This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TUp3kmKyRU88Zu51CpWaLX-Qq-E.roa File: TUp3kmKyRU88Zu51CpWaLX-Qq-E.roa (raw, json) Hash identifier: 2im3WgSY5LGVF8YtgsTZ8stFlGAaNTK/ayQ2mxN5Fg8= Subject key identifier: 4D:4A:77:92:62:B2:45:4F:3C:66:EE:75:0A:95:9A:2D:7F:90:AB:E1 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019A77427E2041ECE54BCD2D4DB963682EDA Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TUp3kmKyRU88Zu51CpWaLX-Qq-E.roa Signing time: Wed 12 Nov 2025 08:50:37 +0000 ROA not before: Wed 12 Nov 2025 08:50:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 163.5.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 00:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:77:42:7e:20:41:ec:e5:4b:cd:2d:4d:b9:63:68:2e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Nov 12 08:50:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4d4a779262b2454f3c66ee750a959a2d7f90abe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:05:62:2b:5f:65:a0:7f:9b:e3:7b:83:12:6a: 04:9a:39:23:d3:f7:f7:3e:6c:df:73:be:9d:85:b2: 3c:2e:c8:79:ef:90:3a:96:aa:57:51:9d:ee:7d:8d: 35:4f:0e:51:8e:60:8b:43:cf:aa:c6:0b:7f:b2:73: 97:df:00:2f:34:31:85:3c:db:9d:61:73:23:00:2e: 7a:51:4e:43:2a:0c:e2:dd:f4:c8:64:f0:b7:c7:f3: 39:cb:a9:f0:98:e7:fd:13:99:9b:92:90:41:62:eb: de:e6:d1:c5:90:07:d1:d0:2c:f2:4c:00:4b:75:77: 52:e7:5d:29:ea:77:83:09:dd:f9:65:08:d0:1d:1e: 1a:f4:7b:7f:7d:a8:70:62:9e:32:3e:01:c7:24:59: 0b:a2:d9:22:a7:86:03:08:81:f6:f7:bd:2e:63:8a: 14:b3:43:02:f8:8b:3f:20:b8:dc:5a:af:d2:4f:f8: 52:c0:84:e0:8f:55:7d:4d:5a:be:1c:41:34:b2:f8: ed:5e:6a:94:20:d2:d6:e7:94:2c:fd:4a:4d:3d:8e: 55:a4:05:6d:9a:2f:cc:f4:14:5f:10:60:08:90:dd: 3f:06:80:26:ea:13:7d:52:82:d1:55:53:13:15:fb: 3d:7e:50:56:d2:96:33:a1:01:9c:ba:35:f5:0b:3e: b9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4A:77:92:62:B2:45:4F:3C:66:EE:75:0A:95:9A:2D:7F:90:AB:E1 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TUp3kmKyRU88Zu51CpWaLX-Qq-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.223.0/24 Signature Algorithm: sha256WithRSAEncryption 60:a7:4b:81:69:9d:6d:14:de:45:c9:2b:8f:70:5e:8d:ff:f0: 43:d6:36:4d:0c:84:da:d6:3a:ac:13:7f:1f:f8:5e:5e:38:ac: 54:c1:69:e2:a1:98:d3:58:4d:a2:5f:a3:99:4a:cb:83:8d:c2: ac:cc:7e:a9:e8:d1:4b:12:f4:29:ac:82:d0:ef:0f:b9:e6:bb: e6:ad:3e:25:32:a9:0c:50:00:c8:96:dd:04:fd:bc:33:cb:82: f2:2b:b0:4a:f2:4e:07:3a:fc:d2:15:3b:31:53:79:9c:4d:cb: 29:07:97:90:69:45:7d:ba:46:6e:6b:d9:38:87:bf:74:6a:66: 10:d3:02:ee:7d:b3:49:ab:b0:dd:19:ba:c0:13:78:a8:eb:e6: 6d:28:e9:eb:a6:25:2d:f5:ee:18:78:3d:86:44:ac:04:62:cb: c7:91:d7:4e:80:9a:19:8d:19:2d:dc:cc:a5:67:c2:f8:9f:b0: 98:1e:32:ce:de:a5:e4:2e:6e:6f:1e:7b:18:8c:9f:e3:79:73: e6:26:ea:3c:ec:99:87:f8:37:d7:26:bc:e1:0f:06:95:84:a2: 39:e2:e5:9f:d2:f8:5b:f7:b8:9f:0c:05:98:cf:5f:28:01:e7: d9:bd:8d:09:c0:63:15:ac:16:59:f9:80:37:cd:04:15:0c:49: 96:69:0c:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp3Qn4gQezlS80tTbljaC7aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMTEyMDg1MDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDRhNzc5MjYyYjI0NTRmM2M2NmVlNzUwYTk1OWEyZDdmOTBhYmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgViK19loH+b43uDEmoEmjkj0/f3 Pmzfc76dhbI8Lsh575A6lqpXUZ3ufY01Tw5RjmCLQ8+qxgt/snOX3wAvNDGFPNud YXMjAC56UU5DKgzi3fTIZPC3x/M5y6nwmOf9E5mbkpBBYuve5tHFkAfR0CzyTABL dXdS510p6neDCd35ZQjQHR4a9Ht/fahwYp4yPgHHJFkLotkip4YDCIH2970uY4oU s0MC+Is/ILjcWq/ST/hSwITgj1V9TVq+HEE0svjtXmqUINLW55Qs/UpNPY5VpAVt mi/M9BRfEGAIkN0/BoAm6hN9UoLRVVMTFfs9flBW0pYzoQGcujX1Cz65DwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE1Kd5JiskVPPGbudQqVmi1/kKvhMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvVFVwM2ttS3lSVTg4WnU1MUNwV2FMWC1RcS1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowXfMA0G CSqGSIb3DQEBCwUAA4IBAQBgp0uBaZ1tFN5FySuPcF6N//BD1jZNDITa1jqsE38f +F5eOKxUwWnioZjTWE2iX6OZSsuDjcKszH6p6NFLEvQprILQ7w+55rvmrT4lMqkM UADIlt0E/bwzy4LyK7BK8k4HOvzSFTsxU3mcTcspB5eQaUV9ukZua9k4h790amYQ 0wLufbNJq7DdGbrAE3io6+ZtKOnrpiUt9e4YeD2GRKwEYsvHkddOgJoZjRkt3Myl Z8L4n7CYHjLO3qXkLm5vHnsYjJ/jeXPmJuo87JmH+DfXJrzhDwaVhKI54uWf0vhb 97ifDAWYz18oAefZvY0JwGMVrBZZ+YA3zQQVDEmWaQw9 -----END CERTIFICATE-----Generated at Fri Dec 5 09:27:17 2025 by rpki-client