This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/H9vYOWfyCdzfuWVqvrJOn6epuz4.roa File: H9vYOWfyCdzfuWVqvrJOn6epuz4.roa (raw, json) Hash identifier: YVFkgqD9oeE5kAUTVOsLpJSXEs7JkUi1/wx0qu3Mnxc= Subject key identifier: 1F:DB:D8:39:67:F2:09:DC:DF:B9:65:6A:BE:B2:4E:9F:A7:A9:BB:3E Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E3922C6203802D8238BFB7D47004A07 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/H9vYOWfyCdzfuWVqvrJOn6epuz4.roa Signing time: Fri 02 Jan 2026 10:20:32 +0000 ROA not before: Fri 02 Jan 2026 10:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53356 IP address blocks: 163.5.51.0/24 maxlen: 24 163.5.134.0/24 maxlen: 24 163.5.173.0/24 maxlen: 24 163.5.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:22:c6:20:38:02:d8:23:8b:fb:7d:47:00:4a:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fdbd83967f209dcdfb9656abeb24e9fa7a9bb3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:73:16:44:b2:19:d6:c8:eb:f7:32:91:e4:80: 4b:ce:19:31:d2:36:1e:a8:69:db:02:30:8f:4e:63: 86:78:18:fb:0a:ed:2b:db:e2:30:85:82:2b:2d:44: b7:27:d1:c4:45:79:bb:8f:e0:00:6b:13:98:1b:9b: 59:8f:be:7f:28:93:d5:cd:6e:f5:e6:e4:e9:95:72: fd:27:05:85:ef:24:9f:c4:d5:93:ff:d7:5e:2a:c7: dc:1c:70:94:77:51:97:c3:5e:e0:c8:16:65:d9:b2: 65:57:1a:a3:06:ac:3c:01:a7:f8:b0:dd:60:95:75: 9a:df:8f:d7:da:0d:1e:ee:f5:2e:8a:71:96:6a:e9: 91:8b:02:15:91:bc:a5:1a:0f:1d:ae:1d:ce:ec:14: f0:81:c4:15:52:5a:7c:40:8d:25:92:6e:18:49:16: 5b:52:4d:8f:ef:40:d3:de:5c:f2:a5:fe:b2:73:41: 8c:b9:10:94:70:21:37:0f:ee:96:4e:45:be:09:33: c4:15:66:61:e1:31:59:12:f7:b0:6a:a7:06:09:c0: 11:fc:10:c4:52:cb:79:ec:0a:dc:93:7e:42:05:98: 18:95:ae:35:45:e2:38:d4:2e:69:ea:da:56:58:2a: cb:09:6b:08:4a:19:5a:33:14:94:c4:9f:0b:29:a7: 89:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:DB:D8:39:67:F2:09:DC:DF:B9:65:6A:BE:B2:4E:9F:A7:A9:BB:3E X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/H9vYOWfyCdzfuWVqvrJOn6epuz4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.51.0/24 163.5.134.0/24 163.5.173.0/24 163.5.231.0/24 Signature Algorithm: sha256WithRSAEncryption 26:9d:5b:bb:90:11:6d:0d:68:54:9d:71:e3:14:c4:6e:4b:70: 59:c6:72:8f:dd:41:69:93:84:08:63:bc:17:9e:07:2d:9b:4c: d0:88:7e:57:2b:fb:75:0a:f1:cc:70:05:8d:3d:b1:1a:6f:19: 54:f6:fe:88:05:46:8c:f1:16:19:c3:4a:2b:a4:c7:32:82:ca: 74:da:ff:21:6b:f2:9e:2c:65:3c:6e:63:3f:ae:34:e4:4e:a5: 3e:bd:12:04:5c:65:5d:a4:92:d7:97:0f:34:95:8e:15:be:37: a4:4c:8d:17:49:3a:35:4d:8b:48:f6:51:9d:1d:6f:d7:51:20: ee:86:a2:c0:10:a5:4d:65:bc:4a:ee:ef:4d:83:79:9e:e4:06: 02:cf:ba:34:c6:5d:4b:7f:13:29:c0:82:bb:08:c7:ba:ac:df: de:bb:30:69:97:d6:aa:65:f3:77:54:0f:a1:d4:c7:23:56:cf: 63:61:46:5b:76:cb:72:53:08:a3:50:24:5f:b5:61:2f:20:17: a5:73:88:98:83:bf:b2:db:42:27:90:6a:07:6f:cf:e9:67:36: 9f:40:c9:fe:70:81:17:72:2b:76:71:b0:c2:4c:d1:1a:4c:49: 62:03:f3:ff:d9:5a:12:73:4f:07:25:b7:d6:e9:8d:82:68:f0: 2f:e8:a8:f7 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+OSLGIDgC2COL+31HAEoHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmRiZDgzOTY3ZjIwOWRjZGZiOTY1NmFiZWIyNGU5ZmE3YTliYjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HMWRLIZ1sjr9zKR5IBLzhkx0jYe qGnbAjCPTmOGeBj7Cu0r2+IwhYIrLUS3J9HERXm7j+AAaxOYG5tZj75/KJPVzW71 5uTplXL9JwWF7ySfxNWT/9deKsfcHHCUd1GXw17gyBZl2bJlVxqjBqw8Aaf4sN1g lXWa34/X2g0e7vUuinGWaumRiwIVkbylGg8drh3O7BTwgcQVUlp8QI0lkm4YSRZb Uk2P70DT3lzypf6yc0GMuRCUcCE3D+6WTkW+CTPEFWZh4TFZEvewaqcGCcAR/BDE Ust57Arck35CBZgYla41ReI41C5p6tpWWCrLCWsIShlaMxSUxJ8LKaeJJQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFB/b2Dln8gnc37llar6yTp+nqbs+MB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvSDl2WU9XZnlDZHpmdVdWcXZySk9uNmVwdXo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAowUzAwQA owWGAwQAowWtAwQAowXnMA0GCSqGSIb3DQEBCwUAA4IBAQAmnVu7kBFtDWhUnXHj FMRuS3BZxnKP3UFpk4QIY7wXngctm0zQiH5XK/t1CvHMcAWNPbEabxlU9v6IBUaM 8RYZw0orpMcygsp02v8ha/KeLGU8bmM/rjTkTqU+vRIEXGVdpJLXlw80lY4Vvjek TI0XSTo1TYtI9lGdHW/XUSDuhqLAEKVNZbxK7u9Ng3me5AYCz7o0xl1LfxMpwIK7 CMe6rN/euzBpl9aqZfN3VA+h1McjVs9jYUZbdstyUwijUCRftWEvIBelc4iYg7+y 20InkGoHb8/pZzafQMn+cIEXcit2cbDCTNEaTEliA/P/2VoSc08HJbfW6Y2CaPAv 6Kj3 -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:13 2026 by rpki-client