This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hWJyx5lN98jgF-qfpi53gcCzC4M.roa File: hWJyx5lN98jgF-qfpi53gcCzC4M.roa (raw, json) Hash identifier: ag+4Cbr9H6Grs+Rc5tBjkUxKd9BA4TGA0OlnILjtkVc= Subject key identifier: 85:62:72:C7:99:4D:F7:C8:E0:17:EA:9F:A6:2E:77:81:C0:B3:0B:83 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E393224BAE9D13E95357EF24A6A1EE2 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hWJyx5lN98jgF-qfpi53gcCzC4M.roa Signing time: Fri 02 Jan 2026 10:20:36 +0000 ROA not before: Fri 02 Jan 2026 10:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199218 IP address blocks: 163.5.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:32:24:ba:e9:d1:3e:95:35:7e:f2:4a:6a:1e:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=856272c7994df7c8e017ea9fa62e7781c0b30b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c0:7d:ce:87:13:32:26:2a:11:0e:62:d2:bb: e8:73:f7:de:01:bc:c3:40:4c:a1:d8:47:3e:ea:38: 83:e0:8b:68:75:a2:a6:db:27:de:cb:89:b2:21:79: 91:10:a1:ac:65:9f:29:f4:4e:29:c7:63:06:cc:8a: 5d:7f:49:52:44:53:2d:28:b5:af:8c:4a:5e:66:ae: fd:fa:e8:df:fd:d6:ae:a5:f8:51:5a:64:a4:1e:aa: eb:ad:e4:f7:35:a7:e1:9c:9d:79:67:b0:af:46:33: 0b:2a:be:94:b2:c2:2e:b6:11:ea:e9:6b:c1:73:be: d8:83:cd:90:b9:19:9d:2d:52:c0:94:3c:13:7b:69: 28:1b:de:f8:8e:b3:78:0a:9f:77:60:ce:15:6a:0f: aa:25:4f:bb:34:04:f1:2a:a1:eb:57:77:9b:d7:9a: 83:73:c4:8e:53:da:57:9e:24:a3:ef:f8:57:09:00: 45:08:eb:99:ac:b8:c8:65:83:cd:58:43:3f:65:c3: 82:37:19:ff:c4:f9:e5:79:5a:7e:be:89:63:13:73: 4e:ec:d8:91:02:3e:51:8b:d5:d7:ed:10:b9:a2:02: 60:a6:c3:bc:63:2d:37:5a:77:32:12:4a:f5:d2:8b: 36:99:7b:89:0a:1a:ec:18:e6:c5:7c:f6:7a:c6:ab: 15:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:62:72:C7:99:4D:F7:C8:E0:17:EA:9F:A6:2E:77:81:C0:B3:0B:83 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hWJyx5lN98jgF-qfpi53gcCzC4M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.171.0/24 Signature Algorithm: sha256WithRSAEncryption 09:97:ae:41:f2:c2:dd:d6:a1:c5:32:fd:e1:bb:3b:7c:04:d7: 95:b7:9b:57:d3:ef:f5:ed:51:33:de:b5:99:92:f9:4a:a9:d2: 19:eb:ed:ae:1b:99:8d:0f:3b:db:7a:5e:2a:3d:9f:fc:a8:64: 1f:66:2f:95:df:6b:b2:16:22:d1:02:16:e1:5f:77:2a:4f:ac: 09:cf:a0:b2:67:09:17:39:0c:a6:8d:9f:4c:f7:57:fd:9a:d3: 2a:0b:f2:5d:0d:8b:84:77:24:94:8f:0b:bd:1d:8f:90:6d:dc: b0:f8:b2:62:05:c7:f6:13:bd:c0:f7:87:1e:fd:6c:b6:14:4f: 8c:6b:0f:db:27:49:18:89:ea:60:50:b2:4a:ca:90:8e:b5:93: 4a:37:d6:af:35:47:12:05:bb:5c:a4:90:b3:55:ba:d7:f3:f5: 06:87:81:3d:0f:0a:63:d7:fb:ae:f8:0b:45:41:14:cd:fc:5c: 5b:73:a0:bd:83:a9:fb:bd:50:80:99:5a:c1:ec:38:ac:e2:92: 6d:37:6b:c6:80:0f:6c:f7:b7:35:2f:d9:10:41:54:7e:11:4a: 20:98:e5:a1:33:46:9b:40:40:5a:b6:ff:41:a3:ab:ef:ca:71: 47:54:32:03:62:4c:3d:9a:43:cb:d3:32:4a:59:32:80:b2:36: 12:cc:18:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OTIkuunRPpU1fvJKah7iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTYyNzJjNzk5NGRmN2M4ZTAxN2VhOWZhNjJlNzc4MWMwYjMwYjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcB9zocTMiYqEQ5i0rvoc/feAbzD QEyh2Ec+6jiD4ItodaKm2yfey4myIXmREKGsZZ8p9E4px2MGzIpdf0lSRFMtKLWv jEpeZq79+ujf/daupfhRWmSkHqrrreT3NafhnJ15Z7CvRjMLKr6UssIuthHq6WvB c77Yg82QuRmdLVLAlDwTe2koG974jrN4Cp93YM4Vag+qJU+7NATxKqHrV3eb15qD c8SOU9pXniSj7/hXCQBFCOuZrLjIZYPNWEM/ZcOCNxn/xPnleVp+voljE3NO7NiR Aj5Ri9XX7RC5ogJgpsO8Yy03WncyEkr10os2mXuJChrsGObFfPZ6xqsVewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIVicseZTffI4Bfqn6Yud4HAswuDMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvaFdKeXg1bE45OGpnRi1xZnBpNTNnY0N6QzRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowWrMA0G CSqGSIb3DQEBCwUAA4IBAQAJl65B8sLd1qHFMv3huzt8BNeVt5tX0+/17VEz3rWZ kvlKqdIZ6+2uG5mNDzvbel4qPZ/8qGQfZi+V32uyFiLRAhbhX3cqT6wJz6CyZwkX OQymjZ9M91f9mtMqC/JdDYuEdySUjwu9HY+Qbdyw+LJiBcf2E73A94ce/Wy2FE+M aw/bJ0kYiepgULJKypCOtZNKN9avNUcSBbtcpJCzVbrX8/UGh4E9Dwpj1/uu+AtF QRTN/Fxbc6C9g6n7vVCAmVrB7Dis4pJtN2vGgA9s97c1L9kQQVR+EUogmOWhM0ab QEBatv9Bo6vvynFHVDIDYkw9mkPL0zJKWTKAsjYSzBga -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:44 2026 by rpki-client