This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ulK5AzB8Fd6cES4pkpa1gY2Kpqs.roa File: ulK5AzB8Fd6cES4pkpa1gY2Kpqs.roa (raw, json) Hash identifier: TZHt1oLEdBzN1VOAizj35uf/bvQELpbxgGmE4mUey80= Subject key identifier: BA:52:B9:03:30:7C:15:DE:9C:11:2E:29:92:96:B5:81:8D:8A:A6:AB Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E39143F0AE858064B8CA320AFA804A9 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ulK5AzB8Fd6cES4pkpa1gY2Kpqs.roa Signing time: Fri 02 Jan 2026 10:20:28 +0000 ROA not before: Fri 02 Jan 2026 10:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16125 IP address blocks: 163.5.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:14:3f:0a:e8:58:06:4b:8c:a3:20:af:a8:04:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba52b903307c15de9c112e299296b5818d8aa6ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7d:4c:63:a6:a4:36:16:e9:26:62:c1:2c:70: 7e:a7:8d:87:7b:f2:dc:78:2f:c7:2d:0c:0f:3a:35: be:b3:cf:44:06:a6:49:fe:7d:c7:58:12:52:84:cc: 87:7d:da:df:b8:6b:84:e4:da:38:ce:71:10:1a:e8: ba:76:bc:09:29:dd:a4:0a:07:48:3d:a2:32:cb:4f: 8a:ab:85:4e:ee:56:af:fe:87:15:59:14:c9:56:15: fc:e1:bb:01:2a:d2:7c:fc:6c:f3:87:b3:1b:c4:48: 72:9f:6c:31:ac:62:62:17:92:eb:a9:ab:2c:5f:3c: 3e:fd:db:ab:29:7b:ac:34:fd:20:7c:9b:a0:12:10: 95:e8:5b:cd:93:e8:76:b8:27:91:2f:be:4a:3d:b5: c9:a1:ce:a5:c2:42:41:2f:bc:90:59:dc:dd:78:b3: 01:0c:86:75:7f:30:0c:25:0b:73:6f:9e:e1:dd:b0: 76:19:10:38:72:37:bc:a5:77:ad:4d:39:e0:59:5e: 89:95:e7:e4:5d:df:11:9b:f7:f9:be:04:d6:6e:fb: 67:10:3f:99:6f:09:73:39:e2:9e:72:f8:0d:da:d9: ed:2d:ff:80:4f:0d:01:49:19:f7:bb:f9:54:51:02: 4a:33:96:30:2f:f7:7d:e4:51:d4:b1:35:37:3e:5f: 17:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:52:B9:03:30:7C:15:DE:9C:11:2E:29:92:96:B5:81:8D:8A:A6:AB X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ulK5AzB8Fd6cES4pkpa1gY2Kpqs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.176.0/24 Signature Algorithm: sha256WithRSAEncryption 64:ec:5c:27:ee:d4:8b:a7:37:c7:80:cd:9e:f1:a6:0c:37:a6: d0:0b:18:13:40:1f:bf:7f:57:cf:b3:87:9b:57:9a:f4:6b:9e: cd:a1:a0:9e:11:89:cd:75:f8:43:5e:17:03:6e:bf:c3:4c:82: d3:8f:14:e2:9a:a8:4a:a2:9f:30:0f:2d:30:d7:af:7a:6e:d0: fc:79:a8:41:94:e1:88:52:67:c6:26:56:ca:03:a5:4d:05:f2: af:6b:f9:db:29:86:5a:14:0e:2c:00:9b:70:6a:49:a3:d1:4c: 2c:33:a7:bc:28:f3:c5:66:87:3c:5b:04:d2:db:8a:de:68:19: 8b:97:f4:8a:81:41:bf:9e:68:6d:a2:dd:02:b6:2f:a0:62:a2: 46:5d:63:68:fa:79:37:62:a3:45:da:05:1c:6d:50:10:2f:51: 1e:2c:62:c9:2c:d8:f6:d7:3a:22:4b:be:5a:45:0c:c2:3b:43: dd:3c:40:59:4b:cb:af:8f:91:5d:1a:12:98:2e:5d:bd:bd:cf: b1:ca:00:99:b5:19:bb:19:e7:74:a3:51:54:ae:66:1e:e0:3d: ab:ac:a9:13:5d:76:9c:b5:a1:c2:cc:cd:2a:dd:ae:7b:a9:45: fe:03:0b:2f:f7:d1:06:f2:5a:92:1d:04:4c:c6:da:1f:97:64: e0:cb:78:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ORQ/CuhYBkuMoyCvqASpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTUyYjkwMzMwN2MxNWRlOWMxMTJlMjk5Mjk2YjU4MThkOGFhNmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX1MY6akNhbpJmLBLHB+p42He/Lc eC/HLQwPOjW+s89EBqZJ/n3HWBJShMyHfdrfuGuE5No4znEQGui6drwJKd2kCgdI PaIyy0+Kq4VO7lav/ocVWRTJVhX84bsBKtJ8/Gzzh7MbxEhyn2wxrGJiF5Lrqass Xzw+/durKXusNP0gfJugEhCV6FvNk+h2uCeRL75KPbXJoc6lwkJBL7yQWdzdeLMB DIZ1fzAMJQtzb57h3bB2GRA4cje8pXetTTngWV6JlefkXd8Rm/f5vgTWbvtnED+Z bwlzOeKecvgN2tntLf+ATw0BSRn3u/lUUQJKM5YwL/d95FHUsTU3Pl8XmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLpSuQMwfBXenBEuKZKWtYGNiqarMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvdWxLNUF6QjhGZDZjRVM0cGtwYTFnWTJLcHFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowWwMA0G CSqGSIb3DQEBCwUAA4IBAQBk7Fwn7tSLpzfHgM2e8aYMN6bQCxgTQB+/f1fPs4eb V5r0a57NoaCeEYnNdfhDXhcDbr/DTILTjxTimqhKop8wDy0w1696btD8eahBlOGI UmfGJlbKA6VNBfKva/nbKYZaFA4sAJtwakmj0UwsM6e8KPPFZoc8WwTS24reaBmL l/SKgUG/nmhtot0Cti+gYqJGXWNo+nk3YqNF2gUcbVAQL1EeLGLJLNj21zoiS75a RQzCO0PdPEBZS8uvj5FdGhKYLl29vc+xygCZtRm7Ged0o1FUrmYe4D2rrKkTXXac taHCzM0q3a57qUX+Awsv99EG8lqSHQRMxtofl2Tgy3jm -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:37 2026 by rpki-client