This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jhyhcb7fNli9Ydf7USMVW0p8jdQ.roa File: jhyhcb7fNli9Ydf7USMVW0p8jdQ.roa (raw, json) Hash identifier: pg6/ftb27s7i08vKYxDSnhT2scB2ofZykenEb2cJcrI= Subject key identifier: 8E:1C:A1:71:BE:DF:36:58:BD:61:D7:FB:51:23:15:5B:4A:7C:8D:D4 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E39255E6E484770782CA6019B97014E Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jhyhcb7fNli9Ydf7USMVW0p8jdQ.roa Signing time: Fri 02 Jan 2026 10:20:32 +0000 ROA not before: Fri 02 Jan 2026 10:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56339 IP address blocks: 163.5.0.0/24 maxlen: 24 163.5.2.0/24 maxlen: 24 163.5.3.0/24 maxlen: 24 163.5.4.0/24 maxlen: 24 163.5.6.0/24 maxlen: 24 163.5.10.0/24 maxlen: 24 163.5.11.0/24 maxlen: 24 163.5.20.0/24 maxlen: 24 163.5.21.0/24 maxlen: 24 163.5.23.0/24 maxlen: 24 163.5.24.0/24 maxlen: 24 163.5.42.0/24 maxlen: 24 163.5.45.0/24 maxlen: 24 163.5.48.0/24 maxlen: 24 163.5.50.0/24 maxlen: 24 163.5.52.0/24 maxlen: 24 163.5.55.0/24 maxlen: 24 163.5.57.0/24 maxlen: 24 163.5.68.0/24 maxlen: 24 163.5.69.0/24 maxlen: 24 163.5.80.0/24 maxlen: 24 163.5.81.0/24 maxlen: 24 163.5.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:25:5e:6e:48:47:70:78:2c:a6:01:9b:97:01:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e1ca171bedf3658bd61d7fb5123155b4a7c8dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e0:4d:6d:b8:ba:14:d5:67:29:c9:f0:9c:73: c7:52:d1:c0:90:dc:a2:5a:7a:9a:05:84:59:55:6d: 74:e2:38:32:6f:9c:67:20:50:07:94:3e:d5:a1:45: a8:54:0c:20:4d:f0:21:88:7e:8a:a4:07:2f:0b:ec: dd:87:60:da:93:c2:f6:ed:af:72:17:21:74:33:48: 56:a8:2e:f0:e4:ac:2c:da:7e:69:25:97:9a:55:b6: 4c:1b:3d:f3:b7:e2:03:63:c6:54:ef:e9:a0:fe:4f: 8e:19:71:4c:c5:d8:73:ee:6f:6a:99:6c:9d:68:09: c4:0d:24:92:97:47:2e:70:0b:c3:47:6c:be:e6:8b: f5:47:bc:03:77:7f:c1:ee:10:d8:81:ee:d1:ee:06: 17:d1:43:78:d3:05:ff:d3:d0:ce:8d:8d:f4:d2:30: 17:76:dd:0d:be:a4:39:6b:7b:53:53:7f:5d:9f:be: ad:65:8a:36:98:27:e6:2b:59:62:04:4c:fd:7c:6c: 58:60:54:53:f0:c1:1a:6e:6d:c2:90:cc:34:a9:57: 75:7e:a7:03:59:a7:a8:14:f8:71:96:7d:ef:0c:08: 9f:4e:b2:d1:a9:6d:4e:cf:30:7d:0f:14:a3:c5:81: ce:fd:23:4f:e5:f4:c4:ac:79:bf:9b:f4:97:bd:4a: 39:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1C:A1:71:BE:DF:36:58:BD:61:D7:FB:51:23:15:5B:4A:7C:8D:D4 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jhyhcb7fNli9Ydf7USMVW0p8jdQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.0.0/24 163.5.2.0-163.5.4.255 