This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/s4-AkohSftPjlI1P6BoFa1_kTv0.roa File: s4-AkohSftPjlI1P6BoFa1_kTv0.roa (raw, json) Hash identifier: JEjRqO6n4/ejdlar8KpaMMC2SqaFumVRFvO4gWI8Z6w= Subject key identifier: B3:8F:80:92:88:52:7E:D3:E3:94:8D:4F:E8:1A:05:6B:5F:E4:4E:FD Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019AA6C7B13FF2C177A00BD330A1D5058AEA Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/s4-AkohSftPjlI1P6BoFa1_kTv0.roa Signing time: Fri 21 Nov 2025 14:18:16 +0000 ROA not before: Fri 21 Nov 2025 14:18:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21859 IP address blocks: 163.5.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 09:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:c7:b1:3f:f2:c1:77:a0:0b:d3:30:a1:d5:05:8a:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Nov 21 14:18:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b38f809288527ed3e3948d4fe81a056b5fe44efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:73:88:fa:f3:5e:c3:2b:ed:7c:d3:78:21:64: 90:2a:f3:14:fc:91:37:6a:6d:f8:45:96:bc:75:a3: de:49:ee:a9:92:61:22:06:26:00:c6:d3:56:84:a2: a8:60:01:ff:a2:d8:4d:f6:ce:22:7f:66:4a:91:b4: 01:0d:40:7e:20:1c:c5:38:47:19:66:cf:13:75:bb: 3b:c3:95:87:2b:e1:85:55:51:67:47:8b:7f:e2:82: d0:71:09:27:45:6b:fc:52:ed:87:b0:11:4a:a1:32: bb:d0:53:d1:59:8b:3d:d3:e9:2c:98:1b:96:01:68: 1e:71:0e:a9:39:1f:8a:56:be:87:e7:06:98:a6:5f: 8b:62:33:e9:94:59:7a:3b:e3:ab:ce:39:27:81:a9: 72:d9:9c:54:a0:2f:6b:5f:c1:25:26:51:ce:4a:de: 6c:5a:19:ee:47:6e:7d:04:16:bb:d5:6a:f2:a2:3e: 82:1a:1b:af:6e:45:cc:2c:97:7b:66:43:20:d2:38: fd:1f:b4:90:84:b5:eb:91:77:08:e1:70:74:bd:12: fd:98:57:1e:fb:b7:85:0b:80:47:97:25:a4:07:e2: 02:0f:8d:59:ad:80:5d:54:58:02:7e:2e:81:f6:e2: 3a:c8:b1:de:49:63:f1:ae:ee:f9:92:7c:c0:47:ac: 4a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:8F:80:92:88:52:7E:D3:E3:94:8D:4F:E8:1A:05:6B:5F:E4:4E:FD X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/s4-AkohSftPjlI1P6BoFa1_kTv0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.66.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:12:64:72:c3:d1:44:1b:1c:0e:66:ae:7a:7e:38:b9:7e:bf: e8:dd:d6:e6:d8:8c:ed:23:92:80:e5:75:24:09:10:2a:49:9a: 2c:ec:df:b9:0e:e9:6c:3b:01:83:7d:ac:5e:79:ec:5a:fe:6a: 99:d7:72:fc:c8:e1:de:99:30:d6:bb:d5:53:b3:df:53:8d:5c: ea:22:e6:9c:94:19:f5:1e:63:f5:b7:71:9d:fa:82:60:3d:d0: 1c:7b:6b:cc:54:69:f3:70:18:2c:23:36:e3:39:c5:5c:1b:aa: 20:4d:62:df:fb:77:14:b8:b8:fb:e2:28:25:d5:e4:bb:72:69: cd:f7:57:ac:d8:a6:07:4d:be:c3:a9:ee:47:37:fa:36:df:8f: 3a:a2:41:10:c7:28:a9:60:43:ce:15:3d:5b:a1:c4:ec:7e:fa: 23:ea:93:4f:56:57:30:1e:6e:da:f4:5b:fb:1a:d7:bb:db:a8: 0e:50:63:1b:72:2c:55:f9:d4:26:6c:a7:24:46:76:38:ae:ef: b3:14:d6:a3:7e:02:b0:47:75:2e:4d:30:a4:3e:4f:96:ba:0d: 23:65:cf:c7:ee:c0:4a:e2:ae:55:dd:95:4d:12:a9:83:be:f5: 17:cf:9d:2b:e3:67:49:43:1c:56:60:08:7a:7c:7c:41:75:6d: 31:e8:7b:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqmx7E/8sF3oAvTMKHVBYrqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMTIxMTQxODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzhmODA5Mjg4NTI3ZWQzZTM5NDhkNGZlODFhMDU2YjVmZTQ0ZWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXOI+vNewyvtfNN4IWSQKvMU/JE3 am34RZa8daPeSe6pkmEiBiYAxtNWhKKoYAH/othN9s4if2ZKkbQBDUB+IBzFOEcZ Zs8Tdbs7w5WHK+GFVVFnR4t/4oLQcQknRWv8Uu2HsBFKoTK70FPRWYs90+ksmBuW AWgecQ6pOR+KVr6H5waYpl+LYjPplFl6O+Orzjkngaly2ZxUoC9rX8ElJlHOSt5s WhnuR259BBa71Wryoj6CGhuvbkXMLJd7ZkMg0jj9H7SQhLXrkXcI4XB0vRL9mFce +7eFC4BHlyWkB+ICD41ZrYBdVFgCfi6B9uI6yLHeSWPxru75knzAR6xKNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLOPgJKIUn7T45SNT+gaBWtf5E79MB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvczQtQWtvaFNmdFBqbEkxUDZCb0ZhMV9rVHYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowVCMA0G CSqGSIb3DQEBCwUAA4IBAQA/EmRyw9FEGxwOZq56fji5fr/o3dbm2IztI5KA5XUk CRAqSZos7N+5DulsOwGDfaxeeexa/mqZ13L8yOHemTDWu9VTs99TjVzqIuaclBn1 HmP1t3Gd+oJgPdAce2vMVGnzcBgsIzbjOcVcG6ogTWLf+3cUuLj74igl1eS7cmnN 91es2KYHTb7Dqe5HN/o23486okEQxyipYEPOFT1bocTsfvoj6pNPVlcwHm7a9Fv7 Gte726gOUGMbcixV+dQmbKckRnY4ru+zFNajfgKwR3UuTTCkPk+Wug0jZc/H7sBK 4q5V3ZVNEqmDvvUXz50r42dJQxxWYAh6fHxBdW0x6Hvx -----END CERTIFICATE-----Generated at Fri Dec 5 13:57:56 2025 by rpki-client