This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/zXARBYgb0HFkRntS6wSAbnnvi_g.roa File: zXARBYgb0HFkRntS6wSAbnnvi_g.roa (raw, json) Hash identifier: mRX2CNqjqhDEt48FLMzZG05+CVPRvv8apF3qMXiyZZw= Subject key identifier: CD:70:11:05:88:1B:D0:71:64:46:7B:52:EB:04:80:6E:79:EF:8B:F8 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019C0A6B9FE35CD3400A8A0408CC7B395A33 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/zXARBYgb0HFkRntS6wSAbnnvi_g.roa Signing time: Thu 29 Jan 2026 15:42:30 +0000 ROA not before: Thu 29 Jan 2026 15:42:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 163.5.100.0/24 maxlen: 24 163.5.114.0/24 maxlen: 24 163.5.153.0/24 maxlen: 24 163.5.154.0/24 maxlen: 24 163.5.177.0/24 maxlen: 24 163.5.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0a:6b:9f:e3:5c:d3:40:0a:8a:04:08:cc:7b:39:5a:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 29 15:42:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd701105881bd07164467b52eb04806e79ef8bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bd:ae:15:97:1f:cb:75:a8:49:54:b5:1a:14: 45:78:8a:52:85:83:d0:05:d0:1a:e7:d0:0a:cc:a9: ca:dd:f2:42:9a:11:75:29:25:ca:54:87:ad:19:d5: 37:97:44:f0:c1:e9:b4:1c:c8:f4:2f:98:71:ce:54: 93:fe:2f:48:46:79:99:3a:8e:70:c4:af:79:92:54: 29:e6:0e:bf:2a:e4:11:bc:bd:21:54:78:d9:56:8c: f3:2d:dc:fa:77:8d:f5:3f:b1:1e:c9:c6:02:41:1e: 0c:c3:27:78:65:43:ce:ec:9e:9a:ce:e4:cc:3e:08: a7:47:fb:d0:79:6b:3e:4c:cd:a5:9b:96:37:54:8c: e1:d4:fe:1c:6e:70:8b:0c:2a:46:bf:f8:60:fc:be: 69:a7:5d:7b:75:79:e8:d4:75:f0:1d:aa:1e:39:25: 1d:7f:46:b2:f2:fa:12:1b:8e:f7:b9:1e:2b:1b:ac: 17:c8:58:1c:e8:96:d2:7a:c8:c5:4c:72:ce:08:18: 46:bd:f6:09:fa:91:06:77:51:1d:48:bc:0f:fa:53: 88:ba:49:be:42:5e:49:4b:8a:df:f9:4d:30:ab:f5: c3:4c:e1:7b:cf:63:66:23:5e:d8:ca:2b:12:ba:01: 31:cc:e2:40:3b:7d:57:74:93:12:7a:ba:39:21:fe: a6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:70:11:05:88:1B:D0:71:64:46:7B:52:EB:04:80:6E:79:EF:8B:F8 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/zXARBYgb0HFkRntS6wSAbnnvi_g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.100.0/24 163.5.114.0/24 163.5.153.0-163.5.154.255 163.5.177.0/24 163.5.252.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:96:c1:5c:19:32:58:e0:32:db:63:27:ba:8c:42:d2:bc:6a: 2e:50:6f:d5:f7:a8:69:9d:25:88:34:a2:59:bb:6e:a2:05:fc: 2f:69:10:6a:0c:bb:6e:16:8e:6b:e6:d7:97:8f:9c:a7:3c:a0: 79:09:bb:79:68:40:35:e7:e8:c7:b9:13:4f:95:83:f5:a9:0f: 2d:85:1b:4f:ec:38:69:60:68:9b:d2:48:68:64:7c:eb:cb:f4: c0:2e:a3:94:da:31:63:c1:85:ac:db:57:74:cc:34:de:de:4d: ca:86:dd:a0:cf:be:b9:3a:94:98:0b:d5:36:33:71:20:d9:79: 54:a3:9a:bb:7f:f2:5c:59:7b:bf:d8:6e:50:45:a3:a9:1d:6e: 9e:dc:76:28:de:2a:5a:a1:42:dc:e8:06:c0:63:01:d2:1a:12: bd:78:14:fd:de:dc:72:95:38:77:03:e9:be:71:49:d0:4f:dd: ae:52:e5:2a:8c:df:ee:3c:91:70:7b:18:08:c5:10:d3:5b:32: 21:a5:72:ee:0c:88:9b:b6:c5:6e:bc:c8:90:66:30:98:1f:a0: 2e:03:0a:35:a5:e9:71:ed:06:46:2d:c6:e9:35:a7:2a:b6:ec: 77:4c:9b:8b:e6:74:62:35:97:d7:be:cd:1b:cb:23:c5:d1:da: cb:99:1e:47 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZwKa5/jXNNACooECMx7OVozMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTI5MTU0MjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDcwMTEwNTg4MWJkMDcxNjQ0NjdiNTJlYjA0ODA2ZTc5ZWY4YmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA272uFZcfy3WoSVS1GhRFeIpShYPQ BdAa59AKzKnK3fJCmhF1KSXKVIetGdU3l0Twwem0HMj0L5hxzlST/i9IRnmZOo5w xK95klQp5g6/KuQRvL0hVHjZVozzLdz6d431P7EeycYCQR4Mwyd4ZUPO7J6azuTM PginR/vQeWs+TM2lm5Y3VIzh1P4cbnCLDCpGv/hg/L5pp117dXno1HXwHaoeOSUd f0ay8voSG473uR4rG6wXyFgc6JbSesjFTHLOCBhGvfYJ+pEGd1EdSLwP+lOIukm+ Ql5JS4rf+U0wq/XDTOF7z2NmI17YyisSugExzOJAO31XdJMSero5If6mHQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFM1wEQWIG9BxZEZ7UusEgG5574v4MB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvelhBUkJZZ2IwSEZrUm50UzZ3U0Fibm52aV9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAowVkAwQA owVyMAwDBACjBZkDBACjBZoDBACjBbEDBACjBfwwDQYJKoZIhvcNAQELBQADggEB AByWwVwZMljgMttjJ7qMQtK8ai5Qb9X3qGmdJYg0olm7bqIF/C9pEGoMu24Wjmvm 15ePnKc8oHkJu3loQDXn6Me5E0+Vg/WpDy2FG0/sOGlgaJvSSGhkfOvL9MAuo5Ta MWPBhazbV3TMNN7eTcqG3aDPvrk6lJgL1TYzcSDZeVSjmrt/8lxZe7/YblBFo6kd bp7cdijeKlqhQtzoBsBjAdIaEr14FP3e3HKVOHcD6b5xSdBP3a5S5SqM3+48kXB7 GAjFENNbMiGlcu4MiJu2xW68yJBmMJgfoC4DCjWl6XHtBkYtxuk1pyq27HdMm4vm dGI1l9e+zRvLI8XR2suZHkc= -----END CERTIFICATE-----Generated at Fri Jan 30 12:19:27 2026 by rpki-client