This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/5z2ugNN4RBvN-s8lDFfAdlsr0vM.roa File: 5z2ugNN4RBvN-s8lDFfAdlsr0vM.roa (raw, json) Hash identifier: +MFvjCgMQZKr4AK37XrGX62GkhpOrU8EW9hs8ZLbdbE= Subject key identifier: E7:3D:AE:80:D3:78:44:1B:CD:FA:CF:25:0C:57:C0:76:5B:2B:D2:F3 Certificate issuer: /CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1 Certificate serial: 019B7834A96485BCE53AFC4B6E246AF371EF Authority key identifier: B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/5z2ugNN4RBvN-s8lDFfAdlsr0vM.roa Signing time: Thu 01 Jan 2026 06:17:55 +0000 ROA not before: Thu 01 Jan 2026 06:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41960 IP address blocks: 213.156.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a9:64:85:bc:e5:3a:fc:4b:6e:24:6a:f3:71:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1 Validity Not Before: Jan 1 06:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e73dae80d378441bcdfacf250c57c0765b2bd2f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ee:4f:5b:4a:2a:ef:bd:dc:74:28:9c:57:16: 5a:5f:5d:ab:a6:0e:c2:72:7f:43:7a:0d:be:48:0c: 47:02:42:79:b5:14:a3:93:66:68:b4:f8:37:12:83: 12:cc:9a:e1:50:0d:64:f7:44:e3:34:2f:1c:91:33: 33:f9:7f:79:3b:ae:40:7b:8e:ed:65:ae:e1:85:13: 4e:8b:f3:d6:b2:b5:f2:ee:8a:19:60:25:8e:98:15: 88:33:fc:e8:4e:f7:5c:8e:4a:7f:a3:70:61:be:15: 53:b6:de:81:ec:64:97:3a:13:78:d9:52:84:9a:57: 76:7f:0d:fc:5a:59:8a:01:5b:6e:9c:49:8e:54:8f: 32:bd:f8:5f:3e:8c:7e:04:15:a2:3b:da:f3:68:9a: fe:9f:6a:d6:8b:85:8c:92:af:0f:49:c6:72:50:04: 26:5f:da:78:81:d8:05:e2:8d:70:a3:96:a7:08:7b: b8:c3:84:e6:93:ee:00:fc:22:6c:27:8e:ad:a3:b9: bc:c7:81:40:b1:6d:93:bc:67:3a:d7:54:56:ca:91: c0:6c:7f:4c:36:44:8c:bc:c2:a0:56:9c:f6:a8:ea: e7:2b:c2:bb:bf:6b:96:b3:f0:84:57:f6:f9:55:a1: e0:88:56:74:f2:b1:48:e8:01:81:82:52:19:3a:50: ac:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3D:AE:80:D3:78:44:1B:CD:FA:CF:25:0C:57:C0:76:5B:2B:D2:F3 X509v3 Authority Key Identifier: keyid:B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/5z2ugNN4RBvN-s8lDFfAdlsr0vM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.156.16.0/20 Signature Algorithm: sha256WithRSAEncryption 59:63:2f:26:66:d0:28:88:b9:f9:72:fc:b6:14:08:fb:8f:29: 2f:55:05:37:b5:89:cf:12:0c:0a:bc:7b:17:cd:00:de:62:65: 86:7e:42:e3:ee:76:84:4e:3b:17:88:c3:94:89:f6:6f:85:76: 6f:d3:1d:3d:a7:c6:45:dd:f2:b2:97:4d:54:ba:c0:e2:3d:8f: 58:f2:63:02:5e:aa:76:3f:03:4e:92:76:6d:4f:1e:d6:01:09: 43:87:47:93:ba:e6:5b:67:75:fb:72:a0:e4:f7:af:c3:af:a6: 2d:11:8c:50:aa:93:35:4a:9d:7c:89:9c:6c:5c:29:0c:19:7c: 05:bb:eb:0b:67:d9:c7:7e:f8:5d:ec:4a:c3:8f:cb:12:56:44: b2:83:44:3c:ff:94:d9:7e:22:b3:cc:f3:7a:68:54:53:95:1d: 0c:3f:64:ae:82:8a:41:c5:58:e1:ad:f6:bc:07:a2:50:dd:03: fd:e7:a4:de:d0:3b:27:34:8b:83:97:b9:bd:a2:45:66:51:0a: c3:70:b1:c3:b9:06:d2:19:da:73:37:f5:95:63:e3:48:bb:c3: a5:a6:5f:8a:ba:be:8c:01:42:5e:9a:bf:41:5f:27:98:8b:bc: 78:d9:cd:5f:65:50:fe:eb:f7:1b:72:51:b2:6a:33:d2:c9:90: 41:5a:23:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NKlkhbzlOvxLbiRq83HvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NzJkYTBmOWM2YzU2ODZhM2RiOWVlMTI0YTk5MDQyYjBh ODgyZDEwHhcNMjYwMTAxMDYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzNkYWU4MGQzNzg0NDFiY2RmYWNmMjUwYzU3YzA3NjViMmJkMmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu5PW0oq773cdCicVxZaX12rpg7C cn9Deg2+SAxHAkJ5tRSjk2ZotPg3EoMSzJrhUA1k90TjNC8ckTMz+X95O65Ae47t Za7hhRNOi/PWsrXy7ooZYCWOmBWIM/zoTvdcjkp/o3BhvhVTtt6B7GSXOhN42VKE mld2fw38WlmKAVtunEmOVI8yvfhfPox+BBWiO9rzaJr+n2rWi4WMkq8PScZyUAQm X9p4gdgF4o1wo5anCHu4w4Tmk+4A/CJsJ46to7m8x4FAsW2TvGc611RWypHAbH9M NkSMvMKgVpz2qOrnK8K7v2uWs/CEV/b5VaHgiFZ08rFI6AGBglIZOlCsPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOc9roDTeEQbzfrPJQxXwHZbK9LzMB8GA1UdIwQY MBaAFLhy2g+cbFaGo9ue4SSpkEKwqILRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUhMYUQ1eHNWb2FqMjU3aEpLbVFRckNvZ3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yNzE2ZWMtNTY1Ny00ZjU2LThmNDMt ZTIzMTAzYTg4MDUyLzEvNXoydWdOTjRSQnZOLXM4bERGZkFkbHNyMHZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8yNzE2ZWMtNTY1Ny00ZjU2LThmNDMtZTIzMTAzYTg4MDUy LzEvdUhMYUQ1eHNWb2FqMjU3aEpLbVFRckNvZ3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE1ZwQMA0G CSqGSIb3DQEBCwUAA4IBAQBZYy8mZtAoiLn5cvy2FAj7jykvVQU3tYnPEgwKvHsX zQDeYmWGfkLj7naETjsXiMOUifZvhXZv0x09p8ZF3fKyl01UusDiPY9Y8mMCXqp2 PwNOknZtTx7WAQlDh0eTuuZbZ3X7cqDk96/Dr6YtEYxQqpM1Sp18iZxsXCkMGXwF u+sLZ9nHfvhd7ErDj8sSVkSyg0Q8/5TZfiKzzPN6aFRTlR0MP2SugopBxVjhrfa8 B6JQ3QP956Te0DsnNIuDl7m9okVmUQrDcLHDuQbSGdpzN/WVY+NIu8Olpl+Kur6M AUJemr9BXyeYi7x42c1fZVD+6/cbclGyajPSyZBBWiMj -----END CERTIFICATE-----Generated at Mon Jan 26 18:11:30 2026 by rpki-client