This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ODPk03hiSjpwgQAIpSKdDWNmo0w.roa File: ODPk03hiSjpwgQAIpSKdDWNmo0w.roa (raw, json) Hash identifier: eMEyY6zxUKGgGSMMGIYQoclfIf7NWj1YflPNyV3jyFo= Subject key identifier: 38:33:E4:D3:78:62:4A:3A:70:81:00:08:A5:22:9D:0D:63:66:A3:4C Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019BA71F729A5096846A20DFE42B8C54FA01 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ODPk03hiSjpwgQAIpSKdDWNmo0w.roa Signing time: Sat 10 Jan 2026 08:56:54 +0000 ROA not before: Sat 10 Jan 2026 08:56:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197537 IP address blocks: 163.5.8.0/24 maxlen: 24 163.5.13.0/24 maxlen: 24 163.5.106.0/24 maxlen: 24 163.5.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a7:1f:72:9a:50:96:84:6a:20:df:e4:2b:8c:54:fa:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 10 08:56:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3833e4d378624a3a70810008a5229d0d6366a34c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:59:49:0e:68:22:05:2f:c6:58:bb:cf:5f:92: 07:84:80:98:8e:cc:24:99:d9:3e:fa:5a:61:be:2d: 78:5d:95:63:91:a5:31:f4:22:8d:3a:41:e5:b5:7b: 15:79:3d:46:2e:85:08:ad:8f:4a:47:f6:6d:0c:05: f4:cf:4a:43:fb:f0:d6:01:bf:ed:05:1a:78:d1:db: 18:bb:b1:1d:e5:99:2f:54:1a:75:27:c1:b2:c6:1c: f6:d6:ef:25:01:32:73:43:01:a0:00:47:e9:94:16: f9:be:ef:57:f0:07:8e:86:92:d1:5e:7e:e6:b6:64: 8f:00:b0:b2:9e:5b:00:6f:e9:e8:4a:f1:13:3e:c9: 68:57:89:50:2a:3e:e1:0b:74:0e:56:6a:53:56:5a: 5c:3c:f3:57:95:81:59:fd:e4:c5:95:e2:38:d2:6d: 3b:93:82:51:d9:18:37:ad:53:e4:13:e7:33:50:c8: bb:29:9c:71:1e:ae:49:a2:2b:8d:ad:b3:b3:91:4e: cc:8f:4c:01:72:89:3d:99:1c:58:6c:62:93:d0:cd: 7d:13:f9:06:68:30:24:bb:f4:77:a3:05:97:ef:86: 4a:cc:49:ac:5c:c1:61:58:50:cd:47:64:c5:7f:42: a0:be:92:9f:c6:f8:62:02:98:1f:5b:a8:9c:f8:43: 55:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:33:E4:D3:78:62:4A:3A:70:81:00:08:A5:22:9D:0D:63:66:A3:4C X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ODPk03hiSjpwgQAIpSKdDWNmo0w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.8.0/24 163.5.13.0/24 163.5.106.0/24 163.5.127.0/24 Signature Algorithm: sha256WithRSAEncryption 74:9f:58:cb:c9:f1:85:42:9f:22:e0:aa:0d:4f:ee:ba:67:e7: 37:ea:e5:e8:5c:a1:3c:ad:3d:02:98:5c:3a:cf:86:0a:3e:0e: 4d:49:89:ca:73:58:01:08:77:2f:92:e5:87:8e:ed:ed:80:f2: db:b6:04:4e:ed:9a:b7:7d:9b:64:88:08:da:d9:fa:e5:63:6f: bc:50:e7:70:3d:f8:47:64:6c:cd:c7:24:14:74:12:ab:8b:d5: eb:dd:98:24:c3:e0:0c:dc:8b:f8:0b:dc:2c:05:13:80:dd:38: 63:04:b5:fb:5e:e3:4a:a9:92:7a:3a:4a:49:47:3d:d5:13:30: 2c:08:17:d0:fc:63:a4:0d:53:bc:b0:67:af:3d:bc:e0:c9:d7: 9b:99:99:da:61:c7:be:10:50:34:6d:e9:05:98:6d:eb:b4:45: 71:c7:8c:f5:cd:8f:7f:f5:14:fb:25:03:8a:cc:d9:4b:b8:a9: d6:3c:9e:b0:75:f8:ad:f0:91:4f:42:50:67:5c:fc:91:f3:31: b1:33:a5:05:7a:0a:90:b4:52:2f:a9:65:8d:c9:49:0a:c3:70: 8e:49:9e:dc:e2:f4:3f:a8:0f:54:0f:da:66:f9:aa:26:59:81: 49:17:4a:2e:d9:5e:9a:d0:4c:45:65:7b:a3:79:13:ec:dd:6b: 15:03:40:59 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZunH3KaUJaEaiDf5CuMVPoBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTEwMDg1NjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODMzZTRkMzc4NjI0YTNhNzA4MTAwMDhhNTIyOWQwZDYzNjZhMzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVlJDmgiBS/GWLvPX5IHhICYjswk mdk++lphvi14XZVjkaUx9CKNOkHltXsVeT1GLoUIrY9KR/ZtDAX0z0pD+/DWAb/t BRp40dsYu7Ed5ZkvVBp1J8Gyxhz21u8lATJzQwGgAEfplBb5vu9X8AeOhpLRXn7m tmSPALCynlsAb+noSvETPsloV4lQKj7hC3QOVmpTVlpcPPNXlYFZ/eTFleI40m07 k4JR2Rg3rVPkE+czUMi7KZxxHq5JoiuNrbOzkU7Mj0wBcok9mRxYbGKT0M19E/kG aDAku/R3owWX74ZKzEmsXMFhWFDNR2TFf0KgvpKfxvhiApgfW6ic+ENVfQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDgz5NN4Yko6cIEACKUinQ1jZqNMMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvT0RQazAzaGlTanB3Z1FBSXBTS2REV05tbzB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAowUIAwQA owUNAwQAowVqAwQAowV/MA0GCSqGSIb3DQEBCwUAA4IBAQB0n1jLyfGFQp8i4KoN T+66Z+c36uXoXKE8rT0CmFw6z4YKPg5NSYnKc1gBCHcvkuWHju3tgPLbtgRO7Zq3 fZtkiAja2frlY2+8UOdwPfhHZGzNxyQUdBKri9Xr3Zgkw+AM3Iv4C9wsBROA3Thj BLX7XuNKqZJ6OkpJRz3VEzAsCBfQ/GOkDVO8sGevPbzgydebmZnaYce+EFA0bekF mG3rtEVxx4z1zY9/9RT7JQOKzNlLuKnWPJ6wdfit8JFPQlBnXPyR8zGxM6UFegqQ tFIvqWWNyUkKw3COSZ7c4vQ/qA9UD9pm+aomWYFJF0ou2V6a0ExFZXujeRPs3WsV A0BZ -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:35 2026 by rpki-client