This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/oVDZ5SSCVtacNIMFfqkhhor8O1I.roa File: oVDZ5SSCVtacNIMFfqkhhor8O1I.roa (raw, json) Hash identifier: uFCE5mpzLxD8PRWRlZM8SU1YeScwtfW2Rd7hBXAutZo= Subject key identifier: A1:50:D9:E5:24:82:56:D6:9C:34:83:05:7E:A9:21:86:8A:FC:3B:52 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019AA0197BD6BB154D394B0AF611975C656E Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/oVDZ5SSCVtacNIMFfqkhhor8O1I.roa Signing time: Thu 20 Nov 2025 07:10:15 +0000 ROA not before: Thu 20 Nov 2025 07:10:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215727 IP address blocks: 163.5.123.0/24 maxlen: 24 163.5.131.0/24 maxlen: 24 163.5.192.0/24 maxlen: 24 163.5.193.0/24 maxlen: 24 163.5.195.0/24 maxlen: 24 163.5.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 09:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:19:7b:d6:bb:15:4d:39:4b:0a:f6:11:97:5c:65:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Nov 20 07:10:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a150d9e5248256d69c3483057ea921868afc3b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1f:aa:24:57:74:02:36:86:5d:4f:7f:a8:62: 50:7b:8e:f3:d3:b1:72:49:d5:4c:d7:70:43:51:cf: 16:bd:04:04:b9:0d:12:21:2d:44:28:a0:7d:58:b1: fd:ab:e0:05:41:a8:6f:9a:95:4d:52:90:75:32:83: ba:de:51:19:d4:ce:ae:d1:58:ae:dd:2d:94:40:63: 75:c6:be:42:2b:ab:a0:50:7d:69:af:09:bf:d4:0f: c9:38:53:fe:5c:82:4e:78:e9:79:1a:9a:e2:8c:ae: 19:6d:e6:d5:05:79:5f:0c:1e:dc:26:54:fb:ef:25: 11:81:81:32:df:18:51:e0:e3:c6:2c:49:4a:4b:6c: 4d:ef:f5:3e:2e:56:dc:5c:62:63:71:5d:b4:2d:05: 27:71:1e:d5:10:8c:ae:fe:8e:ea:51:f7:bc:5d:8e: b9:69:f3:5e:b9:a3:35:d6:56:06:19:9b:09:14:d9: 1c:53:46:65:fe:f4:2a:8a:aa:ff:63:9f:1d:29:b6: c8:3b:a1:d0:d3:0d:61:a8:92:0e:06:8a:3a:ac:c0: ec:d4:06:05:d5:c2:47:c0:22:68:e9:8e:f0:20:a8: 88:5b:f7:2a:2e:cb:ea:14:e9:28:32:39:7a:76:5f: 10:85:92:f8:16:92:48:c0:f0:6a:0c:f9:43:76:07: 89:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:50:D9:E5:24:82:56:D6:9C:34:83:05:7E:A9:21:86:8A:FC:3B:52 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/oVDZ5SSCVtacNIMFfqkhhor8O1I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.123.0/24 163.5.131.0/24 163.5.192.0/23 163.5.195.0/24 163.5.213.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:62:73:f4:53:86:90:c1:85:77:a5:e3:79:27:6c:f7:8c:b3: c7:f5:4d:23:8b:f2:44:d6:cf:0d:25:6b:fc:c5:f5:5c:6d:a8: 71:a5:d7:05:31:2f:c5:0e:6d:0d:12:1a:a6:1f:89:91:a9:77: b6:77:29:bd:4e:67:74:c3:9c:69:ce:d0:ba:ac:0b:18:48:6c: 17:07:6a:e1:1a:33:b8:6e:8e:5d:e1:69:71:0c:81:4b:0a:15: 60:b5:2c:05:21:ca:7c:ab:ae:df:25:af:31:93:cc:d2:c1:d8: ed:2e:0f:bb:a1:fa:a7:3d:be:db:72:95:8d:df:f6:3a:05:3b: b0:05:f1:7c:98:82:12:fd:09:60:70:1e:73:2e:8e:08:c5:a2: 0e:3a:b5:95:56:cf:85:43:11:05:39:45:3e:f8:5c:02:b3:90: 89:be:f2:70:f6:ee:34:c6:df:ea:7e:b4:f9:b5:c6:b7:c6:95: dd:ac:62:da:b2:1d:9d:de:b4:65:b1:d5:b2:c6:a8:2d:c3:0d: 7b:63:71:30:be:eb:77:57:f4:18:f6:8c:98:76:92:ba:40:7f: 7a:66:6b:97:b4:da:2c:8d:41:4f:d8:ed:48:73:d3:a5:88:ad: c2:7e:a3:16:74:1b:38:38:40:e9:9f:51:6b:86:be:fa:bc:6f: 7b:12:d6:4c -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZqgGXvWuxVNOUsK9hGXXGVuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMTIwMDcxMDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTUwZDllNTI0ODI1NmQ2OWMzNDgzMDU3ZWE5MjE4NjhhZmMzYjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4h+qJFd0AjaGXU9/qGJQe47z07Fy SdVM13BDUc8WvQQEuQ0SIS1EKKB9WLH9q+AFQahvmpVNUpB1MoO63lEZ1M6u0Viu 3S2UQGN1xr5CK6ugUH1prwm/1A/JOFP+XIJOeOl5GprijK4ZbebVBXlfDB7cJlT7 7yURgYEy3xhR4OPGLElKS2xN7/U+LlbcXGJjcV20LQUncR7VEIyu/o7qUfe8XY65 afNeuaM11lYGGZsJFNkcU0Zl/vQqiqr/Y58dKbbIO6HQ0w1hqJIOBoo6rMDs1AYF 1cJHwCJo6Y7wIKiIW/cqLsvqFOkoMjl6dl8QhZL4FpJIwPBqDPlDdgeJEQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFKFQ2eUkglbWnDSDBX6pIYaK/DtSMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvb1ZEWjVTU0NWdGFjTklNRmZxa2hob3I4TzFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAowV7AwQA owWDAwQBowXAAwQAowXDAwQAowXVMA0GCSqGSIb3DQEBCwUAA4IBAQBPYnP0U4aQ wYV3peN5J2z3jLPH9U0ji/JE1s8NJWv8xfVcbahxpdcFMS/FDm0NEhqmH4mRqXe2 dym9Tmd0w5xpztC6rAsYSGwXB2rhGjO4bo5d4WlxDIFLChVgtSwFIcp8q67fJa8x k8zSwdjtLg+7ofqnPb7bcpWN3/Y6BTuwBfF8mIIS/QlgcB5zLo4IxaIOOrWVVs+F QxEFOUU++FwCs5CJvvJw9u40xt/qfrT5tca3xpXdrGLash2d3rRlsdWyxqgtww17 Y3Ewvut3V/QY9oyYdpK6QH96ZmuXtNosjUFP2O1Ic9OliK3CfqMWdBs4OEDpn1Fr hr76vG97EtZM -----END CERTIFICATE-----Generated at Fri Dec 5 13:57:55 2025 by rpki-client