This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Np6TOxRQIvPPe-886tC7rGFnzWY.roa File: Np6TOxRQIvPPe-886tC7rGFnzWY.roa (raw, json) Hash identifier: otS9xmaTAc8uToUQ5XFpdEs+hGtkfeTfNrEAIz1CBrY= Subject key identifier: 36:9E:93:3B:14:50:22:F3:CF:7B:EF:3C:EA:D0:BB:AC:61:67:CD:66 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B6E8E031999AD0674C8C7747EA157498F Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Np6TOxRQIvPPe-886tC7rGFnzWY.roa Signing time: Tue 30 Dec 2025 09:19:19 +0000 ROA not before: Tue 30 Dec 2025 09:19:19 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 163.5.8.0/24 maxlen: 24 163.5.28.0/24 maxlen: 24 163.5.30.0/24 maxlen: 24 163.5.53.0/24 maxlen: 24 163.5.58.0/24 maxlen: 24 163.5.59.0/24 maxlen: 24 163.5.106.0/24 maxlen: 24 163.5.112.0/24 maxlen: 24 163.5.118.0/24 maxlen: 24 163.5.121.0/24 maxlen: 24 163.5.129.0/24 maxlen: 24 163.5.139.0/24 maxlen: 24 163.5.143.0/24 maxlen: 24 163.5.146.0/24 maxlen: 24 163.5.151.0/24 maxlen: 24 163.5.157.0/24 maxlen: 24 163.5.160.0/24 maxlen: 24 163.5.167.0/24 maxlen: 24 163.5.175.0/24 maxlen: 24 163.5.178.0/24 maxlen: 24 163.5.179.0/24 maxlen: 24 163.5.182.0/24 maxlen: 24 163.5.186.0/24 maxlen: 24 163.5.189.0/24 maxlen: 24 163.5.196.0/24 maxlen: 24 163.5.199.0/24 maxlen: 24 163.5.200.0/24 maxlen: 24 163.5.201.0/24 maxlen: 24 163.5.203.0/24 maxlen: 24 163.5.204.0/24 maxlen: 24 163.5.205.0/24 maxlen: 24 163.5.214.0/24 maxlen: 24 163.5.215.0/24 maxlen: 24 163.5.218.0/24 maxlen: 24 163.5.223.0/24 maxlen: 24 163.5.224.0/24 maxlen: 24 163.5.228.0/24 maxlen: 24 163.5.238.0/24 maxlen: 24 163.5.241.0/24 maxlen: 24 163.5.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:8e:03:19:99:ad:06:74:c8:c7:74:7e:a1:57:49:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Dec 30 09:19:19 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=369e933b145022f3cf7bef3cead0bbac6167cd66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:48:c7:f8:de:c8:a7:c7:34:b3:ab:f1:78:a8: ef:1d:e2:66:ba:ee:a8:81:29:b1:62:f3:7c:03:b6: d2:60:e5:9c:95:9c:97:32:9a:53:59:af:ef:87:fd: fb:ea:c9:6d:9e:a0:e9:b5:52:14:89:41:16:ba:67: 51:bc:eb:9e:78:93:85:90:84:68:e9:b6:fb:ff:3d: 59:ae:a7:1a:bd:b6:f6:c6:b4:a6:53:ad:a9:13:14: d3:7b:c0:a8:41:90:77:7e:9a:50:c3:c2:20:0a:77: 19:ec:ee:59:a2:48:1b:31:dc:c4:c6:d5:c6:c9:94: bb:2e:a5:d0:bd:01:7b:3a:af:20:4e:d4:78:04:d2: 25:ca:42:c0:06:95:de:02:9e:43:08:2c:73:49:68: 2b:3e:23:74:9a:ec:a4:e6:af:a9:dd:34:21:5f:4a: c6:2c:28:50:fe:f7:f3:66:b2:2f:17:f8:04:24:aa: d1:8f:be:b5:cf:a2:cc:f7:c1:d5:1f:a9:36:cd:2e: cd:b1:3b:f6:52:58:6f:56:a9:a2:2b:6b:46:e4:02: b8:51:d9:d3:a9:30:f5:fb:64:ac:55:d1:9c:9c:73: bf:f7:7d:4a:fc:a6:60:8d:f2:b6:fa:fd:51:49:01: 74:03:1f:af:78:17:96:ad:90:73:9e:83:34:03:05: 61:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9E:93:3B:14:50:22:F3:CF:7B:EF:3C:EA:D0:BB:AC:61:67:CD:66 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Np6TOxRQIvPPe-886tC7rGFnzWY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.8.0/24 