This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kibE2Ut1Lu1c-0dE6CmHZQjZFVs.roa File: kibE2Ut1Lu1c-0dE6CmHZQjZFVs.roa (raw, json) Hash identifier: InP1q792KU0ZxuvCaKosUbZzah1Ed/XkWmutxHX1P0A= Subject key identifier: 92:26:C4:D9:4B:75:2E:ED:5C:FB:47:44:E8:29:87:65:08:D9:15:5B Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E39395045FF783A7D864B7C35C6722F Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kibE2Ut1Lu1c-0dE6CmHZQjZFVs.roa Signing time: Fri 02 Jan 2026 10:20:38 +0000 ROA not before: Fri 02 Jan 2026 10:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211373 IP address blocks: 163.5.103.0/24 maxlen: 24 163.5.152.0/24 maxlen: 24 163.5.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 04:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:39:50:45:ff:78:3a:7d:86:4b:7c:35:c6:72:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9226c4d94b752eed5cfb4744e829876508d9155b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cd:c6:4e:70:86:06:c8:35:31:cb:3b:02:60: 3c:c9:01:8f:79:de:37:8a:20:57:7e:7b:bb:7d:ba: 66:16:9f:8d:49:78:ff:09:db:b7:a9:af:dc:cb:15: 08:cb:57:0a:4e:45:9e:37:df:7d:98:b3:eb:88:78: dd:9e:9b:7d:83:54:78:7c:d7:d9:2a:7f:1e:31:7f: a6:f9:61:ae:92:d2:48:f0:1a:45:31:d3:24:aa:1c: 00:3d:cf:a0:2a:4b:35:25:c7:d1:84:e8:25:32:d2: bc:a9:6f:25:d2:95:90:a8:3b:4f:fd:12:2c:d4:1a: 91:e7:5b:e2:8d:2c:20:71:af:d1:27:85:2f:95:40: f2:e9:8a:fe:72:41:94:8d:5f:ff:0f:87:5f:c1:de: e7:f4:38:b0:6a:5c:b9:c5:37:a4:f5:eb:32:1d:b7: dd:f3:39:c6:3e:86:f1:7b:db:66:a1:29:c4:1b:28: 43:e3:8c:ca:9d:79:6b:94:39:72:91:5c:45:ed:24: 64:25:81:e2:c0:7a:e1:7f:f4:5b:2a:b1:75:69:69: 5f:d9:ce:ad:14:e5:5c:f7:a1:76:38:a3:90:f2:c2: c8:83:ce:ed:6d:20:03:93:9d:ab:af:d8:f7:51:bf: 78:f7:ae:6a:83:8c:1f:d0:2a:ee:35:ba:93:99:b8: 9b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:26:C4:D9:4B:75:2E:ED:5C:FB:47:44:E8:29:87:65:08:D9:15:5B X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kibE2Ut1Lu1c-0dE6CmHZQjZFVs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.103.0/24 163.5.152.0/24 163.5.185.0/24 Signature Algorithm: sha256WithRSAEncryption 37:dd:a9:26:8b:9b:d4:a7:7e:18:f1:37:07:3b:39:4c:48:c8: 7a:d6:df:95:3e:2f:4f:a6:c1:ee:f4:f4:a6:e0:37:7b:0a:bf: df:f3:7d:09:f3:8e:de:62:65:5d:1a:7b:7d:7a:7d:8c:2f:17: 1d:19:ba:eb:0d:57:0e:3c:71:d9:51:2f:34:c2:7d:52:10:79: 5f:a4:06:30:7c:5c:3f:1f:97:ab:96:1f:e8:b5:32:ec:ea:03: 39:36:20:90:1d:02:87:42:68:36:06:46:23:54:ed:34:4d:38: 74:1f:9b:70:e9:a8:40:e3:57:1d:c2:e4:77:c7:1d:ba:37:bf: 65:98:79:f8:e7:a9:d6:36:fc:3f:1a:d9:81:8c:0d:a5:3b:de: a6:78:bc:fb:67:ce:02:b5:cb:27:62:b6:3e:03:e2:e0:69:61: 95:f7:5f:19:01:5b:57:0f:fa:91:78:93:4c:e0:82:f9:81:c8: 2e:84:43:49:1f:78:42:8e:f0:c7:b7:c8:e4:e9:cf:ee:06:19: 42:da:31:b4:a8:ad:88:b3:bb:fc:e5:cb:7f:3d:ab:a6:0f:12: 44:2f:d9:08:55:8d:44:1f:70:87:79:fa:0a:d0:59:23:95:d6: 1c:19:0c:00:7e:39:f0:da:e2:12:23:a3:12:84:65:60:8d:e7: 14:cd:d0:ee -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OTlQRf94On2GS3w1xnIvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjI2YzRkOTRiNzUyZWVkNWNmYjQ3NDRlODI5ODc2NTA4ZDkxNTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss3GTnCGBsg1Mcs7AmA8yQGPed43 iiBXfnu7fbpmFp+NSXj/Cdu3qa/cyxUIy1cKTkWeN999mLPriHjdnpt9g1R4fNfZ Kn8eMX+m+WGuktJI8BpFMdMkqhwAPc+gKks1JcfRhOglMtK8qW8l0pWQqDtP/RIs 1BqR51vijSwgca/RJ4UvlUDy6Yr+ckGUjV//D4dfwd7n9Diwaly5xTek9esyHbfd 8znGPobxe9tmoSnEGyhD44zKnXlrlDlykVxF7SRkJYHiwHrhf/RbKrF1aWlf2c6t FOVc96F2OKOQ8sLIg87tbSADk52rr9j3Ub94965qg4wf0CruNbqTmbibQQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJImxNlLdS7tXPtHROgph2UI2RVbMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEva2liRTJVdDFMdTFjLTBkRTZDbUhaUWpaRlZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAowVnAwQA owWYAwQAowW5MA0GCSqGSIb3DQEBCwUAA4IBAQA33akmi5vUp34Y8TcHOzlMSMh6 1t+VPi9PpsHu9PSm4Dd7Cr/f830J847eYmVdGnt9en2MLxcdGbrrDVcOPHHZUS80 wn1SEHlfpAYwfFw/H5erlh/otTLs6gM5NiCQHQKHQmg2BkYjVO00TTh0H5tw6ahA 41cdwuR3xx26N79lmHn456nWNvw/GtmBjA2lO96meLz7Z84CtcsnYrY+A+LgaWGV 918ZAVtXD/qReJNM4IL5gcguhENJH3hCjvDHt8jk6c/uBhlC2jG0qK2Is7v85ct/ PaumDxJEL9kIVY1EH3CHefoK0FkjldYcGQwAfjnw2uISI6MShGVgjecUzdDu -----END CERTIFICATE-----Generated at Mon Jan 19 10:55:57 2026 by rpki-client