This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2GrHFJ0QvsAi7rQMX0pk-GKkKTo.roa File: 2GrHFJ0QvsAi7rQMX0pk-GKkKTo.roa (raw, json) Hash identifier: nzMxuwQZs5uagKOLyjARp2iH4Kzees0g0ft8Zb7EtQk= Subject key identifier: D8:6A:C7:14:9D:10:BE:C0:22:EE:B4:0C:5F:4A:64:F8:62:A4:29:3A Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B2CFEA779B0234EA1BBE98DE2E484CDE4 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2GrHFJ0QvsAi7rQMX0pk-GKkKTo.roa Signing time: Wed 17 Dec 2025 15:47:25 +0000 ROA not before: Wed 17 Dec 2025 15:47:25 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 163.5.8.0/24 maxlen: 24 163.5.28.0/24 maxlen: 24 163.5.30.0/24 maxlen: 24 163.5.38.0/24 maxlen: 24 163.5.47.0/24 maxlen: 24 163.5.53.0/24 maxlen: 24 163.5.58.0/24 maxlen: 24 163.5.59.0/24 maxlen: 24 163.5.97.0/24 maxlen: 24 163.5.106.0/24 maxlen: 24 163.5.112.0/24 maxlen: 24 163.5.118.0/24 maxlen: 24 163.5.121.0/24 maxlen: 24 163.5.129.0/24 maxlen: 24 163.5.131.0/24 maxlen: 24 163.5.132.0/24 maxlen: 24 163.5.139.0/24 maxlen: 24 163.5.143.0/24 maxlen: 24 163.5.146.0/24 maxlen: 24 163.5.151.0/24 maxlen: 24 163.5.157.0/24 maxlen: 24 163.5.160.0/24 maxlen: 24 163.5.167.0/24 maxlen: 24 163.5.175.0/24 maxlen: 24 163.5.178.0/24 maxlen: 24 163.5.179.0/24 maxlen: 24 163.5.182.0/24 maxlen: 24 163.5.189.0/24 maxlen: 24 163.5.196.0/24 maxlen: 24 163.5.199.0/24 maxlen: 24 163.5.201.0/24 maxlen: 24 163.5.203.0/24 maxlen: 24 163.5.204.0/24 maxlen: 24 163.5.205.0/24 maxlen: 24 163.5.214.0/24 maxlen: 24 163.5.215.0/24 maxlen: 24 163.5.218.0/24 maxlen: 24 163.5.224.0/24 maxlen: 24 163.5.228.0/24 maxlen: 24 163.5.238.0/24 maxlen: 24 163.5.241.0/24 maxlen: 24 163.5.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 18:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:fe:a7:79:b0:23:4e:a1:bb:e9:8d:e2:e4:84:cd:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Dec 17 15:47:25 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d86ac7149d10bec022eeb40c5f4a64f862a4293a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9f:e5:c9:ba:1b:bf:92:15:d7:e7:91:ab:be: 39:7d:58:c3:ba:1b:ea:a9:6b:82:ef:b5:f7:d1:20: e0:3d:02:b9:8d:97:4f:af:74:87:73:09:7a:e9:48: 53:3b:77:f2:66:c9:ae:83:24:fd:84:1d:74:6b:de: 3f:ea:d3:08:dc:4a:33:c7:ae:3d:74:f8:cc:a7:0f: 28:1c:29:4b:04:67:3d:8f:b1:1d:14:eb:7d:a0:0b: c8:dd:1b:0e:19:4d:ee:a5:12:00:90:47:41:46:61: f7:4b:02:57:fa:65:93:53:63:f2:a9:54:9d:28:66: ca:67:d4:be:34:49:df:a4:11:ba:5f:f0:22:31:be: e2:f2:73:62:7f:db:37:e3:9d:14:0e:2a:76:bf:78: 82:d5:27:5a:f6:f0:2a:74:a4:3b:05:8c:ee:fb:aa: fb:58:b9:f7:03:a6:7c:2f:53:a3:fb:f8:c6:8b:3c: 94:08:79:6e:1d:bf:d7:19:f9:f2:ef:38:16:83:d4: 7c:2d:e9:02:61:db:2c:a3:71:7a:32:f0:8b:78:33: 49:45:25:44:6c:03:ed:5d:a8:fc:85:8d:4f:71:67: e4:99:19:3b:61:4a:22:cb:66:46:5d:e0:88:8a:3c: f0:df:d4:2e:ef:2b:97:0d:39:4b:ea:87:72:e9:1e: 51:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6A:C7:14:9D:10:BE:C0:22:EE:B4:0C:5F:4A:64:F8:62:A4:29:3A X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2GrHFJ0QvsAi7rQMX0pk-GKkKTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.8.0/24 