This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/VV6M2TYxqpE-09nd5ZADoaAZGaw.roa File: VV6M2TYxqpE-09nd5ZADoaAZGaw.roa (raw, json) Hash identifier: xBdm8HQqZ9baRXzeThUR5ArqRpWN5KjH7glE5xq4g0M= Subject key identifier: 55:5E:8C:D9:36:31:AA:91:3E:D3:D9:DD:E5:90:03:A1:A0:19:19:AC Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E393AB57B7168D82197CA6DF89601BC Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/VV6M2TYxqpE-09nd5ZADoaAZGaw.roa Signing time: Fri 02 Jan 2026 10:20:38 +0000 ROA not before: Fri 02 Jan 2026 10:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212384 IP address blocks: 163.5.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 10:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:3a:b5:7b:71:68:d8:21:97:ca:6d:f8:96:01:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=555e8cd93631aa913ed3d9dde59003a1a01919ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ec:28:74:cc:b0:26:5d:59:23:5a:c3:0b:6e: bc:fb:ab:4c:9f:f4:d9:10:e9:11:dd:e7:70:01:91: 15:dd:e3:1f:01:8c:bf:14:53:cb:d7:6f:f5:1b:6c: 00:30:6e:f6:66:c1:5f:9e:aa:3b:31:2e:59:5b:e9: 19:9e:3a:93:41:4d:1b:94:0c:af:d2:6b:4c:86:69: fd:24:3b:92:48:d3:97:df:d5:5f:97:dd:ea:35:89: c5:b8:61:16:23:ac:82:3a:d4:78:89:52:31:b2:7f: 1c:86:c2:99:45:57:78:72:ec:bc:59:e5:6e:71:1c: 83:eb:13:b3:9f:c0:ad:93:09:74:be:4d:66:73:5b: cc:d1:e6:e3:4d:9e:0e:b8:77:34:64:d6:b4:29:f6: b6:8e:e5:3f:6e:53:75:cb:17:d3:8f:65:f0:ce:c4: 2b:26:93:04:73:04:fb:c1:51:c7:c3:d1:04:e8:a6: 9c:05:5f:b8:51:ed:55:f8:34:50:7e:4d:b2:b2:73: 96:40:79:06:94:6c:44:c3:10:36:b6:ac:e4:fc:fb: af:cc:f0:14:06:f6:03:62:52:53:15:e1:bb:26:c6: 85:1f:0d:00:0b:5e:8b:ef:df:d4:26:ce:17:5d:88: 36:c5:33:1c:24:93:ca:ef:ad:8c:c4:d2:8d:0f:b6: d0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:5E:8C:D9:36:31:AA:91:3E:D3:D9:DD:E5:90:03:A1:A0:19:19:AC X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/VV6M2TYxqpE-09nd5ZADoaAZGaw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.12.0/24 Signature Algorithm: sha256WithRSAEncryption a0:d1:0e:9d:07:19:d7:3d:81:bf:b5:89:d5:d1:8d:36:c6:0d: a2:14:d9:ee:46:f5:89:50:68:6b:0e:3f:03:2f:dd:50:f9:70: b9:29:f6:f2:95:13:fd:87:3d:a8:55:83:fc:9b:84:35:27:50: 22:9b:b2:58:ed:b0:d2:ad:ee:34:9f:c2:23:d6:57:48:c2:26: f4:29:8a:b5:93:81:53:ba:7e:90:94:44:33:86:93:a8:fc:7c: c9:fd:5a:c1:c6:a2:6e:26:e0:e7:b0:9f:b6:9b:d8:f4:d3:bf: 2c:e9:79:ab:8b:e0:f8:ec:d6:e8:98:87:3d:4c:bb:95:10:10: 2c:bb:7f:d7:26:3c:af:ab:d2:6f:2c:69:2b:dd:01:e3:bd:99: 23:6c:a5:3f:7b:f4:f7:3f:00:35:e3:39:b3:2d:a9:70:a8:f9: e8:7d:a5:18:6d:ea:83:f3:46:13:a8:0c:3a:3c:1f:27:17:d3: d2:4c:07:a5:4e:b4:5d:93:d5:75:42:ec:f3:ad:ef:d7:e6:35: be:8d:e0:24:ce:29:47:e2:01:72:0b:4b:74:8e:f0:a6:92:2e: 36:c1:cd:0e:de:ed:80:ef:b9:83:32:57:e4:6e:ff:02:97:a3: 8b:f1:b9:e2:68:b7:2a:82:b6:4c:bf:a8:89:c4:52:7b:a6:45: a9:41:75:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OTq1e3Fo2CGXym34lgG8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTVlOGNkOTM2MzFhYTkxM2VkM2Q5ZGRlNTkwMDNhMWEwMTkxOWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuwodMywJl1ZI1rDC268+6tMn/TZ EOkR3edwAZEV3eMfAYy/FFPL12/1G2wAMG72ZsFfnqo7MS5ZW+kZnjqTQU0blAyv 0mtMhmn9JDuSSNOX39Vfl93qNYnFuGEWI6yCOtR4iVIxsn8chsKZRVd4cuy8WeVu cRyD6xOzn8Ctkwl0vk1mc1vM0ebjTZ4OuHc0ZNa0Kfa2juU/blN1yxfTj2XwzsQr JpMEcwT7wVHHw9EE6KacBV+4Ue1V+DRQfk2ysnOWQHkGlGxEwxA2tqzk/PuvzPAU BvYDYlJTFeG7JsaFHw0AC16L79/UJs4XXYg2xTMcJJPK762MxNKND7bQ+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFVejNk2MaqRPtPZ3eWQA6GgGRmsMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvVlY2TTJUWXhxcEUtMDluZDVaQURvYUFaR2F3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowUMMA0G CSqGSIb3DQEBCwUAA4IBAQCg0Q6dBxnXPYG/tYnV0Y02xg2iFNnuRvWJUGhrDj8D L91Q+XC5KfbylRP9hz2oVYP8m4Q1J1Aim7JY7bDSre40n8Ij1ldIwib0KYq1k4FT un6QlEQzhpOo/HzJ/VrBxqJuJuDnsJ+2m9j0078s6Xmri+D47NbomIc9TLuVEBAs u3/XJjyvq9JvLGkr3QHjvZkjbKU/e/T3PwA14zmzLalwqPnofaUYbeqD80YTqAw6 PB8nF9PSTAelTrRdk9V1Quzzre/X5jW+jeAkzilH4gFyC0t0jvCmki42wc0O3u2A 77mDMlfkbv8Cl6OL8bniaLcqgrZMv6iJxFJ7pkWpQXW6 -----END CERTIFICATE-----Generated at Fri Jan 2 14:40:59 2026 by rpki-client