This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/vqwPbgpEpeQvBod1PMwj7LK7sLY.roa File: vqwPbgpEpeQvBod1PMwj7LK7sLY.roa (raw, json) Hash identifier: 2QD3LRKRaEC6K3NZD8DZ9/9pQ93lmoQ24Y6CxDneMhc= Subject key identifier: BE:AC:0F:6E:0A:44:A5:E4:2F:06:87:75:3C:CC:23:EC:B2:BB:B0:B6 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E393EBAC263ABFA9488E9CF87167F33 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/vqwPbgpEpeQvBod1PMwj7LK7sLY.roa Signing time: Fri 02 Jan 2026 10:20:39 +0000 ROA not before: Fri 02 Jan 2026 10:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214432 IP address blocks: 163.5.29.0/24 maxlen: 24 163.5.132.0/24 maxlen: 24 163.5.233.0/24 maxlen: 24 163.5.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:3e:ba:c2:63:ab:fa:94:88:e9:cf:87:16:7f:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=beac0f6e0a44a5e42f0687753ccc23ecb2bbb0b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:66:c5:d1:2c:b9:b8:16:00:e2:7c:73:82:bd: ed:c3:2f:38:61:9b:b3:d7:bd:43:0f:54:47:c4:7f: 46:a8:49:12:33:55:14:88:79:58:39:46:2c:d3:88: 4b:41:c4:ee:22:ca:03:d2:d1:39:bf:fa:28:c1:f9: d9:c6:83:e2:5d:af:a4:41:e3:53:a9:01:df:fd:78: 9c:40:02:8c:f3:d1:6c:72:be:3b:41:3f:1b:28:d1: ef:23:9d:b7:23:7b:a5:c2:79:f1:72:fb:9d:39:c1: 71:db:b2:5d:da:a1:32:be:cc:a7:73:17:c7:09:30: 9c:67:ae:5a:25:74:72:19:dd:bf:9b:aa:e0:4e:0c: b0:61:79:7c:7e:bd:eb:df:7e:3a:0c:f4:e5:a3:5e: 6f:2f:31:5a:23:3e:4f:9c:7e:e9:43:ec:69:45:69: bc:f1:79:48:2e:e6:4c:b1:4d:37:a6:e5:2e:f8:40: 91:89:8f:8f:6b:fa:84:ea:ee:c2:ec:23:fa:15:a4: 0f:cd:73:45:4a:09:08:aa:1a:64:80:59:8a:b0:44: 51:3b:7c:db:61:cf:06:04:18:f9:be:5b:b2:61:54: 6f:3f:46:b7:4f:65:16:36:36:5c:57:77:dc:b4:bf: 2d:4a:06:d5:69:63:8c:69:7f:ad:98:64:17:4d:e2: fe:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AC:0F:6E:0A:44:A5:E4:2F:06:87:75:3C:CC:23:EC:B2:BB:B0:B6 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/vqwPbgpEpeQvBod1PMwj7LK7sLY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.29.0/24 163.5.132.0/24 163.5.233.0/24 163.5.237.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:16:01:da:9d:e1:b4:13:9c:03:82:98:c4:80:16:92:c5:b8: db:f7:0a:b6:45:71:34:84:2c:60:51:69:30:7a:63:9c:fb:ae: 64:cc:31:0d:d4:59:5b:13:3a:4b:d5:47:9b:63:bb:83:f8:96: a7:b8:0d:5f:55:6e:1e:bd:7b:68:f2:3e:ca:62:d7:92:72:dc: 67:0c:e8:30:34:95:66:8a:3b:cf:7e:94:9d:e6:ce:d0:92:39: f1:ae:82:0f:c4:15:15:95:cb:5b:9e:18:ff:d7:c0:ef:0e:04: b0:73:5f:81:0b:68:cf:81:b6:31:83:74:fc:3e:9f:19:84:9c: 08:5a:aa:df:21:f7:75:ae:da:65:83:72:04:c6:a9:1d:91:2b: 82:36:2b:52:73:73:83:9a:68:51:94:1f:a4:82:cc:7a:9d:f0: a6:d8:9e:3a:39:97:3f:2b:53:f5:a6:9a:dc:21:9b:7c:2e:69: c2:8e:43:47:8b:94:e3:60:69:a6:84:5a:54:58:0c:8c:ad:fa: b0:70:92:01:b1:e0:77:35:ec:ba:ae:ec:7f:6e:da:ad:30:b1: d0:bd:d0:38:7c:0b:b4:f0:49:be:16:4d:f7:0c:e3:71:46:9b: be:8d:17:f0:05:b0:88:42:03:7a:91:d1:50:83:a6:94:13:f9: d4:0a:9f:1e -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+OT66wmOr+pSI6c+HFn8zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWFjMGY2ZTBhNDRhNWU0MmYwNjg3NzUzY2NjMjNlY2IyYmJiMGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2bF0Sy5uBYA4nxzgr3twy84YZuz 171DD1RHxH9GqEkSM1UUiHlYOUYs04hLQcTuIsoD0tE5v/oowfnZxoPiXa+kQeNT qQHf/XicQAKM89Fscr47QT8bKNHvI523I3ulwnnxcvudOcFx27Jd2qEyvsyncxfH CTCcZ65aJXRyGd2/m6rgTgywYXl8fr3r3346DPTlo15vLzFaIz5PnH7pQ+xpRWm8 8XlILuZMsU03puUu+ECRiY+Pa/qE6u7C7CP6FaQPzXNFSgkIqhpkgFmKsERRO3zb Yc8GBBj5vluyYVRvP0a3T2UWNjZcV3fctL8tSgbVaWOMaX+tmGQXTeL+DQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFL6sD24KRKXkLwaHdTzMI+yyu7C2MB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvdnF3UGJncEVwZVF2Qm9kMVBNd2o3TEs3c0xZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAowUdAwQA owWEAwQAowXpAwQAowXtMA0GCSqGSIb3DQEBCwUAA4IBAQBuFgHaneG0E5wDgpjE gBaSxbjb9wq2RXE0hCxgUWkwemOc+65kzDEN1FlbEzpL1UebY7uD+JanuA1fVW4e vXto8j7KYteSctxnDOgwNJVmijvPfpSd5s7QkjnxroIPxBUVlctbnhj/18DvDgSw c1+BC2jPgbYxg3T8Pp8ZhJwIWqrfIfd1rtplg3IExqkdkSuCNitSc3ODmmhRlB+k gsx6nfCm2J46OZc/K1P1pprcIZt8LmnCjkNHi5TjYGmmhFpUWAyMrfqwcJIBseB3 Ney6rux/btqtMLHQvdA4fAu08Em+Fk33DONxRpu+jRfwBbCIQgN6kdFQg6aUE/nU Cp8e -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:17 2026 by rpki-client