This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/dNcUiqVm3W6HM8lF0461VmYfEwo.roa File: dNcUiqVm3W6HM8lF0461VmYfEwo.roa (raw, json) Hash identifier: 00FSPI6MchbK0QrCxQRP29ZpvCX6BRn8+pCR+WcYTqE= Subject key identifier: 74:D7:14:8A:A5:66:DD:6E:87:33:C9:45:D3:8E:B5:56:66:1F:13:0A Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B0EAFA351890A0B6DECF346282C7B2C6F Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/dNcUiqVm3W6HM8lF0461VmYfEwo.roa Signing time: Thu 11 Dec 2025 18:32:30 +0000 ROA not before: Thu 11 Dec 2025 18:32:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 163.5.119.0/24 maxlen: 24 163.5.136.0/24 maxlen: 24 163.5.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 18:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:af:a3:51:89:0a:0b:6d:ec:f3:46:28:2c:7b:2c:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Dec 11 18:32:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=74d7148aa566dd6e8733c945d38eb556661f130a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:78:73:4f:2d:70:1d:dc:f5:88:a8:7d:cb:dd: d2:35:27:fa:81:4e:df:11:3d:1a:9e:68:5d:08:f3: a5:5f:87:b8:0b:23:47:07:42:56:e8:f9:48:b0:0a: a4:2c:c1:18:39:fa:be:4d:f1:2a:4b:3e:78:37:52: c5:24:89:8d:37:bf:1a:f9:45:e1:a0:24:00:64:5a: d5:bd:e6:71:1f:71:81:cc:b3:d1:d1:73:d4:14:76: b2:62:3d:d0:91:34:6e:bd:cd:4a:2d:c9:51:f8:fe: 3a:01:af:be:cf:b4:85:f0:b6:ab:c1:fd:56:2c:d1: cd:28:4a:b6:cc:d4:1f:f8:d5:c4:bc:4c:55:7d:d5: 9e:ae:53:23:79:48:2f:31:42:42:40:6c:23:ec:eb: 87:cc:73:b7:ff:69:2e:e1:b7:e9:db:b7:55:7f:39: ff:e1:b8:39:ed:cc:16:3f:21:61:41:0b:c4:b3:6b: 95:ab:a9:b1:1b:96:cb:47:85:39:7e:c3:c7:ae:3e: d5:e5:7b:dd:b7:67:e0:d6:73:47:58:4f:ba:68:07: 17:7a:48:aa:84:f2:75:53:0d:cb:c7:81:70:0e:1f: 87:be:2f:a0:2c:8c:63:fd:c3:14:0c:8e:d5:78:89: 6c:04:40:6d:87:2f:f4:ef:47:b9:6d:e3:6b:ce:b6: 29:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D7:14:8A:A5:66:DD:6E:87:33:C9:45:D3:8E:B5:56:66:1F:13:0A X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/dNcUiqVm3W6HM8lF0461VmYfEwo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.119.0/24 163.5.136.0/24 163.5.161.0/24 Signature Algorithm: sha256WithRSAEncryption 72:7d:0c:57:01:6c:f5:2b:87:03:54:c1:5f:09:f9:a8:e9:c4: 65:84:e2:82:2c:95:44:b1:4a:ac:a5:b3:8a:f9:e3:d5:5b:36: e9:ad:4b:ea:be:ab:71:dc:d6:7e:83:d9:9f:da:c9:b8:16:4c: cf:96:dd:38:94:66:78:da:14:52:b7:b7:e7:36:c8:a0:f7:38: d2:dd:48:1b:cb:a1:86:ea:b0:d1:af:3a:87:dc:c4:e0:05:91: a8:7d:b2:48:f1:85:42:55:fe:4a:cd:19:42:da:ec:3a:e3:0f: 0f:b3:62:71:f4:3e:44:dc:9e:58:87:33:20:90:1f:b9:b6:e4: c5:4c:01:32:16:ac:b1:a8:10:47:1a:a9:8b:98:ea:cb:47:c8: f7:9e:46:09:19:33:df:34:4d:94:06:be:0d:a9:88:79:f1:72: 59:7e:79:9a:cd:ad:70:6b:8c:67:2d:07:e4:44:ab:00:70:45: c7:53:09:53:86:58:6a:9d:55:01:77:4c:29:03:c9:bc:e2:a4: 26:29:42:91:35:82:5f:b1:c6:38:ca:4c:67:2a:49:e2:2c:bc: 53:94:69:8f:97:a5:3c:33:78:38:6a:d7:fd:a4:60:7e:80:bc: 93:5a:f9:0a:e6:e2:0c:e9:f6:2c:05:2f:ec:c9:29:18:7d:2f: 7d:c0:b5:ff -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsOr6NRiQoLbezzRigseyxvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMjExMTgzMjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGQ3MTQ4YWE1NjZkZDZlODczM2M5NDVkMzhlYjU1NjY2MWYxMzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3hzTy1wHdz1iKh9y93SNSf6gU7f ET0anmhdCPOlX4e4CyNHB0JW6PlIsAqkLMEYOfq+TfEqSz54N1LFJImNN78a+UXh oCQAZFrVveZxH3GBzLPR0XPUFHayYj3QkTRuvc1KLclR+P46Aa++z7SF8Larwf1W LNHNKEq2zNQf+NXEvExVfdWerlMjeUgvMUJCQGwj7OuHzHO3/2ku4bfp27dVfzn/ 4bg57cwWPyFhQQvEs2uVq6mxG5bLR4U5fsPHrj7V5Xvdt2fg1nNHWE+6aAcXekiq hPJ1Uw3Lx4FwDh+Hvi+gLIxj/cMUDI7VeIlsBEBthy/070e5beNrzrYpiwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHTXFIqlZt1uhzPJRdOOtVZmHxMKMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvZE5jVWlxVm0zVzZITThsRjA0NjFWbVlmRXdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAowV3AwQA owWIAwQAowWhMA0GCSqGSIb3DQEBCwUAA4IBAQByfQxXAWz1K4cDVMFfCfmo6cRl hOKCLJVEsUqspbOK+ePVWzbprUvqvqtx3NZ+g9mf2sm4FkzPlt04lGZ42hRSt7fn Nsig9zjS3Ugby6GG6rDRrzqH3MTgBZGofbJI8YVCVf5KzRlC2uw64w8Ps2Jx9D5E 3J5YhzMgkB+5tuTFTAEyFqyxqBBHGqmLmOrLR8j3nkYJGTPfNE2UBr4NqYh58XJZ fnmaza1wa4xnLQfkRKsAcEXHUwlThlhqnVUBd0wpA8m84qQmKUKRNYJfscY4ykxn KkniLLxTlGmPl6U8M3g4atf9pGB+gLyTWvkK5uIM6fYsBS/sySkYfS99wLX/ -----END CERTIFICATE-----Generated at Fri Dec 19 02:26:03 2025 by rpki-client