This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1--Py_mDwDpfGwOQPlVG6P2H4rzw.roa File: 1--Py_mDwDpfGwOQPlVG6P2H4rzw.roa (raw, json) Hash identifier: i6w1SQ3r5PWcMfgM/1kpzIqebty8mvHrx3Sas1Sf4gg= Subject key identifier: FB:E3:F2:FE:60:F0:0E:97:C6:C0:E4:0F:95:51:BA:3F:61:F8:AF:3C Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E392EB202DB073BD2478D06F2CD39DB Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1--Py_mDwDpfGwOQPlVG6P2H4rzw.roa Signing time: Fri 02 Jan 2026 10:20:35 +0000 ROA not before: Fri 02 Jan 2026 10:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 154049 IP address blocks: 163.5.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2e:b2:02:db:07:3b:d2:47:8d:06:f2:cd:39:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbe3f2fe60f00e97c6c0e40f9551ba3f61f8af3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a2:71:38:48:1c:50:d0:3b:32:5f:0f:cd:b7: 81:99:d5:8d:40:5b:6d:f7:9d:07:c4:b8:fd:b6:77: fa:fa:a6:de:85:df:9a:a3:4b:35:c5:1d:05:f0:52: 30:e9:19:f9:d2:ed:f8:cc:a6:fa:32:cb:c3:6b:20: f4:1f:9d:37:8c:23:66:ef:51:f1:14:27:cf:d4:9f: 28:c3:47:f1:68:be:c6:32:1d:cd:47:d9:45:58:40: 07:e9:86:4f:ed:46:91:f6:93:3c:ea:44:e5:d3:4d: e9:46:3f:49:20:89:db:1d:d2:db:e7:10:eb:e6:89: 4a:34:ff:c4:4e:ff:4e:de:74:5d:d8:5f:d8:18:08: 0e:82:76:72:b1:29:6b:78:4c:4f:2b:af:22:76:39: 56:90:b4:9a:1a:7f:92:8f:9d:3e:ea:0e:ca:82:7c: fd:92:5e:b4:17:04:d9:11:c2:49:37:08:fc:06:b6: fe:34:c4:2b:bb:d0:09:56:8b:1b:b8:90:30:d0:b2: 5e:a6:9c:c5:42:fb:a9:e0:7d:0c:91:4e:1d:69:07: 49:e6:36:8f:fa:e8:91:b1:34:40:73:cd:ef:bb:45: 14:50:4f:69:c5:b2:ec:4f:8f:d5:3a:bb:0b:03:34: d9:49:5b:85:d3:3a:eb:b0:03:f8:71:81:e1:2c:7c: 42:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E3:F2:FE:60:F0:0E:97:C6:C0:E4:0F:95:51:BA:3F:61:F8:AF:3C X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1--Py_mDwDpfGwOQPlVG6P2H4rzw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.206.0/24 Signature Algorithm: sha256WithRSAEncryption 11:8c:8c:ed:70:a2:2e:ae:39:97:ca:5c:f7:ba:4c:57:6e:b4: 3c:99:aa:df:40:c4:36:25:71:d1:01:21:a7:9f:74:2d:1c:27: 4d:e6:70:70:73:50:95:c5:22:d5:b3:3e:0c:90:89:2a:b9:a1: ca:48:e7:b1:ba:fb:ab:83:d8:60:35:d9:61:99:10:e2:37:38: ac:05:03:b2:c4:77:c8:00:4e:7c:00:f1:a3:e6:a6:12:7d:ba: c4:e3:e0:d1:6a:31:56:8a:90:51:c7:ca:ff:0f:a4:ba:83:32: aa:1e:0e:ba:0f:4c:c8:4f:41:55:41:c9:00:14:15:3a:ec:91: 88:7d:65:ff:ac:d5:49:1e:8f:00:96:0d:c2:f2:8b:be:94:fd: 40:6a:f0:e0:34:bd:76:70:aa:6f:8d:8a:62:69:59:82:f8:e3: fc:9a:7a:1c:bd:77:58:0c:1d:20:ce:09:58:ad:d1:99:86:cc: b9:fc:4c:02:23:f1:98:d4:16:1b:f2:bd:02:4d:34:01:f2:47: e4:57:75:a0:7e:5b:de:5a:0a:64:2a:71:21:c1:aa:09:73:37: 52:31:b3:e0:e6:5a:cf:5c:f1:8a:41:9a:80:e7:60:95:10:36: 8f:ef:8a:48:29:c3:a5:36:37:8e:8e:0a:65:cf:6f:87:91:be: 31:e3:11:a7 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+OS6yAtsHO9JHjQbyzTnbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmUzZjJmZTYwZjAwZTk3YzZjMGU0MGY5NTUxYmEzZjYxZjhhZjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKJxOEgcUNA7Ml8PzbeBmdWNQFtt 950HxLj9tnf6+qbehd+ao0s1xR0F8FIw6Rn50u34zKb6MsvDayD0H503jCNm71Hx FCfP1J8ow0fxaL7GMh3NR9lFWEAH6YZP7UaR9pM86kTl003pRj9JIInbHdLb5xDr 5olKNP/ETv9O3nRd2F/YGAgOgnZysSlreExPK68idjlWkLSaGn+Sj50+6g7Kgnz9 kl60FwTZEcJJNwj8Brb+NMQru9AJVosbuJAw0LJeppzFQvup4H0MkU4daQdJ5jaP +uiRsTRAc83vu0UUUE9pxbLsT4/VOrsLAzTZSVuF0zrrsAP4cYHhLHxC7wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPvj8v5g8A6XxsDkD5VRuj9h+K88MB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvMS0tUHlfbUR3RHBmR3dPUVBsVkc2UDJINHJ6dy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTMvZDAyZGZiLTk2NzMtNDlhOC05NzFjLTlmZTk0MTA4ZmYw MS8xL0RPaFJ0dDFkTms3aG5nczRJQnMtamZKaVM4cy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKMFzjAN BgkqhkiG9w0BAQsFAAOCAQEAEYyM7XCiLq45l8pc97pMV260PJmq30DENiVx0QEh p590LRwnTeZwcHNQlcUi1bM+DJCJKrmhykjnsbr7q4PYYDXZYZkQ4jc4rAUDssR3 yABOfADxo+amEn26xOPg0WoxVoqQUcfK/w+kuoMyqh4Oug9MyE9BVUHJABQVOuyR iH1l/6zVSR6PAJYNwvKLvpT9QGrw4DS9dnCqb42KYmlZgvjj/Jp6HL13WAwdIM4J WK3RmYbMufxMAiPxmNQWG/K9Ak00AfJH5Fd1oH5b3loKZCpxIcGqCXM3UjGz4OZa z1zxikGagOdglRA2j++KSCnDpTY3jo4KZc9vh5G+MeMRpw== -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:53 2026 by rpki-client