This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/q0gjWKh-l7mczqwJ7ZkmPHaiKKA.roa File: q0gjWKh-l7mczqwJ7ZkmPHaiKKA.roa (raw, json) Hash identifier: i9kpFET85k2+CElRpdTULiqr51JG8yAZgoCRd0Mkl6M= Subject key identifier: AB:48:23:58:A8:7E:97:B9:9C:CE:AC:09:ED:99:26:3C:76:A2:28:A0 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E3936DB4EE2077F24A70CE0EBA0C56D Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/q0gjWKh-l7mczqwJ7ZkmPHaiKKA.roa Signing time: Fri 02 Jan 2026 10:20:37 +0000 ROA not before: Fri 02 Jan 2026 10:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207992 IP address blocks: 163.5.121.0/24 maxlen: 24 163.5.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:36:db:4e:e2:07:7f:24:a7:0c:e0:eb:a0:c5:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab482358a87e97b99cceac09ed99263c76a228a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a9:3d:c0:80:aa:ef:15:b4:33:ec:e2:4e:af: 21:1b:3f:a6:0f:a9:31:94:ba:3a:4f:84:4f:72:de: 2b:11:5d:01:8d:48:b3:8b:75:a1:21:b5:27:c1:18: ac:b8:ec:00:5d:27:6a:e7:9f:19:6c:0f:eb:82:80: c6:14:52:a3:e4:da:18:cd:68:5c:28:23:00:6c:31: 48:c5:b4:6c:b4:2c:b5:46:23:11:ab:c6:7d:f5:2d: 05:41:81:83:cd:9c:2b:a8:0f:e3:90:b2:52:31:8b: 62:21:61:5e:25:8a:b9:bf:af:72:d4:01:15:e7:1e: 1e:10:1f:29:04:2f:4a:8c:40:1b:c9:bd:62:7e:6e: c8:2c:f1:0c:0c:39:20:fa:11:54:52:8a:b7:30:27: 3b:d5:e4:3b:da:b9:cb:b4:28:70:2c:a7:6f:d8:9e: 7a:7e:99:96:f5:b3:4f:33:1c:8b:3b:3f:e1:a3:e5: 8a:07:41:3a:ad:aa:ed:d1:2b:a0:96:e1:01:22:30: 17:00:e0:eb:95:ea:b1:3f:c3:8b:d6:1f:68:8c:99: a6:56:b0:21:45:82:22:5b:04:cb:de:b1:8a:dc:88: 62:b4:23:6d:a3:22:35:bf:6c:24:fe:9f:c6:e9:4c: 10:b2:17:96:2b:8d:26:b1:9d:f0:73:43:26:98:65: 60:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:48:23:58:A8:7E:97:B9:9C:CE:AC:09:ED:99:26:3C:76:A2:28:A0 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/q0gjWKh-l7mczqwJ7ZkmPHaiKKA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.121.0/24 163.5.159.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:a6:99:82:88:14:48:a8:74:32:9c:0a:fd:56:a4:10:eb:1e: 3f:91:37:f3:bf:b5:02:1a:78:52:7d:03:43:49:5e:48:b2:86: 12:11:fb:89:9d:d9:84:2a:d3:4e:cd:b5:b9:73:25:b5:59:10: 1e:5e:a6:28:79:8c:da:d5:73:01:a5:3c:25:8c:37:1f:47:d0: b3:5f:49:30:62:24:3d:82:05:78:81:ba:98:74:c9:86:20:b8: b0:1c:d8:15:f5:38:d1:ac:5b:86:4c:43:03:63:80:b0:a0:6b: 7c:5a:f0:f6:19:5b:6b:73:c8:35:39:3f:f2:c8:f7:93:b3:ae: 35:fd:de:eb:a2:3a:2d:ba:da:cd:1e:8d:78:7d:74:72:d8:bd: 40:91:fd:1c:c0:37:71:10:bf:80:d3:d4:ee:25:e4:88:bd:68: c0:b0:59:cb:ba:36:9c:f3:ae:10:b7:8d:30:5d:6a:17:86:c6: f3:05:a2:30:cf:5a:55:84:9e:cd:75:95:1b:b2:04:e5:74:b9: 3d:8a:81:14:75:d8:5e:86:09:a6:af:7a:ca:87:f9:c9:85:a1: 46:c8:07:b7:e8:97:4d:b5:8b:dc:22:10:39:5c:87:ee:4e:bb: 13:72:3a:b7:22:48:c9:51:83:81:4b:cf:54:a3:28:b8:a2:6b: bc:43:f3:57 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OTbbTuIHfySnDODroMVtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjQ4MjM1OGE4N2U5N2I5OWNjZWFjMDllZDk5MjYzYzc2YTIyOGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKk9wICq7xW0M+ziTq8hGz+mD6kx lLo6T4RPct4rEV0BjUizi3WhIbUnwRisuOwAXSdq558ZbA/rgoDGFFKj5NoYzWhc KCMAbDFIxbRstCy1RiMRq8Z99S0FQYGDzZwrqA/jkLJSMYtiIWFeJYq5v69y1AEV 5x4eEB8pBC9KjEAbyb1ifm7ILPEMDDkg+hFUUoq3MCc71eQ72rnLtChwLKdv2J56 fpmW9bNPMxyLOz/ho+WKB0E6rart0SugluEBIjAXAODrleqxP8OL1h9ojJmmVrAh RYIiWwTL3rGK3IhitCNtoyI1v2wk/p/G6UwQsheWK40msZ3wc0MmmGVgrQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKtII1iofpe5nM6sCe2ZJjx2oiigMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvcTBnaldLaC1sN21jenF3Sjdaa21QSGFpS0tBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowV5AwQA owWfMA0GCSqGSIb3DQEBCwUAA4IBAQA+ppmCiBRIqHQynAr9VqQQ6x4/kTfzv7UC GnhSfQNDSV5IsoYSEfuJndmEKtNOzbW5cyW1WRAeXqYoeYza1XMBpTwljDcfR9Cz X0kwYiQ9ggV4gbqYdMmGILiwHNgV9TjRrFuGTEMDY4CwoGt8WvD2GVtrc8g1OT/y yPeTs641/d7rojotutrNHo14fXRy2L1Akf0cwDdxEL+A09TuJeSIvWjAsFnLujac 864Qt40wXWoXhsbzBaIwz1pVhJ7NdZUbsgTldLk9ioEUddhehgmmr3rKh/nJhaFG yAe36JdNtYvcIhA5XIfuTrsTcjq3IkjJUYOBS89Uoyi4omu8Q/NX -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:56 2026 by rpki-client