This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/u68Fkc98Glqkki9nyGAW8tEgM2k.roa File: u68Fkc98Glqkki9nyGAW8tEgM2k.roa (raw, json) Hash identifier: i3NYlVJyKzW5D8gZYx6yiX1Wff8DFSXbFHdxdv0mo5g= Subject key identifier: BB:AF:05:91:CF:7C:1A:5A:A4:92:2F:67:C8:60:16:F2:D1:20:33:69 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B2CFDA2180395EFA0E43D76FBA3B7B7C7 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/u68Fkc98Glqkki9nyGAW8tEgM2k.roa Signing time: Wed 17 Dec 2025 15:46:18 +0000 ROA not before: Wed 17 Dec 2025 15:46:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215727 IP address blocks: 163.5.123.0/24 maxlen: 24 163.5.192.0/24 maxlen: 24 163.5.193.0/24 maxlen: 24 163.5.195.0/24 maxlen: 24 163.5.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 18:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:fd:a2:18:03:95:ef:a0:e4:3d:76:fb:a3:b7:b7:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Dec 17 15:46:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bbaf0591cf7c1a5aa4922f67c86016f2d1203369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0c:43:5d:50:97:a6:a9:fd:0b:3a:17:bc:e7: 22:50:c8:a8:30:4c:3f:be:70:49:6b:df:9f:4a:c6: 76:c3:86:ed:7d:ec:bd:11:ed:48:ce:57:ce:b5:95: b0:c6:52:f8:20:b4:c2:6e:92:c7:54:f1:a9:d4:bc: 01:80:5c:0b:99:99:f6:b9:50:39:e9:a8:2b:ca:6f: 8f:2e:c9:a0:a9:0c:81:ca:b9:36:4c:74:e6:59:52: 99:9f:05:09:9c:9c:e8:20:18:ca:55:21:cd:95:d1: 30:9a:36:22:9e:ea:22:75:b9:4a:02:1d:ce:09:35: 54:3f:9a:bc:d2:76:7b:52:22:72:cb:b0:63:29:da: 86:db:a1:67:3b:c9:5f:e1:c1:27:e4:d8:41:0e:92: e7:a4:dd:ba:5c:90:27:a5:f1:da:5c:f3:66:80:04: 8d:21:7b:36:63:98:7d:ca:d4:56:86:6b:9a:a4:3b: 58:2c:fc:9f:35:d1:79:7b:50:5e:d8:53:fc:37:b5: f7:64:99:61:d9:b5:8c:2a:09:12:df:a9:cf:ec:53: bb:30:81:f8:e8:08:a5:c4:3e:23:53:0b:42:d2:e4: 2a:f0:f5:3c:d2:aa:cc:99:a4:bf:2c:ae:b8:6e:19: 6a:7b:d5:42:b9:78:16:b8:f0:92:40:e4:a8:3f:cd: 3a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AF:05:91:CF:7C:1A:5A:A4:92:2F:67:C8:60:16:F2:D1:20:33:69 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/u68Fkc98Glqkki9nyGAW8tEgM2k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.123.0/24 163.5.192.0/23 163.5.195.0/24 163.5.213.0/24 Signature Algorithm: sha256WithRSAEncryption ae:5a:62:d0:78:f4:30:72:66:48:e2:54:c4:a8:13:02:87:91: 0c:4e:1e:72:39:31:af:96:e2:23:8d:25:f6:40:70:61:68:48: 86:5a:b0:99:f0:08:be:44:bd:eb:0f:75:e5:8d:a8:95:42:1f: e2:11:b5:b5:c6:7a:68:af:c4:21:5b:0e:e2:80:ed:9a:e0:9b: 9b:94:af:d2:e6:d5:2a:47:8f:88:ab:13:c9:21:1a:45:b0:84: 48:cd:31:79:f8:48:b2:d4:90:87:08:f2:b3:31:7b:28:73:42: 77:aa:4d:d5:7d:63:91:2a:33:59:e9:59:c1:dd:c9:7f:6c:cc: f0:56:73:d3:36:7a:3a:5d:de:12:98:12:4f:63:f6:64:f6:e4: 4f:86:9e:38:a1:85:d2:a3:17:9b:fc:52:99:e7:e3:2d:2d:5c: 51:2e:88:6a:3b:c5:bb:c3:26:b2:88:9d:61:de:13:7e:77:65: aa:c1:db:20:27:9d:b0:2a:59:93:14:9d:94:53:da:c1:55:9b: f0:49:2c:aa:dd:09:fb:b4:34:97:e3:8b:bb:95:70:d2:e9:a3: ad:66:1a:bb:6a:97:30:6d:74:6f:27:1f:7b:7a:df:66:3c:2d: a2:94:52:33:fd:3a:21:0d:9d:1f:8b:fd:f6:de:3a:b2:c4:72: 8e:99:8b:29 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZss/aIYA5XvoOQ9dvujt7fHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMjE3MTU0NjE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmFmMDU5MWNmN2MxYTVhYTQ5MjJmNjdjODYwMTZmMmQxMjAzMzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgxDXVCXpqn9CzoXvOciUMioMEw/ vnBJa9+fSsZ2w4btfey9Ee1IzlfOtZWwxlL4ILTCbpLHVPGp1LwBgFwLmZn2uVA5 6agrym+PLsmgqQyByrk2THTmWVKZnwUJnJzoIBjKVSHNldEwmjYinuoidblKAh3O CTVUP5q80nZ7UiJyy7BjKdqG26FnO8lf4cEn5NhBDpLnpN26XJAnpfHaXPNmgASN IXs2Y5h9ytRWhmuapDtYLPyfNdF5e1Be2FP8N7X3ZJlh2bWMKgkS36nP7FO7MIH4 6AilxD4jUwtC0uQq8PU80qrMmaS/LK64bhlqe9VCuXgWuPCSQOSoP806bQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLuvBZHPfBpapJIvZ8hgFvLRIDNpMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvdTY4RmtjOThHbHFra2k5bnlHQVc4dEVnTTJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAowV7AwQB owXAAwQAowXDAwQAowXVMA0GCSqGSIb3DQEBCwUAA4IBAQCuWmLQePQwcmZI4lTE qBMCh5EMTh5yOTGvluIjjSX2QHBhaEiGWrCZ8Ai+RL3rD3XljaiVQh/iEbW1xnpo r8QhWw7igO2a4JublK/S5tUqR4+IqxPJIRpFsIRIzTF5+Eiy1JCHCPKzMXsoc0J3 qk3VfWORKjNZ6VnB3cl/bMzwVnPTNno6Xd4SmBJPY/Zk9uRPhp44oYXSoxeb/FKZ 5+MtLVxRLohqO8W7wyayiJ1h3hN+d2WqwdsgJ52wKlmTFJ2UU9rBVZvwSSyq3Qn7 tDSX44u7lXDS6aOtZhq7apcwbXRvJx97et9mPC2ilFIz/TohDZ0fi/323jqyxHKO mYsp -----END CERTIFICATE-----Generated at Fri Dec 19 02:26:04 2025 by rpki-client