This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/dG---ng-FCMmjw6SU-Bjj_NcQ0Y.roa File: dG---ng-FCMmjw6SU-Bjj_NcQ0Y.roa (raw, json) Hash identifier: QURPPZGEuP22+OadZ6ZFO97Z1tJnILNuKo++zYoS2hM= Subject key identifier: 74:6F:BE:FA:78:3E:14:23:26:8F:0E:92:53:E0:63:8F:F3:5C:43:46 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E393A3D72250FDA47E3A44DA762D10D Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/dG---ng-FCMmjw6SU-Bjj_NcQ0Y.roa Signing time: Fri 02 Jan 2026 10:20:38 +0000 ROA not before: Fri 02 Jan 2026 10:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 163.5.36.0/24 maxlen: 24 163.5.82.0/24 maxlen: 24 163.5.87.0/24 maxlen: 24 163.5.95.0/24 maxlen: 24 163.5.99.0/24 maxlen: 24 163.5.136.0/24 maxlen: 24 163.5.181.0/24 maxlen: 24 163.5.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:3a:3d:72:25:0f:da:47:e3:a4:4d:a7:62:d1:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=746fbefa783e1423268f0e9253e0638ff35c4346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1f:62:a3:96:a6:0b:32:c2:01:87:e2:0b:54: d6:66:8f:2f:2f:82:67:32:3f:c9:03:57:bf:3d:a9: d8:4e:6a:25:a8:4a:07:a9:72:23:05:15:2a:59:88: a4:f7:dd:44:03:82:d1:0c:c4:60:89:94:10:2b:61: 15:a5:b7:a1:ca:e1:10:66:ae:68:49:ab:77:8f:d9: 29:f7:2b:f7:9f:28:90:96:4a:25:60:58:c1:f2:fd: cc:27:d0:84:94:0b:8e:b8:a6:8c:91:42:61:8b:e0: a0:6a:a9:18:82:98:7c:1a:e9:97:59:3e:e8:92:a3: f6:91:6a:33:44:a0:06:6a:df:91:d2:91:b6:84:75: 01:41:25:95:a4:01:39:fd:0d:8f:86:6a:5e:11:7d: c8:51:95:d5:4e:7a:bb:ed:3d:84:43:b5:28:34:bb: f7:d3:b0:2a:07:7e:18:ce:30:4a:1d:4d:30:4d:b4: 6a:14:f7:08:06:1f:c6:3c:af:b1:31:a9:c1:69:01: d8:42:3e:e4:f1:9a:aa:69:c5:4c:a2:c9:10:00:e3: ed:6d:82:ea:44:dc:4b:ce:5a:7c:e3:91:3f:e5:97: b6:b9:8f:94:4f:87:a3:04:91:9d:76:6e:92:53:3d: 37:08:92:3f:e4:13:40:9d:8b:98:7a:99:84:22:b1: 21:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:6F:BE:FA:78:3E:14:23:26:8F:0E:92:53:E0:63:8F:F3:5C:43:46 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/dG---ng-FCMmjw6SU-Bjj_NcQ0Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.36.0/24 163.5.82.0/24 163.5.87.0/24 163.5.95.0/24 163.5.99.0/24 163.5.136.0/24 163.5.181.0/24 163.5.202.0/24 Signature Algorithm: sha256WithRSAEncryption 00:d2:22:a6:e5:43:89:ea:08:33:bc:88:61:37:1b:25:d7:3e: 05:ac:e4:d9:28:98:88:2c:12:18:72:fc:91:a1:8d:23:23:01: 82:30:ba:51:07:c5:15:10:56:87:5e:6c:33:06:dd:24:44:87: a2:fe:4b:1b:2b:73:8d:87:d7:7f:86:60:d1:b5:f1:2c:3e:64: d5:12:15:5d:2b:24:0c:4b:e1:50:3b:ba:f5:8a:88:78:c3:ae: cf:a8:95:88:a8:0b:3d:01:e7:65:fa:10:3a:e5:b8:87:95:64: 52:89:54:1f:4f:4e:7f:a5:bd:5a:68:2d:8c:23:04:95:45:22: 58:76:ab:cf:fd:13:11:24:b6:36:91:61:74:c5:eb:99:0c:3b: 37:02:10:aa:68:70:05:80:05:da:32:4c:75:ac:08:cb:44:b5: dd:92:e9:97:07:24:0b:be:70:cf:2c:4e:ed:cd:1a:7d:eb:23: 71:49:ee:c3:db:94:d0:87:17:3e:d5:0b:5d:cc:77:be:a8:36: 8d:26:24:2f:4e:ba:dd:67:e8:cc:cc:6b:19:f5:56:e3:fa:b4: f2:6c:02:84:9a:75:29:d5:30:60:54:40:12:ed:82:8c:0e:ce: 14:f6:b9:46:cf:ed:c8:36:64:7e:76:06:11:21:71:de:1c:3d: b7:15:b7:47 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt+OTo9ciUP2kfjpE2nYtENMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDZmYmVmYTc4M2UxNDIzMjY4ZjBlOTI1M2UwNjM4ZmYzNWM0MzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR9io5amCzLCAYfiC1TWZo8vL4Jn Mj/JA1e/PanYTmolqEoHqXIjBRUqWYik991EA4LRDMRgiZQQK2EVpbehyuEQZq5o Sat3j9kp9yv3nyiQlkolYFjB8v3MJ9CElAuOuKaMkUJhi+CgaqkYgph8GumXWT7o kqP2kWozRKAGat+R0pG2hHUBQSWVpAE5/Q2PhmpeEX3IUZXVTnq77T2EQ7UoNLv3 07AqB34YzjBKHU0wTbRqFPcIBh/GPK+xManBaQHYQj7k8ZqqacVMoskQAOPtbYLq RNxLzlp845E/5Ze2uY+UT4ejBJGddm6SUz03CJI/5BNAnYuYepmEIrEhewIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFHRvvvp4PhQjJo8OklPgY4/zXENGMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvZEctLS1uZy1GQ01tanc2U1UtQmpqX05jUTBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAowUkAwQA owVSAwQAowVXAwQAowVfAwQAowVjAwQAowWIAwQAowW1AwQAowXKMA0GCSqGSIb3 DQEBCwUAA4IBAQAA0iKm5UOJ6ggzvIhhNxsl1z4FrOTZKJiILBIYcvyRoY0jIwGC MLpRB8UVEFaHXmwzBt0kRIei/ksbK3ONh9d/hmDRtfEsPmTVEhVdKyQMS+FQO7r1 ioh4w67PqJWIqAs9Aedl+hA65biHlWRSiVQfT05/pb1aaC2MIwSVRSJYdqvP/RMR JLY2kWF0xeuZDDs3AhCqaHAFgAXaMkx1rAjLRLXdkumXByQLvnDPLE7tzRp96yNx Se7D25TQhxc+1QtdzHe+qDaNJiQvTrrdZ+jMzGsZ9Vbj+rTybAKEmnUp1TBgVEAS 7YKMDs4U9rlGz+3INmR+dgYRIXHeHD23FbdH -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:26 2026 by rpki-client