This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Vk1oXa8iNtcr7qeDw-8RGPh6sEY.roa File: Vk1oXa8iNtcr7qeDw-8RGPh6sEY.roa (raw, json) Hash identifier: 1aKF5l4DLE7XwTbKdUZku96piUyO+9BtUqTTJxc7XnE= Subject key identifier: 56:4D:68:5D:AF:22:36:D7:2B:EE:A7:83:C3:EF:11:18:F8:7A:B0:46 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019BA71E885BE642DF25113044FF37D24964 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Vk1oXa8iNtcr7qeDw-8RGPh6sEY.roa Signing time: Sat 10 Jan 2026 08:55:54 +0000 ROA not before: Sat 10 Jan 2026 08:55:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216138 IP address blocks: 163.5.8.0/24 maxlen: 24 163.5.13.0/24 maxlen: 24 163.5.106.0/24 maxlen: 24 163.5.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a7:1e:88:5b:e6:42:df:25:11:30:44:ff:37:d2:49:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 10 08:55:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=564d685daf2236d72beea783c3ef1118f87ab046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d8:52:e5:f4:ad:c3:6e:74:a0:bd:29:42:b3: 05:01:45:c1:3e:8c:d6:ad:ca:b0:6c:52:d4:a4:4a: 3b:94:57:ae:c5:b8:d1:de:0f:9a:6e:d2:2f:91:2e: 2f:0a:d4:b8:3c:29:d3:02:c8:29:5f:c1:2d:3a:43: c8:83:72:69:77:5f:3c:0c:c2:3e:6f:4d:6e:ab:55: 4f:c3:34:30:6d:2e:5e:e2:fa:e1:a8:7b:26:ee:27: ad:f7:f4:54:e0:08:97:5e:3e:37:85:58:a3:05:68: d4:d2:5b:64:56:2a:ad:8b:2c:00:ad:bd:af:40:2b: 0f:ed:de:59:8b:32:4b:95:b3:99:57:dc:91:79:9e: 45:4e:aa:60:82:19:4a:57:46:ae:88:a0:b1:a6:ba: d2:d7:00:2a:90:14:1f:0a:73:0c:d4:eb:6a:90:cd: e9:f1:11:e6:b4:4e:b6:73:9b:fd:1a:07:b1:23:ed: ad:cc:5d:aa:d5:cf:67:b7:b5:ca:97:e7:2c:e7:42: 66:f5:2c:79:f3:ab:66:88:e6:f0:25:6c:a0:d2:b2: d1:0f:56:82:81:4e:74:dd:43:7d:e7:e8:7c:21:d0: 47:c0:a1:14:fe:3a:26:78:52:2b:13:3f:ea:0a:24: 58:b2:1f:ba:38:ab:a0:5e:13:fb:3d:b8:22:97:b6: 38:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:4D:68:5D:AF:22:36:D7:2B:EE:A7:83:C3:EF:11:18:F8:7A:B0:46 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Vk1oXa8iNtcr7qeDw-8RGPh6sEY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.8.0/24 163.5.13.0/24 163.5.106.0/24 163.5.127.0/24 Signature Algorithm: sha256WithRSAEncryption 38:c8:8a:f6:e2:3c:dd:81:c2:3b:fe:8c:46:e1:ca:e9:19:11: d8:ca:51:e5:39:6d:35:61:bf:2a:69:f3:71:2c:3f:fe:4a:b0: c1:09:85:97:b5:d7:00:e6:0a:7c:e7:55:8c:10:27:46:ed:2b: 62:6e:26:49:c3:6a:ae:80:62:8e:86:be:9b:c5:ba:21:d2:94: c7:af:23:cc:6f:3d:8b:42:36:fd:1c:38:01:93:6a:b3:07:54: 26:ac:8b:b8:a0:4b:3e:9c:27:ff:2d:d4:be:3c:9c:01:aa:07: 43:2e:e5:69:2c:e9:a8:3e:b0:b6:8e:0f:02:7c:52:c5:32:9b: 52:46:43:3d:ed:cc:e1:00:0a:fc:91:2c:ae:ae:a5:c4:e3:7f: 6b:a1:81:68:35:d1:7e:18:43:fb:86:52:db:c2:26:d2:0d:9d: a3:5f:3a:af:7b:b1:cd:65:0b:2e:3a:32:45:d2:ba:82:db:4d: f7:53:aa:6e:b5:66:94:db:09:28:b7:9d:07:7a:cc:5c:27:8a: 9c:d7:03:fe:38:83:5b:ed:08:34:35:61:2c:5b:48:96:97:de: 8f:33:79:e4:1d:c5:50:ea:37:62:ef:fe:60:10:8a:70:76:ad: 6a:77:66:d8:a7:c4:ea:45:c8:a7:1e:e6:b8:21:18:b5:0f:78: 8c:ca:3c:fd -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZunHohb5kLfJREwRP830klkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTEwMDg1NTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjRkNjg1ZGFmMjIzNmQ3MmJlZWE3ODNjM2VmMTExOGY4N2FiMDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNhS5fStw250oL0pQrMFAUXBPozW rcqwbFLUpEo7lFeuxbjR3g+abtIvkS4vCtS4PCnTAsgpX8EtOkPIg3Jpd188DMI+ b01uq1VPwzQwbS5e4vrhqHsm7iet9/RU4AiXXj43hVijBWjU0ltkViqtiywArb2v QCsP7d5ZizJLlbOZV9yReZ5FTqpgghlKV0auiKCxprrS1wAqkBQfCnMM1OtqkM3p 8RHmtE62c5v9GgexI+2tzF2q1c9nt7XKl+cs50Jm9Sx586tmiObwJWyg0rLRD1aC gU503UN95+h8IdBHwKEU/jomeFIrEz/qCiRYsh+6OKugXhP7Pbgil7Y4XwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFFZNaF2vIjbXK+6ng8PvERj4erBGMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvVmsxb1hhOGlOdGNyN3FlRHctOFJHUGg2c0VZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAowUIAwQA owUNAwQAowVqAwQAowV/MA0GCSqGSIb3DQEBCwUAA4IBAQA4yIr24jzdgcI7/oxG 4crpGRHYylHlOW01Yb8qafNxLD/+SrDBCYWXtdcA5gp851WMECdG7StibiZJw2qu gGKOhr6bxboh0pTHryPMbz2LQjb9HDgBk2qzB1QmrIu4oEs+nCf/LdS+PJwBqgdD LuVpLOmoPrC2jg8CfFLFMptSRkM97czhAAr8kSyurqXE439roYFoNdF+GEP7hlLb wibSDZ2jXzqve7HNZQsuOjJF0rqC2033U6putWaU2wkot50HesxcJ4qc1wP+OINb 7Qg0NWEsW0iWl96PM3nkHcVQ6jdi7/5gEIpwdq1qd2bYp8TqRcinHua4IRi1D3iM yjz9 -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:31 2026 by rpki-client