This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kPBleWzKUk6auNmgpnlx49U0DxU.roa File: kPBleWzKUk6auNmgpnlx49U0DxU.roa (raw, json) Hash identifier: SNzI6IdrmTqUmUciVNJwMrbCCV3X5xs+syYhYis7fOQ= Subject key identifier: 90:F0:65:79:6C:CA:52:4E:9A:B8:D9:A0:A6:79:71:E3:D5:34:0F:15 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019AB16A774C3512E0E4C49A7C57CAC1F8D6 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kPBleWzKUk6auNmgpnlx49U0DxU.roa Signing time: Sun 23 Nov 2025 15:52:15 +0000 ROA not before: Sun 23 Nov 2025 15:52:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153786 IP address blocks: 163.5.186.0/24 maxlen: 24 163.5.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 09:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b1:6a:77:4c:35:12:e0:e4:c4:9a:7c:57:ca:c1:f8:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Nov 23 15:52:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=90f065796cca524e9ab8d9a0a67971e3d5340f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:86:5b:c9:1b:59:52:fd:0a:d7:81:be:de:94: 33:59:e1:64:4b:79:61:71:68:ed:67:b3:18:49:77: 06:45:c6:7f:49:86:ce:ac:8a:a0:64:34:73:b7:93: 19:35:e2:a0:89:91:97:8c:36:93:75:77:8e:95:87: 94:c3:ed:16:f2:6b:54:c9:2d:6a:ff:93:bc:0f:45: 27:21:9e:08:63:c5:c2:b8:9b:c6:73:e5:5e:6b:38: ed:49:21:ba:d0:40:ab:19:92:2e:50:c5:0e:93:c5: 13:fd:ec:20:23:be:c6:55:58:9c:f6:dd:7c:50:52: 6d:71:ff:c9:5d:ac:34:1a:7b:97:eb:58:62:99:8f: 40:12:68:7f:5c:1b:e8:e3:25:a0:85:1e:bb:4f:30: 8b:a6:15:1e:1c:9c:77:ff:ea:b8:81:04:4e:2b:3f: ad:7d:36:f3:43:db:e7:55:15:72:a8:5e:9d:4c:2e: cf:6c:43:d5:53:f9:b3:b6:6f:48:55:67:ca:ff:8c: 99:30:85:c8:57:e4:2e:03:8a:57:df:2c:f3:d6:fb: 7f:28:ad:4e:a9:30:6f:bb:53:8c:0c:6f:b6:01:69: 7c:05:a5:d3:1b:35:0b:ba:20:1c:2b:15:ce:97:3b: ce:d8:28:87:d1:61:39:66:50:d1:97:3b:91:58:8c: 19:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F0:65:79:6C:CA:52:4E:9A:B8:D9:A0:A6:79:71:E3:D5:34:0F:15 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kPBleWzKUk6auNmgpnlx49U0DxU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.186.0/24 163.5.209.0/24 Signature Algorithm: sha256WithRSAEncryption 95:ee:b2:c0:c5:61:17:95:c9:60:d1:1e:5c:43:91:1f:19:3f: 97:54:be:6d:bd:17:0c:b3:ca:1d:ca:f8:f4:90:7e:f2:d5:28: 08:9c:16:45:81:23:5b:06:8a:81:9c:2c:6e:22:00:46:1c:f5: c6:a8:01:ac:9e:a1:1a:1b:44:83:65:e9:0c:d3:a5:fc:a0:5e: 57:87:52:34:97:b4:72:1f:65:88:9a:8e:1b:03:8e:bb:0f:3f: cc:7d:8e:ba:83:92:40:8b:c5:5f:f7:96:55:da:02:24:d3:f6: 48:d0:fd:a8:16:18:14:92:1b:17:20:17:e2:70:c2:7e:c6:fa: df:a8:83:fd:44:48:43:db:29:5d:2d:b8:d1:29:37:22:ba:41: 18:84:6a:22:2b:4b:d2:e0:96:db:92:6c:0b:17:d8:f0:b6:0e: 50:b0:2c:da:34:0f:ed:a5:83:af:a1:af:94:7e:bd:e4:f9:7c: 5f:47:c2:87:60:98:98:65:d0:9d:99:27:3d:3b:61:b4:f5:c6: cb:b0:46:3d:d5:84:da:ae:21:d7:c0:5e:bb:2b:90:98:b2:89: 83:4a:b1:39:4a:f1:40:ed:98:e7:8c:13:4d:ff:05:55:67:2e: ac:d6:fb:5f:2f:b5:d9:dc:d0:ab:7a:8d:d8:ea:6d:6e:23:95: 2f:da:cc:d1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqxandMNRLg5MSafFfKwfjWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMTIzMTU1MjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGYwNjU3OTZjY2E1MjRlOWFiOGQ5YTBhNjc5NzFlM2Q1MzQwZjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYZbyRtZUv0K14G+3pQzWeFkS3lh cWjtZ7MYSXcGRcZ/SYbOrIqgZDRzt5MZNeKgiZGXjDaTdXeOlYeUw+0W8mtUyS1q /5O8D0UnIZ4IY8XCuJvGc+VeazjtSSG60ECrGZIuUMUOk8UT/ewgI77GVVic9t18 UFJtcf/JXaw0GnuX61himY9AEmh/XBvo4yWghR67TzCLphUeHJx3/+q4gQROKz+t fTbzQ9vnVRVyqF6dTC7PbEPVU/mztm9IVWfK/4yZMIXIV+QuA4pX3yzz1vt/KK1O qTBvu1OMDG+2AWl8BaXTGzULuiAcKxXOlzvO2CiH0WE5ZlDRlzuRWIwZ6QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJDwZXlsylJOmrjZoKZ5cePVNA8VMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEva1BCbGVXektVazZhdU5tZ3BubHg0OVUwRHhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowW6AwQA owXRMA0GCSqGSIb3DQEBCwUAA4IBAQCV7rLAxWEXlclg0R5cQ5EfGT+XVL5tvRcM s8odyvj0kH7y1SgInBZFgSNbBoqBnCxuIgBGHPXGqAGsnqEaG0SDZekM06X8oF5X h1I0l7RyH2WImo4bA467Dz/MfY66g5JAi8Vf95ZV2gIk0/ZI0P2oFhgUkhsXIBfi cMJ+xvrfqIP9REhD2yldLbjRKTciukEYhGoiK0vS4JbbkmwLF9jwtg5QsCzaNA/t pYOvoa+Ufr3k+XxfR8KHYJiYZdCdmSc9O2G09cbLsEY91YTariHXwF67K5CYsomD SrE5SvFA7ZjnjBNN/wVVZy6s1vtfL7XZ3NCreo3Y6m1uI5Uv2szR -----END CERTIFICATE-----Generated at Fri Dec 5 13:58:07 2025 by rpki-client