This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Fq_dAQrxYyzmorP5Yin7ONmgPu8.roa File: Fq_dAQrxYyzmorP5Yin7ONmgPu8.roa (raw, json) Hash identifier: y1M8NIL5rDQj+fzGdWpvZiDjxs7r4kRmED3b+A/GDas= Subject key identifier: 16:AF:DD:01:0A:F1:63:2C:E6:A2:B3:F9:62:29:FB:38:D9:A0:3E:EF Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E390F02B06849ECAA750967FC345DB6 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Fq_dAQrxYyzmorP5Yin7ONmgPu8.roa Signing time: Fri 02 Jan 2026 10:20:27 +0000 ROA not before: Fri 02 Jan 2026 10:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7018 IP address blocks: 163.5.25.0/24 maxlen: 24 163.5.33.0/24 maxlen: 24 163.5.40.0/24 maxlen: 24 163.5.128.0/24 maxlen: 24 163.5.145.0/24 maxlen: 24 163.5.165.0/24 maxlen: 24 163.5.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:0f:02:b0:68:49:ec:aa:75:09:67:fc:34:5d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16afdd010af1632ce6a2b3f96229fb38d9a03eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5e:77:59:92:42:de:74:ae:f9:ab:28:09:30: 80:60:00:f5:dd:41:2a:d2:97:27:cc:cb:41:96:54: 0f:ba:57:eb:95:81:77:d0:03:87:12:5c:23:f9:29: 75:31:c9:d8:47:1c:fe:50:2a:32:58:90:5a:89:2b: 2a:1d:ae:c7:1d:d3:d9:1c:10:d0:9f:3c:54:49:3e: 62:d0:e1:eb:e7:d6:49:4a:4d:99:0a:77:b0:63:5a: b0:fd:a6:10:49:96:f5:ec:91:60:1c:4a:0e:d1:99: 84:4d:c2:e7:75:54:da:a7:f9:57:f4:c5:93:bd:3a: 0f:2c:a2:60:20:ae:d9:3c:98:3a:29:59:6b:0a:d2: 71:31:99:22:8f:39:0b:73:0a:9d:e0:94:99:28:24: 84:06:e1:d1:c0:ea:27:7f:b7:be:44:d5:8f:b1:b6: 6c:21:e0:06:3e:3d:b9:c9:ea:52:da:0d:b1:de:32: f0:5b:d7:59:41:ee:2c:83:90:4e:32:f2:4b:d7:0a: 01:b7:04:e3:b4:0b:71:51:3f:1c:49:00:0b:72:47: 90:40:88:c7:ed:d2:12:04:27:e1:74:81:a6:3f:10: 8a:a8:19:84:c4:d7:b2:2c:cf:85:cb:1e:56:61:b4: c8:89:6b:69:26:97:41:b9:fd:67:db:50:32:45:5f: 95:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:AF:DD:01:0A:F1:63:2C:E6:A2:B3:F9:62:29:FB:38:D9:A0:3E:EF X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Fq_dAQrxYyzmorP5Yin7ONmgPu8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.25.0/24 163.5.33.0/24 163.5.40.0/24 163.5.128.0/24 163.5.145.0/24 163.5.165.0/24 163.5.250.0/24 Signature Algorithm: sha256WithRSAEncryption 94:1d:9d:13:5f:e6:57:3d:d1:90:21:6c:fe:1d:c1:01:6f:90: 95:03:8b:f4:75:87:dc:ae:e1:53:9b:49:7d:81:09:e1:a9:e7: fe:8c:8c:25:7f:88:6d:e8:28:c6:66:f3:ac:e9:e9:fd:c9:30: 30:3d:59:6e:e7:01:90:18:5f:4d:db:e1:32:1d:bb:db:00:e2: e5:0b:7d:38:7d:d4:e0:f2:9d:94:0d:e8:fa:22:06:0b:7a:66: 53:2e:e5:d0:ef:97:68:9d:f9:13:c5:34:ec:b7:1a:95:d8:71: 3e:84:67:19:13:49:40:0a:1b:cf:f9:d2:99:15:67:46:d5:17: fd:3d:9b:1b:0a:24:68:d9:f0:6b:44:17:d9:6d:a9:7b:49:bd: 02:ab:43:a8:a5:e0:60:ee:68:cf:11:20:f9:39:64:d5:94:31: a9:54:7e:fd:0c:3d:bb:2d:00:22:80:d6:52:f0:08:dc:f3:3c: 3b:98:24:14:51:0f:6b:c8:c4:53:35:57:92:6e:8b:80:7e:da: c0:a8:2b:c0:42:1c:97:a0:da:11:f9:a9:a8:f8:f7:80:96:e1: 89:dd:78:13:16:c1:0a:31:29:9d:b5:da:57:89:1f:a4:34:f5: 82:71:be:37:4b:93:fa:bf:e2:ae:99:d1:d1:ea:55:7f:09:4f: c8:fb:2f:a0 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt+OQ8CsGhJ7Kp1CWf8NF22MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmFmZGQwMTBhZjE2MzJjZTZhMmIzZjk2MjI5ZmIzOGQ5YTAzZWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF53WZJC3nSu+asoCTCAYAD13UEq 0pcnzMtBllQPulfrlYF30AOHElwj+Sl1McnYRxz+UCoyWJBaiSsqHa7HHdPZHBDQ nzxUST5i0OHr59ZJSk2ZCnewY1qw/aYQSZb17JFgHEoO0ZmETcLndVTap/lX9MWT vToPLKJgIK7ZPJg6KVlrCtJxMZkijzkLcwqd4JSZKCSEBuHRwOonf7e+RNWPsbZs IeAGPj25yepS2g2x3jLwW9dZQe4sg5BOMvJL1woBtwTjtAtxUT8cSQALckeQQIjH 7dISBCfhdIGmPxCKqBmExNeyLM+Fyx5WYbTIiWtpJpdBuf1n21AyRV+VBwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFBav3QEK8WMs5qKz+WIp+zjZoD7vMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvRnFfZEFRcnhZeXptb3JQNVlpbjdPTm1nUHU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAowUZAwQA owUhAwQAowUoAwQAowWAAwQAowWRAwQAowWlAwQAowX6MA0GCSqGSIb3DQEBCwUA A4IBAQCUHZ0TX+ZXPdGQIWz+HcEBb5CVA4v0dYfcruFTm0l9gQnhqef+jIwlf4ht 6CjGZvOs6en9yTAwPVlu5wGQGF9N2+EyHbvbAOLlC304fdTg8p2UDej6IgYLemZT LuXQ75donfkTxTTstxqV2HE+hGcZE0lAChvP+dKZFWdG1Rf9PZsbCiRo2fBrRBfZ bal7Sb0Cq0OopeBg7mjPESD5OWTVlDGpVH79DD27LQAigNZS8Ajc8zw7mCQUUQ9r yMRTNVeSbouAftrAqCvAQhyXoNoR+amo+PeAluGJ3XgTFsEKMSmdtdpXiR+kNPWC cb43S5P6v+KumdHR6lV/CU/I+y+g -----END CERTIFICATE-----Generated at Sun Jan 18 11:03:59 2026 by rpki-client