This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1xpNRitAKPnKoDi8o_EP0KMJVZM.roa File: 1xpNRitAKPnKoDi8o_EP0KMJVZM.roa (raw, json) Hash identifier: 2iu/03vlue3XliKctR4jRt/i4aDneNttJOsGIS294sg= Subject key identifier: D7:1A:4D:46:2B:40:28:F9:CA:A0:38:BC:A3:F1:0F:D0:A3:09:55:93 Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C789146CD64A0D25528667F5C0ABBF Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1xpNRitAKPnKoDi8o_EP0KMJVZM.roa Signing time: Thu 01 Jan 2026 04:18:44 +0000 ROA not before: Thu 01 Jan 2026 04:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201044 IP address blocks: 82.177.162.0/24 maxlen: 24 2a00:4120:8000:6::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:89:14:6c:d6:4a:0d:25:52:86:67:f5:c0:ab:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d71a4d462b4028f9caa038bca3f10fd0a3095593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3c:85:65:b3:a7:00:0e:1e:11:f6:53:6f:a6: 3d:2f:65:5a:86:03:5a:e3:98:1e:93:c2:10:53:99: 9b:d8:a2:12:b2:0b:58:f3:64:ea:bb:c1:5e:c2:f4: c0:b7:2b:bc:66:37:0d:ea:f7:15:f4:c4:a1:18:7f: 2e:fd:40:ea:38:04:94:7d:ac:5a:6e:86:54:af:1e: 23:4a:33:f1:af:d6:f7:aa:f3:80:f0:70:d6:9d:16: 6d:76:28:7b:e5:e0:31:97:41:e1:44:82:7e:31:a1: 0e:8f:9f:69:25:98:17:ba:85:55:c1:08:a6:9f:7c: d0:05:ae:46:b3:f8:45:27:94:99:a1:32:de:6a:de: bc:5a:d0:f2:8f:48:53:e9:64:f9:ea:a4:8d:81:5e: 31:06:d9:19:db:ff:99:5d:a1:5c:8f:ae:ff:83:a3: d5:69:78:48:21:b4:53:5c:3c:32:25:02:b3:68:66: 66:0b:04:86:8b:ee:5e:e1:c7:43:e6:16:35:ad:30: 7d:5d:cc:8b:65:82:c7:20:b6:1d:b0:0e:c5:bd:cf: 50:3f:5a:93:00:01:ca:1b:6e:b1:34:52:56:03:bf: 07:8c:f3:6d:e5:b6:8e:2e:28:fc:46:8f:fb:a8:2c: 9e:f6:e1:15:b5:f5:8f:8c:d7:6f:8e:10:d4:e8:b2: 48:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1A:4D:46:2B:40:28:F9:CA:A0:38:BC:A3:F1:0F:D0:A3:09:55:93 X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1xpNRitAKPnKoDi8o_EP0KMJVZM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.177.162.0/24 IPv6: 2a00:4120:8000:6::/64 Signature Algorithm: sha256WithRSAEncryption 3d:aa:df:5e:17:ea:11:d3:c5:a4:2d:4f:b9:70:ba:d3:23:39: ac:96:a9:72:67:e5:f1:e0:da:c8:4e:72:88:22:41:0b:f1:40: f0:ec:56:60:e2:08:9a:ed:b8:3f:bf:91:e9:3e:02:27:12:c7: 26:cd:ca:a2:89:ee:ae:97:ff:e7:b1:11:6e:00:58:74:f8:c1: de:d7:d9:07:e7:b0:c4:c7:53:ee:25:ad:54:a9:05:f5:e8:98: 20:3e:d3:5b:2c:f9:5b:76:b7:b3:fe:3c:8a:44:3d:be:ff:1b: 63:70:bc:38:b6:60:34:6a:7b:8f:d6:fc:2b:31:ba:f8:72:d3: b5:bc:80:aa:b9:77:26:bf:73:5b:53:22:b0:3c:31:b3:69:58: de:db:60:9d:49:e0:a8:ee:df:ed:b2:6e:3a:59:0c:c2:5d:88: 46:57:52:9b:35:04:fb:63:a1:8c:33:27:20:e6:d5:43:d9:4b: f8:54:1c:37:a7:83:19:b6:43:fd:a4:ec:c7:7e:49:8a:01:ce: c1:89:27:83:6c:16:fb:bb:39:a0:3d:60:3f:11:c6:7c:14:10: a4:56:d0:9a:2b:ec:aa:9d:d7:7a:19:3e:9d:c4:a9:e0:b1:8e: 36:71:f3:e6:52:dd:82:c1:d7:72:30:98:2d:df:bb:ca:a5:a3: 4b:76:7d:1d -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZt3x4kUbNZKDSVShmf1wKu/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzFhNGQ0NjJiNDAyOGY5Y2FhMDM4YmNhM2YxMGZkMGEzMDk1NTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTyFZbOnAA4eEfZTb6Y9L2VahgNa 45gek8IQU5mb2KISsgtY82Tqu8FewvTAtyu8ZjcN6vcV9MShGH8u/UDqOASUfaxa boZUrx4jSjPxr9b3qvOA8HDWnRZtdih75eAxl0HhRIJ+MaEOj59pJZgXuoVVwQim n3zQBa5Gs/hFJ5SZoTLeat68WtDyj0hT6WT56qSNgV4xBtkZ2/+ZXaFcj67/g6PV aXhIIbRTXDwyJQKzaGZmCwSGi+5e4cdD5hY1rTB9XcyLZYLHILYdsA7Fvc9QP1qT AAHKG26xNFJWA78HjPNt5baOLij8Ro/7qCye9uEVtfWPjNdvjhDU6LJILwIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFNcaTUYrQCj5yqA4vKPxD9CjCVWTMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvMXhwTlJpdEFLUG5Lb0RpOG9fRVAwS01KVlpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAMBAIAATAGAwQAUrGiMBEE AgACMAsDCQAqAEEggAAABjANBgkqhkiG9w0BAQsFAAOCAQEAParfXhfqEdPFpC1P uXC60yM5rJapcmfl8eDayE5yiCJBC/FA8OxWYOIImu24P7+R6T4CJxLHJs3Koonu rpf/57ERbgBYdPjB3tfZB+ewxMdT7iWtVKkF9eiYID7TWyz5W3a3s/48ikQ9vv8b Y3C8OLZgNGp7j9b8KzG6+HLTtbyAqrl3Jr9zW1MisDwxs2lY3ttgnUngqO7f7bJu OlkMwl2IRldSmzUE+2OhjDMnIObVQ9lL+FQcN6eDGbZD/aTsx35JigHOwYkng2wW +7s5oD1gPxHGfBQQpFbQmivsqp3Xehk+ncSp4LGONnHz5lLdgsHXcjCYLd+7yqWj S3Z9HQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:21 2026 by rpki-client