This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xccVjcT2lVF4e4587Ug2LjHVTVk.roa File: xccVjcT2lVF4e4587Ug2LjHVTVk.roa (raw, json) Hash identifier: LrlYjjUd5V7+ndfdLa0gb66j6/OOM+RK1FsiCETWhgA= Subject key identifier: C5:C7:15:8D:C4:F6:95:51:78:7B:8E:7C:ED:48:36:2E:31:D5:4D:59 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019AC9400BA7900D17D066D8CC3F97F379F0 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xccVjcT2lVF4e4587Ug2LjHVTVk.roa Signing time: Fri 28 Nov 2025 06:56:48 +0000 ROA not before: Fri 28 Nov 2025 06:56:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 163.5.8.0/24 maxlen: 24 163.5.9.0/24 maxlen: 24 163.5.13.0/24 maxlen: 24 163.5.30.0/24 maxlen: 24 163.5.38.0/24 maxlen: 24 163.5.47.0/24 maxlen: 24 163.5.53.0/24 maxlen: 24 163.5.58.0/24 maxlen: 24 163.5.59.0/24 maxlen: 24 163.5.97.0/24 maxlen: 24 163.5.102.0/24 maxlen: 24 163.5.106.0/24 maxlen: 24 163.5.112.0/24 maxlen: 24 163.5.118.0/24 maxlen: 24 163.5.121.0/24 maxlen: 24 163.5.127.0/24 maxlen: 24 163.5.129.0/24 maxlen: 24 163.5.132.0/24 maxlen: 24 163.5.139.0/24 maxlen: 24 163.5.143.0/24 maxlen: 24 163.5.146.0/24 maxlen: 24 163.5.151.0/24 maxlen: 24 163.5.157.0/24 maxlen: 24 163.5.160.0/24 maxlen: 24 163.5.167.0/24 maxlen: 24 163.5.175.0/24 maxlen: 24 163.5.178.0/24 maxlen: 24 163.5.179.0/24 maxlen: 24 163.5.182.0/24 maxlen: 24 163.5.189.0/24 maxlen: 24 163.5.201.0/24 maxlen: 24 163.5.203.0/24 maxlen: 24 163.5.204.0/24 maxlen: 24 163.5.205.0/24 maxlen: 24 163.5.214.0/24 maxlen: 24 163.5.218.0/24 maxlen: 24 163.5.224.0/24 maxlen: 24 163.5.228.0/24 maxlen: 24 163.5.238.0/24 maxlen: 24 163.5.241.0/24 maxlen: 24 163.5.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 09:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:40:0b:a7:90:0d:17:d0:66:d8:cc:3f:97:f3:79:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Nov 28 06:56:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c5c7158dc4f69551787b8e7ced48362e31d54d59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:81:16:20:1b:4b:82:44:b1:30:3f:fb:e8:3f: 0d:9c:f4:ea:95:5a:12:47:67:d2:ce:95:6a:7b:af: 5e:59:1b:ed:0f:fe:fb:76:4b:77:36:3c:d6:21:93: 14:15:3f:5e:1b:b6:6a:39:8a:91:ed:49:fa:8d:9e: d8:1f:8b:48:d3:d2:11:75:9b:40:88:4e:f5:33:7f: c4:cb:22:bf:84:0b:64:c7:2f:97:0f:e7:4c:08:d1: 9b:de:1c:fd:67:da:98:15:10:9a:ed:d5:b2:68:e5: 68:ae:6d:f7:f7:95:d8:3a:ca:99:a3:fc:00:bd:4c: a2:d4:bb:b5:e4:37:1c:8b:7c:f0:cb:e9:f5:9b:f2: 73:4f:1e:fb:b9:04:62:38:58:df:a5:f0:96:82:57: a5:43:19:96:4e:8a:11:a5:a5:b0:90:74:c0:fb:b3: 64:d1:03:64:ec:60:9c:80:d9:b3:26:d3:d1:9f:49: 9c:13:48:d1:64:11:89:ed:23:2b:91:e4:33:93:f9: e5:0d:f4:3e:6a:d0:52:2c:e4:80:46:19:fe:33:51: b6:8b:79:90:72:90:af:ae:99:fb:58:a9:93:c4:94: 12:55:c1:0b:7c:f4:0a:cf:84:6a:87:45:d8:7e:28: a2:da:1c:70:f1:6c:dd:65:1e:6e:ca:88:23:7d:a0: 08:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C7:15:8D:C4:F6:95:51:78:7B:8E:7C:ED:48:36:2E:31:D5:4D:59 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xccVjcT2lVF4e4587Ug2LjHVTVk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.8.0/23 