This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/iVWRHZx1kjb8dlVDQtGzWDU0Irg.roa File: iVWRHZx1kjb8dlVDQtGzWDU0Irg.roa (raw, json) Hash identifier: RqvXALhwrwD/FN/YcGjuSd+Ub8QAw+2oc+cxiSKyYmQ= Subject key identifier: 89:55:91:1D:9C:75:92:36:FC:76:55:43:42:D1:B3:58:35:34:22:B8 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E3928CE1E184504ADB5E322E708C2D9 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/iVWRHZx1kjb8dlVDQtGzWDU0Irg.roa Signing time: Fri 02 Jan 2026 10:20:33 +0000 ROA not before: Fri 02 Jan 2026 10:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60949 IP address blocks: 163.5.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:28:ce:1e:18:45:04:ad:b5:e3:22:e7:08:c2:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8955911d9c759236fc76554342d1b358353422b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b0:67:d4:40:4f:7f:59:d0:78:1b:4f:b2:de: dc:88:63:09:ce:55:b9:c2:59:33:a0:21:c2:d8:bf: e0:54:bb:c6:2e:76:f5:e0:56:56:e8:02:44:7d:39: 0f:7c:62:23:8f:f8:b3:fc:32:3e:6c:30:2a:e6:2c: b0:5a:33:b2:cd:a6:79:be:44:ae:70:35:16:67:e1: 0f:24:d6:c9:71:f3:86:aa:91:b6:71:5f:24:5b:4e: d0:49:ca:61:0a:e0:d2:c9:d0:bb:f4:e7:5b:fc:f7: d5:81:fc:57:6a:45:f3:a7:fa:9e:25:eb:2b:c5:f6: fa:fb:37:1d:54:8e:7c:69:cb:d9:30:9d:0a:2b:09: d6:a3:83:70:f0:5c:88:56:f3:a7:6a:5c:ae:f2:12: 72:37:4a:50:35:aa:53:45:0d:59:57:ac:11:6a:bd: a4:cc:48:e8:d1:1c:7e:8e:e5:0f:cb:02:b2:2b:bb: 87:9e:28:85:76:30:ad:6c:3d:5a:62:c1:da:a9:47: 21:22:e9:1e:82:39:61:b7:26:ee:6b:26:42:79:0b: 0e:9f:0c:8f:83:d3:37:58:83:fa:02:4b:de:44:5b: 25:2c:ce:94:6b:49:90:4f:49:2c:8e:16:66:7f:17: a2:aa:26:f5:c5:85:0f:b5:a2:6d:10:eb:b5:b2:50: 61:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:55:91:1D:9C:75:92:36:FC:76:55:43:42:D1:B3:58:35:34:22:B8 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/iVWRHZx1kjb8dlVDQtGzWDU0Irg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.197.0/24 Signature Algorithm: sha256WithRSAEncryption 51:9b:6d:c7:28:4a:35:10:0d:f1:b5:33:39:e0:cf:37:d7:d4: 59:43:9e:f3:a1:c1:69:98:a4:f7:cf:c7:3b:ba:59:eb:83:fd: cd:62:4c:95:c1:4e:86:e1:fc:8d:68:39:83:e8:0b:c9:0c:b9: 17:88:13:a0:20:9c:c3:c2:b8:1b:cd:52:73:2c:66:7c:a2:db: 55:8b:f7:1d:54:c4:91:1a:72:77:d0:a4:b8:1c:c2:af:6e:1e: 84:19:a6:05:5a:11:34:fc:ba:11:19:f7:02:87:35:a0:0f:03: 78:7b:b3:71:3d:66:e3:73:0a:03:16:b0:23:37:e9:32:d9:43: 03:07:aa:cf:16:24:9c:dd:64:dc:e0:20:a1:64:c6:37:5e:7e: 1e:e5:62:91:f1:3b:89:95:43:fc:ac:7a:50:bb:5e:52:a5:11: 61:49:54:67:e9:da:c3:53:90:e7:3b:a4:49:40:d9:8d:44:04: 4f:c9:13:45:04:d0:60:ae:6a:cf:77:8a:43:50:f9:04:6c:67: 60:20:2d:c0:3c:28:98:b4:52:34:1d:5f:92:d5:03:dc:d5:1c: 5e:8d:09:ba:99:9a:2f:0a:1d:60:9f:44:ae:b8:12:70:32:1a: e5:f5:fc:bb:61:cc:f1:dd:d6:61:d5:ec:e3:cc:f9:91:91:f4: 36:b3:16:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OSjOHhhFBK214yLnCMLZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTU1OTExZDljNzU5MjM2ZmM3NjU1NDM0MmQxYjM1ODM1MzQyMmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bBn1EBPf1nQeBtPst7ciGMJzlW5 wlkzoCHC2L/gVLvGLnb14FZW6AJEfTkPfGIjj/iz/DI+bDAq5iywWjOyzaZ5vkSu cDUWZ+EPJNbJcfOGqpG2cV8kW07QScphCuDSydC79Odb/PfVgfxXakXzp/qeJesr xfb6+zcdVI58acvZMJ0KKwnWo4Nw8FyIVvOnalyu8hJyN0pQNapTRQ1ZV6wRar2k zEjo0Rx+juUPywKyK7uHniiFdjCtbD1aYsHaqUchIukegjlhtybuayZCeQsOnwyP g9M3WIP6AkveRFslLM6Ua0mQT0ksjhZmfxeiqib1xYUPtaJtEOu1slBhIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIlVkR2cdZI2/HZVQ0LRs1g1NCK4MB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvaVZXUkhaeDFramI4ZGxWRFF0R3pXRFUwSXJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowXFMA0G CSqGSIb3DQEBCwUAA4IBAQBRm23HKEo1EA3xtTM54M8319RZQ57zocFpmKT3z8c7 ulnrg/3NYkyVwU6G4fyNaDmD6AvJDLkXiBOgIJzDwrgbzVJzLGZ8ottVi/cdVMSR GnJ30KS4HMKvbh6EGaYFWhE0/LoRGfcChzWgDwN4e7NxPWbjcwoDFrAjN+ky2UMD B6rPFiSc3WTc4CChZMY3Xn4e5WKR8TuJlUP8rHpQu15SpRFhSVRn6drDU5DnO6RJ QNmNRARPyRNFBNBgrmrPd4pDUPkEbGdgIC3APCiYtFI0HV+S1QPc1RxejQm6mZov Ch1gn0SuuBJwMhrl9fy7Yczx3dZh1ezjzPmRkfQ2sxZW -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:46 2026 by rpki-client