This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fWSgHCH2L1xZd1rO2mV7b2GLpXk.roa File: fWSgHCH2L1xZd1rO2mV7b2GLpXk.roa (raw, json) Hash identifier: eZksPamSfkNNOogwmx0UOau0PFBBRoiklDKSviKM6TM= Subject key identifier: 7D:64:A0:1C:21:F6:2F:5C:59:77:5A:CE:DA:65:7B:6F:61:8B:A5:79 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E3938FA1FDD305B751EF01FCD508EED Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fWSgHCH2L1xZd1rO2mV7b2GLpXk.roa Signing time: Fri 02 Jan 2026 10:20:37 +0000 ROA not before: Fri 02 Jan 2026 10:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210542 IP address blocks: 163.5.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:38:fa:1f:dd:30:5b:75:1e:f0:1f:cd:50:8e:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d64a01c21f62f5c59775aceda657b6f618ba579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:f8:b2:83:b5:25:fe:6b:37:14:e3:3e:c9:66: 69:3b:fe:57:a1:46:29:2a:78:41:77:97:9c:66:b0: 1c:1e:f9:55:ae:7b:40:1a:12:d6:f0:c8:b0:00:64: 45:11:dc:48:08:65:a1:79:32:4f:50:cb:0e:23:f4: b1:32:5b:65:cb:d4:b2:59:06:02:de:1b:e9:fa:ba: 08:c9:8f:b3:9e:91:22:c8:78:a9:61:9f:a6:fd:cf: 07:30:9f:69:0f:eb:a5:68:72:8f:6a:d7:08:bd:37: 54:79:79:d5:30:e6:94:1f:eb:3a:3c:c8:f9:f1:a4: 28:91:b5:a9:c8:a1:6d:cb:78:d3:f4:b7:a6:12:13: 2d:52:eb:a0:82:ae:9e:ee:27:45:13:3f:24:88:a6: 0d:f5:b3:ef:c4:7f:93:b6:4d:1d:bf:37:a1:96:d2: 90:9b:06:fe:46:80:cc:65:43:fd:05:13:9e:77:a8: a4:eb:bb:52:7a:15:fa:ed:3a:e6:3b:18:1e:38:34: 0a:9b:00:7a:af:72:c1:4b:9b:59:af:39:e8:ea:32: 2e:f0:eb:0e:3b:01:60:9a:aa:1e:63:74:44:a1:ed: f7:a1:54:a8:d4:8b:65:8e:81:1c:f8:fb:54:6e:7e: 5d:3d:ed:7f:dd:8a:b0:88:43:5e:8d:04:14:98:31: ef:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:64:A0:1C:21:F6:2F:5C:59:77:5A:CE:DA:65:7B:6F:61:8B:A5:79 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fWSgHCH2L1xZd1rO2mV7b2GLpXk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.54.0/24 Signature Algorithm: sha256WithRSAEncryption 78:c0:81:15:b1:ca:33:df:4f:69:4c:18:2b:fc:81:3a:5c:7e: 93:8a:6c:e1:5e:ec:29:64:fb:00:39:7c:fb:06:eb:85:e5:2a: c0:70:98:d1:eb:02:74:74:08:d4:c7:50:ff:ff:d9:bb:b8:22: 1d:37:4e:5e:52:94:1c:63:56:1b:94:23:51:14:75:cc:6a:97: 12:51:59:76:19:2f:ae:e2:45:15:47:16:5c:1a:b9:7a:69:6d: af:34:b7:7e:93:66:96:b4:4c:43:22:04:f8:e6:f8:1b:46:ef: 65:08:7e:80:a1:e8:d8:16:ec:a7:32:92:e7:85:71:c2:b7:87: d5:32:22:65:a8:0a:ba:0b:c9:39:f0:ec:7e:b5:1c:3b:9f:a8: 0d:2f:7f:82:b3:bc:94:a9:31:6e:35:c9:4b:96:97:37:82:d4: 39:4e:eb:7a:6f:22:44:b0:3f:e3:3d:48:c7:6a:10:bf:36:2b: 22:37:ed:73:86:f3:ca:19:1d:51:da:23:57:49:99:d8:96:9b: 55:49:55:ce:79:a7:88:0a:85:c4:ec:29:93:12:89:b2:6a:7f: b9:28:f8:d1:87:b3:78:7e:f9:86:b3:31:18:83:05:d5:4a:bb: f3:0f:09:76:f4:15:51:92:66:73:28:a0:73:cc:1a:70:22:21: 20:3b:db:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OTj6H90wW3Ue8B/NUI7tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDY0YTAxYzIxZjYyZjVjNTk3NzVhY2VkYTY1N2I2ZjYxOGJhNTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Piyg7Ul/ms3FOM+yWZpO/5XoUYp KnhBd5ecZrAcHvlVrntAGhLW8MiwAGRFEdxICGWheTJPUMsOI/SxMltly9SyWQYC 3hvp+roIyY+znpEiyHipYZ+m/c8HMJ9pD+ulaHKPatcIvTdUeXnVMOaUH+s6PMj5 8aQokbWpyKFty3jT9LemEhMtUuuggq6e7idFEz8kiKYN9bPvxH+Ttk0dvzehltKQ mwb+RoDMZUP9BROed6ik67tSehX67TrmOxgeODQKmwB6r3LBS5tZrzno6jIu8OsO OwFgmqoeY3REoe33oVSo1ItljoEc+PtUbn5dPe1/3YqwiENejQQUmDHvjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH1koBwh9i9cWXdaztple29hi6V5MB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvZldTZ0hDSDJMMXhaZDFyTzJtVjdiMkdMcFhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowU2MA0G CSqGSIb3DQEBCwUAA4IBAQB4wIEVscoz309pTBgr/IE6XH6TimzhXuwpZPsAOXz7 BuuF5SrAcJjR6wJ0dAjUx1D//9m7uCIdN05eUpQcY1YblCNRFHXMapcSUVl2GS+u 4kUVRxZcGrl6aW2vNLd+k2aWtExDIgT45vgbRu9lCH6AoejYFuynMpLnhXHCt4fV MiJlqAq6C8k58Ox+tRw7n6gNL3+Cs7yUqTFuNclLlpc3gtQ5Tut6byJEsD/jPUjH ahC/NisiN+1zhvPKGR1R2iNXSZnYlptVSVXOeaeICoXE7CmTEomyan+5KPjRh7N4 fvmGszEYgwXVSrvzDwl29BVRkmZzKKBzzBpwIiEgO9vv -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:32 2026 by rpki-client