This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/r8L0QA1C5vDf1HLLLXDpqCMWR8w.roa File: r8L0QA1C5vDf1HLLLXDpqCMWR8w.roa (raw, json) Hash identifier: Uj8a+/8235Vwxq4xz/8lCBglSS+qpTHXFPiLV3pJiFA= Subject key identifier: AF:C2:F4:40:0D:42:E6:F0:DF:D4:72:CB:2D:70:E9:A8:23:16:47:CC Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019AA6C5DDC6A74342FBF77CB1483EE83705 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/r8L0QA1C5vDf1HLLLXDpqCMWR8w.roa Signing time: Fri 21 Nov 2025 14:16:16 +0000 ROA not before: Fri 21 Nov 2025 14:16:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205886 IP address blocks: 163.5.157.0/24 maxlen: 24 163.5.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 09:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:c5:dd:c6:a7:43:42:fb:f7:7c:b1:48:3e:e8:37:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Nov 21 14:16:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=afc2f4400d42e6f0dfd472cb2d70e9a8231647cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5a:e9:d9:b1:92:14:41:65:fb:de:c6:ee:58: a4:a9:38:0e:d6:f1:52:51:8e:b7:6d:3b:8e:65:ff: c3:b3:3e:11:ab:4f:08:1d:a5:eb:62:7b:e6:78:1a: f8:e2:c5:74:52:8f:80:61:d9:88:9d:b7:f8:07:95: ba:d5:83:55:4f:41:37:2e:1c:e3:e4:ac:26:fc:3f: c2:73:21:6d:c3:37:7d:ee:0b:50:ac:01:a1:2b:81: 11:fe:67:24:55:e6:8b:15:0b:30:2c:bc:cc:59:99: fd:7c:c2:dd:7e:24:20:71:9c:35:4c:85:78:cf:55: f4:3d:18:4f:05:8f:9c:85:ac:fc:b2:72:02:d2:ab: 95:69:75:8b:6d:6b:56:bc:eb:79:70:f1:4b:2d:0e: f4:87:5e:34:fe:f9:0f:6f:45:cd:13:d7:c6:e6:c9: cf:28:e4:6e:9f:0c:5f:8f:09:5d:72:e6:85:68:0f: 07:ce:2d:16:1a:72:c9:64:09:4e:97:b5:5e:5f:a1: 39:b6:1d:f7:64:97:60:30:20:5f:77:32:a2:72:41: 75:ee:09:75:3c:d5:63:94:b2:a8:73:8c:27:4f:d6: f7:c0:3b:ef:37:94:cc:3f:d2:2b:90:99:10:a8:3a: ed:a6:36:5c:11:37:58:da:73:eb:ec:50:60:f8:89: 91:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C2:F4:40:0D:42:E6:F0:DF:D4:72:CB:2D:70:E9:A8:23:16:47:CC X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/r8L0QA1C5vDf1HLLLXDpqCMWR8w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.157.0/24 163.5.223.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:d1:9d:c4:b6:7d:82:ed:79:04:2c:3b:3b:c3:9f:df:39:6a: 34:27:45:fe:ed:6f:57:cf:96:e4:64:df:82:a3:e6:de:0b:6d: 9f:5d:53:a9:75:ac:d9:f0:90:d9:a0:65:f6:bc:e8:93:80:1f: b0:98:aa:9a:0d:b9:ab:8a:20:63:ab:51:ad:5f:5a:f3:0c:11: 49:f4:1c:9f:38:21:b7:ab:8a:85:a5:1a:16:07:c5:aa:da:44: 6e:f3:b7:c4:71:0a:60:32:6f:4b:0e:ec:86:76:a7:71:8c:50: 29:06:82:89:31:26:e9:35:a2:0f:3f:dd:fe:b3:0d:a9:b6:22: 76:a0:cb:00:c9:ff:a8:90:56:c8:e5:03:c1:b5:4b:99:1e:38: 68:57:94:cc:e4:ae:77:18:eb:5a:b9:c3:0a:c1:4e:c3:28:f0: 71:a5:96:27:51:22:d8:e3:0c:5b:eb:f9:d7:ab:c7:b5:3c:1b: d4:9f:a7:f7:6f:eb:e6:c8:f0:5b:43:d1:02:78:3d:ff:ce:ff: c7:89:14:1e:c7:74:c0:31:67:d5:96:4a:53:c7:08:c2:b8:5a: 19:3f:5b:1b:52:a8:be:f2:09:c3:e9:9e:60:29:0e:7e:d4:a8: 61:0a:b6:f6:64:68:9a:01:ea:8c:c4:0e:01:e4:ea:35:85:fe: f8:93:bf:c0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqmxd3Gp0NC+/d8sUg+6DcFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMTIxMTQxNjE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmMyZjQ0MDBkNDJlNmYwZGZkNDcyY2IyZDcwZTlhODIzMTY0N2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Vrp2bGSFEFl+97G7likqTgO1vFS UY63bTuOZf/Dsz4Rq08IHaXrYnvmeBr44sV0Uo+AYdmInbf4B5W61YNVT0E3Lhzj 5Kwm/D/CcyFtwzd97gtQrAGhK4ER/mckVeaLFQswLLzMWZn9fMLdfiQgcZw1TIV4 z1X0PRhPBY+chaz8snIC0quVaXWLbWtWvOt5cPFLLQ70h140/vkPb0XNE9fG5snP KORunwxfjwldcuaFaA8Hzi0WGnLJZAlOl7VeX6E5th33ZJdgMCBfdzKickF17gl1 PNVjlLKoc4wnT9b3wDvvN5TMP9IrkJkQqDrtpjZcETdY2nPr7FBg+ImRsQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK/C9EANQubw39Ryyy1w6agjFkfMMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvcjhMMFFBMUM1dkRmMUhMTExYRHBxQ01XUjh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowWdAwQA owXfMA0GCSqGSIb3DQEBCwUAA4IBAQCb0Z3Etn2C7XkELDs7w5/fOWo0J0X+7W9X z5bkZN+Co+beC22fXVOpdazZ8JDZoGX2vOiTgB+wmKqaDbmriiBjq1GtX1rzDBFJ 9ByfOCG3q4qFpRoWB8Wq2kRu87fEcQpgMm9LDuyGdqdxjFApBoKJMSbpNaIPP93+ sw2ptiJ2oMsAyf+okFbI5QPBtUuZHjhoV5TM5K53GOtaucMKwU7DKPBxpZYnUSLY 4wxb6/nXq8e1PBvUn6f3b+vmyPBbQ9ECeD3/zv/HiRQex3TAMWfVlkpTxwjCuFoZ P1sbUqi+8gnD6Z5gKQ5+1KhhCrb2ZGiaAeqMxA4B5Oo1hf74k7/A -----END CERTIFICATE-----Generated at Fri Dec 5 13:58:06 2025 by rpki-client