This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ps8gSV5UG-ZHS1tm3WYYuiELcR8.roa File: Ps8gSV5UG-ZHS1tm3WYYuiELcR8.roa (raw, json) Hash identifier: qCWvkEvNr5n0zcp/Z4h9RZwcz6G2Kw4RQGH2gsYVRso= Subject key identifier: 3E:CF:20:49:5E:54:1B:E6:47:4B:5B:66:DD:66:18:BA:21:0B:71:1F Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019BE10DB6943A05D29752EB760FA2678EBD Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ps8gSV5UG-ZHS1tm3WYYuiELcR8.roa Signing time: Wed 21 Jan 2026 14:55:30 +0000 ROA not before: Wed 21 Jan 2026 14:55:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 163.5.18.0/24 maxlen: 24 163.5.19.0/24 maxlen: 24 163.5.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 18:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:0d:b6:94:3a:05:d2:97:52:eb:76:0f:a2:67:8e:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 21 14:55:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ecf20495e541be6474b5b66dd6618ba210b711f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3b:51:a8:46:30:f1:e7:15:db:95:f0:75:6e: 0a:f0:04:ed:3d:1f:3b:6c:dc:14:7b:38:33:df:3b: b5:28:b5:bb:6d:64:09:2d:04:e4:e3:ad:55:2f:d3: 1d:ef:ce:3c:80:0c:d2:cd:de:6b:00:64:63:ed:c7: 35:b2:05:30:e8:4d:5c:95:e9:45:2b:96:04:c6:5c: 54:70:b6:a3:d8:19:1a:57:aa:31:f8:0f:01:cb:81: 0f:d0:62:41:f6:35:e0:10:22:4c:02:3f:fb:51:0e: 63:08:c7:39:aa:3e:67:7b:95:2a:4c:8d:c1:3d:d2: e9:28:37:c1:9a:a4:dc:2a:80:dc:8f:15:39:54:57: c8:d1:b7:c9:5e:9e:cf:7c:54:e6:0d:9f:fd:43:16: c1:72:bb:79:52:10:6f:85:d2:4f:04:cd:29:57:98: 82:d5:bb:6f:fb:d8:0d:36:c9:ea:c6:21:40:04:9e: 14:97:a3:3b:84:77:dc:8a:6f:a6:65:94:df:6a:0e: 58:1b:01:2b:00:ce:9b:64:c1:0c:35:2c:ad:8f:ac: bc:97:a5:3d:74:45:1b:51:4f:4c:97:19:24:eb:de: c4:dd:28:8e:56:58:24:55:70:1f:fb:d6:cc:16:fc: a4:f3:3b:96:8a:cb:99:96:8c:e8:36:04:71:7e:f9: 78:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CF:20:49:5E:54:1B:E6:47:4B:5B:66:DD:66:18:BA:21:0B:71:1F X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ps8gSV5UG-ZHS1tm3WYYuiELcR8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.18.0/23 163.5.102.0/24 Signature Algorithm: sha256WithRSAEncryption 85:44:25:24:da:29:78:ab:3e:3f:3b:53:3e:a6:43:ec:5c:36: 6b:2e:98:54:ea:75:e2:e4:ae:e4:9c:0c:03:9c:09:ca:71:50: 3e:c1:db:2c:4a:99:84:e8:78:87:c8:d3:d9:ce:0a:5d:e3:65: 44:59:a3:8b:c3:00:ce:54:97:90:a6:ef:0e:10:02:35:70:6a: 57:1e:8d:71:54:77:52:5c:5e:d2:88:2c:28:e3:e4:d3:75:53: fc:8e:82:5f:32:08:7e:46:ac:61:5b:aa:49:ba:6c:16:af:38: 03:77:61:23:13:04:0d:6f:61:f8:24:55:73:6f:c1:a4:98:ca: c7:d0:a6:38:17:2b:10:75:c9:2d:53:5c:11:5d:b4:6c:90:07: 60:76:f4:58:14:d8:0f:90:25:38:be:52:ce:62:49:66:9d:45: 53:d9:2e:e9:eb:17:84:46:92:f6:dd:bf:23:1f:0b:16:06:42: 27:0b:b7:9e:68:ad:33:7f:55:93:21:66:9d:b8:25:e7:1c:5b: 02:4b:27:56:33:f3:36:88:48:a1:db:2e:a1:8e:b0:31:3f:0f: 72:23:11:b1:a6:2a:6a:b7:cd:8a:bf:dc:9f:90:1c:45:03:79: cc:73:a1:eb:b5:ef:ef:0b:83:90:0a:74:8f:9a:18:5e:83:9e: 77:a7:f5:76 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvhDbaUOgXSl1Lrdg+iZ469MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTIxMTQ1NTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWNmMjA0OTVlNTQxYmU2NDc0YjViNjZkZDY2MThiYTIxMGI3MTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoztRqEYw8ecV25XwdW4K8ATtPR87 bNwUezgz3zu1KLW7bWQJLQTk461VL9Md7848gAzSzd5rAGRj7cc1sgUw6E1clelF K5YExlxUcLaj2BkaV6ox+A8By4EP0GJB9jXgECJMAj/7UQ5jCMc5qj5ne5UqTI3B PdLpKDfBmqTcKoDcjxU5VFfI0bfJXp7PfFTmDZ/9QxbBcrt5UhBvhdJPBM0pV5iC 1btv+9gNNsnqxiFABJ4Ul6M7hHfcim+mZZTfag5YGwErAM6bZMEMNSytj6y8l6U9 dEUbUU9Mlxkk697E3SiOVlgkVXAf+9bMFvyk8zuWisuZlozoNgRxfvl4ZwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD7PIEleVBvmR0tbZt1mGLohC3EfMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvUHM4Z1NWNVVHLVpIUzF0bTNXWVl1aUVMY1I4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBowUSAwQA owVmMA0GCSqGSIb3DQEBCwUAA4IBAQCFRCUk2il4qz4/O1M+pkPsXDZrLphU6nXi 5K7knAwDnAnKcVA+wdssSpmE6HiHyNPZzgpd42VEWaOLwwDOVJeQpu8OEAI1cGpX Ho1xVHdSXF7SiCwo4+TTdVP8joJfMgh+RqxhW6pJumwWrzgDd2EjEwQNb2H4JFVz b8GkmMrH0KY4FysQdcktU1wRXbRskAdgdvRYFNgPkCU4vlLOYklmnUVT2S7p6xeE RpL23b8jHwsWBkInC7eeaK0zf1WTIWaduCXnHFsCSydWM/M2iEih2y6hjrAxPw9y IxGxpipqt82Kv9yfkBxFA3nMc6Hrte/vC4OQCnSPmhheg553p/V2 -----END CERTIFICATE-----Generated at Sun Jan 25 03:58:28 2026 by rpki-client