This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/XL1i5q7vz_KDMD3-inFf_IRvhNM.roa File: XL1i5q7vz_KDMD3-inFf_IRvhNM.roa (raw, json) Hash identifier: 2Q6C1psn6cs0OPwyn3A7vz7EfRbJJbExFzS3GEur930= Subject key identifier: 5C:BD:62:E6:AE:EF:CF:F2:83:30:3D:FE:8A:71:5F:FC:84:6F:84:D3 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E39298A2A912E7F599EEAB98B06C9D2 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/XL1i5q7vz_KDMD3-inFf_IRvhNM.roa Signing time: Fri 02 Jan 2026 10:20:34 +0000 ROA not before: Fri 02 Jan 2026 10:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64267 IP address blocks: 163.5.14.0/24 maxlen: 24 163.5.33.0/24 maxlen: 24 163.5.61.0/24 maxlen: 24 163.5.91.0/24 maxlen: 24 163.5.211.0/24 maxlen: 24 163.5.239.0/24 maxlen: 24 163.5.245.0/24 maxlen: 24 163.5.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 04:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:29:8a:2a:91:2e:7f:59:9e:ea:b9:8b:06:c9:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cbd62e6aeefcff283303dfe8a715ffc846f84d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8f:38:bd:37:fa:7c:17:96:fd:40:16:7c:2a: c9:a6:0d:e6:84:1e:ab:4e:4f:6d:c6:62:22:ea:34: bb:72:fa:a1:91:a7:b1:2c:93:4b:43:1d:a8:1f:9c: 0a:45:71:f5:9a:ee:bc:98:a6:4d:89:44:0e:c9:ae: 86:5e:ab:37:dc:aa:43:3a:79:c4:65:05:c0:7b:1f: f1:21:f7:99:35:2b:66:d6:7c:34:b8:b6:5a:8b:b3: 47:8d:c5:c5:30:a3:3b:83:08:6d:37:59:5c:49:48: b4:fd:76:70:57:c4:fd:42:38:0c:6d:4d:ca:63:16: 10:13:e9:91:1f:ec:02:fc:46:98:72:54:41:eb:e9: c2:5b:6d:8e:71:19:0b:c9:10:7f:c7:58:9f:cc:df: ea:ce:16:03:24:8a:32:b0:d2:6f:0b:a9:ef:04:99: c8:a0:be:b8:ac:10:17:e9:c6:9b:f3:ce:c3:9e:cb: 1e:e0:c6:58:85:7c:ac:3a:8b:f9:be:c9:df:73:a1: b0:99:8d:f4:8f:8c:2f:4c:98:8f:c4:b3:ff:30:20: b9:3b:c6:da:7a:e4:47:f3:bf:ee:80:f4:1a:fb:d0: ba:5d:b9:04:d0:76:72:ff:38:6d:39:43:9e:e6:7d: 1a:e2:84:5f:c9:fc:43:09:2b:e6:ea:59:51:8a:21: 6c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BD:62:E6:AE:EF:CF:F2:83:30:3D:FE:8A:71:5F:FC:84:6F:84:D3 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/XL1i5q7vz_KDMD3-inFf_IRvhNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.14.0/24 163.5.33.0/24 163.5.61.0/24 163.5.91.0/24 163.5.211.0/24 163.5.239.0/24 163.5.245.0/24 163.5.255.0/24 Signature Algorithm: sha256WithRSAEncryption 21:a0:f7:0b:b2:95:a5:52:44:e9:b2:5e:83:a8:ed:78:51:da: c7:54:1f:c1:24:bf:94:93:e5:8a:1b:5d:c3:c4:6f:02:76:56: fa:9b:54:a2:dd:71:94:32:9b:60:71:e5:a9:e2:5d:c5:09:a5: 32:df:bd:4e:62:6a:03:08:d4:4d:13:a4:66:12:c5:0f:30:93: 79:a6:fd:dd:15:22:82:a3:7f:bf:01:be:8d:77:b2:e1:13:26: 76:94:18:7c:bc:0c:5c:18:d5:bf:03:5b:74:6e:f7:6a:0b:e9: 3b:00:d7:53:a0:bc:aa:cd:28:0a:12:31:86:24:ad:1b:01:1b: 6e:e4:a9:35:fc:e5:a0:5a:1c:58:bf:ae:5c:f3:72:99:98:7d: 60:b8:e8:5a:3c:0b:f9:7c:55:5c:20:08:fb:b5:85:fb:2c:3a: 4f:6f:6a:8a:8c:10:b1:6b:4a:21:7b:e8:c7:7b:b4:b6:f3:8f: 74:06:92:f5:9d:65:33:f7:3c:7c:a3:c3:49:4d:7c:f1:71:3f: ca:46:35:db:24:8f:9a:43:b5:bf:17:9f:c2:12:6b:71:b0:98: 59:24:fd:1b:ff:25:d3:cb:da:86:4a:26:67:c2:b7:ce:13:2f: 69:5c:00:58:b6:2c:aa:ee:d7:77:00:73:8c:b4:f7:e5:f6:71: b4:43:98:f1 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt+OSmKKpEuf1me6rmLBsnSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2JkNjJlNmFlZWZjZmYyODMzMDNkZmU4YTcxNWZmYzg0NmY4NGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn484vTf6fBeW/UAWfCrJpg3mhB6r Tk9txmIi6jS7cvqhkaexLJNLQx2oH5wKRXH1mu68mKZNiUQOya6GXqs33KpDOnnE ZQXAex/xIfeZNStm1nw0uLZai7NHjcXFMKM7gwhtN1lcSUi0/XZwV8T9QjgMbU3K YxYQE+mRH+wC/EaYclRB6+nCW22OcRkLyRB/x1ifzN/qzhYDJIoysNJvC6nvBJnI oL64rBAX6cab887Dnsse4MZYhXysOov5vsnfc6GwmY30j4wvTJiPxLP/MCC5O8ba euRH87/ugPQa+9C6XbkE0HZy/zhtOUOe5n0a4oRfyfxDCSvm6llRiiFsJQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFFy9Yuau78/ygzA9/opxX/yEb4TTMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvWEwxaTVxN3Z6X0tETUQzLWluRmZfSVJ2aE5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAowUOAwQA owUhAwQAowU9AwQAowVbAwQAowXTAwQAowXvAwQAowX1AwQAowX/MA0GCSqGSIb3 DQEBCwUAA4IBAQAhoPcLspWlUkTpsl6DqO14UdrHVB/BJL+Uk+WKG13DxG8Cdlb6 m1Si3XGUMptgceWp4l3FCaUy371OYmoDCNRNE6RmEsUPMJN5pv3dFSKCo3+/Ab6N d7LhEyZ2lBh8vAxcGNW/A1t0bvdqC+k7ANdToLyqzSgKEjGGJK0bARtu5Kk1/OWg WhxYv65c83KZmH1guOhaPAv5fFVcIAj7tYX7LDpPb2qKjBCxa0ohe+jHe7S28490 BpL1nWUz9zx8o8NJTXzxcT/KRjXbJI+aQ7W/F5/CEmtxsJhZJP0b/yXTy9qGSiZn wrfOEy9pXABYtiyq7td3AHOMtPfl9nG0Q5jx -----END CERTIFICATE-----Generated at Mon Jan 19 10:37:09 2026 by rpki-client