This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/5M_dzDXzTB3Y0brCjbUvwSZRed8.roa File: 5M_dzDXzTB3Y0brCjbUvwSZRed8.roa (raw, json) Hash identifier: IY7K+wfx2bW1m/Ix+hlJ62XrT+AVkyx4H7HyP9JrVMM= Subject key identifier: E4:CF:DD:CC:35:F3:4C:1D:D8:D1:BA:C2:8D:B5:2F:C1:26:51:79:DF Certificate issuer: /CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51 Certificate serial: 019B7F159B8F94C53A9B129AA37E48BED6ED Authority key identifier: ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/5M_dzDXzTB3Y0brCjbUvwSZRed8.roa Signing time: Fri 02 Jan 2026 14:21:20 +0000 ROA not before: Fri 02 Jan 2026 14:21:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137 IP address blocks: 157.27.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:9b:8f:94:c5:3a:9b:12:9a:a3:7e:48:be:d6:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51 Validity Not Before: Jan 2 14:21:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4cfddcc35f34c1dd8d1bac28db52fc1265179df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b1:9d:23:db:d7:4c:f1:6a:68:98:1b:05:d1: cc:90:5f:93:dc:cc:8c:1d:98:bf:24:3b:7d:b8:bd: b4:58:7b:5a:f9:f1:e0:52:60:59:38:00:15:18:a6: a2:f8:92:67:ea:5f:e6:60:4d:02:76:d3:73:12:c8: b5:30:ca:07:1f:7c:23:ab:40:24:36:1a:6a:10:c9: 3f:4d:35:8c:b5:92:21:e5:75:62:ce:39:2d:09:93: 63:29:a3:84:68:54:81:b2:3a:b4:ad:1b:7e:10:51: f1:04:cf:f8:36:77:4e:1d:e3:21:b7:77:d0:18:07: a1:20:da:2d:47:8b:da:83:b1:40:7f:fb:36:fc:3f: 13:83:a9:dc:75:9a:98:ab:4d:78:9f:35:7a:a7:6e: e5:23:31:55:28:9c:9f:4a:b1:e0:0c:4e:98:a8:e8: 87:28:18:10:cb:f4:fc:0c:d5:9d:d1:2a:77:d5:70: 30:48:9b:34:d0:0b:c5:41:7b:ce:ad:b5:64:13:6e: 7b:6b:1a:81:42:86:cc:f6:0c:a4:8f:32:74:c1:4f: 55:40:e4:9a:96:b7:59:49:0a:89:b9:28:38:2d:c8: 0c:f1:51:d3:96:08:50:d6:0b:e6:42:c6:6e:7e:1c: 77:2f:61:a1:34:9b:ce:49:6b:7c:cd:db:84:90:e0: 68:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CF:DD:CC:35:F3:4C:1D:D8:D1:BA:C2:8D:B5:2F:C1:26:51:79:DF X509v3 Authority Key Identifier: keyid:ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/5M_dzDXzTB3Y0brCjbUvwSZRed8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.27.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8f:0d:d9:37:64:35:bb:e9:5c:82:e5:1c:db:c3:b7:9b:09:6a: 90:6c:f5:a7:4a:1b:af:f6:f9:4f:5b:55:a0:8e:0f:c4:73:83: 2f:d6:fa:22:84:e7:48:68:93:9c:44:a9:80:83:2c:d1:d6:23: 26:78:2f:ff:0d:e9:8d:8b:aa:5d:f4:20:b6:8d:e3:42:2a:e3: d2:8c:4a:75:53:ff:51:2d:c1:30:6f:6a:c5:2c:d8:3e:4f:ed: ef:e8:63:37:50:0c:cf:9e:95:f6:e2:cf:50:84:7d:b7:2b:68: 38:fa:e9:0b:20:16:d6:af:47:dd:a0:bc:78:2e:9a:02:24:d1: 36:42:c5:43:69:47:2e:d6:13:04:94:e1:d5:e6:41:eb:0d:8c: ef:82:3c:18:31:bd:f5:f7:10:37:ed:ea:7e:6d:1d:1b:22:66: 82:60:dd:af:8c:a5:e8:86:b4:2f:39:b4:be:1a:4f:00:93:29: dc:cf:53:2d:a8:f6:2a:0b:b8:29:4c:45:45:5d:8e:69:76:ad: 8a:27:fb:b1:37:b4:d8:08:19:59:88:3d:87:ce:89:ca:b0:aa: 2a:b5:4a:69:44:83:5b:9f:d3:e2:ad:de:9a:40:c7:ad:46:5e: 35:63:a0:27:a9:cb:78:33:dc:83:1e:be:52:be:3e:b1:14:3e: ac:3f:c7:18 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt/FZuPlMU6mxKao35IvtbtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNTI5M2NkNGE2MjdhODQ2YWVkNjBjYTdmYjVkNWE5MDE5 YWFlNTEwHhcNMjYwMTAyMTQyMTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGNmZGRjYzM1ZjM0YzFkZDhkMWJhYzI4ZGI1MmZjMTI2NTE3OWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67GdI9vXTPFqaJgbBdHMkF+T3MyM HZi/JDt9uL20WHta+fHgUmBZOAAVGKai+JJn6l/mYE0CdtNzEsi1MMoHH3wjq0Ak NhpqEMk/TTWMtZIh5XVizjktCZNjKaOEaFSBsjq0rRt+EFHxBM/4NndOHeMht3fQ GAehINotR4vag7FAf/s2/D8Tg6ncdZqYq014nzV6p27lIzFVKJyfSrHgDE6YqOiH KBgQy/T8DNWd0Sp31XAwSJs00AvFQXvOrbVkE257axqBQobM9gykjzJ0wU9VQOSa lrdZSQqJuSg4LcgM8VHTlghQ1gvmQsZufhx3L2GhNJvOSWt8zduEkOBo+QIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFOTP3cw180wd2NG6wo21L8EmUXnfMB8GA1UdIwQY MBaAFO1Sk81KYnqEau1gyn+11akBmq5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1ZLVHpVcGllb1JxN1dES2Y3WFZxUUdhcmxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yMDI5YTktNDM5Ni00NzE3LWFiMDUt ZTI0MzM2ZWM4YTA4LzEvNU1fZHpEWHpUQjNZMGJyQ2piVXZ3U1pSZWQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8yMDI5YTktNDM5Ni00NzE3LWFiMDUtZTI0MzM2ZWM4YTA4 LzEvN1ZLVHpVcGllb1JxN1dES2Y3WFZxUUdhcmxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnRswDQYJ KoZIhvcNAQELBQADggEBAI8N2TdkNbvpXILlHNvDt5sJapBs9adKG6/2+U9bVaCO D8Rzgy/W+iKE50hok5xEqYCDLNHWIyZ4L/8N6Y2Lql30ILaN40Iq49KMSnVT/1Et wTBvasUs2D5P7e/oYzdQDM+elfbiz1CEfbcraDj66QsgFtavR92gvHgumgIk0TZC xUNpRy7WEwSU4dXmQesNjO+CPBgxvfX3EDft6n5tHRsiZoJg3a+MpeiGtC85tL4a TwCTKdzPUy2o9ioLuClMRUVdjml2rYon+7E3tNgIGVmIPYfOicqwqiq1SmlEg1uf 0+Kt3ppAx61GXjVjoCepy3gz3IMevlK+PrEUPqw/xxg= -----END CERTIFICATE-----Generated at Mon Feb 9 23:44:06 2026 by rpki-client