This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xXBKz3w78BWey4GMUK4VH66vwdk.roa File: xXBKz3w78BWey4GMUK4VH66vwdk.roa (raw, json) Hash identifier: 47rdKUgp6If+V4QRpXzOBkxQM8aXhbPS7ns/WmG/TIk= Subject key identifier: C5:70:4A:CF:7C:3B:F0:15:9E:CB:81:8C:50:AE:15:1F:AE:AF:C1:D9 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E390B74C53EEC41B98CF0A3F283278C Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xXBKz3w78BWey4GMUK4VH66vwdk.roa Signing time: Fri 02 Jan 2026 10:20:26 +0000 ROA not before: Fri 02 Jan 2026 10:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2856 IP address blocks: 163.5.37.0/24 maxlen: 24 163.5.67.0/24 maxlen: 24 163.5.98.0/24 maxlen: 24 163.5.115.0/24 maxlen: 24 163.5.122.0/24 maxlen: 24 163.5.208.0/24 maxlen: 24 163.5.217.0/24 maxlen: 24 163.5.222.0/24 maxlen: 24 163.5.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:0b:74:c5:3e:ec:41:b9:8c:f0:a3:f2:83:27:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5704acf7c3bf0159ecb818c50ae151faeafc1d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f8:8e:68:12:45:e0:e5:75:00:03:bf:85:b8: 9b:43:5d:06:a8:a0:93:fc:83:de:69:02:b5:f2:85: 16:a5:04:e9:5f:0c:c9:21:50:83:52:9f:9f:c7:03: 07:54:73:a8:de:be:eb:36:7c:a5:e1:cc:6f:2f:8b: 91:bd:e6:a9:05:0a:c7:d2:2e:f1:de:62:c9:9d:d3: b4:94:78:eb:45:c0:6d:ff:58:56:ac:34:8a:f0:4d: 60:63:06:9c:0a:72:5e:9b:70:1b:d8:07:e6:ee:ed: 80:f8:71:22:9d:6d:30:ae:76:9a:87:80:8a:d8:6d: 2e:e4:75:0f:d8:72:c5:32:b4:cb:d9:95:b7:d4:64: a5:dd:48:d4:3c:d8:6c:f2:b8:00:31:81:c2:59:7e: a5:15:a2:4f:a4:c1:78:e8:7b:4e:64:90:f4:f8:ad: 91:75:63:e0:df:ab:fe:31:a9:44:67:c9:ab:d7:af: b8:9d:be:5c:7b:7a:47:91:49:39:a7:e3:2d:0a:15: 1b:e6:f2:9e:5a:20:2f:5a:07:b4:25:22:13:2e:5e: 8c:46:15:95:61:2c:a0:b8:bf:a5:76:71:59:34:b1: ed:e6:c1:48:0e:5d:2b:3f:10:75:ff:d9:16:1d:11: 58:2d:20:d5:be:0f:e2:ef:a9:c5:54:b7:c5:18:25: 83:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:70:4A:CF:7C:3B:F0:15:9E:CB:81:8C:50:AE:15:1F:AE:AF:C1:D9 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xXBKz3w78BWey4GMUK4VH66vwdk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.37.0/24 163.5.67.0/24 163.5.98.0/24 163.5.115.0/24 163.5.122.0/24 163.5.208.0/24 163.5.217.0/24 163.5.222.0/24 163.5.249.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:a9:0f:f5:aa:40:80:ad:52:ee:9e:a8:3e:37:e7:61:86:dc: d1:cb:dc:8b:87:5a:65:48:e8:4d:7e:1d:ff:20:d1:53:11:4f: 86:5f:1e:4d:1a:c2:e6:42:a8:e0:48:c3:0b:9c:f6:9f:85:89: 1e:73:83:c4:f7:8b:da:80:49:ab:20:90:49:d8:97:f4:32:c7: d1:b7:66:5b:17:ff:0d:28:03:6a:c8:7b:c2:e9:0d:0b:07:73: 3f:2e:4b:43:09:4c:20:aa:02:13:e5:82:39:65:3d:7d:1f:a1: 34:d0:7a:81:23:08:af:55:3b:da:18:2c:5d:66:08:09:2c:02: 52:d4:1f:dd:e4:7d:8e:c6:e8:a7:12:e0:43:e7:6d:13:16:56: 3a:b4:2a:a2:d1:8a:91:ea:d1:86:7c:a1:94:08:a0:a5:bc:4d: bc:0a:c9:18:90:41:72:f4:97:c1:79:61:5d:d3:e7:43:a3:12: c6:d3:c1:76:c0:26:0e:0d:04:2f:59:4a:2a:c7:a8:78:25:0e: 95:f3:93:69:49:1e:29:d6:13:b6:f9:22:8f:eb:d9:cd:f0:0f: 84:06:81:a7:76:ca:02:53:de:4f:02:cb:0e:32:93:75:f0:73: da:14:d7:fd:24:c4:c0:b6:fd:16:92:73:ff:b4:c8:69:71:0b: 56:23:78:a4 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt+OQt0xT7sQbmM8KPygyeMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTcwNGFjZjdjM2JmMDE1OWVjYjgxOGM1MGFlMTUxZmFlYWZjMWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufiOaBJF4OV1AAO/hbibQ10GqKCT /IPeaQK18oUWpQTpXwzJIVCDUp+fxwMHVHOo3r7rNnyl4cxvL4uRveapBQrH0i7x 3mLJndO0lHjrRcBt/1hWrDSK8E1gYwacCnJem3Ab2Afm7u2A+HEinW0wrnaah4CK 2G0u5HUP2HLFMrTL2ZW31GSl3UjUPNhs8rgAMYHCWX6lFaJPpMF46HtOZJD0+K2R dWPg36v+MalEZ8mr16+4nb5ce3pHkUk5p+MtChUb5vKeWiAvWge0JSITLl6MRhWV YSyguL+ldnFZNLHt5sFIDl0rPxB1/9kWHRFYLSDVvg/i76nFVLfFGCWDfQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFMVwSs98O/AVnsuBjFCuFR+ur8HZMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEveFhCS3ozdzc4QldleTRHTVVLNFZINjZ2d2RrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAowUlAwQA owVDAwQAowViAwQAowVzAwQAowV6AwQAowXQAwQAowXZAwQAowXeAwQAowX5MA0G CSqGSIb3DQEBCwUAA4IBAQB7qQ/1qkCArVLunqg+N+dhhtzRy9yLh1plSOhNfh3/ INFTEU+GXx5NGsLmQqjgSMMLnPafhYkec4PE94vagEmrIJBJ2Jf0MsfRt2ZbF/8N KANqyHvC6Q0LB3M/LktDCUwgqgIT5YI5ZT19H6E00HqBIwivVTvaGCxdZggJLAJS 1B/d5H2OxuinEuBD520TFlY6tCqi0YqR6tGGfKGUCKClvE28CskYkEFy9JfBeWFd 0+dDoxLG08F2wCYODQQvWUoqx6h4JQ6V85NpSR4p1hO2+SKP69nN8A+EBoGndsoC U95PAssOMpN18HPaFNf9JMTAtv0WknP/tMhpcQtWI3ik -----END CERTIFICATE-----Generated at Thu Jan 8 17:33:58 2026 by rpki-client