:ad:0d:49:bb:4b:c9:6a:56:27:44:5d:3e:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Nov 20 07:11:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=148bfa257837d0e290c0e962813d37536bca0749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a8:50:95:15:db:f6:63:61:e8:cb:ef:72:ad: a8:7d:25:66:1d:a2:2f:e8:a1:6f:2e:44:f6:87:13: ae:75:d8:9d:11:b3:4a:11:f9:74:f8:c8:d2:98:b5: b7:b6:73:7d:bc:e8:f3:3d:c5:62:a0:92:bc:64:b3: 61:39:90:08:32:25:14:4b:e6:a2:2b:36:41:f3:7a: c9:75:06:ce:0a:6e:25:e8:9e:07:4a:69:ab:92:e2: 04:6d:07:9f:4b:72:98:eb:b6:29:31:b5:f8:bf:de: 18:c2:80:dc:3b:88:b2:56:88:9d:d1:f2:65:06:8b: dc:96:ea:20:53:b1:15:23:fd:06:e0:52:be:93:59: 42:0b:5e:5b:ba:1a:5b:23:69:32:79:d4:89:c1:75: 8d:ba:16:24:c7:ec:21:a3:31:85:cb:07:05:85:c8: 15:6a:d5:08:f0:0a:80:45:03:c3:57:17:83:76:35: fe:37:11:c9:02:7e:92:cf:90:72:20:43:41:ce:3c: ec:56:43:d8:fb:8f:86:8c:7e:88:1a:53:ec:b6:4e: fe:20:b4:f9:65:12:c6:bf:37:9f:35:ec:5b:b8:ff: 7a:f7:c3:2d:28:82:7f:aa:3a:5a:94:1b:53:0b:55: 3c:09:30:9a:7c:21:95:e6:09:7c:97:73:41:70:07: 53:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8B:FA:25:78:37:D0:E2:90:C0:E9:62:81:3D:37:53:6B:CA:07:49 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FIv6JXg30OKQwOligT03U2vKB0k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.192.0/23 163.5.195.0/24 163.5.213.0/24 Signature Algorithm: sha256WithRSAEncryption 37:79:0b:49:0a:96:70:c6:72:32:1b:83:ee:d7:3f:e9:88:8c: fb:b4:e7:d0:83:ce:0c:c5:61:cb:1d:23:b1:05:6d:d7:95:5a: a7:a6:81:ce:be:ce:2b:85:af:99:c9:42:7d:ea:48:62:f6:b2: e3:15:64:39:6f:bb:b9:01:c1:f0:53:57:cd:0f:46:66:5a:e9: 11:7c:77:02:b4:32:fa:73:5e:2e:6c:42:3b:e4:86:67:dc:2b: f0:c2:65:6e:f9:85:7e:8e:5d:89:9f:20:a0:bb:ee:dc:f9:43: 6b:f0:28:28:ba:e1:76:52:0c:75:ce:91:1f:76:80:f6:28:4c: 8d:e0:74:39:d7:bf:fb:c2:30:13:a6:14:13:2e:de:d6:68:e2: b8:52:33:a3:0a:db:27:a2:dd:bf:7a:a0:82:6d:c7:70:1e:ed: 79:97:93:c8:90:85:90:be:af:fa:c5:49:32:66:08:12:32:ed: 54:3e:15:fc:cd:2f:82:e9:c0:56:ec:7f:63:76:11:b2:d7:b4: c4:b1:ae:1f:dc:7c:15:82:10:26:ac:be:d5:82:e0:3a:5b:a9: b0:77:c8:0f:ac:88:b2:fd:c3:e7:05:07:8c:39:56:dd:b5:a9: 6a:0c:29:2b:e5:6d:8c:de:7e:a2:2a:81:19:8b:76:11:3c:65: d0:8f:e4:4b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqgGmStDUm7S8lqVidEXT4mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMTIwMDcxMTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDhiZmEyNTc4MzdkMGUyOTBjMGU5NjI4MTNkMzc1MzZiY2EwNzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qhQlRXb9mNh6Mvvcq2ofSVmHaIv 6KFvLkT2hxOuddidEbNKEfl0+MjSmLW3tnN9vOjzPcVioJK8ZLNhOZAIMiUUS+ai KzZB83rJdQbOCm4l6J4HSmmrkuIEbQefS3KY67YpMbX4v94YwoDcO4iyVoid0fJl BovcluogU7EVI/0G4FK+k1lCC15buhpbI2kyedSJwXWNuhYkx+whozGFywcFhcgV atUI8AqARQPDVxeDdjX+NxHJAn6Sz5ByIENBzjzsVkPY+4+GjH6IGlPstk7+ILT5 ZRLGvzefNexbuP9698MtKIJ/qjpalBtTC1U8CTCafCGV5gl8l3NBcAdT4QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBSL+iV4N9DikMDpYoE9N1NrygdJMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvRkl2NkpYZzMwT0tRd09saWdUMDNVMnZLQjBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBowXAAwQA owXDAwQAowXVMA0GCSqGSIb3DQEBCwUAA4IBAQA3eQtJCpZwxnIyG4Pu1z/piIz7 tOfQg84MxWHLHSOxBW3XlVqnpoHOvs4rha+ZyUJ96khi9rLjFWQ5b7u5AcHwU1fN D0ZmWukRfHcCtDL6c14ubEI75IZn3CvwwmVu+YV+jl2JnyCgu+7c+UNr8CgouuF2 Ugx1zpEfdoD2KEyN4HQ517/7wjATphQTLt7WaOK4UjOjCtsnot2/eqCCbcdwHu15 l5PIkIWQvq/6xUkyZggSMu1UPhX8zS+C6cBW7H9jdhGy17TEsa4f3HwVghAmrL7V guA6W6mwd8gPrIiy/cPnBQeMOVbdtalqDCkr5W2M3n6iKoEZi3YRPGXQj+RL -----END CERTIFICATE-----Generated at Thu Dec 4 07:45:26 2025 by rpki-client