This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/O9qHQ6lCOPkQPLLHlx9kPOtd74A.roa File: O9qHQ6lCOPkQPLLHlx9kPOtd74A.roa (raw, json) Hash identifier: 4zYUMekHdGg1l+5J6ups3HOBEEUN+6aICPGff+qdGZc= Subject key identifier: 3B:DA:87:43:A9:42:38:F9:10:3C:B2:C7:97:1F:64:3C:EB:5D:EF:80 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B121E8A1D016D0C8850E21D1B1F739E9D Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/O9qHQ6lCOPkQPLLHlx9kPOtd74A.roa Signing time: Fri 12 Dec 2025 10:32:29 +0000 ROA not before: Fri 12 Dec 2025 10:32:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197537 IP address blocks: 163.5.13.0/24 maxlen: 24 163.5.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:1e:8a:1d:01:6d:0c:88:50:e2:1d:1b:1f:73:9e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Dec 12 10:32:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3bda8743a94238f9103cb2c7971f643ceb5def80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3c:75:be:da:5a:e8:22:df:58:fa:70:99:37: d1:78:17:28:08:6c:ac:6c:02:04:25:36:93:30:33: ad:e9:10:83:f3:24:5b:ae:b1:7a:a4:10:18:00:3f: f4:85:76:d5:b1:0d:2e:15:b9:c4:bc:88:9e:e7:58: 48:04:86:09:41:1f:9d:5b:74:e2:fa:3a:76:bf:65: 43:4e:3a:fe:76:3e:08:5f:ec:f3:bd:9b:21:d4:fd: 22:d4:06:e7:6c:fc:a7:7e:7e:c6:4f:1f:5c:2a:0f: e7:57:bc:c4:cc:78:0c:01:fd:d2:52:82:ab:dd:01: 57:53:ee:a7:72:28:f3:83:26:9d:61:c0:fd:60:4a: 59:8c:76:93:b5:07:b0:25:e5:47:39:d0:00:c7:92: 9b:86:73:f2:4d:0f:0b:6c:b6:be:41:8b:b6:b1:8b: 2a:54:bd:96:9e:17:66:4d:fd:b9:da:ac:41:7f:66: 9e:49:0d:88:05:e5:c2:2e:c7:68:29:0a:58:bb:b8: fe:fd:01:cc:c0:43:28:3f:d3:f8:81:52:d5:75:87: 83:7a:39:a8:8b:56:f8:03:cf:67:91:a3:99:07:6c: 9a:e3:fc:92:8a:93:ec:37:61:a7:a7:08:b5:ae:c6: 13:d9:75:cd:93:f6:c6:56:c3:79:0b:c2:47:75:48: 9c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DA:87:43:A9:42:38:F9:10:3C:B2:C7:97:1F:64:3C:EB:5D:EF:80 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/O9qHQ6lCOPkQPLLHlx9kPOtd74A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.13.0/24 163.5.127.0/24 Signature Algorithm: sha256WithRSAEncryption 65:f0:5e:f9:90:35:9f:8b:cb:4e:d0:c6:ae:11:50:56:33:14: ae:ae:f6:67:72:85:2e:5f:11:d3:fc:27:03:26:0f:56:51:bb: a6:79:4c:67:40:d4:4d:a0:7f:25:01:5e:de:90:c0:99:51:fd: e7:04:57:0a:fc:f9:e5:87:71:04:7a:73:03:4f:5e:08:22:70: a0:26:30:3e:ca:2a:55:7b:83:82:14:d9:16:bb:22:d2:41:a3: f2:71:38:e0:87:5c:59:2b:6d:ab:f8:e8:f1:9b:35:f0:40:be: bd:af:bd:b5:e3:2e:3a:95:0e:1f:47:82:12:18:04:b0:e8:f1: 94:c1:4f:83:42:33:87:ef:a3:f2:d3:94:95:6c:87:f3:01:cc: 2a:13:0e:75:2b:02:a5:e5:44:fa:93:bd:fd:b9:93:7e:55:03: 2b:5d:fa:e1:58:42:f0:f9:36:35:59:bc:36:2a:46:3b:3c:2a: f4:b4:5b:4a:cc:d6:a8:c4:3a:32:4b:57:21:c1:ce:6d:57:3c: 93:68:63:85:ce:02:03:88:c4:39:c5:c2:c6:ab:31:6e:7a:2f: 4f:05:a3:22:a6:b4:73:44:1c:d4:4f:bc:30:7f:de:00:ab:37: c3:27:94:c7:a4:63:63:cc:c9:a5:10:26:0d:25:33:a2:72:2b: 88:3c:87:e4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsSHoodAW0MiFDiHRsfc56dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMjEyMTAzMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmRhODc0M2E5NDIzOGY5MTAzY2IyYzc5NzFmNjQzY2ViNWRlZjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjx1vtpa6CLfWPpwmTfReBcoCGys bAIEJTaTMDOt6RCD8yRbrrF6pBAYAD/0hXbVsQ0uFbnEvIie51hIBIYJQR+dW3Ti +jp2v2VDTjr+dj4IX+zzvZsh1P0i1AbnbPynfn7GTx9cKg/nV7zEzHgMAf3SUoKr 3QFXU+6ncijzgyadYcD9YEpZjHaTtQewJeVHOdAAx5KbhnPyTQ8LbLa+QYu2sYsq VL2WnhdmTf252qxBf2aeSQ2IBeXCLsdoKQpYu7j+/QHMwEMoP9P4gVLVdYeDejmo i1b4A89nkaOZB2ya4/ySipPsN2Gnpwi1rsYT2XXNk/bGVsN5C8JHdUic5wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDvah0OpQjj5EDyyx5cfZDzrXe+AMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvTzlxSFE2bENPUGtRUExMSGx4OWtQT3RkNzRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowUNAwQA owV/MA0GCSqGSIb3DQEBCwUAA4IBAQBl8F75kDWfi8tO0MauEVBWMxSurvZncoUu XxHT/CcDJg9WUbumeUxnQNRNoH8lAV7ekMCZUf3nBFcK/Pnlh3EEenMDT14IInCg JjA+yipVe4OCFNkWuyLSQaPycTjgh1xZK22r+OjxmzXwQL69r7214y46lQ4fR4IS GASw6PGUwU+DQjOH76Py05SVbIfzAcwqEw51KwKl5UT6k739uZN+VQMrXfrhWELw +TY1Wbw2KkY7PCr0tFtKzNaoxDoyS1chwc5tVzyTaGOFzgIDiMQ5xcLGqzFuei9P BaMiprRzRBzUT7wwf94AqzfDJ5THpGNjzMmlECYNJTOiciuIPIfk -----END CERTIFICATE-----Generated at Wed Dec 17 20:07:22 2025 by rpki-client