This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xiLnhZeQgaScKhs_hJC8C6jz7Pk.roa File: xiLnhZeQgaScKhs_hJC8C6jz7Pk.roa (raw, json) Hash identifier: /bUcdQt8FNgWF0j+sl+HXDm6frnCDjNQmuQMSNaiz4s= Subject key identifier: C6:22:E7:85:97:90:81:A4:9C:2A:1B:3F:84:90:BC:0B:A8:F3:EC:F9 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019BE1107566BC29688356050C2539702260 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xiLnhZeQgaScKhs_hJC8C6jz7Pk.roa Signing time: Wed 21 Jan 2026 14:58:30 +0000 ROA not before: Wed 21 Jan 2026 14:58:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215727 IP address blocks: 163.5.82.0/24 maxlen: 24 163.5.87.0/24 maxlen: 24 163.5.99.0/24 maxlen: 24 163.5.123.0/24 maxlen: 24 163.5.181.0/24 maxlen: 24 163.5.192.0/24 maxlen: 24 163.5.193.0/24 maxlen: 24 163.5.195.0/24 maxlen: 24 163.5.202.0/24 maxlen: 24 163.5.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:10:75:66:bc:29:68:83:56:05:0c:25:39:70:22:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 21 14:58:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c622e785979081a49c2a1b3f8490bc0ba8f3ecf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d0:d0:9a:63:15:f3:ff:66:01:44:fb:8b:b3: cf:2b:72:5c:84:a3:cd:84:4c:5c:cd:39:ef:26:4c: 11:90:16:f1:a9:d6:2b:c7:b1:7a:33:af:3a:0d:ac: fe:9a:5c:d6:70:49:a4:22:35:f9:d2:9f:6d:46:ea: 52:97:fb:06:00:4e:c1:42:d8:16:16:8a:c6:0b:47: 7e:61:ee:81:6c:87:0b:20:e2:bd:bd:23:12:a1:9c: a8:2c:98:fa:f0:13:0a:ca:96:a6:ff:8b:c1:b9:38: f3:dd:ef:dc:10:8f:9b:f3:02:bc:b8:1e:41:74:27: cb:14:12:01:02:b9:7c:df:d5:6d:fe:74:60:a4:96: a1:5b:62:e0:38:7b:df:df:12:cf:6d:19:1c:c5:0c: e2:a3:06:9b:02:40:b1:29:7e:91:a5:e1:9e:d1:14: 6f:72:09:c8:71:02:74:cb:ff:a5:a2:a2:4f:32:01: e9:90:6f:dd:fe:40:92:fd:a7:91:26:f9:bf:bd:82: 65:17:39:85:d8:11:f9:3a:8f:0a:62:cd:10:04:f6: d2:94:79:ee:f9:96:39:34:87:7c:bd:42:3b:be:8b: c7:d7:cf:33:18:9f:62:e5:53:67:3d:53:d9:ea:c4: c3:dd:a9:b9:d3:ff:3b:13:63:b0:fb:3b:74:59:7d: 96:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:22:E7:85:97:90:81:A4:9C:2A:1B:3F:84:90:BC:0B:A8:F3:EC:F9 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xiLnhZeQgaScKhs_hJC8C6jz7Pk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.82.0/24 163.5.87.0/24 163.5.99.0/24 163.5.123.0/24 163.5.181.0/24 163.5.192.0/23 163.5.195.0/24 163.5.202.0/24 163.5.213.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:94:17:b3:bf:59:a7:8c:fe:3f:71:77:24:3a:ce:20:97:c2: 4a:ab:92:bd:00:1d:18:c3:ee:51:a1:2e:9b:1b:8b:4c:7e:44: de:40:60:b0:57:79:ac:3f:d5:56:16:a9:b9:dc:c0:4c:3f:ee: 29:15:9f:71:99:8c:ec:72:06:7f:9d:b6:7b:8f:64:f4:b4:55: e0:a0:9a:ca:3e:39:c2:74:91:71:b1:16:5e:33:28:74:8f:17: 1b:9e:ef:15:fc:c6:2f:10:57:50:09:7c:1b:f6:1e:0b:3c:4d: 26:95:52:ac:de:e9:e1:d1:c7:77:b2:37:0f:47:3a:87:57:08: 61:1f:02:a1:83:3e:3a:69:3c:02:96:f6:ff:c8:2e:06:5f:9b: 0b:f8:21:8f:2c:f3:ca:15:47:67:5c:8f:7a:6c:17:c4:fd:f1: 65:79:fb:61:11:6e:9a:e0:8f:9c:fc:90:be:59:e1:b3:d6:77: 59:c6:45:bd:73:1f:2c:5a:3c:6b:77:10:16:b1:75:1e:c7:66: ca:00:b8:17:d3:af:31:9a:ff:67:e6:d3:e9:22:b7:6a:a4:cb: 8d:0d:a3:f2:df:ab:ed:c5:37:fb:c7:f7:00:8f:27:2a:11:f3: e5:f7:d9:6c:76:14:70:e0:c5:9a:2c:ee:93:f9:2d:af:d6:06: 02:6a:0e:e7 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZvhEHVmvClog1YFDCU5cCJgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTIxMTQ1ODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjIyZTc4NTk3OTA4MWE0OWMyYTFiM2Y4NDkwYmMwYmE4ZjNlY2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltDQmmMV8/9mAUT7i7PPK3JchKPN hExczTnvJkwRkBbxqdYrx7F6M686Daz+mlzWcEmkIjX50p9tRupSl/sGAE7BQtgW ForGC0d+Ye6BbIcLIOK9vSMSoZyoLJj68BMKypam/4vBuTjz3e/cEI+b8wK8uB5B dCfLFBIBArl839Vt/nRgpJahW2LgOHvf3xLPbRkcxQziowabAkCxKX6RpeGe0RRv cgnIcQJ0y/+loqJPMgHpkG/d/kCS/aeRJvm/vYJlFzmF2BH5Oo8KYs0QBPbSlHnu +ZY5NId8vUI7vovH188zGJ9i5VNnPVPZ6sTD3am50/87E2Ow+zt0WX2WOwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFMYi54WXkIGknCobP4SQvAuo8+z5MB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEveGlMbmhaZVFnYVNjS2hzX2hKQzhDNmp6N1BrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAowVSAwQA owVXAwQAowVjAwQAowV7AwQAowW1AwQBowXAAwQAowXDAwQAowXKAwQAowXVMA0G CSqGSIb3DQEBCwUAA4IBAQArlBezv1mnjP4/cXckOs4gl8JKq5K9AB0Yw+5RoS6b G4tMfkTeQGCwV3msP9VWFqm53MBMP+4pFZ9xmYzscgZ/nbZ7j2T0tFXgoJrKPjnC dJFxsRZeMyh0jxcbnu8V/MYvEFdQCXwb9h4LPE0mlVKs3unh0cd3sjcPRzqHVwhh HwKhgz46aTwClvb/yC4GX5sL+CGPLPPKFUdnXI96bBfE/fFlefthEW6a4I+c/JC+ WeGz1ndZxkW9cx8sWjxrdxAWsXUex2bKALgX068xmv9n5tPpIrdqpMuNDaPy36vt xTf7x/cAjycqEfPl99lsdhRw4MWaLO6T+S2v1gYCag7n -----END CERTIFICATE-----Generated at Sun Jan 25 07:15:27 2026 by rpki-client