This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/H7jaDvKswb883p4DE4j5Kio0FYM.roa File: H7jaDvKswb883p4DE4j5Kio0FYM.roa (raw, json) Hash identifier: 2iKHSr1jaJSHGfU/fXVPMw/ksPnDmrMZ/WZLEycgCeA= Subject key identifier: 1F:B8:DA:0E:F2:AC:C1:BF:3C:DE:9E:03:13:88:F9:2A:2A:34:15:83 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E39109D86AE515E64A1CBB22AFF890A Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/H7jaDvKswb883p4DE4j5Kio0FYM.roa Signing time: Fri 02 Jan 2026 10:20:27 +0000 ROA not before: Fri 02 Jan 2026 10:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9291 IP address blocks: 163.5.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 04:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:10:9d:86:ae:51:5e:64:a1:cb:b2:2a:ff:89:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fb8da0ef2acc1bf3cde9e031388f92a2a341583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6b:d9:4a:a4:8d:fa:6a:5c:98:fc:7b:d9:49: 15:b0:c8:b9:6d:36:ee:22:6c:d5:d2:34:fa:68:9b: ad:43:36:8e:c7:1f:ee:40:56:3f:78:30:f6:88:55: 89:2f:01:da:28:76:92:1f:36:1c:3f:32:12:28:db: 88:4c:1a:a2:bb:2e:37:4d:20:bf:5e:40:4c:5e:55: 52:85:ea:f1:e0:05:2d:81:4f:1b:d6:03:22:90:e8: cc:59:a0:a0:d9:de:62:ce:6d:a6:12:ec:6b:da:26: 4a:98:35:ac:9e:2a:eb:9d:46:63:e8:40:26:95:05: ff:36:84:90:b9:95:a1:75:a1:58:3a:b8:5e:66:95: c2:7d:56:52:30:f3:b4:40:1a:ff:c6:1e:fd:7c:00: 8e:26:7e:5d:70:d1:05:a0:a0:40:34:30:f9:75:05: 4e:df:7b:8b:a3:ff:85:14:81:31:f5:ce:75:44:1a: a9:d4:79:00:dc:3b:5b:7b:ec:d8:7b:3b:bd:a7:49: 13:27:74:30:41:94:59:33:56:bf:a8:23:a6:c1:60: 4e:ba:4b:8e:e7:25:2e:aa:65:36:5d:7d:fa:37:71: 6f:53:de:3e:9f:ea:b3:7a:ca:90:fd:13:07:4c:82: 1c:e9:1d:ea:9c:f5:33:bb:fe:03:49:25:9e:e6:6b: db:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B8:DA:0E:F2:AC:C1:BF:3C:DE:9E:03:13:88:F9:2A:2A:34:15:83 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/H7jaDvKswb883p4DE4j5Kio0FYM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.184.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:c8:1c:b8:99:91:82:9e:e0:ee:a2:e7:ea:74:65:78:13:7e: 02:66:54:ce:dc:74:c7:68:47:07:f6:ea:58:64:5b:b5:b3:1d: f5:67:96:e4:20:fe:7e:d2:0a:dd:2a:4f:84:79:ca:7b:f0:30: 0c:b7:aa:6b:8e:1d:c4:60:69:0a:b4:75:fe:76:a9:80:14:96: 54:fd:62:82:95:64:24:46:68:bf:ac:6d:8c:0d:d1:1c:46:7f: 94:17:ef:08:07:19:3a:f0:c7:58:bc:07:ea:04:fc:87:71:be: 19:3a:d3:40:54:99:ed:82:ea:33:9a:74:20:76:33:65:70:d0: 3e:9b:a3:0d:f0:1f:4d:79:e9:9d:cd:e1:a9:d2:69:a7:7c:73: 68:a8:b7:f8:8f:bd:bc:09:8b:2a:f4:4f:3f:e0:f0:5a:9b:0d: 6d:0e:8d:72:0d:a0:9f:61:80:f8:a3:a6:a4:72:49:15:e1:85: 83:3e:62:7f:59:79:b9:32:13:cf:c5:20:38:3f:8d:07:20:12: 48:15:a5:ec:48:29:1a:98:83:c7:69:83:96:74:7c:76:f5:ef: bf:6d:09:f3:a6:61:0f:dd:4c:c8:f1:08:29:12:96:e4:ea:73: cb:0e:cb:5c:60:e3:59:e3:66:f9:52:26:50:96:c7:3f:33:89: 6f:a7:f7:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ORCdhq5RXmShy7Iq/4kKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmI4ZGEwZWYyYWNjMWJmM2NkZTllMDMxMzg4ZjkyYTJhMzQxNTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmvZSqSN+mpcmPx72UkVsMi5bTbu ImzV0jT6aJutQzaOxx/uQFY/eDD2iFWJLwHaKHaSHzYcPzISKNuITBqiuy43TSC/ XkBMXlVSherx4AUtgU8b1gMikOjMWaCg2d5izm2mEuxr2iZKmDWsnirrnUZj6EAm lQX/NoSQuZWhdaFYOrheZpXCfVZSMPO0QBr/xh79fACOJn5dcNEFoKBANDD5dQVO 33uLo/+FFIEx9c51RBqp1HkA3Dtbe+zYezu9p0kTJ3QwQZRZM1a/qCOmwWBOukuO 5yUuqmU2XX36N3FvU94+n+qzesqQ/RMHTIIc6R3qnPUzu/4DSSWe5mvbkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB+42g7yrMG/PN6eAxOI+SoqNBWDMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvSDdqYUR2S3N3Yjg4M3A0REU0ajVLaW8wRllNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowW4MA0G CSqGSIb3DQEBCwUAA4IBAQBfyBy4mZGCnuDuoufqdGV4E34CZlTO3HTHaEcH9upY ZFu1sx31Z5bkIP5+0grdKk+Eecp78DAMt6prjh3EYGkKtHX+dqmAFJZU/WKClWQk Rmi/rG2MDdEcRn+UF+8IBxk68MdYvAfqBPyHcb4ZOtNAVJntguozmnQgdjNlcNA+ m6MN8B9NeemdzeGp0mmnfHNoqLf4j728CYsq9E8/4PBamw1tDo1yDaCfYYD4o6ak ckkV4YWDPmJ/WXm5MhPPxSA4P40HIBJIFaXsSCkamIPHaYOWdHx29e+/bQnzpmEP 3UzI8QgpEpbk6nPLDstcYONZ42b5UiZQlsc/M4lvp/fw -----END CERTIFICATE-----Generated at Mon Jan 19 11:23:52 2026 by rpki-client