This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HBTyeBe6cTiCeVBl7LLxrL_yu9A.roa File: HBTyeBe6cTiCeVBl7LLxrL_yu9A.roa (raw, json) Hash identifier: hSlxKFvdPwN6V1n13PgGuhWHWCejlxPxqOkx1UgTj30= Subject key identifier: 1C:14:F2:78:17:BA:71:38:82:79:50:65:EC:B2:F1:AC:BF:F2:BB:D0 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019AB6345C83C1024D6B157CA9363E6F0F7F Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HBTyeBe6cTiCeVBl7LLxrL_yu9A.roa Signing time: Mon 24 Nov 2025 14:11:16 +0000 ROA not before: Mon 24 Nov 2025 14:11:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 163.5.62.0/24 maxlen: 24 163.5.149.0/24 maxlen: 24 163.5.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:34:5c:83:c1:02:4d:6b:15:7c:a9:36:3e:6f:0f:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Nov 24 14:11:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1c14f27817ba713882795065ecb2f1acbff2bbd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c3:b5:91:64:6f:b8:cc:ad:c6:6d:c8:b0:d3: df:05:a7:b0:63:cd:71:67:d7:20:d4:7f:28:bd:cc: e8:84:8e:a2:c2:3c:37:38:38:85:0f:89:a9:ed:c3: 3d:16:ea:a4:6a:33:5f:7a:42:53:31:22:dc:0b:fe: b1:46:ee:ff:82:40:92:c5:c3:b0:fe:f2:16:1a:f4: af:fb:6c:82:32:61:fe:55:a0:bc:ca:0e:ec:ee:c1: aa:38:d5:4d:2e:d2:43:0d:21:16:9c:a6:6a:be:f8: 9c:75:18:1b:e3:c9:81:f6:90:d2:b4:6a:80:9a:99: f0:94:40:34:7b:14:31:e9:65:4e:ad:7e:8f:fe:c3: 46:4a:9a:15:b7:0a:54:39:2a:8c:84:03:ed:fb:bc: 73:23:92:7d:91:76:be:d5:b5:05:7e:39:3c:20:80: de:ab:75:74:8a:60:af:29:d2:0b:37:c7:bd:72:b3: d7:33:be:b6:b6:b0:86:2b:aa:84:4b:6e:cc:ec:5c: bf:03:37:d0:b8:49:b3:b9:e8:d8:77:98:50:39:65: 70:a5:4f:8a:d0:89:e9:aa:6e:a0:92:40:3d:9c:9d: 87:fd:91:19:bd:83:00:4e:9c:63:df:1f:4a:7e:79: d1:81:30:1c:fb:eb:eb:d5:85:64:86:14:87:8b:7b: dc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:14:F2:78:17:BA:71:38:82:79:50:65:EC:B2:F1:AC:BF:F2:BB:D0 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HBTyeBe6cTiCeVBl7LLxrL_yu9A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.62.0/24 163.5.149.0/24 163.5.187.0/24 Signature Algorithm: sha256WithRSAEncryption 54:84:54:ba:17:20:ca:4b:07:77:b7:68:2e:bc:12:89:3e:e4: f2:66:98:0b:e0:bd:03:5a:a5:2c:4d:2e:81:9e:1a:49:bf:b3: 3e:b4:9b:ab:8d:31:b2:da:c9:c5:c4:c7:93:36:25:10:d5:11: 77:5f:89:bf:9d:81:6f:03:24:a8:d8:f0:7c:2a:0c:6d:2d:ed: 37:94:c7:60:c0:61:c2:c8:4c:ea:7d:a6:16:00:45:73:f8:cf: 0d:52:3d:72:21:f0:c5:18:43:e0:55:33:f7:f2:68:c2:68:ae: e1:4a:dd:85:d2:58:d8:7a:b3:d8:dc:2c:35:61:9d:66:da:a4: 0e:ec:7e:f2:81:0d:19:e3:fb:32:50:16:51:66:12:51:5c:93: 61:d9:ce:3c:0a:e1:83:4c:41:b2:a1:d3:25:3c:88:ab:be:84: 07:2f:e9:5c:7c:37:d4:f2:52:a7:b4:12:a4:56:ac:d0:5c:32: 31:d1:1d:a5:ea:0e:9b:31:1f:3f:d4:4c:e1:16:6f:7d:bd:20: 97:2c:12:36:6a:71:73:07:36:be:28:eb:44:eb:e6:9d:e6:f9: 9e:44:d5:46:de:48:a0:4c:30:72:2b:cd:45:1c:b0:c2:5b:fc: 33:57:8c:79:ca:ae:d2:34:6e:fa:91:35:c8:0f:3e:49:0d:bc: d7:67:5e:4a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZq2NFyDwQJNaxV8qTY+bw9/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMTI0MTQxMTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzE0ZjI3ODE3YmE3MTM4ODI3OTUwNjVlY2IyZjFhY2JmZjJiYmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcO1kWRvuMytxm3IsNPfBaewY81x Z9cg1H8ovczohI6iwjw3ODiFD4mp7cM9FuqkajNfekJTMSLcC/6xRu7/gkCSxcOw /vIWGvSv+2yCMmH+VaC8yg7s7sGqONVNLtJDDSEWnKZqvvicdRgb48mB9pDStGqA mpnwlEA0exQx6WVOrX6P/sNGSpoVtwpUOSqMhAPt+7xzI5J9kXa+1bUFfjk8IIDe q3V0imCvKdILN8e9crPXM762trCGK6qES27M7Fy/AzfQuEmzuejYd5hQOWVwpU+K 0Inpqm6gkkA9nJ2H/ZEZvYMATpxj3x9KfnnRgTAc++vr1YVkhhSHi3vckwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBwU8ngXunE4gnlQZeyy8ay/8rvQMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvSEJUeWVCZTZjVGlDZVZCbDdMTHhyTF95dTlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAowU+AwQA owWVAwQAowW7MA0GCSqGSIb3DQEBCwUAA4IBAQBUhFS6FyDKSwd3t2guvBKJPuTy ZpgL4L0DWqUsTS6BnhpJv7M+tJurjTGy2snFxMeTNiUQ1RF3X4m/nYFvAySo2PB8 KgxtLe03lMdgwGHCyEzqfaYWAEVz+M8NUj1yIfDFGEPgVTP38mjCaK7hSt2F0ljY erPY3Cw1YZ1m2qQO7H7ygQ0Z4/syUBZRZhJRXJNh2c48CuGDTEGyodMlPIirvoQH L+lcfDfU8lKntBKkVqzQXDIx0R2l6g6bMR8/1EzhFm99vSCXLBI2anFzBza+KOtE 6+ad5vmeRNVG3kigTDByK81FHLDCW/wzV4x5yq7SNG76kTXIDz5JDbzXZ15K -----END CERTIFICATE-----Generated at Fri Dec 5 04:28:05 2025 by rpki-client