This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-Q61hy1zu4nG0p0AFsNMbjfaA9s.roa File: 1-Q61hy1zu4nG0p0AFsNMbjfaA9s.roa (raw, json) Hash identifier: x+Ae6a5mRtSMlpGNl3YS8zn+vQLWwnr0Jz1+qw21YJA= Subject key identifier: F9:0E:B5:87:2D:73:BB:89:C6:D2:9D:00:16:C3:4C:6E:37:DA:03:DB Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B2D008F6ACDEDDCFAE172F27AEC6BB538 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-Q61hy1zu4nG0p0AFsNMbjfaA9s.roa Signing time: Wed 17 Dec 2025 15:49:29 +0000 ROA not before: Wed 17 Dec 2025 15:49:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205886 IP address blocks: 163.5.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 18:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:00:8f:6a:cd:ed:dc:fa:e1:72:f2:7a:ec:6b:b5:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Dec 17 15:49:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f90eb5872d73bb89c6d29d0016c34c6e37da03db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:94:04:78:8a:fb:71:c6:94:59:4f:53:5e:a2: 18:78:19:db:22:c8:f4:3f:ad:2e:e8:d7:f5:be:93: ea:22:fb:cf:0b:18:77:e4:90:c1:26:1a:1a:d5:9b: 11:24:d7:02:9e:96:8d:6a:c8:73:5a:d0:80:73:14: 28:dd:42:e9:d3:84:00:6c:c1:71:da:cd:04:73:cd: af:71:74:45:aa:e7:85:06:9f:95:e3:d8:3f:17:1c: ee:5a:25:4d:5e:30:0e:a9:4d:31:d8:cd:13:ac:c4: 13:9e:e1:4d:90:b8:6a:2d:6d:f6:b1:dd:b5:e6:84: 8c:ef:0b:ed:c2:c9:bc:40:a3:57:6e:cd:be:a3:50: c7:8e:da:8d:99:39:49:7f:fc:34:24:d9:f2:f8:50: 91:0b:e0:1f:6f:1a:87:74:a5:db:18:46:dc:f2:04: 9d:81:8c:90:a1:b2:0e:72:14:c6:b2:56:90:1f:fc: f0:b4:af:b1:7a:f1:7e:f5:5c:67:4b:01:41:d4:3a: 0a:42:02:4f:29:8e:c7:3b:4b:8e:39:34:0f:07:5e: fe:53:b6:bd:3d:2b:52:f0:ee:a8:2b:07:81:ce:16: 51:fe:9e:ce:bb:3f:3b:cb:7c:a6:26:db:eb:ab:dd: 66:1e:d6:36:c5:f2:9c:1f:38:ba:76:cf:6a:63:3e: 86:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:0E:B5:87:2D:73:BB:89:C6:D2:9D:00:16:C3:4C:6E:37:DA:03:DB X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-Q61hy1zu4nG0p0AFsNMbjfaA9s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.223.0/24 Signature Algorithm: sha256WithRSAEncryption 46:75:1f:88:8c:bb:3b:be:00:be:fd:0d:42:43:e7:94:7c:6a: 80:a0:c8:85:2e:a7:18:0b:88:65:ea:b4:ba:a2:49:f3:65:48: 06:07:56:d0:83:39:1c:35:b2:11:64:dc:ae:7f:09:51:8b:70: b0:2f:6e:10:ad:85:66:38:f1:32:76:59:da:fb:64:7e:f8:fb: 2d:88:77:30:04:eb:16:14:d6:52:25:19:32:3f:1b:a1:91:dc: 76:f1:eb:4f:8f:b1:01:27:47:24:c4:23:ff:79:e7:43:63:d0: 2e:ce:8f:76:84:a0:a6:cd:02:32:f9:9b:0a:61:98:5a:9a:38: 44:04:c0:a7:ce:46:8f:31:39:2f:c0:30:6d:73:f6:41:90:48: 30:b8:ac:1b:be:3f:62:98:38:6b:2d:a4:f7:36:23:65:de:24: bc:0a:b8:6f:2d:85:94:c0:f5:7b:c4:67:e3:61:65:d7:56:2b: 47:4c:22:50:a4:6e:01:f6:73:64:fb:7b:b3:90:78:c5:4b:f3: dd:bc:a3:27:d7:fa:2f:5c:71:8f:5c:ad:4c:04:73:fb:10:b9: 09:7c:43:4f:be:31:de:51:6d:65:a4:49:19:8c:74:9f:fb:94: 00:29:2d:15:63:6b:3b:3c:04:63:a8:5a:08:bf:a1:4a:a9:0a: 70:5a:82:ad -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZstAI9qze3c+uFy8nrsa7U4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMjE3MTU0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTBlYjU4NzJkNzNiYjg5YzZkMjlkMDAxNmMzNGM2ZTM3ZGEwM2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZQEeIr7ccaUWU9TXqIYeBnbIsj0 P60u6Nf1vpPqIvvPCxh35JDBJhoa1ZsRJNcCnpaNashzWtCAcxQo3ULp04QAbMFx 2s0Ec82vcXRFqueFBp+V49g/FxzuWiVNXjAOqU0x2M0TrMQTnuFNkLhqLW32sd21 5oSM7wvtwsm8QKNXbs2+o1DHjtqNmTlJf/w0JNny+FCRC+AfbxqHdKXbGEbc8gSd gYyQobIOchTGslaQH/zwtK+xevF+9VxnSwFB1DoKQgJPKY7HO0uOOTQPB17+U7a9 PStS8O6oKweBzhZR/p7Ouz87y3ymJtvrq91mHtY2xfKcHzi6ds9qYz6GxwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPkOtYctc7uJxtKdABbDTG432gPbMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvMS1RNjFoeTF6dTRuRzBwMEFGc05NYmpmYUE5cy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTMvZDAyZGZiLTk2NzMtNDlhOC05NzFjLTlmZTk0MTA4ZmYw MS8xL0RPaFJ0dDFkTms3aG5nczRJQnMtamZKaVM4cy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKMF3zAN BgkqhkiG9w0BAQsFAAOCAQEARnUfiIy7O74Avv0NQkPnlHxqgKDIhS6nGAuIZeq0 uqJJ82VIBgdW0IM5HDWyEWTcrn8JUYtwsC9uEK2FZjjxMnZZ2vtkfvj7LYh3MATr FhTWUiUZMj8boZHcdvHrT4+xASdHJMQj/3nnQ2PQLs6PdoSgps0CMvmbCmGYWpo4 RATAp85GjzE5L8AwbXP2QZBIMLisG74/Ypg4ay2k9zYjZd4kvAq4by2FlMD1e8Rn 42Fl11YrR0wiUKRuAfZzZPt7s5B4xUvz3byjJ9f6L1xxj1ytTARz+xC5CXxDT74x 3lFtZaRJGYx0n/uUACktFWNrOzwEY6haCL+hSqkKcFqCrQ== -----END CERTIFICATE-----Generated at Fri Dec 19 03:58:35 2025 by rpki-client