163.5.13.0/24 163.5.30.0/24 163.5.38.0/24 163.5.47.0/24 163.5.53.0/24 163.5.58.0/23 163.5.97.0/24 163.5.102.0/24 163.5.106.0/24 163.5.112.0/24 163.5.118.0/24 163.5.121.0/24 163.5.127.0/24 163.5.129.0/24 163.5.132.0/24 163.5.139.0/24 163.5.143.0/24 163.5.146.0/24 163.5.151.0/24 163.5.157.0/24 163.5.160.0/24 163.5.167.0/24 163.5.175.0/24 163.5.178.0/23 163.5.182.0/24 163.5.189.0/24 163.5.201.0/24 163.5.203.0-163.5.205.255 163.5.214.0/24 163.5.218.0/24 163.5.224.0/24 163.5.228.0/24 163.5.238.0/24 163.5.241.0/24 163.5.244.0/24 Signature Algorithm: sha256WithRSAEncryption 90:9b:aa:f6:d5:a0:76:68:df:44:18:23:20:db:5f:96:c2:be: bd:35:c7:73:2d:a6:67:20:89:b6:5d:ee:e0:e2:c3:47:0a:a6: 72:3a:8c:be:fe:f1:60:52:ae:ab:57:20:f2:23:28:cd:b6:23: 68:0c:aa:c9:4f:b8:95:a9:fd:f0:92:2c:9b:b6:3f:b0:7e:be: 5b:2a:34:5f:b4:ff:a4:ba:06:6a:0d:35:50:41:d8:67:22:07: 2f:e4:8a:c3:f2:b7:1f:d2:88:f2:10:41:6e:f1:f2:39:a4:f1: 1c:ff:e1:a2:a5:b5:55:f3:e0:8b:34:10:94:f3:1e:4d:02:37: 88:f2:de:6c:b7:3e:20:fb:ea:4b:d1:f4:eb:27:88:d0:1a:bd: 8d:b0:22:29:7d:76:0c:2e:16:7b:41:0e:0c:f5:ee:a6:4b:85: fe:71:c0:37:eb:0a:e7:f2:8f:72:d0:76:00:6f:f6:af:48:af: d2:01:80:5f:cb:f5:7a:39:ea:0d:63:c2:d1:51:99:8c:5b:cd: 2f:9a:71:4c:ec:d3:82:9e:a2:86:9e:79:4b:ce:98:aa:9b:87: bd:ca:13:e2:10:f0:cc:9e:85:ae:6c:f0:e0:b3:9f:0a:c6:14: 11:7f:21:9d:f6:c7:7f:f4:ba:3d:96:3b:12:20:88:fb:52:8c: fd:de:23:6d -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgISAZrJQAunkA0X0GbYzD+X83nwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMTI4MDY1NjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWM3MTU4ZGM0ZjY5NTUxNzg3YjhlN2NlZDQ4MzYyZTMxZDU0ZDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYEWIBtLgkSxMD/76D8NnPTqlVoS R2fSzpVqe69eWRvtD/77dkt3NjzWIZMUFT9eG7ZqOYqR7Un6jZ7YH4tI09IRdZtA iE71M3/EyyK/hAtkxy+XD+dMCNGb3hz9Z9qYFRCa7dWyaOVorm3395XYOsqZo/wA vUyi1Lu15Dcci3zwy+n1m/JzTx77uQRiOFjfpfCWglelQxmWTooRpaWwkHTA+7Nk 0QNk7GCcgNmzJtPRn0mcE0jRZBGJ7SMrkeQzk/nlDfQ+atBSLOSARhn+M1G2i3mQ cpCvrpn7WKmTxJQSVcELfPQKz4Rqh0XYfiii2hxw8WzdZR5uyogjfaAIeQIDAQAB o4IC6DCCAuQwHQYDVR0OBBYEFMXHFY3E9pVReHuOfO1INi4x1U1ZMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEveGNjVmpjVDJsVkY0ZTQ1ODdVZzJMakhWVFZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIH9BggrBgEFBQcBBwEB/wSB7TCB6jCB5wQCAAEwgeADBAGj BQgDBACjBQ0DBACjBR4DBACjBSYDBACjBS8DBACjBTUDBAGjBToDBACjBWEDBACj BWYDBACjBWoDBACjBXADBACjBXYDBACjBXkDBACjBX8DBACjBYEDBACjBYQDBACj BYsDBACjBY8DBACjBZIDBACjBZcDBACjBZ0DBACjBaADBACjBacDBACjBa8DBAGj BbIDBACjBbYDBACjBb0DBACjBckwDAMEAKMFywMEAaMFzAMEAKMF1gMEAKMF2gME AKMF4AMEAKMF5AMEAKMF7gMEAKMF8QMEAKMF9DANBgkqhkiG9w0BAQsFAAOCAQEA kJuq9tWgdmjfRBgjINtflsK+vTXHcy2mZyCJtl3u4OLDRwqmcjqMvv7xYFKuq1cg 8iMozbYjaAyqyU+4lan98JIsm7Y/sH6+Wyo0X7T/pLoGag01UEHYZyIHL+SKw/K3 H9KI8hBBbvHyOaTxHP/hoqW1VfPgizQQlPMeTQI3iPLebLc+IPvqS9H06yeI0Bq9 jbAiKX12DC4We0EODPXupkuF/nHAN+sK5/KPctB2AG/2r0iv0gGAX8v1ejnqDWPC 0VGZjFvNL5pxTOzTgp6ihp55S86YqpuHvcoT4hDwzJ6Frmzw4LOfCsYUEX8hnfbH f/S6PZY7EiCI+1KM/d4jbQ== -----END CERTIFICATE-----Generated at Fri Dec 5 13:58:06 2025 by rpki-client