This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/N8eTozV-DVjIT3fp2FtedPndzmU.roa File: N8eTozV-DVjIT3fp2FtedPndzmU.roa (raw, json) Hash identifier: qap867IZATfNeKjG2MVA0vidoyhtcGPt4zHMF2t1eUk= Subject key identifier: 37:C7:93:A3:35:7E:0D:58:C8:4F:77:E9:D8:5B:5E:74:F9:DD:CE:65 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019AC9400C3EA5A5753F956A8C0BB7981B35 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/N8eTozV-DVjIT3fp2FtedPndzmU.roa Signing time: Fri 28 Nov 2025 06:56:49 +0000 ROA not before: Fri 28 Nov 2025 06:56:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55470 IP address blocks: 163.5.191.0/24 maxlen: 24 163.5.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 09:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:40:0c:3e:a5:a5:75:3f:95:6a:8c:0b:b7:98:1b:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Nov 28 06:56:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=37c793a3357e0d58c84f77e9d85b5e74f9ddce65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:66:5c:7d:52:91:e6:d3:04:53:cc:70:82:e4: 42:c2:83:0d:b6:8f:09:ad:32:49:31:78:8b:89:71: 3f:90:24:bd:c5:35:59:7d:a9:af:3a:a9:69:25:ec: a6:02:c4:78:ba:ce:08:f8:88:3f:63:64:b5:6b:1d: 10:56:68:42:b1:17:7b:64:a2:d3:18:b1:eb:d6:20: 97:b2:3c:92:ca:a5:f7:62:61:57:ea:00:4f:60:54: ba:10:f6:4a:84:dc:6c:82:f1:8f:d6:42:8a:ab:4f: 2e:48:8e:c8:a1:04:4d:88:34:fc:56:be:f7:b3:00: 84:c7:19:c8:6a:1a:7e:06:dd:06:b2:44:8d:43:d9: 51:5a:1b:cc:b7:a2:90:9d:58:96:d4:23:b6:76:75: 8a:e3:e5:0c:4b:71:e0:72:c1:5f:84:45:e6:58:04: ea:bd:14:c4:8c:e4:11:fa:0c:a8:6d:65:df:2d:d1: fe:35:c4:dd:fc:df:e0:82:a4:5d:0e:56:94:3a:7d: d9:6e:bf:6c:e8:5f:70:7f:5a:9e:b3:36:b5:2f:cd: 1f:7c:c1:9b:90:00:7a:ae:27:ee:75:dd:62:e0:a1: 1c:50:f5:4c:1d:ad:67:d1:1b:8c:a3:69:50:c4:59: bc:fd:27:52:65:69:bb:80:e0:97:e4:af:13:31:dd: 73:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C7:93:A3:35:7E:0D:58:C8:4F:77:E9:D8:5B:5E:74:F9:DD:CE:65 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/N8eTozV-DVjIT3fp2FtedPndzmU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.191.0/24 163.5.200.0/24 Signature Algorithm: sha256WithRSAEncryption 98:f2:e4:d4:41:96:91:8d:03:ef:1a:cc:87:99:4b:83:03:8f: 49:89:5e:40:5b:c5:72:cf:70:1f:72:5e:e0:5c:9a:a8:9c:ce: bf:a9:68:3d:c7:a5:3f:e3:ea:ed:9f:69:19:24:35:86:96:5a: a4:4c:fc:fa:56:79:64:5d:4f:b9:23:96:fc:9e:34:a6:72:31: 82:f9:1b:78:09:57:23:3d:af:c3:bc:5b:46:af:6b:fd:60:cc: e0:03:e8:09:fa:f4:f5:46:d6:df:4f:0d:e0:fa:e1:51:00:84: 8d:fe:6e:1c:f5:32:d6:ad:fc:d8:d6:f5:74:8c:3a:47:33:09: 2f:7d:da:97:c3:de:97:e1:44:3a:0d:40:7d:c1:5f:c1:79:21: 84:aa:2c:a4:17:34:d2:fb:85:46:cf:50:bc:06:12:02:f2:8b: 54:aa:e5:23:d7:39:3d:7c:71:17:09:34:3c:a8:96:55:bc:c4: 10:5e:1c:93:88:99:63:67:dc:c2:c8:62:34:0e:10:86:2d:b2: fd:9c:c5:b5:37:5d:1b:ec:c2:34:4f:76:d9:ba:9f:e1:b7:91: 18:77:1f:c1:b1:14:19:e4:fe:18:67:2a:63:8b:eb:7f:f1:17: e4:3a:7c:98:50:ee:b3:7d:1d:69:14:d9:10:6f:25:ae:35:4d: 9c:b7:66:65 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrJQAw+paV1P5VqjAu3mBs1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMTI4MDY1NjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2M3OTNhMzM1N2UwZDU4Yzg0Zjc3ZTlkODViNWU3NGY5ZGRjZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WZcfVKR5tMEU8xwguRCwoMNto8J rTJJMXiLiXE/kCS9xTVZfamvOqlpJeymAsR4us4I+Ig/Y2S1ax0QVmhCsRd7ZKLT GLHr1iCXsjySyqX3YmFX6gBPYFS6EPZKhNxsgvGP1kKKq08uSI7IoQRNiDT8Vr73 swCExxnIahp+Bt0GskSNQ9lRWhvMt6KQnViW1CO2dnWK4+UMS3HgcsFfhEXmWATq vRTEjOQR+gyobWXfLdH+NcTd/N/ggqRdDlaUOn3Zbr9s6F9wf1qesza1L80ffMGb kAB6rifudd1i4KEcUPVMHa1n0RuMo2lQxFm8/SdSZWm7gOCX5K8TMd1zSwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDfHk6M1fg1YyE936dhbXnT53c5lMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvTjhlVG96Vi1EVmpJVDNmcDJGdGVkUG5kem1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowW/AwQA owXIMA0GCSqGSIb3DQEBCwUAA4IBAQCY8uTUQZaRjQPvGsyHmUuDA49JiV5AW8Vy z3Afcl7gXJqonM6/qWg9x6U/4+rtn2kZJDWGllqkTPz6VnlkXU+5I5b8njSmcjGC +Rt4CVcjPa/DvFtGr2v9YMzgA+gJ+vT1RtbfTw3g+uFRAISN/m4c9TLWrfzY1vV0 jDpHMwkvfdqXw96X4UQ6DUB9wV/BeSGEqiykFzTS+4VGz1C8BhIC8otUquUj1zk9 fHEXCTQ8qJZVvMQQXhyTiJljZ9zCyGI0DhCGLbL9nMW1N10b7MI0T3bZup/ht5EY dx/BsRQZ5P4YZypji+t/8RfkOnyYUO6zfR1pFNkQbyWuNU2ct2Zl -----END CERTIFICATE-----Generated at Fri Dec 5 13:57:55 2025 by rpki-client