This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pcACuBOHqyL2wCAAaBl6B3QPCPc.roa File: pcACuBOHqyL2wCAAaBl6B3QPCPc.roa (raw, json) Hash identifier: o09piDpICUoJqLeE3tJU/QS6sUNGXXr5P1pgGRSpdoo= Subject key identifier: A5:C0:02:B8:13:87:AB:22:F6:C0:20:00:68:19:7A:07:74:0F:08:F7 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019BEF70E06395A1AF65F138EFC84DCBB48F Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pcACuBOHqyL2wCAAaBl6B3QPCPc.roa Signing time: Sat 24 Jan 2026 09:58:30 +0000 ROA not before: Sat 24 Jan 2026 09:58:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 163.5.9.0/24 maxlen: 24 163.5.28.0/24 maxlen: 24 163.5.30.0/24 maxlen: 24 163.5.59.0/24 maxlen: 24 163.5.97.0/24 maxlen: 24 163.5.104.0/24 maxlen: 24 163.5.109.0/24 maxlen: 24 163.5.112.0/24 maxlen: 24 163.5.118.0/24 maxlen: 24 163.5.121.0/24 maxlen: 24 163.5.125.0/24 maxlen: 24 163.5.129.0/24 maxlen: 24 163.5.131.0/24 maxlen: 24 163.5.139.0/24 maxlen: 24 163.5.143.0/24 maxlen: 24 163.5.146.0/24 maxlen: 24 163.5.151.0/24 maxlen: 24 163.5.160.0/24 maxlen: 24 163.5.167.0/24 maxlen: 24 163.5.178.0/24 maxlen: 24 163.5.180.0/24 maxlen: 24 163.5.189.0/24 maxlen: 24 163.5.199.0/24 maxlen: 24 163.5.201.0/24 maxlen: 24 163.5.203.0/24 maxlen: 24 163.5.204.0/24 maxlen: 24 163.5.205.0/24 maxlen: 24 163.5.216.0/24 maxlen: 24 163.5.218.0/24 maxlen: 24 163.5.224.0/24 maxlen: 24 163.5.228.0/24 maxlen: 24 163.5.229.0/24 maxlen: 24 163.5.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ef:70:e0:63:95:a1:af:65:f1:38:ef:c8:4d:cb:b4:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 24 09:58:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5c002b81387ab22f6c0200068197a07740f08f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3d:4e:1d:e5:54:3f:86:b9:18:39:11:ef:2d: 1d:d5:34:a7:a3:be:12:42:79:81:3d:18:23:7d:f2: 1f:2e:cc:00:b6:66:6f:5c:79:63:a0:7c:c3:28:b5: 0b:7f:dc:c5:e3:75:5e:09:ae:00:36:8b:5f:ef:75: e5:8f:32:81:4d:a9:04:64:30:b4:37:0a:c1:ee:d5: 45:cd:83:27:b3:bd:7b:d2:d6:58:fa:f6:77:40:0f: 85:7a:96:fe:b2:4c:64:bf:9e:fb:93:56:da:e2:bc: 16:49:dd:3e:0a:f5:ad:96:b2:be:fd:c3:e3:82:7a: 35:14:3d:3b:a0:3e:c8:49:15:34:d7:12:61:42:ca: 9e:95:43:d9:5b:ef:e7:86:f5:11:d2:0e:46:54:a3: 37:d5:83:d9:f3:2b:9d:1f:ab:44:42:b4:25:23:be: 44:5d:6d:43:60:4a:b5:15:ee:06:dc:84:e3:2d:1e: c1:1b:79:58:0b:19:a8:08:64:31:ed:fd:ce:1f:83: ed:9e:49:be:f2:58:df:11:a7:7b:77:ea:3a:63:94: 0b:7e:d9:c2:c0:d0:e1:74:b4:40:c9:19:a3:2a:d1: 88:c9:a4:46:26:25:89:90:ed:a9:ab:c4:c3:56:45: 3b:4c:8c:56:72:d2:8d:af:29:ac:85:72:9f:ef:6e: 0e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C0:02:B8:13:87:AB:22:F6:C0:20:00:68:19:7A:07:74:0F:08:F7 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pcACuBOHqyL2wCAAaBl6B3QPCPc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.9.0/24 163.5.28.0/24 163.5.30.0/24 163.5.59.0/24 163.5.97.0/24 