This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/XW9x3k0Q0w9Ihn-O6m4ZmniGdA4.roa File: XW9x3k0Q0w9Ihn-O6m4ZmniGdA4.roa (raw, json) Hash identifier: lNDVDDo8P+U0GoFmqseDVc2nv7gdj3WLvLi/ApE99y4= Subject key identifier: 5D:6F:71:DE:4D:10:D3:0F:48:86:7F:8E:EA:6E:19:9A:78:86:74:0E Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019AB63371C2E664BEBDD49CAFCA50506B0F Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/XW9x3k0Q0w9Ihn-O6m4ZmniGdA4.roa Signing time: Mon 24 Nov 2025 14:10:16 +0000 ROA not before: Mon 24 Nov 2025 14:10:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 31715 IP address blocks: 163.5.71.0/24 maxlen: 24 163.5.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 15:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:33:71:c2:e6:64:be:bd:d4:9c:af:ca:50:50:6b:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Nov 24 14:10:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5d6f71de4d10d30f48867f8eea6e199a7886740e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:08:b7:61:a9:a2:99:1c:66:12:59:72:dc:a9: 2a:a0:ff:ae:c1:f1:5f:13:04:fc:59:5b:1d:22:da: 3d:db:76:f8:d8:54:d9:51:e6:bd:ec:55:14:f6:56: af:dd:68:27:8f:c3:c4:08:76:d6:39:d6:fc:9c:9b: 6c:67:9b:43:71:55:36:ef:dd:9d:e3:2a:47:73:95: 2f:bf:08:ec:2a:66:af:a0:5b:1b:3d:e3:cd:6f:ef: 32:7a:5e:90:03:6b:e9:89:a8:1f:4a:dc:5d:8b:2a: 4a:a6:70:b2:2e:4e:1a:50:7a:d0:08:f0:04:66:f5: fe:86:75:0f:3a:e2:c5:60:75:fb:86:ee:91:2e:57: 9d:3b:fe:70:55:5e:65:2d:2e:02:c2:6c:07:3e:16: cf:e3:fc:c3:38:43:4b:b1:dc:82:bf:b7:71:62:01: 86:28:61:01:11:bb:f1:27:89:63:6d:6a:3f:24:eb: a0:d2:87:b8:d1:23:cf:50:0f:76:9e:33:93:72:7e: 43:83:61:dc:f4:fb:c5:42:c7:73:30:b6:07:45:06: a2:ba:36:96:3d:8b:41:bd:32:3d:19:cf:a0:d1:25: 33:e9:f1:67:75:8b:a3:4a:8c:aa:5b:41:21:6a:27: 0c:f0:e3:92:7c:8f:53:62:4b:10:dc:c5:af:8d:9f: fd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:6F:71:DE:4D:10:D3:0F:48:86:7F:8E:EA:6E:19:9A:78:86:74:0E X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/XW9x3k0Q0w9Ihn-O6m4ZmniGdA4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.71.0/24 163.5.125.0/24 Signature Algorithm: sha256WithRSAEncryption 66:29:99:cd:4c:e8:aa:fd:a0:ed:3a:1e:2e:54:8b:e9:cf:c8: 72:4a:25:31:98:86:69:ff:11:43:b7:48:db:33:20:8d:c1:8c: 06:a2:00:08:32:41:2d:41:b9:8d:3f:f9:3d:25:ec:31:f9:b0: f9:b1:6b:f2:f7:fa:b3:a1:f5:05:d8:c7:d2:db:03:a6:13:49: 4c:d2:0e:4f:3e:18:e1:bd:34:8c:4e:1e:42:0a:fa:38:c2:cb: e5:80:ce:a7:ef:33:4d:7f:29:71:c2:73:df:cd:1c:6c:f5:bd: 51:86:bf:ae:b8:a2:6e:1e:2d:21:aa:fc:6f:bc:f9:d3:b2:4b: 02:90:24:91:76:dd:47:74:2b:4b:ee:26:e3:91:2e:13:a6:0b: 19:00:56:8e:7c:90:6f:ac:f8:b5:8b:bd:e3:0e:87:49:66:81: ac:35:3b:b3:c8:21:58:40:ba:1b:8d:ec:06:ba:df:90:0f:47: 9e:25:5e:c1:8e:3c:4c:cd:10:48:0c:d6:21:1a:15:61:a4:1d: 5f:3d:ae:fb:84:d5:24:2c:87:d0:8d:b8:93:37:25:45:84:f6: 69:27:a8:7c:91:18:d8:a6:ac:a7:3f:07:22:c1:02:4f:7a:93: 99:bc:bb:41:60:46:0c:8a:bd:9e:d0:27:8a:b2:fa:93:73:8e: 60:86:2b:2c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZq2M3HC5mS+vdScr8pQUGsPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMTI0MTQxMDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDZmNzFkZTRkMTBkMzBmNDg4NjdmOGVlYTZlMTk5YTc4ODY3NDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwi3YamimRxmElly3KkqoP+uwfFf EwT8WVsdIto923b42FTZUea97FUU9lav3Wgnj8PECHbWOdb8nJtsZ5tDcVU2792d 4ypHc5UvvwjsKmavoFsbPePNb+8yel6QA2vpiagfStxdiypKpnCyLk4aUHrQCPAE ZvX+hnUPOuLFYHX7hu6RLledO/5wVV5lLS4CwmwHPhbP4/zDOENLsdyCv7dxYgGG KGEBEbvxJ4ljbWo/JOug0oe40SPPUA92njOTcn5Dg2Hc9PvFQsdzMLYHRQaiujaW PYtBvTI9Gc+g0SUz6fFndYujSoyqW0EhaicM8OOSfI9TYksQ3MWvjZ/9PQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFF1vcd5NENMPSIZ/jupuGZp4hnQOMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvWFc5eDNrMFEwdzlJaG4tTzZtNFptbmlHZEE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowVHAwQA owV9MA0GCSqGSIb3DQEBCwUAA4IBAQBmKZnNTOiq/aDtOh4uVIvpz8hySiUxmIZp /xFDt0jbMyCNwYwGogAIMkEtQbmNP/k9Jewx+bD5sWvy9/qzofUF2MfS2wOmE0lM 0g5PPhjhvTSMTh5CCvo4wsvlgM6n7zNNfylxwnPfzRxs9b1Rhr+uuKJuHi0hqvxv vPnTsksCkCSRdt1HdCtL7ibjkS4TpgsZAFaOfJBvrPi1i73jDodJZoGsNTuzyCFY QLobjewGut+QD0eeJV7BjjxMzRBIDNYhGhVhpB1fPa77hNUkLIfQjbiTNyVFhPZp J6h8kRjYpqynPwciwQJPepOZvLtBYEYMir2e0CeKsvqTc45ghiss -----END CERTIFICATE-----Generated at Thu Dec 4 18:05:40 2025 by rpki-client