This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TlhBVaW0_t72OoQ4iI-u1BNHEAc.roa File: TlhBVaW0_t72OoQ4iI-u1BNHEAc.roa (raw, json) Hash identifier: +qZDjFqOGbYho1RDDtz+4GJOTyck6m+Rg0MDYHEl5pM= Subject key identifier: 4E:58:41:55:A5:B4:FE:DE:F6:3A:84:38:88:8F:AE:D4:13:47:10:07 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E391F25BA58653D62D5D8E2EF7F0FDB Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TlhBVaW0_t72OoQ4iI-u1BNHEAc.roa Signing time: Fri 02 Jan 2026 10:20:31 +0000 ROA not before: Fri 02 Jan 2026 10:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 163.5.153.0/24 maxlen: 24 163.5.154.0/24 maxlen: 24 163.5.177.0/24 maxlen: 24 163.5.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:1f:25:ba:58:65:3d:62:d5:d8:e2:ef:7f:0f:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e584155a5b4fedef63a8438888faed413471007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ff:86:5b:a8:b7:a1:28:56:0f:74:7a:be:f5: 52:6b:da:3f:24:c2:a9:c7:57:a0:ed:77:4b:a0:1f: c6:aa:12:2f:4e:e0:ea:8d:03:fd:1f:00:c5:f9:d9: a0:b6:d3:cf:79:2c:ca:6e:37:97:bf:23:e0:a2:a3: 10:ad:25:4d:0e:2f:19:12:b7:94:34:2b:87:ba:66: d9:d4:d0:07:04:09:80:1c:05:4b:7a:0c:d0:12:b5: 00:9f:84:ae:c9:ec:a2:f3:84:e6:14:c7:1d:25:4e: 03:b1:d9:af:cc:c9:d2:97:4f:c2:8f:e0:82:5e:70: a0:90:9a:a6:0b:a6:21:89:c4:77:7e:f7:dc:40:c0: 52:35:41:f2:cc:e0:9c:2a:82:07:24:39:63:10:4d: 90:53:f8:8a:66:61:73:25:ee:10:d3:24:b0:37:5d: eb:80:fb:e0:eb:3f:67:0e:28:a3:10:70:52:2a:8a: 06:9d:15:2e:b8:51:97:05:14:6b:87:8f:d5:41:5d: 25:3c:ed:b0:7d:28:db:ca:d1:a0:d5:87:a2:4c:5d: 88:36:f6:a3:6a:43:2b:1e:d6:1c:91:fb:7d:99:53: 5d:a6:b8:58:da:d8:4f:46:a6:44:93:52:e0:01:15: 92:10:74:10:99:50:45:a9:b8:09:45:38:17:d8:c0: fb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:58:41:55:A5:B4:FE:DE:F6:3A:84:38:88:8F:AE:D4:13:47:10:07 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TlhBVaW0_t72OoQ4iI-u1BNHEAc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.153.0-163.5.154.255 163.5.177.0/24 163.5.252.0/24 Signature Algorithm: sha256WithRSAEncryption 42:34:ad:c3:95:f9:49:bf:45:d8:e3:ee:3b:25:0f:8e:0b:58: 96:7c:ff:61:4b:8d:a2:09:90:dc:64:2d:d6:35:46:c0:0a:c0: 35:7c:b8:df:0d:76:fd:32:4b:00:ca:e5:7b:58:d4:86:e9:ae: 08:4e:01:f3:72:6f:1b:05:22:5c:c9:6f:54:61:68:41:3b:33: dc:11:85:e4:c0:95:e2:e5:cb:28:d8:78:65:89:8d:ad:b2:25: 70:b3:eb:44:21:11:b4:db:db:7f:38:10:98:58:f5:d7:26:a5: bc:1a:67:80:c2:ec:d9:31:48:70:47:1b:de:c9:38:34:19:95: ae:f5:1d:14:e5:cc:94:b5:0c:76:47:a3:39:5a:17:40:8a:04: 0e:e0:5f:37:65:86:03:d2:81:b6:d5:92:18:34:0c:48:2e:03: 63:64:99:54:c4:bd:4e:e5:f6:dc:75:aa:d8:bb:52:bc:e8:15: 9a:34:10:d4:95:ac:3d:99:e8:09:d0:b6:03:de:03:1f:01:10: 79:ab:ee:39:a3:4b:b8:47:26:39:45:e5:e7:a8:c1:1f:ea:50: 56:04:04:3a:c1:ee:0f:79:95:fe:7c:67:b1:de:f5:cf:86:3a: 2d:a3:16:13:69:91:1b:7c:23:8c:88:71:c2:96:0e:6a:aa:38: aa:29:6e:0d -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt+OR8lulhlPWLV2OLvfw/bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTU4NDE1NWE1YjRmZWRlZjYzYTg0Mzg4ODhmYWVkNDEzNDcxMDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf+GW6i3oShWD3R6vvVSa9o/JMKp x1eg7XdLoB/GqhIvTuDqjQP9HwDF+dmgttPPeSzKbjeXvyPgoqMQrSVNDi8ZEreU NCuHumbZ1NAHBAmAHAVLegzQErUAn4Suyeyi84TmFMcdJU4DsdmvzMnSl0/Cj+CC XnCgkJqmC6YhicR3fvfcQMBSNUHyzOCcKoIHJDljEE2QU/iKZmFzJe4Q0ySwN13r gPvg6z9nDiijEHBSKooGnRUuuFGXBRRrh4/VQV0lPO2wfSjbytGg1YeiTF2INvaj akMrHtYckft9mVNdprhY2thPRqZEk1LgARWSEHQQmVBFqbgJRTgX2MD7cQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFE5YQVWltP7e9jqEOIiPrtQTRxAHMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvVGxoQlZhVzBfdDcyT29RNGlJLXUxQk5IRUFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBACjBZkD BACjBZoDBACjBbEDBACjBfwwDQYJKoZIhvcNAQELBQADggEBAEI0rcOV+Um/Rdjj 7jslD44LWJZ8/2FLjaIJkNxkLdY1RsAKwDV8uN8Ndv0ySwDK5XtY1IbprghOAfNy bxsFIlzJb1RhaEE7M9wRheTAleLlyyjYeGWJja2yJXCz60QhEbTb2384EJhY9dcm pbwaZ4DC7NkxSHBHG97JODQZla71HRTlzJS1DHZHozlaF0CKBA7gXzdlhgPSgbbV khg0DEguA2NkmVTEvU7l9tx1qti7UrzoFZo0ENSVrD2Z6AnQtgPeAx8BEHmr7jmj S7hHJjlF5eeowR/qUFYEBDrB7g95lf58Z7He9c+GOi2jFhNpkRt8I4yIccKWDmqq OKopbg0= -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:05 2026 by rpki-client