163.5.28.0/24 163.5.30.0/24 163.5.53.0/24 163.5.58.0/23 163.5.106.0/24 163.5.112.0/24 163.5.118.0/24 163.5.121.0/24 163.5.129.0/24 163.5.139.0/24 163.5.143.0/24 163.5.146.0/24 163.5.151.0/24 163.5.157.0/24 163.5.160.0/24 163.5.167.0/24 163.5.175.0/24 163.5.178.0/23 163.5.182.0/24 163.5.186.0/24 163.5.189.0/24 163.5.196.0/24 163.5.199.0-163.5.201.255 163.5.203.0-163.5.205.255 163.5.214.0/23 163.5.218.0/24 163.5.223.0-163.5.224.255 163.5.228.0/24 163.5.238.0/24 163.5.241.0/24 163.5.244.0/24 Signature Algorithm: sha256WithRSAEncryption 22:5e:aa:81:04:91:6a:ef:a0:4e:b0:29:29:da:89:f5:90:97: 4d:11:de:64:52:9c:44:a1:ff:ee:a0:ab:6f:35:54:ba:7d:2a: ef:b5:35:b8:eb:c2:62:57:a1:76:de:4c:81:11:3d:71:d0:c9: 29:c5:b3:2b:8a:54:ad:63:60:e0:79:e2:24:bd:86:aa:cc:a5: b4:2c:4a:a4:3b:b5:2b:80:b8:41:90:cf:a1:5a:cb:86:b2:52: 72:80:e3:9f:f2:b5:24:14:53:ef:55:f9:27:cc:4f:d4:b2:13: 47:e7:48:d4:dd:7c:93:ac:7a:08:57:88:4f:1b:7d:b9:e1:1c: c0:d9:d8:ac:d2:9e:fd:11:bb:da:09:35:d3:5e:79:f7:3b:0a: 45:26:9a:32:32:ea:2a:ce:39:20:16:af:d6:82:1a:cd:49:31: c1:b1:aa:75:3c:91:ee:b3:42:1e:eb:4c:ea:f4:51:48:94:65: 87:e6:46:b4:fc:1e:44:8c:4b:3a:07:4e:ac:26:a8:43:bb:3f: c6:26:88:67:b8:15:cb:e9:d1:a4:77:d7:93:6c:0d:5d:c5:a6: 46:22:5d:6a:8d:48:80:5c:21:4b:bb:ba:60:55:6d:85:aa:b8: e2:8a:be:e7:94:d1:3a:4f:50:b3:7b:ff:76:70:ab:b0:80:db: 59:0d:53:c3 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgISAZtujgMZma0GdMjHdH6hV0mPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMjMwMDkxOTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjllOTMzYjE0NTAyMmYzY2Y3YmVmM2NlYWQwYmJhYzYxNjdjZDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEjH+N7Ip8c0s6vxeKjvHeJmuu6o gSmxYvN8A7bSYOWclZyXMppTWa/vh/376sltnqDptVIUiUEWumdRvOueeJOFkIRo 6bb7/z1Zrqcavbb2xrSmU62pExTTe8CoQZB3fppQw8IgCncZ7O5ZokgbMdzExtXG yZS7LqXQvQF7Oq8gTtR4BNIlykLABpXeAp5DCCxzSWgrPiN0muyk5q+p3TQhX0rG LChQ/vfzZrIvF/gEJKrRj761z6LM98HVH6k2zS7NsTv2UlhvVqmiK2tG5AK4UdnT qTD1+2SsVdGcnHO/931K/KZgjfK2+v1RSQF0Ax+veBeWrZBznoM0AwVhfwIDAQAB o4IC4DCCAtwwHQYDVR0OBBYEFDaekzsUUCLzz3vvPOrQu6xhZ81mMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvTnA2VE94UlFJdlBQZS04ODZ0QzdyR0ZueldZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIH1BggrBgEFBQcBBwEB/wSB5TCB4jCB3wQCAAEwgdgDBACj BQgDBACjBRwDBACjBR4DBACjBTUDBAGjBToDBACjBWoDBACjBXADBACjBXYDBACj BXkDBACjBYEDBACjBYsDBACjBY8DBACjBZIDBACjBZcDBACjBZ0DBACjBaADBACj BacDBACjBa8DBAGjBbIDBACjBbYDBACjBboDBACjBb0DBACjBcQwDAMEAKMFxwME AaMFyDAMAwQAowXLAwQBowXMAwQBowXWAwQAowXaMAwDBACjBd8DBACjBeADBACj BeQDBACjBe4DBACjBfEDBACjBfQwDQYJKoZIhvcNAQELBQADggEBACJeqoEEkWrv oE6wKSnaifWQl00R3mRSnESh/+6gq281VLp9Ku+1NbjrwmJXoXbeTIERPXHQySnF syuKVK1jYOB54iS9hqrMpbQsSqQ7tSuAuEGQz6Fay4ayUnKA45/ytSQUU+9V+SfM T9SyE0fnSNTdfJOseghXiE8bfbnhHMDZ2KzSnv0Ru9oJNdNeefc7CkUmmjIy6irO OSAWr9aCGs1JMcGxqnU8ke6zQh7rTOr0UUiUZYfmRrT8HkSMSzoHTqwmqEO7P8Ym iGe4Fcvp0aR315NsDV3FpkYiXWqNSIBcIUu7umBVbYWquOKKvueU0TpPULN7/3Zw q7CA21kNU8M= -----END CERTIFICATE-----Generated at Tue Dec 30 21:06:29 2025 by rpki-client