This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/qpqmSdeO7I15sKLf8z8-AA9t3s4.roa File: qpqmSdeO7I15sKLf8z8-AA9t3s4.roa (raw, json) Hash identifier: blKSXxE7i626G2gik9GNDZczwZn+QWEub8BRNb88mAA= Subject key identifier: AA:9A:A6:49:D7:8E:EC:8D:79:B0:A2:DF:F3:3F:3E:00:0F:6D:DE:CE Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019BD0AF2B32E8B4C35E18A8F5C8267D75AE Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/qpqmSdeO7I15sKLf8z8-AA9t3s4.roa Signing time: Sun 18 Jan 2026 10:38:19 +0000 ROA not before: Sun 18 Jan 2026 10:38:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 163.5.53.0/24 maxlen: 24 163.5.58.0/24 maxlen: 24 163.5.119.0/24 maxlen: 24 163.5.136.0/24 maxlen: 24 163.5.157.0/24 maxlen: 24 163.5.161.0/24 maxlen: 24 163.5.175.0/24 maxlen: 24 163.5.179.0/24 maxlen: 24 163.5.182.0/24 maxlen: 24 163.5.186.0/24 maxlen: 24 163.5.196.0/24 maxlen: 24 163.5.200.0/24 maxlen: 24 163.5.215.0/24 maxlen: 24 163.5.223.0/24 maxlen: 24 163.5.238.0/24 maxlen: 24 163.5.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d0:af:2b:32:e8:b4:c3:5e:18:a8:f5:c8:26:7d:75:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 18 10:38:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa9aa649d78eec8d79b0a2dff33f3e000f6ddece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8d:08:df:ec:b0:43:b8:ce:2a:45:91:2a:ca: 64:94:ef:fb:04:d9:aa:a0:67:d6:8c:4e:28:6e:bb: 5c:3d:37:30:88:b7:59:74:71:f5:31:cb:87:9a:ba: 1f:2d:e4:9f:bb:8b:cf:4c:41:d0:b6:7e:c8:19:d1: 17:77:e9:bf:8b:e5:21:91:34:00:e4:8f:3e:47:cc: 0f:e4:52:d0:4a:11:24:9c:66:15:cf:85:26:db:4d: 86:d1:f2:64:8b:28:69:d6:9c:0b:ff:5c:b7:1d:b4: 4c:3e:6a:8a:7b:f5:e6:59:d2:98:93:c1:d6:f7:93: 03:85:55:e6:a0:f1:e1:09:ff:57:64:85:f3:ab:dc: 9b:a3:e5:0d:20:5f:eb:36:e5:35:7a:f0:c6:6b:27: ad:18:98:04:3a:d6:e3:9f:59:61:19:46:d3:9d:3e: a2:cc:0c:2e:44:06:4f:0f:c1:bd:84:a0:8f:e0:5b: f6:f8:25:7f:e3:ae:ec:68:78:63:a0:78:cd:42:31: 8a:34:fe:53:3e:06:92:8d:b5:b7:f6:ea:2c:34:ce: 5f:5a:40:04:cd:51:c3:aa:1d:07:c8:7d:d4:18:b0: 99:7e:f1:d8:de:cd:c6:14:e7:31:ad:d8:60:ec:af: eb:29:ce:8b:3c:af:d7:e7:20:25:22:1b:4b:d1:31: 33:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:9A:A6:49:D7:8E:EC:8D:79:B0:A2:DF:F3:3F:3E:00:0F:6D:DE:CE X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/qpqmSdeO7I15sKLf8z8-AA9t3s4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.53.0/24 163.5.58.0/24 163.5.119.0/24 163.5.136.0/24 163.5.157.0/24 163.5.161.0/24 