This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jpYkYHRsP-F6MyuuroXiDe9pAqY.roa File: jpYkYHRsP-F6MyuuroXiDe9pAqY.roa (raw, json) Hash identifier: vur/7B5jY6PuxKBUWwDkDalI8zlTpyQoWHGnuNdzuQ0= Subject key identifier: 8E:96:24:60:74:6C:3F:E1:7A:33:2B:AE:AE:85:E2:0D:EF:69:02:A6 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E392961B5E1ED25B824FCC2205F2CD1 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jpYkYHRsP-F6MyuuroXiDe9pAqY.roa Signing time: Fri 02 Jan 2026 10:20:33 +0000 ROA not before: Fri 02 Jan 2026 10:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 163.5.34.0/24 maxlen: 24 163.5.39.0/24 maxlen: 24 163.5.60.0/24 maxlen: 24 163.5.88.0/24 maxlen: 24 163.5.90.0/24 maxlen: 24 163.5.93.0/24 maxlen: 24 163.5.100.0/24 maxlen: 24 163.5.101.0/24 maxlen: 24 163.5.108.0/24 maxlen: 24 163.5.114.0/24 maxlen: 24 163.5.116.0/24 maxlen: 24 163.5.117.0/24 maxlen: 24 163.5.130.0/24 maxlen: 24 163.5.147.0/24 maxlen: 24 163.5.174.0/24 maxlen: 24 163.5.189.0/24 maxlen: 24 163.5.192.0/24 maxlen: 24 163.5.225.0/24 maxlen: 24 163.5.226.0/24 maxlen: 24 163.5.227.0/24 maxlen: 24 163.5.228.0/24 maxlen: 24 163.5.240.0/24 maxlen: 24 163.5.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:29:61:b5:e1:ed:25:b8:24:fc:c2:20:5f:2c:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e962460746c3fe17a332baeae85e20def6902a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:00:14:b9:be:fd:2a:a0:e5:00:1e:00:69:cd: 40:c9:9a:cb:0f:6e:21:46:02:f8:02:2b:8c:b1:0e: 0a:38:7b:4e:41:db:51:8f:4b:bf:51:f1:c7:00:e4: 72:3c:d8:ed:cb:20:a6:6e:53:90:c1:c5:16:f7:8b: 12:f1:91:37:b1:55:07:9e:0c:5f:41:3c:0f:a6:db: 7c:f4:15:28:fa:51:61:a4:c5:11:37:a6:e6:be:99: 21:5d:ed:31:17:ff:20:05:02:a9:38:97:8b:43:e9: 4d:9a:6c:59:49:00:85:69:87:1d:e2:71:29:bf:37: ce:32:69:e9:fc:e4:3a:9b:06:9e:82:89:20:49:bc: ed:8a:8f:9e:3a:20:d5:7b:30:4d:e1:38:6a:3b:ca: a8:76:a8:6e:e9:b7:9b:63:84:5c:b2:a0:ac:18:25: b9:df:40:c4:ea:75:21:13:60:82:29:22:c1:df:6b: df:e2:29:9c:a1:3a:2c:b1:22:57:b7:bb:a7:42:4c: 77:bb:a7:58:00:78:ed:7d:db:84:e6:43:e0:6f:93: 92:4e:53:b5:d6:e9:a7:55:e2:85:4e:c2:61:5c:53: ea:8f:c7:01:6f:df:07:21:9d:07:12:6c:10:32:4a: 2a:cd:b4:cf:30:f7:02:b9:9e:f2:7e:3d:89:8a:32: f7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:96:24:60:74:6C:3F:E1:7A:33:2B:AE:AE:85:E2:0D:EF:69:02:A6 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jpYkYHRsP-F6MyuuroXiDe9pAqY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.34.0/24 163.5.39.0/24 163.5.60.0/24 