This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tBkSVslJCsg7CatFJAKV0LeSFXA.roa File: tBkSVslJCsg7CatFJAKV0LeSFXA.roa (raw, json) Hash identifier: rizb4G7y008KgLfg2l93TrrY1x2AMbtkD0ze4mQ7r1M= Subject key identifier: B4:19:12:56:C9:49:0A:C8:3B:09:AB:45:24:02:95:D0:B7:92:15:70 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E393A07DE7FE09F5C7BAB5EABC5BE19 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tBkSVslJCsg7CatFJAKV0LeSFXA.roa Signing time: Fri 02 Jan 2026 10:20:38 +0000 ROA not before: Fri 02 Jan 2026 10:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211440 IP address blocks: 163.5.96.0/24 maxlen: 24 163.5.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:3a:07:de:7f:e0:9f:5c:7b:ab:5e:ab:c5:be:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4191256c9490ac83b09ab45240295d0b7921570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ba:59:5e:ea:4b:68:86:6d:fe:0b:73:c0:88: 6b:5b:3c:8b:a2:6a:f7:78:7b:ec:25:49:da:2a:46: 23:88:27:65:e1:14:15:73:75:59:28:59:e0:49:94: 58:e5:28:0b:9d:9d:40:95:e5:85:91:a4:33:27:30: 52:0d:4c:7f:64:d0:e8:46:25:99:1d:20:dd:d0:0f: ff:68:4a:18:11:a6:93:26:5c:4e:00:c0:e3:80:a8: a3:86:cc:59:df:da:5d:73:1f:96:dd:fa:eb:cb:13: c6:a9:14:89:c2:48:49:e9:9e:2a:ed:5b:d6:f4:dc: 64:ee:63:8d:1d:90:e2:ae:eb:88:77:4e:99:1f:df: 71:66:31:65:4b:d5:4e:aa:9c:91:c3:12:28:cd:3d: b0:60:d7:16:54:ed:9b:9f:a1:2f:67:0b:1e:cb:dd: 60:16:6d:8c:72:c7:ca:08:78:df:bc:16:cb:fc:0d: 20:c7:e2:b8:0f:8e:9c:7a:fb:fa:c4:ca:09:4b:db: 3f:cf:83:59:3e:de:10:63:e4:d1:bd:95:12:05:71: 2e:10:69:cb:07:50:a0:06:85:47:82:73:81:d0:11: 73:d5:ac:28:d8:4b:f8:a2:c2:64:b6:b2:21:84:5b: 3f:2e:4a:03:16:24:77:eb:32:42:81:6c:79:d3:72: f9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:19:12:56:C9:49:0A:C8:3B:09:AB:45:24:02:95:D0:B7:92:15:70 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tBkSVslJCsg7CatFJAKV0LeSFXA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.96.0/24 163.5.129.0/24 Signature Algorithm: sha256WithRSAEncryption ab:9f:26:e6:60:1b:2c:25:b7:e1:b5:86:e8:cf:ae:5d:9e:25: 35:2f:e0:f9:b5:30:e4:03:81:92:51:52:97:2c:13:87:df:8d: 61:c0:8e:f6:f9:23:c2:fa:3b:9b:71:c1:db:06:87:f4:64:fe: b7:cf:e4:09:2b:ba:99:45:77:aa:fa:14:75:b8:44:42:bf:35: d3:a3:ae:2b:c3:06:3c:7c:68:93:47:d1:f6:e2:b5:ab:90:21: a3:dd:17:dc:a1:9a:69:3a:a6:ef:ba:8d:d8:c7:98:af:f1:f2: 97:1f:0f:5b:05:a3:61:08:d4:03:54:ff:44:b2:54:b9:40:4c: 5e:66:cf:c1:3a:0d:07:72:65:c2:2f:93:d1:7c:85:6f:86:9d: e5:4c:b4:42:1e:b5:4c:ac:24:60:de:af:61:ea:50:16:69:d0: 70:5a:9a:64:18:22:35:81:27:91:df:b6:10:61:51:b0:62:6a: d8:0a:b0:c5:a8:d9:20:5d:b6:4f:8f:b6:de:08:04:61:fe:05: 82:7a:68:60:11:d7:8f:2a:92:ab:cd:4a:e3:f2:13:f9:b3:de: d3:9e:c1:b1:ce:95:bc:a0:18:9d:a4:f2:66:e5:76:91:29:e0: 44:ce:01:2a:9f:a3:57:da:58:c5:b1:5b:08:63:c1:f4:1d:e5: df:dc:9e:0e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OToH3n/gn1x7q16rxb4ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDE5MTI1NmM5NDkwYWM4M2IwOWFiNDUyNDAyOTVkMGI3OTIxNTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbpZXupLaIZt/gtzwIhrWzyLomr3 eHvsJUnaKkYjiCdl4RQVc3VZKFngSZRY5SgLnZ1AleWFkaQzJzBSDUx/ZNDoRiWZ HSDd0A//aEoYEaaTJlxOAMDjgKijhsxZ39pdcx+W3frryxPGqRSJwkhJ6Z4q7VvW 9Nxk7mONHZDiruuId06ZH99xZjFlS9VOqpyRwxIozT2wYNcWVO2bn6EvZwsey91g Fm2McsfKCHjfvBbL/A0gx+K4D46cevv6xMoJS9s/z4NZPt4QY+TRvZUSBXEuEGnL B1CgBoVHgnOB0BFz1awo2Ev4osJktrIhhFs/LkoDFiR36zJCgWx503L5KQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLQZElbJSQrIOwmrRSQCldC3khVwMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvdEJrU1ZzbEpDc2c3Q2F0RkpBS1YwTGVTRlhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowVgAwQA owWBMA0GCSqGSIb3DQEBCwUAA4IBAQCrnybmYBssJbfhtYboz65dniU1L+D5tTDk A4GSUVKXLBOH341hwI72+SPC+jubccHbBof0ZP63z+QJK7qZRXeq+hR1uERCvzXT o64rwwY8fGiTR9H24rWrkCGj3RfcoZppOqbvuo3Yx5iv8fKXHw9bBaNhCNQDVP9E slS5QExeZs/BOg0HcmXCL5PRfIVvhp3lTLRCHrVMrCRg3q9h6lAWadBwWppkGCI1 gSeR37YQYVGwYmrYCrDFqNkgXbZPj7beCARh/gWCemhgEdePKpKrzUrj8hP5s97T nsGxzpW8oBidpPJm5XaRKeBEzgEqn6NX2ljFsVsIY8H0HeXf3J4O -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:16 2026 by rpki-client