163.5.6.0/24 163.5.10.0/23 163.5.20.0/23 163.5.23.0-163.5.24.255 163.5.42.0/24 163.5.45.0/24 163.5.48.0/24 163.5.50.0/24 163.5.52.0/24 163.5.55.0/24 163.5.57.0/24 163.5.68.0/23 163.5.80.0/23 163.5.85.0/24 Signature Algorithm: sha256WithRSAEncryption 12:b8:72:63:84:01:04:54:7f:a0:29:49:38:81:20:f4:cc:90: 7f:fc:78:5a:be:fe:c5:1d:74:9b:93:c8:57:52:c3:04:65:0d: d7:ac:6d:69:31:c5:42:02:95:61:2f:55:de:e4:2e:c1:97:4e: 82:c1:65:d3:a9:2b:7f:d2:40:23:a2:86:55:0c:b9:27:6c:e5: bd:60:5a:9c:fb:d5:e4:37:4f:2e:97:ed:a7:b0:8a:c0:56:40: 07:95:f3:4c:0e:fb:bc:7b:2f:6b:e0:43:70:00:64:9d:ac:d4: 7f:01:c9:5d:47:b8:74:3f:f3:a4:ab:8e:cb:e5:14:76:49:de: 35:0d:06:f7:f5:30:9e:56:97:25:12:ae:2e:4c:a3:4b:0e:25: f1:e3:e9:12:d6:69:83:09:fd:bb:44:e4:d4:c5:2a:dc:1b:75: 2f:61:83:38:aa:bf:c0:6a:fc:f9:e9:b9:95:1c:23:e0:61:66: 27:70:57:a6:6b:c8:48:e8:63:28:93:2b:1b:ed:b4:a5:c0:ed: 84:3d:1c:ac:fd:61:52:00:42:c1:80:ab:c2:87:8d:69:4f:9d: 9f:a2:48:82:9b:71:68:95:3f:a4:71:ac:12:34:49:91:0b:67: a5:1a:c6:35:17:de:17:16:ca:5e:fa:1a:46:52:e9:2b:61:e9: e5:63:5a:69 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgISAZt+OSVebkhHcHgspgGblwFOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTFjYTE3MWJlZGYzNjU4YmQ2MWQ3ZmI1MTIzMTU1YjRhN2M4ZGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+BNbbi6FNVnKcnwnHPHUtHAkNyi WnqaBYRZVW104jgyb5xnIFAHlD7VoUWoVAwgTfAhiH6KpAcvC+zdh2Dak8L27a9y FyF0M0hWqC7w5Kws2n5pJZeaVbZMGz3zt+IDY8ZU7+mg/k+OGXFMxdhz7m9qmWyd aAnEDSSSl0cucAvDR2y+5ov1R7wDd3/B7hDYge7R7gYX0UN40wX/09DOjY300jAX dt0NvqQ5a3tTU39dn76tZYo2mCfmK1liBEz9fGxYYFRT8MEabm3CkMw0qVd1fqcD WaeoFPhxln3vDAifTrLRqW1OzzB9DxSjxYHO/SNP5fTErHm/m/SXvUo5TwIDAQAB o4ICdDCCAnAwHQYDVR0OBBYEFI4coXG+3zZYvWHX+1EjFVtKfI3UMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvamh5aGNiN2ZObGk5WWRmN1VTTVZXMHA4amRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGJBggrBgEFBQcBBwEB/wR6MHgwdgQCAAEwcAMEAKMFADAM AwQBowUCAwQAowUEAwQAowUGAwQBowUKAwQBowUUMAwDBACjBRcDBACjBRgDBACj BSoDBACjBS0DBACjBTADBACjBTIDBACjBTQDBACjBTcDBACjBTkDBAGjBUQDBAGj BVADBACjBVUwDQYJKoZIhvcNAQELBQADggEBABK4cmOEAQRUf6ApSTiBIPTMkH/8 eFq+/sUddJuTyFdSwwRlDdesbWkxxUIClWEvVd7kLsGXToLBZdOpK3/SQCOihlUM uSds5b1gWpz71eQ3Ty6X7aewisBWQAeV80wO+7x7L2vgQ3AAZJ2s1H8ByV1HuHQ/ 86SrjsvlFHZJ3jUNBvf1MJ5WlyUSri5Mo0sOJfHj6RLWaYMJ/btE5NTFKtwbdS9h gziqv8Bq/PnpuZUcI+BhZidwV6ZryEjoYyiTKxvttKXA7YQ9HKz9YVIAQsGAq8KH jWlPnZ+iSIKbcWiVP6RxrBI0SZELZ6UaxjUX3hcWyl76GkZS6Sth6eVjWmk= -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:18 2026 by rpki-client