This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7AazBJU6ulxxDrS9ni-52vXEAwU.roa File: 7AazBJU6ulxxDrS9ni-52vXEAwU.roa (raw, json) Hash identifier: JxHfH0P4Lws87opItC/NJ6JVHXSUCCtfDAAheYeJnHA= Subject key identifier: EC:06:B3:04:95:3A:BA:5C:71:0E:B4:BD:9E:2F:B9:DA:F5:C4:03:05 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E39384CAF5260213D570962821F2119 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7AazBJU6ulxxDrS9ni-52vXEAwU.roa Signing time: Fri 02 Jan 2026 10:20:37 +0000 ROA not before: Fri 02 Jan 2026 10:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209181 IP address blocks: 163.5.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:38:4c:af:52:60:21:3d:57:09:62:82:1f:21:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec06b304953aba5c710eb4bd9e2fb9daf5c40305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9a:af:bd:0f:d7:9f:db:73:94:67:e8:96:14: d5:e4:60:0d:9d:1f:f6:81:98:bd:25:57:f2:7d:60: 81:cd:e1:e3:c9:57:70:4b:07:e0:8c:4b:e2:30:3c: a8:38:76:c3:35:a9:a4:1e:6c:b1:ed:bc:ce:b1:e5: 7d:c5:87:ef:c1:a5:6a:40:48:f3:a7:07:1a:d4:a4: cb:ed:36:5d:ca:44:cc:1d:d3:82:c0:57:41:3d:e8: 57:47:c8:eb:19:9f:07:95:cc:60:00:1b:3c:e0:ab: ef:f9:a3:0e:f5:e2:13:a2:d8:aa:73:83:c0:a6:a3: a8:6c:43:2d:24:cf:98:d9:40:41:32:05:b3:1e:2b: 14:f6:7d:96:a9:3d:c5:d1:83:27:d5:f4:3a:ef:f9: b8:34:9d:62:5c:6c:d6:4a:df:23:03:4a:a8:38:32: 61:d0:74:30:44:b7:7c:66:bf:04:3e:4b:7e:14:7a: ac:72:18:90:69:5a:c8:64:51:d8:0e:80:6a:1c:55: 1a:fe:46:fe:97:88:52:b6:1c:6a:9c:f0:01:49:f9: 57:44:72:29:6d:0c:84:3e:a7:3c:45:58:b2:b6:6d: a6:8f:6c:1f:eb:20:5d:b3:27:29:0c:22:f4:6c:71: f4:55:01:82:f8:66:e8:aa:34:dc:ad:ab:8d:f5:ad: 7c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:06:B3:04:95:3A:BA:5C:71:0E:B4:BD:9E:2F:B9:DA:F5:C4:03:05 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7AazBJU6ulxxDrS9ni-52vXEAwU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.218.0/24 Signature Algorithm: sha256WithRSAEncryption 09:48:dd:b0:22:a7:ea:6c:5b:9a:8a:28:53:12:11:5a:d9:b1: db:8d:33:46:60:d1:5b:6b:b9:4a:b1:f1:ac:47:17:91:dc:f2: 78:56:d7:df:ac:4b:de:89:24:df:d2:09:16:2a:14:3d:4e:1b: 9d:3d:24:de:a5:e1:23:40:96:43:4f:7b:4a:18:3d:51:80:23: 77:79:7e:8a:d9:d9:48:88:ae:a2:95:26:6e:63:e2:32:a9:50: a7:c7:31:2d:a3:45:6b:1f:e0:bb:29:18:07:be:90:94:16:f0: db:68:dc:e2:80:2b:89:58:e3:d9:c0:81:41:3e:d8:9e:9c:21: b2:76:33:23:8c:fd:94:b5:b1:2b:a2:6e:0b:d0:a4:f0:72:33: b1:92:be:08:a7:88:ae:63:8d:24:46:bd:15:74:a6:e4:3f:4d: ae:54:7f:7f:37:6f:c7:df:c9:72:d0:70:94:39:4c:fb:63:66: 05:3b:03:f6:f3:80:b4:7f:58:94:43:10:9a:98:f3:3d:17:29: 65:7b:ef:dc:ca:f9:4d:5f:54:d6:ec:8e:14:c4:ba:8d:ac:81: 2f:8a:9e:99:65:44:82:86:4a:d8:e8:6d:34:72:fa:49:72:ad: 83:ba:94:86:44:71:37:40:97:06:2e:4a:2d:5e:24:78:ff:3a: 05:44:a3:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OThMr1JgIT1XCWKCHyEZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzA2YjMwNDk1M2FiYTVjNzEwZWI0YmQ5ZTJmYjlkYWY1YzQwMzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZqvvQ/Xn9tzlGfolhTV5GANnR/2 gZi9JVfyfWCBzeHjyVdwSwfgjEviMDyoOHbDNamkHmyx7bzOseV9xYfvwaVqQEjz pwca1KTL7TZdykTMHdOCwFdBPehXR8jrGZ8HlcxgABs84Kvv+aMO9eITotiqc4PA pqOobEMtJM+Y2UBBMgWzHisU9n2WqT3F0YMn1fQ67/m4NJ1iXGzWSt8jA0qoODJh 0HQwRLd8Zr8EPkt+FHqschiQaVrIZFHYDoBqHFUa/kb+l4hSthxqnPABSflXRHIp bQyEPqc8RViytm2mj2wf6yBdsycpDCL0bHH0VQGC+GboqjTcrauN9a18FwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOwGswSVOrpccQ60vZ4vudr1xAMFMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvN0FhekJKVTZ1bHh4RHJTOW5pLTUydlhFQXdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowXaMA0G CSqGSIb3DQEBCwUAA4IBAQAJSN2wIqfqbFuaiihTEhFa2bHbjTNGYNFba7lKsfGs RxeR3PJ4VtffrEveiSTf0gkWKhQ9ThudPSTepeEjQJZDT3tKGD1RgCN3eX6K2dlI iK6ilSZuY+IyqVCnxzEto0VrH+C7KRgHvpCUFvDbaNzigCuJWOPZwIFBPtienCGy djMjjP2UtbErom4L0KTwcjOxkr4Ip4iuY40kRr0VdKbkP02uVH9/N2/H38ly0HCU OUz7Y2YFOwP284C0f1iUQxCamPM9Fylle+/cyvlNX1TW7I4UxLqNrIEvip6ZZUSC hkrY6G00cvpJcq2DupSGRHE3QJcGLkotXiR4/zoFRKOP -----END CERTIFICATE-----Generated at Sun Jan 25 13:06:03 2026 by rpki-client