This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/T9NbmP8ym8lH8uVccmPGND6BAoc.roa File: T9NbmP8ym8lH8uVccmPGND6BAoc.roa (raw, json) Hash identifier: CA6POP9Evwxb+KFKXKaX8F+5ewxXdEhoXa9/mqXFR8E= Subject key identifier: 4F:D3:5B:98:FF:32:9B:C9:47:F2:E5:5C:72:63:C6:34:3E:81:02:87 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B2CFDA15C7AEEDE97202329C63B598754 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/T9NbmP8ym8lH8uVccmPGND6BAoc.roa Signing time: Wed 17 Dec 2025 15:46:17 +0000 ROA not before: Wed 17 Dec 2025 15:46:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 54252 IP address blocks: 163.5.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 18:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:fd:a1:5c:7a:ee:de:97:20:23:29:c6:3b:59:87:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Dec 17 15:46:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4fd35b98ff329bc947f2e55c7263c6343e810287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:20:93:25:2d:96:4c:ef:84:e1:57:ae:49:4b: df:ee:6f:d4:56:fc:04:88:b9:c1:be:6c:6f:fe:16: 82:6d:70:e1:85:45:3d:73:31:93:8c:e4:54:b7:9a: ef:e8:1c:6f:26:70:d0:0f:9b:ea:74:2e:c8:06:d1: b3:08:77:79:28:15:3a:62:f9:74:a7:43:8f:24:55: 8b:70:3d:06:83:82:8c:2f:72:a2:ad:15:73:f3:7e: ef:02:66:99:b5:fe:c4:2e:45:3a:fc:9c:5f:51:a1: 62:32:8c:c4:8c:f8:f0:fd:c1:41:90:f6:40:53:6b: f3:ae:d8:08:da:2d:ae:1b:51:22:b4:df:27:9c:75: 34:5e:ab:e1:8e:55:47:26:1c:68:49:ff:49:44:3f: 4a:60:91:b8:99:c4:bf:46:87:fb:6e:ee:b5:70:9c: af:7e:70:a1:e7:1b:60:58:99:38:c0:87:6d:6e:50: db:5b:72:35:a8:ef:95:d9:1d:bf:92:84:4c:ab:6b: c0:55:cd:1c:18:36:0f:4d:59:85:f0:a3:dd:8a:41: a1:39:e5:a2:2c:3c:74:94:92:a6:8c:64:64:18:b9: 3b:73:84:45:f1:34:ba:61:c3:d3:12:3c:b1:11:3c: 6a:be:ad:45:bb:f3:d9:e8:3f:a5:de:0f:de:c6:ce: 59:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D3:5B:98:FF:32:9B:C9:47:F2:E5:5C:72:63:C6:34:3E:81:02:87 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/T9NbmP8ym8lH8uVccmPGND6BAoc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.30.0/24 Signature Algorithm: sha256WithRSAEncryption 24:f0:1b:05:0d:b4:e6:dc:e8:63:a4:a0:ea:ae:7a:17:26:98: 78:32:ef:24:79:ed:77:48:d7:b4:8a:35:5f:c8:62:96:9f:3a: fb:c4:d7:c8:68:34:e8:5f:f2:54:d3:69:ed:1d:a8:ac:21:4d: b1:bc:a1:c0:7e:84:cf:a0:7b:be:7f:38:58:f7:c3:d7:e2:41: 1f:47:60:83:73:1d:f1:15:c1:3a:69:ec:b9:09:8f:05:80:83: 6f:6f:60:bb:c3:84:1f:82:71:91:d8:59:67:60:14:37:9e:0e: e9:bd:95:a7:64:9c:f7:9a:d3:0a:94:bb:40:3c:eb:92:e7:59: 1b:81:4c:db:e9:19:7e:a7:06:60:4a:8a:43:3a:04:9e:79:60: 1c:57:7e:06:c5:6f:ca:32:f3:ef:60:a5:3c:e7:89:a2:74:cc: 6e:34:85:a8:76:c7:2e:c9:09:28:97:2e:5e:5f:aa:98:b3:c6: 47:65:45:57:90:17:fe:14:be:0f:cc:7b:33:76:53:72:e5:22: ee:30:a0:1d:21:f3:34:b1:f8:50:fe:bd:3d:6a:2a:61:40:5f: 8b:9d:d9:38:22:36:f4:a5:9f:46:c2:73:d6:28:2e:94:2d:12: c6:e4:b1:6b:fa:fd:b4:82:2d:a9:6a:f5:26:fc:ca:de:1e:97: 23:f0:41:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZss/aFceu7elyAjKcY7WYdUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMjE3MTU0NjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmQzNWI5OGZmMzI5YmM5NDdmMmU1NWM3MjYzYzYzNDNlODEwMjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCCTJS2WTO+E4VeuSUvf7m/UVvwE iLnBvmxv/haCbXDhhUU9czGTjORUt5rv6BxvJnDQD5vqdC7IBtGzCHd5KBU6Yvl0 p0OPJFWLcD0Gg4KML3KirRVz837vAmaZtf7ELkU6/JxfUaFiMozEjPjw/cFBkPZA U2vzrtgI2i2uG1EitN8nnHU0XqvhjlVHJhxoSf9JRD9KYJG4mcS/Rof7bu61cJyv fnCh5xtgWJk4wIdtblDbW3I1qO+V2R2/koRMq2vAVc0cGDYPTVmF8KPdikGhOeWi LDx0lJKmjGRkGLk7c4RF8TS6YcPTEjyxETxqvq1Fu/PZ6D+l3g/exs5ZiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE/TW5j/MpvJR/LlXHJjxjQ+gQKHMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvVDlOYm1QOHltOGxIOHVWY2NtUEdORDZCQW9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowUeMA0G CSqGSIb3DQEBCwUAA4IBAQAk8BsFDbTm3OhjpKDqrnoXJph4Mu8kee13SNe0ijVf yGKWnzr7xNfIaDToX/JU02ntHaisIU2xvKHAfoTPoHu+fzhY98PX4kEfR2CDcx3x FcE6aey5CY8FgINvb2C7w4QfgnGR2FlnYBQ3ng7pvZWnZJz3mtMKlLtAPOuS51kb gUzb6Rl+pwZgSopDOgSeeWAcV34GxW/KMvPvYKU854midMxuNIWodscuyQkoly5e X6qYs8ZHZUVXkBf+FL4PzHszdlNy5SLuMKAdIfM0sfhQ/r09aiphQF+Lndk4Ijb0 pZ9GwnPWKC6ULRLG5LFr+v20gi2pavUm/MreHpcj8EHs -----END CERTIFICATE-----Generated at Fri Dec 19 02:26:05 2025 by rpki-client