This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/sAVx5Sr1VBE1bjAmsrYMG1Wf9fo.roa File: sAVx5Sr1VBE1bjAmsrYMG1Wf9fo.roa (raw, json) Hash identifier: 6Et1vOEoxiN/VnZpjO2yLb92WOG+MBkNVzkB2kcecJw= Subject key identifier: B0:05:71:E5:2A:F5:54:11:35:6E:30:26:B2:B6:0C:1B:55:9F:F5:FA Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E3913C8FD0854E3F8B3FF47ACD13965 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/sAVx5Sr1VBE1bjAmsrYMG1Wf9fo.roa Signing time: Fri 02 Jan 2026 10:20:28 +0000 ROA not before: Fri 02 Jan 2026 10:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 163.5.140.0/24 maxlen: 24 163.5.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:13:c8:fd:08:54:e3:f8:b3:ff:47:ac:d1:39:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b00571e52af55411356e3026b2b60c1b559ff5fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:03:7d:63:8c:8e:79:2d:23:3d:dd:71:8f:41: a2:55:c1:80:f2:ca:89:a2:80:7f:97:e1:51:41:80: f8:85:ca:6e:6c:5e:ab:38:75:61:14:2f:1f:3c:8e: 0d:21:d0:19:08:58:90:52:89:70:4a:cb:d3:fd:fa: 9c:78:5c:ce:5f:43:10:52:85:04:a3:f5:df:ef:91: e6:b8:00:2e:63:98:ff:ec:38:5b:d6:3b:1d:8b:e0: 34:eb:08:5b:12:d3:55:ad:2a:1d:6e:42:c1:08:4c: 4f:63:63:76:9d:fd:ff:4b:56:dd:f7:fa:3d:cb:a7: 40:8f:02:3d:12:9a:81:44:9b:fc:b6:15:9e:8c:44: 2a:b7:da:d5:12:2e:2c:cb:21:ec:35:2c:7e:6e:d4: bf:db:fe:12:a1:7b:03:bd:4d:b7:0d:43:f3:f0:a9: 0c:d8:97:b8:67:ed:10:2f:cc:4c:c6:69:33:b4:36: 7b:1b:20:c4:cc:3e:21:01:26:3a:b2:b9:8c:4c:8f: 82:ed:1f:92:dc:c6:b1:ff:8a:3b:04:bc:37:b5:ca: 35:cd:d7:75:f2:b9:d4:5f:78:d9:02:88:07:b2:a5: 2c:9d:d8:44:0d:40:4c:b0:1e:3a:ad:0d:d3:db:7d: 94:72:db:ed:c1:71:79:39:23:b8:b8:42:85:e6:6e: df:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:05:71:E5:2A:F5:54:11:35:6E:30:26:B2:B6:0C:1B:55:9F:F5:FA X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/sAVx5Sr1VBE1bjAmsrYMG1Wf9fo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.140.0/24 163.5.190.0/24 Signature Algorithm: sha256WithRSAEncryption 48:5d:1f:c5:22:5f:50:57:ef:c1:19:5f:db:1b:ec:e3:49:8c: 73:50:0b:b1:68:ce:b2:4c:04:af:39:14:30:57:d4:ec:cc:e9: 6f:94:5e:63:72:86:7f:0b:bb:bb:34:f9:e6:1a:5e:41:a9:77: 50:52:d1:18:96:ae:a2:b8:e2:31:f8:fc:f6:28:1d:6a:62:c4: a2:1f:e7:30:02:46:0e:8b:13:41:d1:ee:e2:7b:17:64:b2:cb: 19:26:8e:8b:a1:39:9b:7e:87:55:a3:ea:9d:93:33:84:0a:a6: da:8d:67:a0:d2:ad:42:4a:7d:20:d0:1a:02:42:eb:e3:ae:c9: 4f:08:55:b4:99:53:03:c8:f8:6d:9d:5f:3d:ad:8f:62:30:12: 02:62:4a:8a:8c:fb:c1:3b:06:79:c5:a7:8e:c3:ff:47:7c:22: de:5c:90:e0:22:5a:d1:30:8c:b0:32:5d:84:4f:84:5d:ef:63: 3e:97:9e:49:c3:74:31:9e:7b:2a:47:e1:e7:d1:2f:57:f6:80: c3:37:10:a3:87:a8:0e:c5:7a:0d:6f:0c:fb:d4:27:8d:33:b2: 30:99:a1:3b:df:29:0f:52:e2:83:22:7e:d5:db:90:97:86:59: 77:1b:cf:23:7f:f5:df:a1:59:be:30:d2:2e:08:0d:03:37:83: 1c:a4:ee:31 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+ORPI/QhU4/iz/0es0TllMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDA1NzFlNTJhZjU1NDExMzU2ZTMwMjZiMmI2MGMxYjU1OWZmNWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgN9Y4yOeS0jPd1xj0GiVcGA8sqJ ooB/l+FRQYD4hcpubF6rOHVhFC8fPI4NIdAZCFiQUolwSsvT/fqceFzOX0MQUoUE o/Xf75HmuAAuY5j/7Dhb1jsdi+A06whbEtNVrSodbkLBCExPY2N2nf3/S1bd9/o9 y6dAjwI9EpqBRJv8thWejEQqt9rVEi4syyHsNSx+btS/2/4SoXsDvU23DUPz8KkM 2Je4Z+0QL8xMxmkztDZ7GyDEzD4hASY6srmMTI+C7R+S3Max/4o7BLw3tco1zdd1 8rnUX3jZAogHsqUsndhEDUBMsB46rQ3T232UctvtwXF5OSO4uEKF5m7fYwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLAFceUq9VQRNW4wJrK2DBtVn/X6MB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvc0FWeDVTcjFWQkUxYmpBbXNyWU1HMVdmOWZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowWMAwQA owW+MA0GCSqGSIb3DQEBCwUAA4IBAQBIXR/FIl9QV+/BGV/bG+zjSYxzUAuxaM6y TASvORQwV9TszOlvlF5jcoZ/C7u7NPnmGl5BqXdQUtEYlq6iuOIx+Pz2KB1qYsSi H+cwAkYOixNB0e7iexdksssZJo6LoTmbfodVo+qdkzOECqbajWeg0q1CSn0g0BoC QuvjrslPCFW0mVMDyPhtnV89rY9iMBICYkqKjPvBOwZ5xaeOw/9HfCLeXJDgIlrR MIywMl2ET4Rd72M+l55Jw3QxnnsqR+Hn0S9X9oDDNxCjh6gOxXoNbwz71CeNM7Iw maE73ykPUuKDIn7V25CXhll3G88jf/XfoVm+MNIuCA0DN4McpO4x -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:36 2026 by rpki-client