This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fUzTaBeUP6lkQGUzAASpUvwxVgg.roa File: fUzTaBeUP6lkQGUzAASpUvwxVgg.roa (raw, json) Hash identifier: p6HUARqdHvVoKvDiKLhi+tMlwlwW7Or5zCFu5HWGwUc= Subject key identifier: 7D:4C:D3:68:17:94:3F:A9:64:40:65:33:00:04:A9:52:FC:31:56:08 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E390F9C886B938FD723FE60DEC29B37 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fUzTaBeUP6lkQGUzAASpUvwxVgg.roa Signing time: Fri 02 Jan 2026 10:20:27 +0000 ROA not before: Fri 02 Jan 2026 10:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 163.5.33.0/24 maxlen: 24 163.5.73.0/24 maxlen: 24 163.5.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:0f:9c:88:6b:93:8f:d7:23:fe:60:de:c2:9b:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d4cd36817943fa9644065330004a952fc315608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6e:ac:1f:c4:0d:9a:7d:30:97:6a:06:16:aa: 99:4c:c3:2b:04:ca:61:37:6d:29:20:f0:77:3d:6b: 13:1d:c4:13:8f:41:50:09:50:44:22:cf:0f:61:fe: e4:9d:d4:39:0e:02:37:c9:cb:bb:25:ed:9f:b0:9a: 9d:3f:dc:e4:28:30:56:a1:6d:ee:c2:98:4a:ff:34: 75:8a:0c:07:97:f9:6d:37:36:14:7c:c6:99:f4:38: 28:75:08:a3:52:68:9a:8c:b5:b5:e3:16:13:d7:04: 85:c8:03:72:a2:95:6d:62:82:e5:fc:3e:9f:3a:2a: f3:2e:e7:42:57:5e:65:5c:0e:88:c9:6c:96:ea:17: 6a:ad:5d:70:b9:90:34:28:07:02:bb:28:58:cd:10: ac:f9:f6:99:c9:5d:a0:b5:b9:1f:bf:5d:b2:13:b7: 5b:1d:09:01:5e:6d:20:1a:b5:89:2a:99:68:d5:27: 4f:47:ba:fa:04:01:0f:58:4d:d4:b5:29:cf:9c:68: d3:2d:fc:a2:be:04:34:30:f4:b4:81:0f:5b:ec:da: d5:46:c0:aa:31:a2:6a:f7:6d:16:85:19:20:7c:5a: 40:2c:46:f2:bf:96:e2:30:2f:3d:6e:f0:fa:f7:b6: 5c:45:c6:78:d8:64:55:7c:13:c0:9e:dd:16:b6:5a: 45:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:4C:D3:68:17:94:3F:A9:64:40:65:33:00:04:A9:52:FC:31:56:08 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fUzTaBeUP6lkQGUzAASpUvwxVgg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.33.0/24 163.5.73.0/24 163.5.128.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:ab:c5:f2:c9:a8:00:12:b3:d9:4e:78:f3:b7:12:30:0c:78: a6:4b:46:c7:12:81:82:42:15:1d:c9:26:d7:7d:84:b4:32:05: fb:64:23:53:24:aa:df:0d:d0:4d:ab:79:3c:9c:4f:7a:24:4f: 4e:12:17:79:0f:11:03:1c:b7:14:ba:93:5d:04:fa:67:88:23: 88:6b:8b:64:dc:24:35:81:1b:17:2a:d0:86:52:bb:de:18:1d: b6:81:a2:c1:88:6d:a7:29:f5:4f:ab:3b:8c:e5:3e:50:5f:52: 06:66:db:65:4f:43:47:ef:31:d8:bd:22:d5:ff:ef:a2:bd:7f: 2f:00:4b:89:de:ef:cc:cc:b6:4f:05:55:d7:0b:80:d8:45:b3: 85:a9:83:be:14:43:9f:19:03:4d:4a:b6:95:19:e5:33:ef:06: 19:76:f1:50:b3:6d:6a:69:f6:b7:1b:ec:13:d5:d4:22:48:79: ba:7c:2a:fa:d2:33:1b:1e:4f:37:7b:ff:3c:7d:b4:9b:3a:0a: c0:9a:5f:a2:3c:d8:1f:9a:45:7b:9a:73:f2:ee:bf:9c:62:cf: e3:65:24:63:4d:94:6e:45:14:ba:3c:d2:df:16:54:d7:36:fe: 82:df:34:05:39:21:71:57:e1:7f:e5:4b:20:69:36:3e:52:b9: 2c:c9:82:10 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OQ+ciGuTj9cj/mDewps3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDRjZDM2ODE3OTQzZmE5NjQ0MDY1MzMwMDA0YTk1MmZjMzE1NjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA026sH8QNmn0wl2oGFqqZTMMrBMph N20pIPB3PWsTHcQTj0FQCVBEIs8PYf7kndQ5DgI3ycu7Je2fsJqdP9zkKDBWoW3u wphK/zR1igwHl/ltNzYUfMaZ9DgodQijUmiajLW14xYT1wSFyANyopVtYoLl/D6f OirzLudCV15lXA6IyWyW6hdqrV1wuZA0KAcCuyhYzRCs+faZyV2gtbkfv12yE7db HQkBXm0gGrWJKplo1SdPR7r6BAEPWE3UtSnPnGjTLfyivgQ0MPS0gQ9b7NrVRsCq MaJq920WhRkgfFpALEbyv5biMC89bvD697ZcRcZ42GRVfBPAnt0WtlpFVwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFH1M02gXlD+pZEBlMwAEqVL8MVYIMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvZlV6VGFCZVVQNmxrUUdVekFBU3BVdnd4VmdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAowUhAwQA owVJAwQAowWAMA0GCSqGSIb3DQEBCwUAA4IBAQBKq8XyyagAErPZTnjztxIwDHim S0bHEoGCQhUdySbXfYS0MgX7ZCNTJKrfDdBNq3k8nE96JE9OEhd5DxEDHLcUupNd BPpniCOIa4tk3CQ1gRsXKtCGUrveGB22gaLBiG2nKfVPqzuM5T5QX1IGZttlT0NH 7zHYvSLV/++ivX8vAEuJ3u/MzLZPBVXXC4DYRbOFqYO+FEOfGQNNSraVGeUz7wYZ dvFQs21qafa3G+wT1dQiSHm6fCr60jMbHk83e/88fbSbOgrAml+iPNgfmkV7mnPy 7r+cYs/jZSRjTZRuRRS6PNLfFlTXNv6C3zQFOSFxV+F/5UsgaTY+UrksyYIQ -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:50 2026 by rpki-client