163.5.28.0/24 163.5.30.0/24 163.5.38.0/24 163.5.47.0/24 163.5.53.0/24 163.5.58.0/23 163.5.97.0/24 163.5.106.0/24 163.5.112.0/24 163.5.118.0/24 163.5.121.0/24 163.5.129.0/24 163.5.131.0-163.5.132.255 163.5.139.0/24 163.5.143.0/24 163.5.146.0/24 163.5.151.0/24 163.5.157.0/24 163.5.160.0/24 163.5.167.0/24 163.5.175.0/24 163.5.178.0/23 163.5.182.0/24 163.5.189.0/24 163.5.196.0/24 163.5.199.0/24 163.5.201.0/24 163.5.203.0-163.5.205.255 163.5.214.0/23 163.5.218.0/24 163.5.224.0/24 163.5.228.0/24 163.5.238.0/24 163.5.241.0/24 163.5.244.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:28:2d:1e:8e:76:be:9f:4f:09:d6:64:bf:13:64:34:47:1a: ac:5e:e0:94:e7:3c:e5:85:50:d8:a4:2e:0e:72:13:6c:97:70: a6:be:82:15:bc:ef:22:a7:e7:d5:06:3e:96:fc:bb:65:6d:b8: 63:02:ca:de:df:18:1f:04:0b:4f:83:fd:27:b3:93:69:40:38: c6:60:bf:d9:a9:02:54:52:12:30:14:f7:94:80:04:c7:42:a3: 2a:21:fa:19:11:a3:fd:11:1b:b3:79:01:92:c5:20:ce:10:90: 67:10:75:9c:4c:ab:aa:62:1e:0e:d2:a4:2f:26:46:5e:38:b1: 0b:97:57:fb:c4:62:9d:de:33:55:4c:4f:b3:1a:58:14:95:f7: 85:ee:ea:ac:ff:2b:6e:4e:2c:6c:bb:86:6d:f6:a6:f2:15:f6: 5c:14:ba:a5:ad:40:3b:fd:c2:0a:a2:6c:89:4e:fd:7b:72:b1: 5d:8e:76:a6:3c:0d:50:e4:79:3e:9a:22:55:b5:27:87:26:2e: 84:68:79:66:6f:34:db:60:47:69:1b:48:bb:bc:3b:81:2e:a4: 9d:5d:33:60:82:f4:da:7b:e0:e9:5d:90:e9:12:66:d4:38:96: 38:46:ae:8c:09:4c:08:d3:f9:28:e3:cd:52:de:e8:0e:75:1a: ac:d2:fd:dc -----BEGIN CERTIFICATE----- MIIF5TCCBM2gAwIBAgISAZss/qd5sCNOobvpjeLkhM3kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMjE3MTU0NzI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODZhYzcxNDlkMTBiZWMwMjJlZWI0MGM1ZjRhNjRmODYyYTQyOTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5/lybobv5IV1+eRq745fVjDuhvq qWuC77X30SDgPQK5jZdPr3SHcwl66UhTO3fyZsmugyT9hB10a94/6tMI3Eozx649 dPjMpw8oHClLBGc9j7EdFOt9oAvI3RsOGU3upRIAkEdBRmH3SwJX+mWTU2PyqVSd KGbKZ9S+NEnfpBG6X/AiMb7i8nNif9s3450UDip2v3iC1Sda9vAqdKQ7BYzu+6r7 WLn3A6Z8L1Oj+/jGizyUCHluHb/XGfny7zgWg9R8LekCYdsso3F6MvCLeDNJRSVE bAPtXaj8hY1PcWfkmRk7YUoiy2ZGXeCIijzw39Qu7yuXDTlL6ody6R5RmQIDAQAB o4IC8TCCAu0wHQYDVR0OBBYEFNhqxxSdEL7AIu60DF9KZPhipCk6MB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvMkdySEZKMFF2c0FpN3JRTVgwcGstR0trS1RvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBBQYIKwYBBQUHAQcBAf8EgfUwgfIwge8EAgABMIHoAwQA owUIAwQAowUcAwQAowUeAwQAowUmAwQAowUvAwQAowU1AwQBowU6AwQAowVhAwQA owVqAwQAowVwAwQAowV2AwQAowV5AwQAowWBMAwDBACjBYMDBACjBYQDBACjBYsD BACjBY8DBACjBZIDBACjBZcDBACjBZ0DBACjBaADBACjBacDBACjBa8DBAGjBbID BACjBbYDBACjBb0DBACjBcQDBACjBccDBACjBckwDAMEAKMFywMEAaMFzAMEAaMF 1gMEAKMF2gMEAKMF4AMEAKMF5AMEAKMF7gMEAKMF8QMEAKMF9DANBgkqhkiG9w0B AQsFAAOCAQEAPygtHo52vp9PCdZkvxNkNEcarF7glOc85YVQ2KQuDnITbJdwpr6C FbzvIqfn1QY+lvy7ZW24YwLK3t8YHwQLT4P9J7OTaUA4xmC/2akCVFISMBT3lIAE x0KjKiH6GRGj/REbs3kBksUgzhCQZxB1nEyrqmIeDtKkLyZGXjixC5dX+8Rind4z VUxPsxpYFJX3he7qrP8rbk4sbLuGbfam8hX2XBS6pa1AO/3CCqJsiU79e3KxXY52 pjwNUOR5PpoiVbUnhyYuhGh5Zm8022BHaRtIu7w7gS6knV0zYIL02nvg6V2Q6RJm 1DiWOEaujAlMCNP5KOPNUt7oDnUarNL93A== -----END CERTIFICATE-----Generated at Fri Dec 19 02:26:20 2025 by rpki-client