163.5.175.0/24 163.5.179.0/24 163.5.182.0/24 163.5.186.0/24 163.5.196.0/24 163.5.200.0/24 163.5.215.0/24 163.5.223.0/24 163.5.238.0/24 163.5.244.0/24 Signature Algorithm: sha256WithRSAEncryption 99:28:c2:0e:c2:23:de:53:56:20:0d:3a:28:0f:f2:b2:84:55: f2:84:f0:d3:b6:ce:e9:0d:0f:26:d8:97:34:70:61:bf:40:ab: fc:e3:fe:67:06:b1:a5:77:e4:b8:5a:09:05:43:56:9a:1f:35: bf:ba:d6:2d:8c:c7:42:df:a4:a3:e7:e0:16:0f:3a:f1:13:eb: b6:f9:69:0d:15:bd:fc:9d:31:90:4e:57:23:3e:d7:26:d2:05: ee:ee:92:f3:9b:6f:61:69:01:65:bb:72:c3:c1:ee:d8:9d:e9: 85:55:94:70:d4:6b:bd:67:b7:62:da:cd:8b:31:d6:31:d4:ff: 4d:a2:45:73:ed:d4:c7:98:64:31:72:43:6e:6f:da:bb:7e:2a: 2c:39:6b:3d:df:49:fa:22:be:b7:67:e4:01:95:66:71:d7:46: 7e:64:10:6c:d0:d7:1b:23:16:e3:d9:f3:63:8f:16:d6:e8:f4: b6:53:d5:87:2d:70:31:43:bb:fe:9c:01:f1:60:ff:be:27:8f: 07:9e:d6:49:20:89:4e:f5:04:71:29:af:15:35:54:19:66:65: 09:a3:85:3b:fd:5e:f7:74:32:71:fc:9d:8f:8f:39:89:1e:13: 65:59:18:6e:91:7d:24:ac:36:86:e4:56:52:85:c1:fd:46:4b: 68:ab:d5:14 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgISAZvQrysy6LTDXhio9cgmfXWuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTE4MTAzODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTlhYTY0OWQ3OGVlYzhkNzliMGEyZGZmMzNmM2UwMDBmNmRkZWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo0I3+ywQ7jOKkWRKspklO/7BNmq oGfWjE4obrtcPTcwiLdZdHH1McuHmrofLeSfu4vPTEHQtn7IGdEXd+m/i+UhkTQA 5I8+R8wP5FLQShEknGYVz4Um202G0fJkiyhp1pwL/1y3HbRMPmqKe/XmWdKYk8HW 95MDhVXmoPHhCf9XZIXzq9ybo+UNIF/rNuU1evDGayetGJgEOtbjn1lhGUbTnT6i zAwuRAZPD8G9hKCP4Fv2+CV/467saHhjoHjNQjGKNP5TPgaSjbW39uosNM5fWkAE zVHDqh0HyH3UGLCZfvHY3s3GFOcxrdhg7K/rKc6LPK/X5yAlIhtL0TEzeQIDAQAB o4ICYzCCAl8wHQYDVR0OBBYEFKqapknXjuyNebCi3/M/PgAPbd7OMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvcXBxbVNkZU83STE1c0tMZjh6OC1BQTl0M3M0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQAowU1AwQA owU6AwQAowV3AwQAowWIAwQAowWdAwQAowWhAwQAowWvAwQAowWzAwQAowW2AwQA owW6AwQAowXEAwQAowXIAwQAowXXAwQAowXfAwQAowXuAwQAowX0MA0GCSqGSIb3 DQEBCwUAA4IBAQCZKMIOwiPeU1YgDTooD/KyhFXyhPDTts7pDQ8m2Jc0cGG/QKv8 4/5nBrGld+S4WgkFQ1aaHzW/utYtjMdC36Sj5+AWDzrxE+u2+WkNFb38nTGQTlcj Ptcm0gXu7pLzm29haQFlu3LDwe7YnemFVZRw1Gu9Z7di2s2LMdYx1P9NokVz7dTH mGQxckNub9q7fiosOWs930n6Ir63Z+QBlWZx10Z+ZBBs0NcbIxbj2fNjjxbW6PS2 U9WHLXAxQ7v+nAHxYP++J48HntZJIIlO9QRxKa8VNVQZZmUJo4U7/V73dDJx/J2P jzmJHhNlWRhukX0krDaG5FZShcH9Rktoq9UU -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:00 2026 by rpki-client