This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/NF2s9VKM_Pul1n-dweokd_JINds.roa File: NF2s9VKM_Pul1n-dweokd_JINds.roa (raw, json) Hash identifier: 5eRWt72+XSewsz1e8FW5/ZIbnGmf6eEG1j56DaDYGKI= Subject key identifier: 34:5D:AC:F5:52:8C:FC:FB:A5:D6:7F:9D:C1:EA:24:77:F2:48:35:DB Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E39329809EC9A95BFB6CC9D621B2387 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/NF2s9VKM_Pul1n-dweokd_JINds.roa Signing time: Fri 02 Jan 2026 10:20:36 +0000 ROA not before: Fri 02 Jan 2026 10:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199432 IP address blocks: 163.5.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:32:98:09:ec:9a:95:bf:b6:cc:9d:62:1b:23:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=345dacf5528cfcfba5d67f9dc1ea2477f24835db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:78:a7:1b:75:7b:a7:c3:e6:8c:6b:24:fe:28: 92:c2:c0:08:c8:af:47:65:6b:1c:2b:b0:a6:57:6c: eb:0b:50:59:05:5d:e6:6a:14:59:db:86:3a:f9:f1: 5a:a9:85:2b:38:e7:c0:97:dc:ec:55:90:05:58:9a: 09:83:f2:56:68:ba:0b:3e:49:6d:35:3c:b1:11:82: be:a1:ea:12:2f:70:fe:52:57:1e:5c:1c:be:f6:7a: a8:0d:00:ce:62:41:82:cc:06:b6:03:7e:5e:be:d5: 96:b6:6b:49:6c:1c:10:16:ea:34:ad:a7:75:a9:4a: 96:b5:66:8e:83:4e:4a:41:0c:5b:1a:93:de:a8:2e: 5c:43:5e:60:54:a3:40:19:81:7e:19:7a:ea:48:4f: 41:44:41:b6:07:dd:ba:71:4d:53:67:7e:ce:4b:d9: 83:04:33:a4:68:39:ec:e7:31:75:13:98:37:1c:65: 4a:41:ea:8c:a4:5b:ee:74:f3:75:c3:94:60:2b:d0: a5:8c:f5:1d:3b:85:04:3e:88:8c:de:b3:87:61:4c: 7b:48:1c:fe:2a:9d:f5:0f:9b:71:e6:64:0f:04:8d: b3:08:06:c4:cf:2d:22:06:ae:09:57:56:0a:53:19: 53:16:a8:20:3c:86:08:46:97:e5:38:8a:10:5c:23: 53:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:5D:AC:F5:52:8C:FC:FB:A5:D6:7F:9D:C1:EA:24:77:F2:48:35:DB X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/NF2s9VKM_Pul1n-dweokd_JINds.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.123.0/24 Signature Algorithm: sha256WithRSAEncryption 02:0a:7c:15:0b:05:38:cf:5c:9b:93:93:f4:96:3a:12:6a:38: ef:54:8f:7f:75:b0:26:a3:18:22:9b:0c:02:41:91:74:43:bd: 2b:83:b8:35:f2:c8:5e:25:75:36:f7:71:5b:53:d4:87:df:00: 40:ab:75:b6:1d:32:72:65:f7:fc:77:db:5f:61:b8:b3:24:c2: 47:25:84:c4:38:43:01:cb:5a:eb:7b:64:b0:d1:b4:6f:9f:b7: cb:e7:07:ed:ca:91:66:89:29:06:e4:ef:2e:a1:a7:d9:65:1f: 2c:6d:13:73:f5:af:4a:5a:c5:42:2e:5a:27:22:17:4c:e5:d6: f2:80:2d:96:9b:04:93:17:6a:2e:b2:f7:b7:2b:4a:a7:31:73: 6d:01:4e:17:fb:49:07:be:c3:e4:1c:b3:95:01:e6:1f:c2:8b: c7:cd:40:5c:cd:2d:d2:33:30:f9:c4:ba:29:c3:d4:95:0f:bc: 0d:92:78:52:19:1b:58:49:8e:d2:20:2a:5b:5a:a3:6d:f6:8b: cd:62:8d:58:4a:3e:22:e8:2f:28:7f:fd:df:51:02:12:9a:52: 9e:10:7e:49:f5:60:62:48:9c:76:6a:8b:75:0b:db:07:5c:2b: 19:56:c5:8a:65:d5:33:25:b5:fb:72:df:c5:53:2e:74:3e:eb: b3:fa:ca:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OTKYCeyalb+2zJ1iGyOHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDVkYWNmNTUyOGNmY2ZiYTVkNjdmOWRjMWVhMjQ3N2YyNDgzNWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXinG3V7p8PmjGsk/iiSwsAIyK9H ZWscK7CmV2zrC1BZBV3mahRZ24Y6+fFaqYUrOOfAl9zsVZAFWJoJg/JWaLoLPklt NTyxEYK+oeoSL3D+UlceXBy+9nqoDQDOYkGCzAa2A35evtWWtmtJbBwQFuo0rad1 qUqWtWaOg05KQQxbGpPeqC5cQ15gVKNAGYF+GXrqSE9BREG2B926cU1TZ37OS9mD BDOkaDns5zF1E5g3HGVKQeqMpFvudPN1w5RgK9CljPUdO4UEPoiM3rOHYUx7SBz+ Kp31D5tx5mQPBI2zCAbEzy0iBq4JV1YKUxlTFqggPIYIRpflOIoQXCNTQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDRdrPVSjPz7pdZ/ncHqJHfySDXbMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvTkYyczlWS01fUHVsMW4tZHdlb2tkX0pJTmRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowV7MA0G CSqGSIb3DQEBCwUAA4IBAQACCnwVCwU4z1ybk5P0ljoSajjvVI9/dbAmoxgimwwC QZF0Q70rg7g18sheJXU293FbU9SH3wBAq3W2HTJyZff8d9tfYbizJMJHJYTEOEMB y1rre2Sw0bRvn7fL5wftypFmiSkG5O8uoafZZR8sbRNz9a9KWsVCLlonIhdM5dby gC2WmwSTF2ousve3K0qnMXNtAU4X+0kHvsPkHLOVAeYfwovHzUBczS3SMzD5xLop w9SVD7wNknhSGRtYSY7SICpbWqNt9ovNYo1YSj4i6C8of/3fUQISmlKeEH5J9WBi SJx2aot1C9sHXCsZVsWKZdUzJbX7ct/FUy50Puuz+sr9 -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:34 2026 by rpki-client