This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wUNKj8aLra4vIi83WnHtQ7sbGBA.roa File: wUNKj8aLra4vIi83WnHtQ7sbGBA.roa (raw, json) Hash identifier: U1uaId3R5FyPjc1SsDeEg1V01WJxvpY3OIoRdQNWj9g= Subject key identifier: C1:43:4A:8F:C6:8B:AD:AE:2F:22:2F:37:5A:71:ED:43:BB:1B:18:10 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019A74C265AA4DA5B4EC94F484ADD803F784 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wUNKj8aLra4vIi83WnHtQ7sbGBA.roa Signing time: Tue 11 Nov 2025 21:11:28 +0000 ROA not before: Tue 11 Nov 2025 21:11:28 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 7029 IP address blocks: 163.5.33.0/24 maxlen: 24 163.5.73.0/24 maxlen: 24 163.5.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:74:c2:65:aa:4d:a5:b4:ec:94:f4:84:ad:d8:03:f7:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Nov 11 21:11:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c1434a8fc68badae2f222f375a71ed43bb1b1810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:28:e7:44:33:1f:3b:38:73:28:c8:b8:55:11: 02:52:0d:84:e1:92:05:81:65:ed:c5:12:8c:b3:81: f7:d6:87:e6:a7:43:61:73:1e:d2:ce:0e:01:2f:7a: a1:5b:77:91:59:98:16:8d:a4:ad:2c:31:2c:5d:01: cd:c6:7d:d0:57:41:6a:96:92:8e:39:8d:ae:64:28: 00:ad:0f:dd:71:1d:c3:5f:2a:3f:a5:d0:86:e7:fb: 9a:ed:21:6b:fa:eb:27:5a:ee:aa:0b:75:a3:8c:57: 02:fc:05:87:5e:63:29:4a:cf:74:90:5a:40:7a:c1: 36:85:d9:9d:9b:99:4d:e5:76:d2:9c:12:82:30:8c: 71:be:cd:a0:eb:e1:c6:20:6a:5f:83:b9:52:6a:e8: 13:6c:b6:6e:61:1c:59:61:ad:5d:95:54:cc:b2:c5: 83:0a:82:ed:13:0c:31:c2:14:ac:27:65:df:96:45: 30:b1:d1:80:e1:c7:95:cf:ba:fc:4b:21:33:d0:5b: d0:34:75:3e:17:57:0f:f1:ba:63:91:5f:29:89:ae: 0e:2c:51:4f:c4:41:7d:a9:25:ba:65:d9:34:2c:4b: bc:c5:a2:0b:61:14:49:c6:e8:d0:cd:86:38:b0:cc: 27:ca:4e:a6:09:76:1d:27:7e:30:56:84:34:d5:55: 5f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:43:4A:8F:C6:8B:AD:AE:2F:22:2F:37:5A:71:ED:43:BB:1B:18:10 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wUNKj8aLra4vIi83WnHtQ7sbGBA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.33.0/24 163.5.73.0/24 163.5.128.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:3a:52:4d:05:a3:44:3c:2c:89:6b:3f:d6:f3:99:9f:d3:40: 43:1f:4b:d7:6b:90:68:2a:0f:97:7c:7d:7e:54:0a:84:2f:7f: 6d:b7:48:3b:8d:14:38:bc:4c:aa:15:21:36:40:df:67:93:3d: d4:ad:7e:b1:83:81:73:29:a4:ab:66:84:6e:35:e9:c2:d9:dc: ec:6c:fe:ba:60:a4:22:d9:b7:64:7d:fc:ff:23:5a:48:7a:80: 6f:37:28:52:57:67:07:ac:79:a9:de:f8:b3:91:ae:13:74:9b: b1:6e:bd:fa:23:64:23:4b:e3:0c:7f:0e:d8:73:c0:a8:31:f8: eb:c8:cc:3c:3f:c6:fb:ec:2e:ad:d8:eb:db:45:ae:80:dd:ff: cd:f9:8f:24:02:a3:dd:5b:aa:18:0e:75:45:fe:d7:88:eb:6b: dc:e2:0b:97:f9:39:67:9f:1a:a0:fe:90:19:40:35:c5:d1:90: 9e:2c:46:ea:86:68:e6:b5:d7:42:e0:a1:3c:60:ce:eb:84:46: 61:51:89:b7:0f:75:3c:35:d1:6c:58:56:65:54:eb:28:46:24: cb:27:6b:6f:86:f8:82:af:fb:83:a5:cd:6c:4e:46:4d:0b:2a: da:38:39:d2:26:1a:e2:b8:bb:f7:64:c6:e6:e5:9b:13:6a:9f: 6b:4c:2f:5a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZp0wmWqTaW07JT0hK3YA/eEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMTExMjExMTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTQzNGE4ZmM2OGJhZGFlMmYyMjJmMzc1YTcxZWQ0M2JiMWIxODEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CjnRDMfOzhzKMi4VRECUg2E4ZIF gWXtxRKMs4H31ofmp0Nhcx7Szg4BL3qhW3eRWZgWjaStLDEsXQHNxn3QV0FqlpKO OY2uZCgArQ/dcR3DXyo/pdCG5/ua7SFr+usnWu6qC3WjjFcC/AWHXmMpSs90kFpA esE2hdmdm5lN5XbSnBKCMIxxvs2g6+HGIGpfg7lSaugTbLZuYRxZYa1dlVTMssWD CoLtEwwxwhSsJ2XflkUwsdGA4ceVz7r8SyEz0FvQNHU+F1cP8bpjkV8pia4OLFFP xEF9qSW6Zdk0LEu8xaILYRRJxujQzYY4sMwnyk6mCXYdJ34wVoQ01VVfPQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMFDSo/Gi62uLyIvN1px7UO7GxgQMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvd1VOS2o4YUxyYTR2SWk4M1duSHRRN3NiR0JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAowUhAwQA owVJAwQAowWAMA0GCSqGSIb3DQEBCwUAA4IBAQA+OlJNBaNEPCyJaz/W85mf00BD H0vXa5BoKg+XfH1+VAqEL39tt0g7jRQ4vEyqFSE2QN9nkz3UrX6xg4FzKaSrZoRu NenC2dzsbP66YKQi2bdkffz/I1pIeoBvNyhSV2cHrHmp3vizka4TdJuxbr36I2Qj S+MMfw7Yc8CoMfjryMw8P8b77C6t2OvbRa6A3f/N+Y8kAqPdW6oYDnVF/teI62vc 4guX+Tlnnxqg/pAZQDXF0ZCeLEbqhmjmtddC4KE8YM7rhEZhUYm3D3U8NdFsWFZl VOsoRiTLJ2tvhviCr/uDpc1sTkZNCyraODnSJhriuLv3ZMbm5ZsTap9rTC9a -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:32 2025 by rpki-client