163.5.104.0/24 163.5.109.0/24 163.5.112.0/24 163.5.118.0/24 163.5.121.0/24 163.5.125.0/24 163.5.129.0/24 163.5.131.0/24 163.5.139.0/24 163.5.143.0/24 163.5.146.0/24 163.5.151.0/24 163.5.160.0/24 163.5.167.0/24 163.5.178.0/24 163.5.180.0/24 163.5.189.0/24 163.5.199.0/24 163.5.201.0/24 163.5.203.0-163.5.205.255 163.5.216.0/24 163.5.218.0/24 163.5.224.0/24 163.5.228.0/23 163.5.241.0/24 Signature Algorithm: sha256WithRSAEncryption 71:cd:ad:b9:3e:c0:13:13:25:39:0a:ae:29:ca:55:e2:e6:e2: 4f:cb:c0:73:38:e8:db:7b:9b:3c:f6:31:e5:5e:a4:cf:fd:53: d6:4b:e9:bf:8e:b4:91:e8:be:77:c5:14:8d:5d:9f:aa:32:a0: d7:43:c3:55:cb:84:3c:92:45:32:68:e2:10:76:c9:53:f8:b9: c0:b9:1c:19:96:1e:fd:bb:1d:a8:97:0c:66:45:26:12:cc:8e: 6f:4c:1e:64:be:9d:d1:60:07:4e:4e:6f:56:97:cd:10:4f:48: 1c:0b:df:dc:46:d9:91:a7:6d:6a:b5:5b:42:14:a5:ed:47:b7: 13:f0:81:92:8d:2f:12:d2:1e:94:e2:2c:15:1d:bf:c9:b7:3f: 8c:eb:4f:f4:82:d9:e5:33:b0:ff:14:f2:49:b2:75:43:92:7b: f6:54:ef:f1:7a:9d:1a:51:64:09:a6:bf:d3:bc:b4:09:f6:55: 1e:e7:e6:ca:f1:3a:0b:45:49:5e:34:4c:0f:d7:5f:64:48:81: 29:63:ce:1f:d0:f3:28:8c:b6:a5:85:98:06:8c:84:81:95:f5: 6a:4a:4d:8f:e2:97:f0:6c:fe:50:2e:ac:c2:69:a6:a6:d3:83: b6:3c:a2:3f:e8:1c:c8:c2:71:bd:8a:f5:b1:4d:06:f1:2a:6d: 97:d7:a5:c9 -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgISAZvvcOBjlaGvZfE478hNy7SPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTI0MDk1ODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWMwMDJiODEzODdhYjIyZjZjMDIwMDA2ODE5N2EwNzc0MGYwOGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz1OHeVUP4a5GDkR7y0d1TSno74S QnmBPRgjffIfLswAtmZvXHljoHzDKLULf9zF43VeCa4ANotf73XljzKBTakEZDC0 NwrB7tVFzYMns7170tZY+vZ3QA+Fepb+skxkv577k1ba4rwWSd0+CvWtlrK+/cPj gno1FD07oD7ISRU01xJhQsqelUPZW+/nhvUR0g5GVKM31YPZ8yudH6tEQrQlI75E XW1DYEq1Fe4G3ITjLR7BG3lYCxmoCGQx7f3OH4Ptnkm+8ljfEad7d+o6Y5QLftnC wNDhdLRAyRmjKtGIyaRGJiWJkO2pq8TDVkU7TIxWctKNrymshXKf724OfwIDAQAB o4ICxDCCAsAwHQYDVR0OBBYEFKXAArgTh6si9sAgAGgZegd0Dwj3MB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvcGNBQ3VCT0hxeUwyd0NBQWFCbDZCM1FQQ1BjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHZBggrBgEFBQcBBwEB/wSByTCBxjCBwwQCAAEwgbwDBACj BQkDBACjBRwDBACjBR4DBACjBTsDBACjBWEDBACjBWgDBACjBW0DBACjBXADBACj BXYDBACjBXkDBACjBX0DBACjBYEDBACjBYMDBACjBYsDBACjBY8DBACjBZIDBACj BZcDBACjBaADBACjBacDBACjBbIDBACjBbQDBACjBb0DBACjBccDBACjBckwDAME AKMFywMEAaMFzAMEAKMF2AMEAKMF2gMEAKMF4AMEAaMF5AMEAKMF8TANBgkqhkiG 9w0BAQsFAAOCAQEAcc2tuT7AExMlOQquKcpV4ubiT8vAczjo23ubPPYx5V6kz/1T 1kvpv460kei+d8UUjV2fqjKg10PDVcuEPJJFMmjiEHbJU/i5wLkcGZYe/bsdqJcM ZkUmEsyOb0weZL6d0WAHTk5vVpfNEE9IHAvf3EbZkadtarVbQhSl7Ue3E/CBko0v EtIelOIsFR2/ybc/jOtP9ILZ5TOw/xTySbJ1Q5J79lTv8XqdGlFkCaa/07y0CfZV HufmyvE6C0VJXjRMD9dfZEiBKWPOH9DzKIy2pYWYBoyEgZX1akpNj+KX8Gz+UC6s wmmmptODtjyiP+gcyMJxvYr1sU0G8Sptl9elyQ== -----END CERTIFICATE-----Generated at Sun Jan 25 08:48:11 2026 by rpki-client