This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/5MpTWg7vOC10jLratdl1_iJfqFQ.roa File: 5MpTWg7vOC10jLratdl1_iJfqFQ.roa (raw, json) Hash identifier: WBcsUKrOcStpVBrwzN2JImax8LyO4TXbQF8KR2s4TVo= Subject key identifier: E4:CA:53:5A:0E:EF:38:2D:74:8C:BA:DA:B5:D9:75:FE:22:5F:A8:54 Certificate issuer: /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69 Certificate serial: 019B7AC8A3F08EA603532550B1229BC4F2FE Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/5MpTWg7vOC10jLratdl1_iJfqFQ.roa Signing time: Thu 01 Jan 2026 18:18:48 +0000 ROA not before: Thu 01 Jan 2026 18:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48768 IP address blocks: 217.21.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a3:f0:8e:a6:03:53:25:50:b1:22:9b:c4:f2:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69 Validity Not Before: Jan 1 18:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4ca535a0eef382d748cbadab5d975fe225fa854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3d:af:91:0f:21:fb:28:d8:7e:b0:a3:4d:49: 9a:e4:c2:58:93:bd:f3:75:cf:81:d2:3d:a4:f0:0a: 31:b9:24:72:4c:f9:1d:b2:ec:cc:19:ce:c8:6f:56: 68:fe:6f:c0:ed:c0:f8:98:fb:52:20:75:ad:a4:6e: c4:b2:c9:ee:f0:58:39:9f:52:4d:51:a0:12:ac:20: 3b:51:8b:00:ea:7b:eb:c6:e3:0b:18:70:ab:49:e8: ad:b5:72:22:3a:d5:f1:60:5d:b7:d6:0c:14:34:5a: 7e:6e:30:28:7a:a0:9a:0d:e6:c7:e5:59:be:85:32: 37:1b:3a:00:2c:3e:03:b8:41:66:52:d7:e0:43:4b: 7f:17:37:01:82:b2:d5:ee:df:ff:5f:e9:8d:88:00: 88:99:4d:b6:67:5a:0b:fa:c3:35:49:62:e5:6e:06: 7b:64:e2:6e:c1:1d:73:cc:f7:81:01:28:9c:5d:41: fa:08:c7:07:72:26:23:7e:f1:78:5e:ed:e8:38:dd: 39:48:a6:98:af:81:f0:92:71:20:e0:1a:f0:65:81: c7:75:a1:b5:7f:23:30:8f:4f:55:4c:e3:36:25:71: ad:92:ab:64:e8:ec:53:2b:22:c1:8b:15:81:ca:ab: 8d:6d:45:f0:e3:f5:4b:3c:f7:af:81:e7:4e:58:7b: e4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CA:53:5A:0E:EF:38:2D:74:8C:BA:DA:B5:D9:75:FE:22:5F:A8:54 X509v3 Authority Key Identifier: keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/5MpTWg7vOC10jLratdl1_iJfqFQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.21.128.0/20 Signature Algorithm: sha256WithRSAEncryption 36:0e:c5:73:91:a3:d0:34:ef:23:36:8f:f9:89:95:50:94:c1: 88:41:8d:75:a0:28:f7:92:f6:03:da:18:41:f5:c8:91:3c:8f: cf:4b:ea:28:5c:66:eb:93:bf:2c:0e:66:b1:9e:fe:1c:5e:eb: 6b:a5:72:47:22:a4:ff:28:24:97:54:d4:30:8c:d7:89:f3:43: 04:82:a3:6c:0b:5b:4d:35:93:c8:70:14:b0:21:ae:a1:1e:40: ab:f0:47:75:b5:c7:d2:5d:d2:53:f8:8f:8a:a4:ff:93:eb:a5: 83:32:15:bd:ea:0a:e7:b7:80:70:9d:d9:f1:f4:5c:cf:53:65: 5e:42:9a:bc:d9:69:2e:64:8a:6b:ab:9a:0d:14:46:69:99:35: 2c:20:0b:47:15:c8:a6:4d:31:a9:ca:61:fc:7c:36:4f:ae:b0: a9:a4:d5:44:4b:7c:6d:00:ad:6b:1f:90:2c:b3:70:d8:5c:77: e2:8c:ba:e3:f7:dd:bb:cf:6f:bd:ce:29:8e:c3:6e:53:59:70: d8:b5:29:21:81:ce:cd:5b:a2:3a:52:bf:5c:cc:6f:95:d6:96: 52:07:75:f8:90:24:c4:26:19:27:43:a6:ee:6f:7e:ad:18:a5: 08:e0:a1:d2:35:c4:b2:2e:5b:a8:3f:28:93:f2:a0:e1:3c:d0: 42:ea:a9:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yKPwjqYDUyVQsSKbxPL+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjY2YzNjBkZjlhMWY2MWUyMzMyN2RhMGQyYzA5MTEyZTBh OWJkNjkwHhcNMjYwMTAxMTgxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGNhNTM1YTBlZWYzODJkNzQ4Y2JhZGFiNWQ5NzVmZTIyNWZhODU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz2vkQ8h+yjYfrCjTUma5MJYk73z dc+B0j2k8AoxuSRyTPkdsuzMGc7Ib1Zo/m/A7cD4mPtSIHWtpG7Essnu8Fg5n1JN UaASrCA7UYsA6nvrxuMLGHCrSeittXIiOtXxYF231gwUNFp+bjAoeqCaDebH5Vm+ hTI3GzoALD4DuEFmUtfgQ0t/FzcBgrLV7t//X+mNiACImU22Z1oL+sM1SWLlbgZ7 ZOJuwR1zzPeBASicXUH6CMcHciYjfvF4Xu3oON05SKaYr4HwknEg4BrwZYHHdaG1 fyMwj09VTOM2JXGtkqtk6OxTKyLBixWByquNbUXw4/VLPPevgedOWHvkvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOTKU1oO7zgtdIy62rXZdf4iX6hUMB8GA1UdIwQY MBaAFGzPNg35ofYeIzJ9oNLAkRLgqb1pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk04MkRmbWg5aDRqTW4yZzBzQ1JFdUNwdldrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8wNmFjNGYtOTgzMy00ZThkLWIzNTIt NzcxNDBkMDk3ODNjLzEvNU1wVFdnN3ZPQzEwakxyYXRkbDFfaUpmcUZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8wNmFjNGYtOTgzMy00ZThkLWIzNTItNzcxNDBkMDk3ODNj LzEvYk04MkRmbWg5aDRqTW4yZzBzQ1JFdUNwdldrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2RWAMA0G CSqGSIb3DQEBCwUAA4IBAQA2DsVzkaPQNO8jNo/5iZVQlMGIQY11oCj3kvYD2hhB 9ciRPI/PS+ooXGbrk78sDmaxnv4cXutrpXJHIqT/KCSXVNQwjNeJ80MEgqNsC1tN NZPIcBSwIa6hHkCr8Ed1tcfSXdJT+I+KpP+T66WDMhW96grnt4Bwndnx9FzPU2Ve Qpq82WkuZIprq5oNFEZpmTUsIAtHFcimTTGpymH8fDZPrrCppNVES3xtAK1rH5As s3DYXHfijLrj9927z2+9zimOw25TWXDYtSkhgc7NW6I6Ur9czG+V1pZSB3X4kCTE JhknQ6bub36tGKUI4KHSNcSyLluoPyiT8qDhPNBC6qkh -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:45 2026 by rpki-client