This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/IL6ohDCTcXVy-wJ5yTqw2EOP15E.roa File: IL6ohDCTcXVy-wJ5yTqw2EOP15E.roa (raw, json) Hash identifier: PJTJQ5k+whhJ0LfI0LPZh0rTYHN5x8Dh+ar7J/DazAE= Subject key identifier: 20:BE:A8:84:30:93:71:75:72:FB:02:79:C9:3A:B0:D8:43:8F:D7:91 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019AA0197BA441683CC75B669C172F7BCA09 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/IL6ohDCTcXVy-wJ5yTqw2EOP15E.roa Signing time: Thu 20 Nov 2025 07:10:15 +0000 ROA not before: Thu 20 Nov 2025 07:10:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212815 IP address blocks: 163.5.99.0/24 maxlen: 24 163.5.143.0/24 maxlen: 24 163.5.192.0/24 maxlen: 24 163.5.193.0/24 maxlen: 24 163.5.213.0/24 maxlen: 24 185.253.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 00:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:19:7b:a4:41:68:3c:c7:5b:66:9c:17:2f:7b:ca:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Nov 20 07:10:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=20bea8843093717572fb0279c93ab0d8438fd791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2a:3e:10:05:71:9b:60:0c:b0:88:52:0b:9a: 14:ce:d4:2b:c9:03:fb:e8:52:fe:07:de:a1:ff:70: 49:ff:b1:5f:99:13:32:2a:89:b4:a0:18:23:a6:1e: fd:d4:2c:bd:dd:46:fe:95:69:85:d1:70:23:68:86: 08:f0:e8:44:76:97:ef:bf:e6:ec:fc:87:36:ab:8b: 2d:01:f7:a1:cc:39:4b:db:11:bf:8f:cf:6d:52:86: ad:26:46:bc:c5:d4:c2:b8:b2:f2:6b:68:11:41:22: 5c:3f:73:08:2b:d9:7f:e1:22:40:be:df:2d:f6:6a: f7:6a:1e:68:59:65:87:e3:38:b5:9a:74:af:cc:b4: 97:a8:48:70:47:5c:68:93:b8:77:aa:31:70:44:b7: 9a:df:71:db:b0:a5:db:12:c6:9d:31:ad:45:73:78: 8f:f9:0d:c1:8f:78:8b:17:69:e2:da:d6:22:d7:b7: 17:64:11:d4:a9:07:34:f4:7d:c8:4d:6b:81:40:e6: f8:c4:54:c6:2c:7b:a0:8f:0e:76:7d:63:ca:fd:de: 33:0a:da:dd:65:ef:84:bc:68:40:9f:86:a6:e2:9f: 57:69:ea:82:eb:54:ad:46:27:0e:d5:3d:55:76:dd: cb:0a:e4:8d:12:73:3b:cc:25:86:70:0e:96:95:db: 99:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BE:A8:84:30:93:71:75:72:FB:02:79:C9:3A:B0:D8:43:8F:D7:91 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/IL6ohDCTcXVy-wJ5yTqw2EOP15E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.99.0/24 163.5.143.0/24 163.5.192.0/23 163.5.213.0/24 185.253.54.0/24 Signature Algorithm: sha256WithRSAEncryption 20:68:d8:38:51:46:04:90:5d:af:87:3c:12:ba:c9:51:f8:ae: e2:47:e3:fb:39:9a:b4:95:04:1a:0f:45:14:40:3a:4a:d8:65: 2f:a3:14:3b:0c:6a:52:e1:ff:b7:38:5e:e7:bb:1d:35:e7:11: b1:5a:ca:80:a0:5f:87:a8:d9:03:ac:f2:42:93:66:d6:51:49: 21:7f:82:d5:0f:8b:74:cf:98:48:26:f6:09:a9:fd:f3:49:b4: 2f:7a:a9:6c:1c:45:8a:b0:1f:5d:97:cb:c5:da:9a:db:2d:ad: f5:47:0e:73:6f:14:a3:77:27:9b:5d:49:b1:60:82:cb:9d:a7: e0:1b:7a:fb:e2:6b:31:d4:c2:fb:6a:08:29:70:43:ae:6e:b4: 63:ac:b8:88:86:8a:e3:12:41:80:4f:2a:fb:03:7e:44:81:03: 68:0c:a8:8f:01:a2:2e:25:f0:f8:71:03:9e:62:16:8c:30:a2: 89:ba:59:28:90:f4:86:f6:2d:d6:5d:94:91:b9:09:e5:3f:59: ef:92:8f:2f:9a:67:42:b0:f9:61:df:46:2f:d8:71:4c:82:7b: 33:17:9b:cf:95:9b:b5:e8:6b:14:4e:67:ba:a7:e4:a0:be:b7: c2:8a:b8:e8:a3:95:23:2c:05:a5:a4:6d:8a:47:f5:c0:e8:31: 4f:52:e4:02 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZqgGXukQWg8x1tmnBcve8oJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMTIwMDcxMDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGJlYTg4NDMwOTM3MTc1NzJmYjAyNzljOTNhYjBkODQzOGZkNzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsio+EAVxm2AMsIhSC5oUztQryQP7 6FL+B96h/3BJ/7FfmRMyKom0oBgjph791Cy93Ub+lWmF0XAjaIYI8OhEdpfvv+bs /Ic2q4stAfehzDlL2xG/j89tUoatJka8xdTCuLLya2gRQSJcP3MIK9l/4SJAvt8t 9mr3ah5oWWWH4zi1mnSvzLSXqEhwR1xok7h3qjFwRLea33HbsKXbEsadMa1Fc3iP +Q3Bj3iLF2ni2tYi17cXZBHUqQc09H3ITWuBQOb4xFTGLHugjw52fWPK/d4zCtrd Ze+EvGhAn4am4p9XaeqC61StRicO1T1Vdt3LCuSNEnM7zCWGcA6WlduZ6QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFCC+qIQwk3F1cvsCeck6sNhDj9eRMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvSUw2b2hEQ1RjWFZ5LXdKNXlUcXcyRU9QMTVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAowVjAwQA owWPAwQBowXAAwQAowXVAwQAuf02MA0GCSqGSIb3DQEBCwUAA4IBAQAgaNg4UUYE kF2vhzwSuslR+K7iR+P7OZq0lQQaD0UUQDpK2GUvoxQ7DGpS4f+3OF7nux015xGx WsqAoF+HqNkDrPJCk2bWUUkhf4LVD4t0z5hIJvYJqf3zSbQveqlsHEWKsB9dl8vF 2prbLa31Rw5zbxSjdyebXUmxYILLnafgG3r74msx1ML7aggpcEOubrRjrLiIhorj EkGATyr7A35EgQNoDKiPAaIuJfD4cQOeYhaMMKKJulkokPSG9i3WXZSRuQnlP1nv ko8vmmdCsPlh30Yv2HFMgnszF5vPlZu16GsUTme6p+SgvrfCirjoo5UjLAWlpG2K R/XA6DFPUuQC -----END CERTIFICATE-----Generated at Fri Dec 5 07:27:37 2025 by rpki-client