This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/52n2H88VXNdxeWPEFsQYr7Jtbdg.roa File: 52n2H88VXNdxeWPEFsQYr7Jtbdg.roa (raw, json) Hash identifier: HgZ/RQDDpLwola6I9yldSci6la60w0W9tEwi30kcTcc= Subject key identifier: E7:69:F6:1F:CF:15:5C:D7:71:79:63:C4:16:C4:18:AF:B2:6D:6D:D8 Certificate issuer: /CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5 Certificate serial: 019B7834DAE9C757F7FB7B59B7EF241383A9 Authority key identifier: 71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/52n2H88VXNdxeWPEFsQYr7Jtbdg.roa Signing time: Thu 01 Jan 2026 06:18:08 +0000 ROA not before: Thu 01 Jan 2026 06:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 134.169.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:da:e9:c7:57:f7:fb:7b:59:b7:ef:24:13:83:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5 Validity Not Before: Jan 1 06:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e769f61fcf155cd7717963c416c418afb26d6dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f9:03:0a:a3:c6:46:e1:e4:cc:20:59:37:4f: 5e:b6:70:84:c4:fb:1e:4a:05:48:17:3c:49:e1:0e: 6f:62:16:86:8a:8d:f4:e5:9f:52:18:4c:8e:1e:9a: 56:f6:93:dc:3b:31:48:6a:8c:c0:99:87:4e:5f:1a: ab:0e:a2:73:65:bb:e4:82:7f:c8:fb:58:2b:f3:e5: c1:94:86:93:11:5e:3a:35:80:db:bb:4f:6c:b6:a0: b5:60:fc:24:75:38:b6:f3:0e:7a:77:be:87:07:52: b7:df:69:d5:b7:1f:d6:c5:79:e9:49:d3:43:db:8a: 15:00:80:a3:75:80:fe:e3:33:3f:7d:ac:b8:e3:a9: 0b:0a:55:eb:38:6e:42:b9:2e:e7:82:d0:b9:b6:25: 81:3b:a6:85:24:88:c4:b5:07:b3:fa:c7:63:d2:4c: 40:56:3e:eb:3a:8e:6d:db:67:2f:86:fd:37:e2:46: 1b:de:e9:f3:3c:23:44:30:ca:8a:67:b6:17:91:cd: d0:1c:34:5a:1f:b7:76:75:b1:09:ac:cb:2d:92:5a: ad:3b:5f:cf:a6:ae:72:a7:fe:22:0b:ab:12:94:2a: 65:2c:84:20:a5:1e:68:25:19:52:d1:8b:58:b0:d0: 53:2c:c2:ad:89:25:03:e6:8e:1b:79:4b:8b:43:23: 76:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:69:F6:1F:CF:15:5C:D7:71:79:63:C4:16:C4:18:AF:B2:6D:6D:D8 X509v3 Authority Key Identifier: keyid:71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/52n2H88VXNdxeWPEFsQYr7Jtbdg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption 46:75:eb:c3:a4:35:f5:b5:b9:43:a3:3c:87:ca:3b:b0:ec:2b: 8e:48:17:c3:fe:bd:81:92:09:7e:0b:7e:d9:0c:59:64:96:82: 98:90:d4:87:0a:35:d9:83:66:d2:06:83:95:03:fb:2d:33:09: 23:91:c7:dd:45:ec:42:c4:e0:ff:63:7b:8e:47:1f:c3:61:02: 21:70:c3:f7:52:de:39:15:69:2d:3a:17:3a:18:fa:8e:d0:e5: 50:d9:79:74:43:c8:19:6d:62:b0:ca:be:82:8c:c0:d2:97:db: ab:22:43:84:c2:65:38:9a:a2:2c:b5:ac:3d:37:4f:8a:95:67: 60:5b:73:1f:e6:0f:2b:37:e9:0d:9c:73:f7:16:dd:c9:46:11: d4:52:b3:bb:f2:81:3e:81:52:f1:77:3b:6a:4d:94:fa:e4:e9: c5:ef:e0:00:f5:e9:2b:4d:47:dd:4e:01:ff:d5:20:ce:a9:59: eb:58:c7:f2:7e:fb:cb:5d:da:c0:d7:fb:9c:89:a2:55:af:a7: 8f:ac:5d:42:be:66:a2:20:6a:db:d5:77:ae:41:bd:d3:15:d2: a8:2a:0a:4d:52:b4:c1:46:cc:39:bd:b8:44:37:2f:e9:1d:0b: 9d:f9:41:db:1b:f0:f1:bb:60:7b:53:3e:4c:78:bd:f1:42:de: 52:96:91:61 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt4NNrpx1f3+3tZt+8kE4OpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYjkwYzgzZDkwZjNkNGVmMjJkYjgyODUwMmU2MTUyYjZk NWJmZTUwHhcNMjYwMTAxMDYxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzY5ZjYxZmNmMTU1Y2Q3NzE3OTYzYzQxNmM0MThhZmIyNmQ2ZGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fkDCqPGRuHkzCBZN09etnCExPse SgVIFzxJ4Q5vYhaGio305Z9SGEyOHppW9pPcOzFIaozAmYdOXxqrDqJzZbvkgn/I +1gr8+XBlIaTEV46NYDbu09stqC1YPwkdTi28w56d76HB1K332nVtx/WxXnpSdND 24oVAICjdYD+4zM/fay446kLClXrOG5CuS7ngtC5tiWBO6aFJIjEtQez+sdj0kxA Vj7rOo5t22cvhv034kYb3unzPCNEMMqKZ7YXkc3QHDRaH7d2dbEJrMstklqtO1/P pq5yp/4iC6sSlCplLIQgpR5oJRlS0YtYsNBTLMKtiSUD5o4beUuLQyN2sQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFOdp9h/PFVzXcXljxBbEGK+ybW3YMB8GA1UdIwQY MBaAFHG5DIPZDz1O8i24KFAuYVK21b/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83MDIyZGMtMzU2ZS00NGQ2LWEzZWIt N2NmYjliMDdmNDBmLzEvNTJuMkg4OFZYTmR4ZVdQRUZzUVlyN0p0YmRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83MDIyZGMtMzU2ZS00NGQ2LWEzZWItN2NmYjliMDdmNDBm LzEvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhqkwDQYJ KoZIhvcNAQELBQADggEBAEZ168OkNfW1uUOjPIfKO7DsK45IF8P+vYGSCX4LftkM WWSWgpiQ1IcKNdmDZtIGg5UD+y0zCSORx91F7ELE4P9je45HH8NhAiFww/dS3jkV aS06FzoY+o7Q5VDZeXRDyBltYrDKvoKMwNKX26siQ4TCZTiaoiy1rD03T4qVZ2Bb cx/mDys36Q2cc/cW3clGEdRSs7vygT6BUvF3O2pNlPrk6cXv4AD16StNR91OAf/V IM6pWetYx/J++8td2sDX+5yJolWvp4+sXUK+ZqIgatvVd65BvdMV0qgqCk1StMFG zDm9uEQ3L+kdC535Qdsb8PG7YHtTPkx4vfFC3lKWkWE= -----END CERTIFICATE-----Generated at Tue Jan 27 11:25:54 2026 by rpki-client