This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_JQkBHWj7PpUkneEJiOutYZD60I.roa File: _JQkBHWj7PpUkneEJiOutYZD60I.roa (raw, json) Hash identifier: +BOTq2QqQH8HBzu/f3AHGgS22LyB7SyO0mPwV0VL53k= Subject key identifier: FC:94:24:04:75:A3:EC:FA:54:92:77:84:26:23:AE:B5:86:43:EB:42 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E394873A7A37AE6CA0F42BF2D99B363 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_JQkBHWj7PpUkneEJiOutYZD60I.roa Signing time: Fri 02 Jan 2026 10:20:41 +0000 ROA not before: Fri 02 Jan 2026 10:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399641 IP address blocks: 163.5.105.0/24 maxlen: 24 163.5.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:48:73:a7:a3:7a:e6:ca:0f:42:bf:2d:99:b3:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc94240475a3ecfa549277842623aeb58643eb42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:70:85:d2:52:7c:df:ae:b2:26:71:0e:91:70: d4:93:8d:a5:6e:e5:a5:32:81:2a:f4:0f:4e:44:31: e1:98:f1:59:6b:bc:70:e0:c7:71:cb:48:1d:9e:94: 56:98:33:70:33:32:4b:6c:45:78:5b:ba:ae:f2:80: 8a:88:00:f7:68:e9:14:73:e2:8e:36:22:97:81:28: db:18:20:af:71:de:17:cb:a9:4a:b8:c5:42:63:2d: b9:8e:35:6a:b8:47:01:4a:41:57:79:f6:6a:c9:e3: d9:4d:0b:84:f5:e9:bc:74:d1:2a:dd:39:48:6a:ed: 6b:d9:e9:57:fc:04:65:25:95:57:bf:66:c4:24:04: 10:dc:22:95:e4:ef:2b:2e:71:56:52:68:aa:e7:44: 93:2c:d6:f3:b0:d9:52:cd:19:2a:91:6d:25:e3:1f: 26:b5:d3:d4:d1:a7:08:0e:fa:e6:8a:2c:3e:cb:71: 1c:ef:20:f7:79:a5:7b:e2:e0:e2:16:15:bd:aa:7c: 32:20:f7:cf:b9:8c:f3:5c:ea:3e:39:ff:40:2f:61: 1e:bd:40:e4:76:5f:2c:ba:e7:5c:6b:60:c0:2f:52: 35:22:0f:b8:02:27:00:52:f7:26:22:50:7d:95:13: bf:24:61:27:6e:64:8e:63:43:04:b6:f9:05:8f:6c: 65:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:94:24:04:75:A3:EC:FA:54:92:77:84:26:23:AE:B5:86:43:EB:42 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_JQkBHWj7PpUkneEJiOutYZD60I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.105.0/24 163.5.235.0/24 Signature Algorithm: sha256WithRSAEncryption 61:be:8f:77:8f:c5:90:3c:90:dd:00:34:5e:d1:44:39:c8:4c: 29:46:aa:57:5e:68:33:6a:c0:96:05:3c:c0:2d:cb:22:76:45: aa:5f:3d:6f:5f:18:d6:7e:4a:ab:17:93:29:18:d9:cd:cf:39: d9:9c:07:75:d2:20:3e:bc:ed:f7:c0:bb:9a:c1:f7:87:79:cc: 1f:fa:27:1f:e6:9d:b6:06:ec:e7:dc:11:5b:ca:6d:98:ae:1c: 7e:97:a3:8a:fa:4d:61:e2:6c:55:05:08:d1:82:3d:b1:6d:b4: e8:3f:e7:dd:09:8d:9f:a9:bf:fb:cf:5d:aa:18:55:0e:55:ef: e6:7c:6d:35:c5:ae:f9:c0:a2:0f:03:63:e4:0c:ab:c9:94:d1: c1:73:7d:ba:16:3e:60:41:99:b1:fa:43:ec:b4:5e:07:3c:36: df:59:42:c2:60:09:5e:26:30:b9:44:63:e8:57:a4:4e:5b:24: 73:89:58:19:af:08:38:3c:de:07:2b:5f:32:c9:dd:b4:c1:59: 0c:f2:b1:d1:91:38:d2:ea:0a:9c:9a:70:b9:4a:3e:c9:ce:d5: 48:7e:8c:c7:51:72:8e:15:09:f2:43:cb:e0:bc:77:d3:c0:5a: 63:47:37:ab:99:f7:41:7b:73:d1:e6:e0:36:b8:0c:7c:37:e5: 3f:9b:6f:e5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OUhzp6N65soPQr8tmbNjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzk0MjQwNDc1YTNlY2ZhNTQ5Mjc3ODQyNjIzYWViNTg2NDNlYjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHCF0lJ8366yJnEOkXDUk42lbuWl MoEq9A9ORDHhmPFZa7xw4Mdxy0gdnpRWmDNwMzJLbEV4W7qu8oCKiAD3aOkUc+KO NiKXgSjbGCCvcd4Xy6lKuMVCYy25jjVquEcBSkFXefZqyePZTQuE9em8dNEq3TlI au1r2elX/ARlJZVXv2bEJAQQ3CKV5O8rLnFWUmiq50STLNbzsNlSzRkqkW0l4x8m tdPU0acIDvrmiiw+y3Ec7yD3eaV74uDiFhW9qnwyIPfPuYzzXOo+Of9AL2EevUDk dl8suudca2DAL1I1Ig+4AicAUvcmIlB9lRO/JGEnbmSOY0MEtvkFj2xlnQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPyUJAR1o+z6VJJ3hCYjrrWGQ+tCMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvX0pRa0JIV2o3UHBVa25lRUppT3V0WVpENjBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowVpAwQA owXrMA0GCSqGSIb3DQEBCwUAA4IBAQBhvo93j8WQPJDdADRe0UQ5yEwpRqpXXmgz asCWBTzALcsidkWqXz1vXxjWfkqrF5MpGNnNzznZnAd10iA+vO33wLuawfeHecwf +icf5p22Buzn3BFbym2Yrhx+l6OK+k1h4mxVBQjRgj2xbbToP+fdCY2fqb/7z12q GFUOVe/mfG01xa75wKIPA2PkDKvJlNHBc326Fj5gQZmx+kPstF4HPDbfWULCYAle JjC5RGPoV6ROWyRziVgZrwg4PN4HK18yyd20wVkM8rHRkTjS6gqcmnC5Sj7JztVI fozHUXKOFQnyQ8vgvHfTwFpjRzermfdBe3PR5uA2uAx8N+U/m2/l -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:53 2026 by rpki-client