163.5.88.0/24 163.5.90.0/24 163.5.93.0/24 163.5.100.0/23 163.5.108.0/24 163.5.114.0/24 163.5.116.0/23 163.5.130.0/24 163.5.147.0/24 163.5.174.0/24 163.5.189.0/24 163.5.192.0/24 163.5.225.0-163.5.228.255 163.5.240.0/24 163.5.243.0/24 Signature Algorithm: sha256WithRSAEncryption 73:29:30:03:f7:4c:b3:96:34:f1:73:8b:a4:13:ca:94:8e:4a: f9:03:17:a1:64:c8:5f:96:45:60:ad:5f:85:b5:02:63:45:bc: 5f:9e:7e:7c:83:d8:91:6f:64:4d:0f:1e:e1:a7:22:ee:57:b4: 3c:5f:5b:b7:78:7b:18:1f:c6:f8:52:77:47:a3:74:87:36:2d: b3:58:9c:ca:b0:27:6d:7f:0b:30:f5:29:56:53:09:fc:57:2e: 3d:8b:04:bc:61:0f:3a:ce:28:17:68:1d:14:70:84:2a:58:35: a9:5e:3c:bd:c6:cc:63:5b:6d:cc:ee:cf:35:06:24:95:4f:c8: b4:66:06:55:c8:54:0d:c0:e1:d4:3e:5c:4a:1c:8c:6a:65:8b: 0b:b1:07:af:e8:69:1d:b6:af:71:a5:ef:49:41:a6:2e:3d:b6: 5d:b8:76:5f:87:26:21:2f:62:59:af:41:9a:ab:d5:ad:c6:3c: ae:eb:c9:9c:a3:ac:5f:f2:32:58:83:23:6b:82:b7:9e:68:da: 92:d0:74:2c:36:32:ad:d8:1e:32:8c:94:ed:12:05:bf:43:8e: 3b:b0:73:f0:2f:b6:ee:e2:88:63:01:4c:ae:47:12:e2:35:1d: a7:96:f1:d1:63:d1:ed:03:af:2f:39:12:94:37:ee:07:7c:01: 38:83:89:0f -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgISAZt+OSlhteHtJbgk/MIgXyzRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTk2MjQ2MDc0NmMzZmUxN2EzMzJiYWVhZTg1ZTIwZGVmNjkwMmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgAUub79KqDlAB4Aac1AyZrLD24h RgL4AiuMsQ4KOHtOQdtRj0u/UfHHAORyPNjtyyCmblOQwcUW94sS8ZE3sVUHngxf QTwPptt89BUo+lFhpMURN6bmvpkhXe0xF/8gBQKpOJeLQ+lNmmxZSQCFaYcd4nEp vzfOMmnp/OQ6mwaegokgSbztio+eOiDVezBN4ThqO8qodqhu6bebY4RcsqCsGCW5 30DE6nUhE2CCKSLB32vf4imcoTossSJXt7unQkx3u6dYAHjtfduE5kPgb5OSTlO1 1umnVeKFTsJhXFPqj8cBb98HIZ0HEmwQMkoqzbTPMPcCuZ7yfj2JijL3TwIDAQAB o4ICeDCCAnQwHQYDVR0OBBYEFI6WJGB0bD/hejMrrq6F4g3vaQKmMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvanBZa1lIUnNQLUY2TXl1dXJvWGlEZTlwQXFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEAKMFIgME AKMFJwMEAKMFPAMEAKMFWAMEAKMFWgMEAKMFXQMEAaMFZAMEAKMFbAMEAKMFcgME AaMFdAMEAKMFggMEAKMFkwMEAKMFrgMEAKMFvQMEAKMFwDAMAwQAowXhAwQAowXk AwQAowXwAwQAowXzMA0GCSqGSIb3DQEBCwUAA4IBAQBzKTAD90yzljTxc4ukE8qU jkr5AxehZMhflkVgrV+FtQJjRbxfnn58g9iRb2RNDx7hpyLuV7Q8X1u3eHsYH8b4 UndHo3SHNi2zWJzKsCdtfwsw9SlWUwn8Vy49iwS8YQ86zigXaB0UcIQqWDWpXjy9 xsxjW23M7s81BiSVT8i0ZgZVyFQNwOHUPlxKHIxqZYsLsQev6Gkdtq9xpe9JQaYu PbZduHZfhyYhL2JZr0Gaq9Wtxjyu68mco6xf8jJYgyNrgreeaNqS0HQsNjKt2B4y jJTtEgW/Q447sHPwL7bu4ohjAUyuRxLiNR2nlvHRY9HtA68vORKUN+4HfAE4g4kP -----END CERTIFICATE-----Generated at Thu Jan 8 12:58:20 2026 by rpki-client