This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Fyv067e56wWyV-Ac-fGrvKbHw0Q.roa File: Fyv067e56wWyV-Ac-fGrvKbHw0Q.roa (raw, json) Hash identifier: lwXJsy7pQ8ELsOVRZ7b4uMehXkF0U7rM2PMK8JKErgA= Subject key identifier: 17:2B:F4:EB:B7:B9:EB:05:B2:57:E0:1C:F9:F1:AB:BC:A6:C7:C3:44 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E393F2E6E0958D2DAF20BAF9838D1CC Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Fyv067e56wWyV-Ac-fGrvKbHw0Q.roa Signing time: Fri 02 Jan 2026 10:20:39 +0000 ROA not before: Fri 02 Jan 2026 10:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214766 IP address blocks: 163.5.35.0/24 maxlen: 24 163.5.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:3f:2e:6e:09:58:d2:da:f2:0b:af:98:38:d1:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=172bf4ebb7b9eb05b257e01cf9f1abbca6c7c344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f7:72:1d:90:0b:ad:ca:36:74:f7:a6:e6:ff: 75:87:bd:e3:43:51:c4:d0:c4:2b:03:a1:b1:7a:36: 8b:d9:d0:f6:17:12:30:c0:5d:34:ec:53:d7:00:5d: 22:c8:8b:8e:ea:e9:60:a3:d0:4a:8d:12:cc:42:df: 3b:f4:76:74:e0:ba:c8:84:3e:4d:c4:75:1b:70:8f: 54:d3:95:e0:66:06:94:0b:da:0b:7e:e4:bf:b3:98: 1c:38:a3:bb:42:36:f9:ae:f9:17:6d:4a:23:ac:a6: 4c:b4:4a:f1:c3:13:d0:bd:ca:d0:71:77:4d:d4:d6: 54:ff:d0:44:47:b4:23:59:b0:2f:17:e9:4c:f0:13: ff:12:8b:e1:40:62:4a:b3:8e:73:fc:80:23:93:fb: e8:92:16:19:1c:90:b6:1d:6b:d2:a2:fd:48:86:f1: d6:d0:51:c3:74:35:10:7e:c7:b1:e4:7c:b2:00:23: b9:d2:e7:26:e4:0f:36:0d:3b:96:58:e7:b0:f6:bf: c2:d0:7f:53:1b:3c:21:94:e5:b6:ed:4f:d1:e1:e5: 11:64:c2:3c:f0:af:40:b3:2b:5b:72:f4:11:3d:a5: ed:ae:db:d2:68:b4:18:81:44:2f:b2:3e:18:31:84: 0c:5d:dc:ef:8b:6e:d3:2c:5f:4a:6b:8d:55:7b:f5: 1d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:2B:F4:EB:B7:B9:EB:05:B2:57:E0:1C:F9:F1:AB:BC:A6:C7:C3:44 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Fyv067e56wWyV-Ac-fGrvKbHw0Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.35.0/24 163.5.54.0/24 Signature Algorithm: sha256WithRSAEncryption 66:52:3e:b9:cc:1d:a9:bf:b9:80:0c:1d:53:f1:35:42:1b:c6: a4:5f:12:89:64:30:fc:01:dc:ac:40:8d:9f:85:1e:c9:1c:7c: 30:07:5f:45:87:6b:a3:b1:d2:41:70:f3:c6:08:3c:ac:35:e8: fc:c6:6c:94:7c:92:48:43:6c:66:30:88:b2:8b:a8:6a:d6:c0: 4a:8e:77:b5:a4:05:2d:63:0f:a0:e7:71:b9:e9:63:87:f6:6c: 55:84:c3:2b:42:fc:b5:38:54:c1:79:66:cf:a6:f8:61:01:a4: 25:12:b1:3c:96:77:46:de:5a:d8:0a:52:8e:15:58:5e:6b:0d: 6f:0d:e4:ed:d1:0b:da:af:ea:cf:e9:c8:4b:cc:fe:45:cc:82: 44:ae:b3:67:e7:98:07:cf:75:75:42:c2:c9:eb:86:e0:1c:71: 83:5b:a3:ca:9e:e6:3b:99:44:ee:0d:56:34:6f:fc:8a:db:d4: 73:fc:e3:ce:d6:9e:ec:be:cf:33:23:f9:ca:a4:93:e8:7e:c7: 16:6e:47:e0:d2:31:0a:e5:e4:e1:72:82:59:01:2b:79:37:7c: f6:b2:fe:18:8d:b6:e2:8b:2c:12:52:2a:46:39:2f:3c:40:4d: b8:7c:a0:7d:11:2d:ec:89:5b:f3:70:b6:fd:57:4d:db:41:36: 14:50:68:88 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OT8ubglY0tryC6+YONHMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzJiZjRlYmI3YjllYjA1YjI1N2UwMWNmOWYxYWJiY2E2YzdjMzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/dyHZALrco2dPem5v91h73jQ1HE 0MQrA6GxejaL2dD2FxIwwF007FPXAF0iyIuO6ulgo9BKjRLMQt879HZ04LrIhD5N xHUbcI9U05XgZgaUC9oLfuS/s5gcOKO7Qjb5rvkXbUojrKZMtErxwxPQvcrQcXdN 1NZU/9BER7QjWbAvF+lM8BP/EovhQGJKs45z/IAjk/vokhYZHJC2HWvSov1IhvHW 0FHDdDUQfsex5HyyACO50ucm5A82DTuWWOew9r/C0H9TGzwhlOW27U/R4eURZMI8 8K9AsytbcvQRPaXtrtvSaLQYgUQvsj4YMYQMXdzvi27TLF9Ka41Ve/UdYQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBcr9Ou3uesFslfgHPnxq7ymx8NEMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvRnl2MDY3ZTU2d1d5Vi1BYy1mR3J2S2JIdzBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowUjAwQA owU2MA0GCSqGSIb3DQEBCwUAA4IBAQBmUj65zB2pv7mADB1T8TVCG8akXxKJZDD8 AdysQI2fhR7JHHwwB19Fh2ujsdJBcPPGCDysNej8xmyUfJJIQ2xmMIiyi6hq1sBK jne1pAUtYw+g53G56WOH9mxVhMMrQvy1OFTBeWbPpvhhAaQlErE8lndG3lrYClKO FVheaw1vDeTt0Qvar+rP6chLzP5FzIJErrNn55gHz3V1QsLJ64bgHHGDW6PKnuY7 mUTuDVY0b/yK29Rz/OPO1p7svs8zI/nKpJPofscWbkfg0jEK5eThcoJZASt5N3z2 sv4YjbbiiywSUipGOS88QE24fKB9ES3siVvzcLb9V03bQTYUUGiI -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:42 2026 by rpki-client