This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fIijnL_Giq6EqXivRAjkF1MBqqQ.roa File: fIijnL_Giq6EqXivRAjkF1MBqqQ.roa (raw, json) Hash identifier: Qz5ApvZSeKwqPGYsSkqQQZTCYuZYM4/n02WckV3oRw4= Subject key identifier: 7C:88:A3:9C:BF:C6:8A:AE:84:A9:78:AF:44:08:E4:17:53:01:AA:A4 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E39441BCC40F71A0C96278B00047863 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fIijnL_Giq6EqXivRAjkF1MBqqQ.roa Signing time: Fri 02 Jan 2026 10:20:40 +0000 ROA not before: Fri 02 Jan 2026 10:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216159 IP address blocks: 163.5.192.0/24 maxlen: 24 163.5.193.0/24 maxlen: 24 163.5.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:44:1b:cc:40:f7:1a:0c:96:27:8b:00:04:78:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c88a39cbfc68aae84a978af4408e4175301aaa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:89:63:e7:36:63:b0:46:8e:e6:5f:e9:bc:a1: 54:67:b9:6a:c1:c2:af:35:2c:5c:a9:7c:6d:1c:1a: e5:12:a9:66:77:3a:3a:3e:ff:6a:48:cb:99:37:9d: f5:94:6b:9a:ef:27:38:3c:c4:f3:b5:47:06:03:4d: ad:60:33:9f:00:68:3d:e6:ee:16:a8:19:35:62:35: 57:d3:c5:86:61:50:28:64:aa:21:f8:9f:07:7f:ea: f7:1d:d3:31:a3:74:51:6f:75:a7:22:08:b9:4b:af: 64:c2:6c:70:e5:e2:b6:5c:0c:0e:c3:b0:69:58:b7: dc:c1:20:74:67:67:ae:22:5f:3d:92:dc:d9:e6:73: 0f:76:d3:61:03:4c:ce:85:f6:8d:e6:1e:35:b7:00: 17:37:a8:0a:55:1f:1c:bb:90:32:cb:3f:4c:03:33: c5:57:10:ce:bd:9a:c2:f1:43:66:db:f1:c2:07:ab: c1:42:a7:31:0d:04:01:b8:0c:c2:5e:76:81:c5:c3: 93:77:f2:ce:2e:ed:3c:fa:a9:cc:44:17:b1:e3:83: 5a:09:66:f9:bb:15:bf:ab:b7:c4:e9:87:a1:94:d2: d0:e9:be:17:a9:cf:0b:46:f9:dd:0a:1e:62:92:38: 81:fc:ab:4b:55:70:5c:9d:30:46:06:23:e9:d2:4e: 89:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:88:A3:9C:BF:C6:8A:AE:84:A9:78:AF:44:08:E4:17:53:01:AA:A4 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fIijnL_Giq6EqXivRAjkF1MBqqQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.192.0/23 163.5.213.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:c0:e8:b8:8a:3a:77:0b:77:54:dd:90:ad:c9:f9:04:ab:de: c6:48:55:86:50:6c:7d:3b:06:b8:e9:7e:b4:9a:63:fc:42:88: 32:77:1b:6c:8a:61:05:69:1d:75:fd:1d:57:51:d3:bb:39:f2: b3:49:00:59:d7:9c:a4:1a:46:63:38:6a:25:ef:d3:83:bc:7f: d6:e9:cd:e1:81:3a:32:56:96:90:d3:50:91:50:66:07:07:13: 2c:a1:71:4d:20:c5:09:bc:80:f4:44:3f:9c:e2:b4:cd:09:e8: e3:e6:c5:6a:8d:4f:6b:9c:13:8b:62:3e:40:53:a1:8d:41:3b: 7a:9b:c7:f0:6f:fb:bb:3c:56:08:88:7a:c7:93:ad:06:7b:9a: a9:81:40:df:d9:9b:a5:48:93:72:70:05:25:3e:f7:c6:e8:7a: ed:ea:6a:d2:33:75:60:ac:52:8d:10:56:56:2c:35:74:07:8a: 81:a1:30:61:6b:88:b5:d7:91:44:ea:ed:83:82:dd:0e:49:45: 62:bc:42:32:f9:b8:3d:18:ce:32:ac:5b:6d:4e:4c:f4:6f:e4: c0:d4:f4:0d:ef:57:a5:e6:fe:e8:7e:8f:2e:bf:ef:04:e3:0c: 8a:1e:77:d7:20:9d:ae:53:5e:9a:55:7c:4d:9d:f0:8f:46:d2: 19:0c:25:85 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OUQbzED3GgyWJ4sABHhjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Yzg4YTM5Y2JmYzY4YWFlODRhOTc4YWY0NDA4ZTQxNzUzMDFhYWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIlj5zZjsEaO5l/pvKFUZ7lqwcKv NSxcqXxtHBrlEqlmdzo6Pv9qSMuZN531lGua7yc4PMTztUcGA02tYDOfAGg95u4W qBk1YjVX08WGYVAoZKoh+J8Hf+r3HdMxo3RRb3WnIgi5S69kwmxw5eK2XAwOw7Bp WLfcwSB0Z2euIl89ktzZ5nMPdtNhA0zOhfaN5h41twAXN6gKVR8cu5Ayyz9MAzPF VxDOvZrC8UNm2/HCB6vBQqcxDQQBuAzCXnaBxcOTd/LOLu08+qnMRBex44NaCWb5 uxW/q7fE6YehlNLQ6b4Xqc8LRvndCh5ikjiB/KtLVXBcnTBGBiPp0k6JNwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHyIo5y/xoquhKl4r0QI5BdTAaqkMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvZklpam5MX0dpcTZFcVhpdlJBamtGMU1CcXFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBowXAAwQA owXVMA0GCSqGSIb3DQEBCwUAA4IBAQB6wOi4ijp3C3dU3ZCtyfkEq97GSFWGUGx9 Owa46X60mmP8QogydxtsimEFaR11/R1XUdO7OfKzSQBZ15ykGkZjOGol79ODvH/W 6c3hgToyVpaQ01CRUGYHBxMsoXFNIMUJvID0RD+c4rTNCejj5sVqjU9rnBOLYj5A U6GNQTt6m8fwb/u7PFYIiHrHk60Ge5qpgUDf2ZulSJNycAUlPvfG6Hrt6mrSM3Vg rFKNEFZWLDV0B4qBoTBha4i115FE6u2Dgt0OSUVivEIy+bg9GM4yrFttTkz0b+TA 1PQN71el5v7ofo8uv+8E4wyKHnfXIJ2uU16aVXxNnfCPRtIZDCWF -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:06 2026 by rpki-client