This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/t9hbIbfR5AtuDDgt7yeU1YEB0Cw.roa File: t9hbIbfR5AtuDDgt7yeU1YEB0Cw.roa (raw, json) Hash identifier: Z1TejyFAmHf+0pVpFJNo1MelliQXsDjfnJDYMkd0byo= Subject key identifier: B7:D8:5B:21:B7:D1:E4:0B:6E:0C:38:2D:EF:27:94:D5:81:01:D0:2C Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E3910215D9C8F96F49D70B2161AC0E2 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/t9hbIbfR5AtuDDgt7yeU1YEB0Cw.roa Signing time: Fri 02 Jan 2026 10:20:27 +0000 ROA not before: Fri 02 Jan 2026 10:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 163.5.74.0/24 maxlen: 24 163.5.83.0/24 maxlen: 24 163.5.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:10:21:5d:9c:8f:96:f4:9d:70:b2:16:1a:c0:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7d85b21b7d1e40b6e0c382def2794d58101d02c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9b:52:b3:90:f7:3e:12:59:6b:b2:4f:39:f9: c3:0a:63:9f:0b:bb:af:50:f4:26:51:66:0e:13:60: db:b9:19:9a:53:f3:a3:24:29:fc:f6:25:b5:f6:10: 85:32:14:53:9d:94:e4:7e:31:b5:85:df:3d:88:8d: 94:4b:3d:ed:f5:37:df:6e:dd:4c:ac:fb:fc:96:2c: 4e:ef:96:68:8b:dc:7e:e8:94:b9:35:c2:af:d6:19: da:50:13:a1:9e:dc:71:a7:b6:ad:5c:55:cd:ad:84: a2:a5:9d:6e:e5:e8:8f:87:e9:57:ee:1d:73:f3:cb: f9:cc:6e:35:ef:5a:80:65:11:09:0b:90:68:d1:54: 70:b9:9b:c5:9c:ae:8e:d1:6a:12:99:40:d1:32:4d: 51:a6:85:51:fb:3c:03:9e:be:02:7b:53:1c:73:d4: 8c:bc:2b:00:45:54:6d:e2:80:95:8a:42:d5:10:2c: 75:12:3d:44:9b:8d:c5:48:61:51:3a:9a:d9:21:98: 61:ea:c1:31:84:f9:85:94:b7:f9:72:09:61:10:b5: 03:d1:d1:ff:48:44:33:7d:74:6f:f2:2c:2e:56:d7: 55:0d:48:ab:fc:73:8f:e0:9c:3c:cc:96:b6:af:bd: 2d:cb:a5:41:8c:bc:b0:87:4f:52:a0:68:7d:5b:8d: 07:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D8:5B:21:B7:D1:E4:0B:6E:0C:38:2D:EF:27:94:D5:81:01:D0:2C X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/t9hbIbfR5AtuDDgt7yeU1YEB0Cw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.74.0/24 163.5.83.0/24 163.5.151.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:a6:4b:13:c5:f2:14:6f:ed:3f:a1:82:fc:67:5e:9c:78:c3: a3:24:99:b6:ef:c4:7f:ea:ea:b6:c4:b5:f5:9e:20:bf:c6:3b: 8e:31:24:ce:2a:5f:95:dd:54:28:1f:58:51:bb:18:7f:1c:40: ca:6a:58:4b:be:0d:3e:13:60:67:64:35:ad:b0:69:ba:d4:47: 6f:5b:4b:e7:32:e7:ff:de:d5:a5:68:7b:6c:76:b3:ed:55:93: 94:55:b2:4d:8e:0c:47:55:49:a8:30:b5:d0:43:66:9f:18:b6: 43:6a:23:40:94:60:42:a2:8c:37:24:81:88:47:37:61:fa:fc: b0:57:68:9d:a5:72:9b:f3:54:88:da:64:3c:48:57:00:ff:1b: 4c:74:3f:0f:1a:7a:12:ef:28:87:15:b7:fe:df:f8:20:50:7f: 7b:35:32:51:c3:81:fb:3d:8a:90:37:87:86:98:c6:34:5b:53: e4:95:72:8f:bf:0d:31:e8:6e:4a:ad:3e:33:34:94:64:3a:44: 51:c4:26:73:93:e1:a9:f4:41:45:51:1d:17:c9:0f:35:d4:47: 70:b6:09:f2:b2:1a:68:68:3c:2a:f5:23:23:02:58:ed:60:71: 6e:df:71:63:32:29:fd:a9:2b:b3:9e:dd:1d:34:17:35:42:fe: 05:0a:fc:64 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+ORAhXZyPlvSdcLIWGsDiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2Q4NWIyMWI3ZDFlNDBiNmUwYzM4MmRlZjI3OTRkNTgxMDFkMDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtptSs5D3PhJZa7JPOfnDCmOfC7uv UPQmUWYOE2DbuRmaU/OjJCn89iW19hCFMhRTnZTkfjG1hd89iI2USz3t9Tffbt1M rPv8lixO75Zoi9x+6JS5NcKv1hnaUBOhntxxp7atXFXNrYSipZ1u5eiPh+lX7h1z 88v5zG4171qAZREJC5Bo0VRwuZvFnK6O0WoSmUDRMk1RpoVR+zwDnr4Ce1Mcc9SM vCsARVRt4oCVikLVECx1Ej1Em43FSGFROprZIZhh6sExhPmFlLf5cglhELUD0dH/ SEQzfXRv8iwuVtdVDUir/HOP4Jw8zJa2r70ty6VBjLywh09SoGh9W40HGwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLfYWyG30eQLbgw4Le8nlNWBAdAsMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvdDloYkliZlI1QXR1RERndDd5ZVUxWUVCMEN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAowVKAwQA owVTAwQAowWXMA0GCSqGSIb3DQEBCwUAA4IBAQBNpksTxfIUb+0/oYL8Z16ceMOj JJm278R/6uq2xLX1niC/xjuOMSTOKl+V3VQoH1hRuxh/HEDKalhLvg0+E2BnZDWt sGm61EdvW0vnMuf/3tWlaHtsdrPtVZOUVbJNjgxHVUmoMLXQQ2afGLZDaiNAlGBC oow3JIGIRzdh+vywV2idpXKb81SI2mQ8SFcA/xtMdD8PGnoS7yiHFbf+3/ggUH97 NTJRw4H7PYqQN4eGmMY0W1PklXKPvw0x6G5KrT4zNJRkOkRRxCZzk+Gp9EFFUR0X yQ811EdwtgnyshpoaDwq9SMjAljtYHFu33FjMin9qSuznt0dNBc1Qv4FCvxk -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:30 2026 by rpki-client