This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0_k30onDa1qqNeY6q1-UZKJdZyI.roa File: 0_k30onDa1qqNeY6q1-UZKJdZyI.roa (raw, json) Hash identifier: ohtWme57LXmJlXvwxxOpLipgyQ+0eX+Nt5p6/mNKXVs= Subject key identifier: D3:F9:37:D2:89:C3:6B:5A:AA:35:E6:3A:AB:5F:94:64:A2:5D:67:22 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B2CFEA825323DD46C16A46F955A3F5F3C Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0_k30onDa1qqNeY6q1-UZKJdZyI.roa Signing time: Wed 17 Dec 2025 15:47:25 +0000 ROA not before: Wed 17 Dec 2025 15:47:25 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 64267 IP address blocks: 163.5.14.0/24 maxlen: 24 163.5.33.0/24 maxlen: 24 163.5.61.0/24 maxlen: 24 163.5.91.0/24 maxlen: 24 163.5.211.0/24 maxlen: 24 163.5.239.0/24 maxlen: 24 163.5.245.0/24 maxlen: 24 163.5.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 18:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:fe:a8:25:32:3d:d4:6c:16:a4:6f:95:5a:3f:5f:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Dec 17 15:47:25 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d3f937d289c36b5aaa35e63aab5f9464a25d6722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f2:49:1a:7b:dd:07:40:bd:08:4f:ed:75:82: 89:c4:e5:1e:b8:3b:2a:9b:82:b4:ec:c8:81:c8:91: 70:9a:d9:3e:44:b4:28:73:2c:84:e6:eb:fe:c0:1c: 18:05:69:f3:5e:4c:70:a1:6c:13:b0:38:57:7c:78: c8:35:f8:e3:f9:96:1b:9b:07:07:9c:47:c6:1b:a3: d3:01:5d:dd:0a:de:4d:81:90:0c:e0:70:cb:12:ad: e9:f5:14:74:59:17:70:14:d8:05:5a:ce:6d:80:e7: 9b:0f:92:d7:62:09:09:c2:07:69:36:9f:60:92:41: 1e:0f:a5:45:b2:90:64:74:b8:a4:3d:85:79:ba:1c: 4d:90:8f:20:f4:eb:d6:23:83:1a:e6:cf:ca:c2:3d: 69:1a:85:81:f4:9e:98:9a:10:f4:5c:f0:68:94:eb: d1:6e:f6:7b:61:a3:38:e3:5b:0e:b3:a4:28:3a:1b: d3:6f:51:1a:44:01:45:3f:41:07:ac:c7:04:d4:a2: 74:5b:12:f6:2a:3f:a2:02:73:b5:04:9f:98:30:ab: 55:20:ed:1a:f1:fa:48:f0:56:1f:f1:a8:59:5c:f8: b3:b1:da:c2:0f:bd:69:d0:c9:2b:c4:ec:dd:b2:b4: 72:86:38:7c:34:2f:49:01:bd:e1:44:f8:92:a2:6e: 5d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F9:37:D2:89:C3:6B:5A:AA:35:E6:3A:AB:5F:94:64:A2:5D:67:22 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0_k30onDa1qqNeY6q1-UZKJdZyI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.14.0/24 163.5.33.0/24 163.5.61.0/24 163.5.91.0/24 163.5.211.0/24 163.5.239.0/24 163.5.245.0/24 163.5.255.0/24 Signature Algorithm: sha256WithRSAEncryption 67:8b:a6:31:1f:16:1b:80:a7:29:5a:d6:7b:d2:39:b9:16:43: a6:67:bd:75:bd:28:d3:89:fe:31:31:e8:a3:a1:18:6c:0d:67: e3:59:a8:18:82:11:fa:88:ff:38:fb:cd:90:dd:a7:f4:05:91: 9f:20:74:56:11:91:08:c6:93:b6:04:9a:2d:b6:81:af:f9:55: f4:5d:fe:6c:19:43:8f:3c:5e:fb:a3:57:db:23:6f:43:20:ff: 90:4e:0c:78:32:da:71:7e:c3:7c:25:b5:4c:17:91:d1:e7:1a: ae:53:c3:bb:d8:e2:8c:9f:fd:ee:cf:ae:cf:7e:b9:eb:8d:0c: dc:23:59:62:3b:06:7a:a6:ce:8a:84:ca:84:54:8f:0c:38:73: fd:b7:b6:ce:0c:40:19:08:a3:c7:ef:c4:79:3f:f8:b6:ba:6c: 42:31:9b:e4:ef:d9:6b:d3:48:39:e7:03:9e:c9:9c:e1:de:fb: 7b:f3:01:e1:e3:9e:c9:db:3d:ac:10:fa:06:7e:67:53:51:8a: 7c:6b:78:b1:22:15:19:c7:9a:30:2c:d4:51:4e:86:b8:fb:9c: 58:3b:5f:aa:d6:eb:99:4b:17:f0:36:29:5f:6c:bc:20:b0:74: b4:f8:d2:fe:15:28:04:b3:d7:f8:97:1e:3c:e6:ce:17:41:05: c1:ef:76:10 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZss/qglMj3UbBakb5VaP188MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMjE3MTU0NzI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2Y5MzdkMjg5YzM2YjVhYWEzNWU2M2FhYjVmOTQ2NGEyNWQ2NzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/JJGnvdB0C9CE/tdYKJxOUeuDsq m4K07MiByJFwmtk+RLQocyyE5uv+wBwYBWnzXkxwoWwTsDhXfHjINfjj+ZYbmwcH nEfGG6PTAV3dCt5NgZAM4HDLEq3p9RR0WRdwFNgFWs5tgOebD5LXYgkJwgdpNp9g kkEeD6VFspBkdLikPYV5uhxNkI8g9OvWI4Ma5s/Kwj1pGoWB9J6YmhD0XPBolOvR bvZ7YaM441sOs6QoOhvTb1EaRAFFP0EHrMcE1KJ0WxL2Kj+iAnO1BJ+YMKtVIO0a 8fpI8FYf8ahZXPizsdrCD71p0MkrxOzdsrRyhjh8NC9JAb3hRPiSom5d8wIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFNP5N9KJw2taqjXmOqtflGSiXWciMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvMF9rMzBvbkRhMXFxTmVZNnExLVVaS0pkWnlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAowUOAwQA owUhAwQAowU9AwQAowVbAwQAowXTAwQAowXvAwQAowX1AwQAowX/MA0GCSqGSIb3 DQEBCwUAA4IBAQBni6YxHxYbgKcpWtZ70jm5FkOmZ711vSjTif4xMeijoRhsDWfj WagYghH6iP84+82Q3af0BZGfIHRWEZEIxpO2BJottoGv+VX0Xf5sGUOPPF77o1fb I29DIP+QTgx4MtpxfsN8JbVMF5HR5xquU8O72OKMn/3uz67PfrnrjQzcI1liOwZ6 ps6KhMqEVI8MOHP9t7bODEAZCKPH78R5P/i2umxCMZvk79lr00g55wOeyZzh3vt7 8wHh457J2z2sEPoGfmdTUYp8a3ixIhUZx5owLNRRToa4+5xYO1+q1uuZSxfwNilf bLwgsHS0+NL+FSgEs9f4lx485s4XQQXB73YQ -----END CERTIFICATE-----Generated at Fri Dec 19 02:26:04 2025 by rpki-client