This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/dc9Yr4fTFJtMKYAxg77WT6IdPxQ.roa File: dc9Yr4fTFJtMKYAxg77WT6IdPxQ.roa (raw, json) Hash identifier: om2X4GFsSCYoNpNcrB31ZamidHgDeat1sS2hVOie1eQ= Subject key identifier: 75:CF:58:AF:87:D3:14:9B:4C:29:80:31:83:BE:D6:4F:A2:1D:3F:14 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B076D1D338E373BFDEF21F3EF0607B9CF Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/dc9Yr4fTFJtMKYAxg77WT6IdPxQ.roa Signing time: Wed 10 Dec 2025 08:42:30 +0000 ROA not before: Wed 10 Dec 2025 08:42:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 154408 IP address blocks: 163.5.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 18:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:6d:1d:33:8e:37:3b:fd:ef:21:f3:ef:06:07:b9:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Dec 10 08:42:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=75cf58af87d3149b4c29803183bed64fa21d3f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c3:03:f8:be:95:e8:3b:2a:16:1a:58:46:3c: 5d:89:c1:ee:a2:0a:60:2c:85:c7:18:b8:41:da:6f: e3:57:c6:f0:7a:65:24:ce:a3:54:63:84:27:54:8f: fc:e4:30:8d:60:90:26:e8:a6:4b:d8:f2:07:dc:e7: 3b:db:b4:cc:b9:49:13:d5:8c:06:03:58:b7:46:df: 1a:e8:e2:81:a3:e5:14:92:8e:93:d4:c5:7f:22:41: 0d:56:06:13:8b:9a:2b:e4:54:a5:87:9c:fc:9a:dc: 38:18:7c:29:ef:36:64:bc:df:e6:63:47:46:4c:3c: 63:69:94:84:5e:49:05:56:a5:32:1c:60:c7:4f:0d: 7c:62:4d:41:a7:4c:60:11:f1:c1:2d:24:60:ee:d7: 85:fd:c5:ec:8c:82:d0:1f:7f:94:a4:dc:c6:c5:7a: 50:f6:0d:da:3c:60:50:d6:06:dd:d5:16:70:fe:48: f2:ad:0d:79:02:28:b0:2a:1a:95:ee:95:e3:b7:85: d1:9a:5b:c7:67:2a:03:fa:d4:5e:0e:e0:aa:dc:61: 45:2c:47:4c:02:ea:99:87:6c:cb:6f:78:a3:76:9d: 56:64:cf:2c:7b:41:ba:9c:32:7f:9e:a4:c3:0b:66: df:2c:3f:d5:c0:7b:4d:0e:cc:db:86:34:96:f9:4b: b4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:CF:58:AF:87:D3:14:9B:4C:29:80:31:83:BE:D6:4F:A2:1D:3F:14 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/dc9Yr4fTFJtMKYAxg77WT6IdPxQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.200.0/24 Signature Algorithm: sha256WithRSAEncryption 87:b4:da:f6:04:07:ad:83:9c:09:49:7a:a8:8e:dc:74:e8:c9: df:12:06:99:49:f0:81:99:f5:0d:62:f9:79:54:41:73:31:af: fd:73:28:62:79:e4:40:2f:1e:3d:c0:75:4d:c1:b9:80:ea:f3: d4:30:7b:fc:29:e5:b9:ff:80:44:82:47:02:1a:36:bb:15:68: 11:c5:b2:06:85:f3:fa:44:a7:9f:fb:55:b7:1b:60:0e:34:37: 74:d6:98:bd:fd:0c:eb:4d:53:d3:dc:96:00:74:2b:7c:5b:83: 46:10:c8:70:4a:38:d6:a4:c2:0d:af:cf:2e:17:04:5d:d5:0e: 14:4b:34:7a:67:bc:d1:1e:aa:6e:2e:d0:06:56:6c:d9:4e:88: 54:9b:8c:c5:c7:d8:9e:79:d0:f3:e0:d2:3a:14:ec:1b:40:dd: 0c:54:a6:25:e2:05:5f:fd:3a:2c:f5:6c:58:a7:91:9c:93:78: a7:81:8c:70:29:68:60:44:aa:84:22:04:72:e5:90:0d:fc:b9: 45:80:df:d6:65:3a:69:e5:8d:d2:69:e6:4e:56:17:b6:e2:a4: 7f:ff:37:6f:5b:20:c8:63:28:91:01:e0:1d:28:33:a1:d1:29: 98:fa:e9:c8:fc:78:b6:72:71:d3:45:03:53:5d:ba:62:62:89: 20:70:94:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsHbR0zjjc7/e8h8+8GB7nPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMjEwMDg0MjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWNmNThhZjg3ZDMxNDliNGMyOTgwMzE4M2JlZDY0ZmEyMWQzZjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsMD+L6V6DsqFhpYRjxdicHuogpg LIXHGLhB2m/jV8bwemUkzqNUY4QnVI/85DCNYJAm6KZL2PIH3Oc727TMuUkT1YwG A1i3Rt8a6OKBo+UUko6T1MV/IkENVgYTi5or5FSlh5z8mtw4GHwp7zZkvN/mY0dG TDxjaZSEXkkFVqUyHGDHTw18Yk1Bp0xgEfHBLSRg7teF/cXsjILQH3+UpNzGxXpQ 9g3aPGBQ1gbd1RZw/kjyrQ15AiiwKhqV7pXjt4XRmlvHZyoD+tReDuCq3GFFLEdM AuqZh2zLb3ijdp1WZM8se0G6nDJ/nqTDC2bfLD/VwHtNDszbhjSW+Uu0OwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHXPWK+H0xSbTCmAMYO+1k+iHT8UMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvZGM5WXI0ZlRGSnRNS1lBeGc3N1dUNklkUHhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowXIMA0G CSqGSIb3DQEBCwUAA4IBAQCHtNr2BAetg5wJSXqojtx06MnfEgaZSfCBmfUNYvl5 VEFzMa/9cyhieeRALx49wHVNwbmA6vPUMHv8KeW5/4BEgkcCGja7FWgRxbIGhfP6 RKef+1W3G2AONDd01pi9/QzrTVPT3JYAdCt8W4NGEMhwSjjWpMINr88uFwRd1Q4U SzR6Z7zRHqpuLtAGVmzZTohUm4zFx9ieedDz4NI6FOwbQN0MVKYl4gVf/Tos9WxY p5Gck3ingYxwKWhgRKqEIgRy5ZAN/LlFgN/WZTpp5Y3SaeZOVhe24qR//zdvWyDI YyiRAeAdKDOh0SmY+unI/Hi2cnHTRQNTXbpiYokgcJT0 -----END CERTIFICATE-----Generated at Fri Dec 19 02:26:03 2025 by rpki-client