This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wARQ72qWnl8b_cTSYD8gBcMNP8s.roa File: wARQ72qWnl8b_cTSYD8gBcMNP8s.roa (raw, json) Hash identifier: 7SYyX0gelHcJt8JS4QD4kqIBDVw71jO+7bu93fe8Nws= Subject key identifier: C0:04:50:EF:6A:96:9E:5F:1B:FD:C4:D2:60:3F:20:05:C3:0D:3F:CB Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E3944AE46BA3763B8FEA9480C872B00 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wARQ72qWnl8b_cTSYD8gBcMNP8s.roa Signing time: Fri 02 Jan 2026 10:20:40 +0000 ROA not before: Fri 02 Jan 2026 10:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216405 IP address blocks: 163.5.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:44:ae:46:ba:37:63:b8:fe:a9:48:0c:87:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c00450ef6a969e5f1bfdc4d2603f2005c30d3fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:22:e7:6b:9d:e9:0f:ad:1a:ed:32:85:7e:40: fe:07:3e:e1:48:35:3d:4f:d2:b1:37:e1:0b:bd:04: 60:8c:f5:9a:e1:7b:7c:c2:47:da:34:9b:39:6e:48: f4:a5:9c:06:4e:d1:96:0f:46:4c:90:30:bd:4d:28: b0:f4:1e:fe:50:d9:dd:71:62:07:db:c5:fc:93:fd: e0:9e:44:2e:2c:15:f1:d0:e3:0d:73:95:69:4d:2b: a9:07:74:d2:81:8d:88:91:9b:9c:8e:52:3a:52:29: 25:23:99:e8:96:a3:fe:e0:d5:68:fb:10:d6:9a:4b: bb:aa:27:ef:ae:e0:fc:d7:ca:e7:3b:6f:d9:05:1b: a5:54:e2:d2:16:e3:e1:92:2e:58:2b:73:0d:be:95: 21:a8:65:92:a6:5c:11:8c:fb:c6:29:51:a0:76:08: a2:ae:cb:9f:bd:d2:b9:d6:50:04:7e:c5:0e:fb:a2: 13:ed:78:88:8c:82:67:db:2b:73:e5:ec:ac:eb:ea: ed:65:58:0a:c4:c6:ce:dc:fa:0f:71:1b:18:1f:16: 57:e8:32:b1:e6:b0:6d:48:05:be:79:f6:07:d9:45: a8:73:07:b8:c1:2e:50:f4:1e:68:08:c2:ac:38:1d: 08:8c:81:a6:32:37:ef:a1:9f:96:e0:be:d2:e1:0f: 9e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:04:50:EF:6A:96:9E:5F:1B:FD:C4:D2:60:3F:20:05:C3:0D:3F:CB X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wARQ72qWnl8b_cTSYD8gBcMNP8s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.89.0/24 Signature Algorithm: sha256WithRSAEncryption 02:39:dd:77:85:f5:95:69:2b:14:cd:c5:9b:14:8f:09:02:b5: 0d:28:e1:e3:0f:0b:b3:c5:da:35:90:af:51:4b:2c:e1:5f:ae: 72:fe:d1:e2:ed:a0:bf:f3:da:b6:c7:c5:7d:3a:fd:cf:e7:6d: 4d:f4:61:8e:cf:a2:e2:a9:f8:7f:94:ec:4e:5e:ea:2c:95:0a: 10:59:24:3a:ec:d8:40:55:09:f5:37:63:d5:03:40:94:89:f5: e2:12:70:86:dd:a7:aa:ea:87:26:af:a3:cd:95:61:d0:74:19: 7f:62:ce:d1:6a:dd:fe:36:32:f9:a2:6f:64:d3:21:64:59:2d: 2c:d9:ce:87:a8:bf:66:da:32:e9:f3:da:85:af:0e:6a:82:7e: 1e:a2:6e:8a:5f:14:1e:ef:c0:a2:f9:4b:9b:bd:9a:a9:c8:90: 4f:46:ef:c9:f8:85:d5:54:ed:b2:10:f8:ed:b5:d9:df:de:8d: 29:50:98:b8:24:dd:e6:41:87:b0:e7:2b:70:c3:4e:8a:a5:67: 08:79:96:83:01:50:53:62:d7:a8:ce:f6:17:c5:9d:48:fd:c6: 29:bf:b5:4f:b7:e6:91:1d:09:7a:d7:f8:72:a2:f0:2e:4c:34: a7:d3:a0:4f:1d:94:99:aa:3c:8b:51:48:11:32:a5:cc:97:96: 58:7b:52:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OUSuRro3Y7j+qUgMhysAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDA0NTBlZjZhOTY5ZTVmMWJmZGM0ZDI2MDNmMjAwNWMzMGQzZmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCLna53pD60a7TKFfkD+Bz7hSDU9 T9KxN+ELvQRgjPWa4Xt8wkfaNJs5bkj0pZwGTtGWD0ZMkDC9TSiw9B7+UNndcWIH 28X8k/3gnkQuLBXx0OMNc5VpTSupB3TSgY2IkZucjlI6UiklI5nolqP+4NVo+xDW mku7qifvruD818rnO2/ZBRulVOLSFuPhki5YK3MNvpUhqGWSplwRjPvGKVGgdgii rsufvdK51lAEfsUO+6IT7XiIjIJn2ytz5eys6+rtZVgKxMbO3PoPcRsYHxZX6DKx 5rBtSAW+efYH2UWocwe4wS5Q9B5oCMKsOB0IjIGmMjfvoZ+W4L7S4Q+e6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMAEUO9qlp5fG/3E0mA/IAXDDT/LMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvd0FSUTcycVdubDhiX2NUU1lEOGdCY01OUDhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowVZMA0G CSqGSIb3DQEBCwUAA4IBAQACOd13hfWVaSsUzcWbFI8JArUNKOHjDwuzxdo1kK9R SyzhX65y/tHi7aC/89q2x8V9Ov3P521N9GGOz6Liqfh/lOxOXuoslQoQWSQ67NhA VQn1N2PVA0CUifXiEnCG3aeq6ocmr6PNlWHQdBl/Ys7Rat3+NjL5om9k0yFkWS0s 2c6HqL9m2jLp89qFrw5qgn4eom6KXxQe78Ci+UubvZqpyJBPRu/J+IXVVO2yEPjt tdnf3o0pUJi4JN3mQYew5ytww06KpWcIeZaDAVBTYteozvYXxZ1I/cYpv7VPt+aR HQl61/hyovAuTDSn06BPHZSZqjyLUUgRMqXMl5ZYe1KA -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:01 2026 by rpki-client