This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/g0Mxyp2ylcd3C5HCwMZk3ppMe7k.roa File: g0Mxyp2ylcd3C5HCwMZk3ppMe7k.roa (raw, json) Hash identifier: W5eRJhBMRaO840EtFFyvnBEdzEhrn87v4sMAAPOZuL8= Subject key identifier: 83:43:31:CA:9D:B2:95:C7:77:0B:91:C2:C0:C6:64:DE:9A:4C:7B:B9 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E3912D73EB196F0AEBC2AB5B028F6C4 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/g0Mxyp2ylcd3C5HCwMZk3ppMe7k.roa Signing time: Fri 02 Jan 2026 10:20:27 +0000 ROA not before: Fri 02 Jan 2026 10:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12189 IP address blocks: 163.5.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:12:d7:3e:b1:96:f0:ae:bc:2a:b5:b0:28:f6:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=834331ca9db295c7770b91c2c0c664de9a4c7bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3f:a7:c5:37:1e:71:ac:db:40:b7:a6:cf:8c: 69:1f:00:40:70:ec:3e:27:68:fa:ed:a2:9f:b5:d4: 6b:33:1a:62:9c:e4:47:58:93:b6:e3:d4:68:c4:2e: 31:0a:87:c5:c4:49:2d:f3:ab:93:c3:95:84:a3:9f: 23:2c:0b:a9:ca:b0:19:41:4f:43:5e:9e:e5:4d:8b: 98:3d:06:c0:b5:0d:17:c6:99:4e:71:5e:90:9e:0a: a8:09:07:10:89:0e:81:50:e1:59:0c:00:f6:53:c3: 01:a4:a1:31:ff:4d:17:db:41:f7:83:6e:90:f1:ed: 4d:3c:93:ae:bc:96:34:41:f1:ce:d9:d3:a0:e6:f6: 0f:e4:37:42:15:b0:62:76:2b:4f:fc:01:fc:e9:91: b8:02:65:07:05:b9:78:5a:a9:4b:8f:72:ab:cb:83: 3a:3e:9f:15:ab:94:b6:7a:8a:4a:95:c2:30:0a:3c: 89:a9:0f:ae:f5:6c:f0:5f:b6:02:44:f5:a8:3f:10: c1:57:70:e5:b1:59:6c:74:92:9c:19:db:15:8a:34: dc:56:30:8d:d9:d3:07:0c:07:62:57:07:8b:06:bf: 67:33:1f:61:37:92:d4:a2:13:e8:db:5f:2d:c2:88: b7:65:dd:65:cc:6e:80:fc:8b:a3:94:04:9d:f1:bc: b8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:43:31:CA:9D:B2:95:C7:77:0B:91:C2:C0:C6:64:DE:9A:4C:7B:B9 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/g0Mxyp2ylcd3C5HCwMZk3ppMe7k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.194.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:fa:a1:6c:dd:10:2e:3b:15:91:2f:56:4d:ff:84:b9:9c:c6: 8b:fe:3e:6f:ee:b8:25:c8:6c:06:5a:37:bd:c0:7d:68:c7:cd: 5d:c6:2f:5f:a0:5e:b5:7a:4f:46:b7:a6:8a:0d:86:a5:09:7f: da:ab:be:49:57:aa:a5:6d:98:7a:5a:59:e6:d1:08:ad:61:9a: bc:78:4b:9a:37:4b:5f:1e:ae:fb:d2:fd:31:8e:0a:96:c5:5f: 64:f2:1c:c6:47:e0:34:97:db:6c:3a:ea:47:e1:58:12:15:cb: 7f:e7:4b:64:9e:88:29:7c:d4:7e:35:7f:07:07:df:e5:f7:42: 93:e3:35:2c:8a:7d:1d:93:b1:91:55:1e:d3:cb:7a:b8:20:45: ca:74:3b:7f:90:e9:ce:58:a0:79:8d:a4:09:82:18:90:f3:67: 95:e2:e0:3d:d1:dd:21:5b:ab:32:62:41:5a:59:0c:93:d5:14: 7c:31:f1:e0:d3:12:74:2e:33:1f:19:b4:b8:6c:38:c7:97:c8: 56:f5:0a:f3:22:bd:f6:8a:7a:7a:87:21:a5:a9:da:d6:aa:84: 83:2e:75:2f:74:42:4d:72:04:cd:ce:0b:39:5b:cd:29:ca:8d: 95:f2:09:bf:c8:e9:ac:c8:d6:65:41:8c:af:6d:4a:e0:06:2d: 86:19:fd:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ORLXPrGW8K68KrWwKPbEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzQzMzFjYTlkYjI5NWM3NzcwYjkxYzJjMGM2NjRkZTlhNGM3YmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2z+nxTcecazbQLemz4xpHwBAcOw+ J2j67aKftdRrMxpinORHWJO249RoxC4xCofFxEkt86uTw5WEo58jLAupyrAZQU9D Xp7lTYuYPQbAtQ0XxplOcV6QngqoCQcQiQ6BUOFZDAD2U8MBpKEx/00X20H3g26Q 8e1NPJOuvJY0QfHO2dOg5vYP5DdCFbBiditP/AH86ZG4AmUHBbl4WqlLj3Kry4M6 Pp8Vq5S2eopKlcIwCjyJqQ+u9WzwX7YCRPWoPxDBV3DlsVlsdJKcGdsVijTcVjCN 2dMHDAdiVweLBr9nMx9hN5LUohPo218twoi3Zd1lzG6A/IujlASd8by4UQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFINDMcqdspXHdwuRwsDGZN6aTHu5MB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvZzBNeHlwMnlsY2QzQzVIQ3dNWmszcHBNZTdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowXCMA0G CSqGSIb3DQEBCwUAA4IBAQBq+qFs3RAuOxWRL1ZN/4S5nMaL/j5v7rglyGwGWje9 wH1ox81dxi9foF61ek9Gt6aKDYalCX/aq75JV6qlbZh6Wlnm0QitYZq8eEuaN0tf Hq770v0xjgqWxV9k8hzGR+A0l9tsOupH4VgSFct/50tknogpfNR+NX8HB9/l90KT 4zUsin0dk7GRVR7Ty3q4IEXKdDt/kOnOWKB5jaQJghiQ82eV4uA90d0hW6syYkFa WQyT1RR8MfHg0xJ0LjMfGbS4bDjHl8hW9QrzIr32inp6hyGlqdrWqoSDLnUvdEJN cgTNzgs5W80pyo2V8gm/yOmsyNZlQYyvbUrgBi2GGf0h -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:40 2026 by rpki-client