This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1dOtNecL88JcZ9LKeGP4FTaoa1s.roa File: 1dOtNecL88JcZ9LKeGP4FTaoa1s.roa (raw, json) Hash identifier: 5QF9b3DjL+YTPdUNvTNXAnyIKqJvNmKbet3FkKKGEQM= Subject key identifier: D5:D3:AD:35:E7:0B:F3:C2:5C:67:D2:CA:78:63:F8:15:36:A8:6B:5B Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C7922B3365F50870E34674F90B24B1 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1dOtNecL88JcZ9LKeGP4FTaoa1s.roa Signing time: Thu 01 Jan 2026 04:18:46 +0000 ROA not before: Thu 01 Jan 2026 04:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206948 IP address blocks: 195.136.92.0/22 maxlen: 22 195.136.147.0/24 maxlen: 24 195.136.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:92:2b:33:65:f5:08:70:e3:46:74:f9:0b:24:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5d3ad35e70bf3c25c67d2ca7863f81536a86b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e4:39:17:1d:97:a5:0d:2d:02:fc:d9:e1:ad: 91:79:a9:f3:0f:4a:e1:7c:08:e7:df:df:04:72:dd: 32:7f:24:c5:9f:61:2e:f2:7e:4d:04:fc:d5:10:bb: 14:0e:10:86:70:47:59:30:9e:54:f6:3a:7a:e6:82: f8:32:71:26:28:9b:c1:5c:43:de:56:bf:d9:eb:b3: 06:63:e2:ac:88:09:a9:d1:97:45:d0:a6:d4:46:3e: b5:ba:6c:51:44:a2:88:ce:d1:e1:b9:a2:6e:bc:60: 6c:29:f5:94:10:77:e4:14:5a:d8:d3:37:45:70:d2: a1:13:d9:c7:fe:d5:b5:0f:b7:4e:fa:18:b5:ab:87: 5e:a8:51:b9:f8:4f:f7:83:93:cc:38:77:78:f5:35: 91:2e:91:c7:35:60:e3:6f:60:9e:15:27:71:23:c7: 3f:72:28:93:13:15:e9:5a:65:35:90:f8:0e:a6:2e: ae:99:eb:9c:ac:36:73:60:50:4c:16:ab:e5:eb:42: 12:00:d9:aa:25:f8:cb:a5:05:d4:ed:09:4e:6b:b8: 45:31:fb:89:91:f3:a1:71:16:df:47:75:a5:05:61: 06:c7:5c:1a:15:45:c8:23:a5:f6:c2:08:61:bd:74: eb:27:1e:65:a0:fa:ac:a5:e4:a1:6d:6c:70:41:ea: 6a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D3:AD:35:E7:0B:F3:C2:5C:67:D2:CA:78:63:F8:15:36:A8:6B:5B X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1dOtNecL88JcZ9LKeGP4FTaoa1s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.136.92.0/22 195.136.147.0/24 195.136.152.0/23 Signature Algorithm: sha256WithRSAEncryption aa:94:fa:f5:af:57:1e:1a:1a:c2:c7:27:0e:1a:9a:56:82:82: 45:43:4b:48:1b:13:6e:99:b8:95:67:75:54:75:37:a6:22:4c: a1:93:67:1f:9b:2f:a5:d5:25:6d:ec:0f:1c:91:61:78:bc:60: 73:3b:77:5b:57:01:94:3f:d4:ae:24:68:03:76:36:8e:56:78: ea:dc:bd:0a:53:30:a1:99:d5:75:33:c5:4f:f6:8c:65:2e:0b: 72:14:d4:8e:83:b8:a1:5f:c3:db:0c:41:f2:c9:d5:15:70:95: 01:a9:1b:eb:12:34:01:c7:5e:24:25:88:f4:2c:6c:75:d9:69: 75:2d:79:dd:fb:7e:11:02:97:59:76:9e:92:11:34:ab:a8:d7: 4a:9d:40:5c:8d:23:9e:a3:91:6c:f1:43:b8:1b:b6:d1:0a:eb: ae:96:0c:c3:01:44:66:d6:83:26:41:e3:ae:fd:26:11:c9:f9: b3:59:62:46:e2:00:38:29:e0:88:cd:a2:81:af:17:66:ae:5f: 0b:f7:33:77:6b:4f:48:ca:48:4d:89:46:df:e5:7a:5c:71:57: 31:a0:ca:fd:91:a7:8b:de:ec:8d:b7:f1:8b:ba:2c:e9:8d:ff: 8b:69:a0:fb:43:9c:0a:f5:f7:9e:e1:f4:a8:c5:c0:44:77:7c: 9e:0e:41:b2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3x5IrM2X1CHDjRnT5CySxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWQzYWQzNWU3MGJmM2MyNWM2N2QyY2E3ODYzZjgxNTM2YTg2YjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuQ5Fx2XpQ0tAvzZ4a2ReanzD0rh fAjn398Ect0yfyTFn2Eu8n5NBPzVELsUDhCGcEdZMJ5U9jp65oL4MnEmKJvBXEPe Vr/Z67MGY+KsiAmp0ZdF0KbURj61umxRRKKIztHhuaJuvGBsKfWUEHfkFFrY0zdF cNKhE9nH/tW1D7dO+hi1q4deqFG5+E/3g5PMOHd49TWRLpHHNWDjb2CeFSdxI8c/ ciiTExXpWmU1kPgOpi6umeucrDZzYFBMFqvl60ISANmqJfjLpQXU7QlOa7hFMfuJ kfOhcRbfR3WlBWEGx1waFUXII6X2wghhvXTrJx5loPqspeShbWxwQepq7QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNXTrTXnC/PCXGfSynhj+BU2qGtbMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvMWRPdE5lY0w4OEpjWjlMS2VHUDRGVGFvYTFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCw4hcAwQA w4iTAwQBw4iYMA0GCSqGSIb3DQEBCwUAA4IBAQCqlPr1r1ceGhrCxycOGppWgoJF Q0tIGxNumbiVZ3VUdTemIkyhk2cfmy+l1SVt7A8ckWF4vGBzO3dbVwGUP9SuJGgD djaOVnjq3L0KUzChmdV1M8VP9oxlLgtyFNSOg7ihX8PbDEHyydUVcJUBqRvrEjQB x14kJYj0LGx12Wl1LXnd+34RApdZdp6SETSrqNdKnUBcjSOeo5Fs8UO4G7bRCuuu lgzDAURm1oMmQeOu/SYRyfmzWWJG4gA4KeCIzaKBrxdmrl8L9zN3a09IykhNiUbf 5XpccVcxoMr9kaeL3uyNt/GLuizpjf+LaaD7Q5wK9fee4fSoxcBEd3yeDkGy -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:18 2026 by rpki-client