This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/5YJzWtE0yGIjPvSTy-KsCRBfoa4.roa File: 5YJzWtE0yGIjPvSTy-KsCRBfoa4.roa (raw, json) Hash identifier: /rzsRjAZsbdpjZ0+W1DTSJA/H66xPW3IyO9YPfSAgzY= Subject key identifier: E5:82:73:5A:D1:34:C8:62:23:3E:F4:93:CB:E2:AC:09:10:5F:A1:AE Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C7987A7871382A239424B747780492 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/5YJzWtE0yGIjPvSTy-KsCRBfoa4.roa Signing time: Thu 01 Jan 2026 04:18:47 +0000 ROA not before: Thu 01 Jan 2026 04:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213530 IP address blocks: 88.220.55.0/24 maxlen: 24 195.136.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:98:7a:78:71:38:2a:23:94:24:b7:47:78:04:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e582735ad134c862233ef493cbe2ac09105fa1ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4a:4d:96:df:9a:dc:0c:45:37:b6:3e:38:3d: 00:25:a6:82:27:41:0f:f2:55:57:21:8d:5e:7c:51: 35:3a:06:83:54:ff:81:90:39:26:ef:e9:49:a7:fd: 7b:bf:cd:74:3d:88:27:a1:55:ed:21:e5:b8:4a:fa: b0:db:73:1a:13:04:24:05:9f:5e:54:a6:e1:54:ea: b6:f5:f6:ba:a3:08:f4:c8:b4:37:2d:10:92:e3:62: 72:3f:3c:a7:03:2b:3d:b3:7c:dd:b4:9b:fb:af:2a: b8:85:1e:7c:d2:59:4f:1d:8f:73:ea:9c:b7:1f:26: 53:cf:4d:4c:e6:ca:15:f8:e9:9e:08:51:1d:06:70: d3:88:eb:75:e8:d4:de:67:15:d9:72:46:a4:e6:43: 64:1a:e0:69:27:14:58:ea:0a:64:00:3a:b9:ff:32: 2f:88:24:92:f9:1e:3d:96:15:79:80:ec:85:32:64: 96:6c:9e:38:2f:4d:5a:74:98:e8:d9:b3:8d:ef:8e: f4:f6:96:58:ea:ea:a6:95:4e:20:83:35:cb:13:62: 00:3e:3f:d0:ad:00:63:7c:0c:a4:6a:18:c6:90:8b: 0e:9c:13:73:96:a9:70:46:55:db:90:24:71:fb:9b: dd:e9:a1:01:31:63:1d:14:b2:db:2c:73:d6:0f:1e: 99:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:82:73:5A:D1:34:C8:62:23:3E:F4:93:CB:E2:AC:09:10:5F:A1:AE X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/5YJzWtE0yGIjPvSTy-KsCRBfoa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.220.55.0/24 195.136.123.0/24 Signature Algorithm: sha256WithRSAEncryption 49:0e:30:8f:7c:43:1d:67:16:3f:41:79:e7:66:d4:2a:4e:af: b6:91:1b:55:cf:e3:9d:60:65:4d:45:d4:30:b0:a0:2a:42:d5: ee:09:c1:31:e7:d5:50:34:6a:f2:55:27:5e:32:8e:0f:14:3d: 60:53:ef:b6:d5:21:1d:a5:f9:ef:7c:e4:23:75:7d:13:4c:d6: 5e:63:ee:23:00:71:a5:39:65:c2:6e:c3:51:16:19:34:e5:b1: 49:79:60:87:37:99:72:54:cc:5f:0d:05:ae:2c:b1:7e:bf:4e: 9c:64:59:ee:57:5f:19:00:c1:a1:95:28:49:37:e2:68:af:87: ec:70:19:57:16:f2:38:37:28:35:84:d0:bf:30:16:f5:71:32: 4d:38:84:86:81:4d:78:69:ec:98:f5:49:d6:9b:c1:89:98:70: 34:40:c4:7d:67:1f:82:1e:b4:3d:5b:a3:38:1d:8e:4e:77:13: 1f:79:cd:83:4a:93:74:af:79:89:27:19:99:6c:74:08:5d:35: a3:4a:5c:ec:6c:aa:57:22:af:b7:1a:fe:a8:2d:f5:ff:ba:9c: b8:63:f9:94:27:97:33:e9:76:56:cd:a2:f6:7e:34:7c:af:3d: 60:21:61:90:47:f8:a5:e3:35:a1:3a:29:13:c8:dd:ab:c3:97: 19:5c:f9:a2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x5h6eHE4KiOUJLdHeASSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTgyNzM1YWQxMzRjODYyMjMzZWY0OTNjYmUyYWMwOTEwNWZhMWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EpNlt+a3AxFN7Y+OD0AJaaCJ0EP 8lVXIY1efFE1OgaDVP+BkDkm7+lJp/17v810PYgnoVXtIeW4Svqw23MaEwQkBZ9e VKbhVOq29fa6owj0yLQ3LRCS42JyPzynAys9s3zdtJv7ryq4hR580llPHY9z6py3 HyZTz01M5soV+OmeCFEdBnDTiOt16NTeZxXZckak5kNkGuBpJxRY6gpkADq5/zIv iCSS+R49lhV5gOyFMmSWbJ44L01adJjo2bON74709pZY6uqmlU4ggzXLE2IAPj/Q rQBjfAykahjGkIsOnBNzlqlwRlXbkCRx+5vd6aEBMWMdFLLbLHPWDx6ZrwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOWCc1rRNMhiIz70k8virAkQX6GuMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvNVlKeld0RTB5R0lqUHZTVHktS3NDUkJmb2E0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWNw3AwQA w4h7MA0GCSqGSIb3DQEBCwUAA4IBAQBJDjCPfEMdZxY/QXnnZtQqTq+2kRtVz+Od YGVNRdQwsKAqQtXuCcEx59VQNGryVSdeMo4PFD1gU++21SEdpfnvfOQjdX0TTNZe Y+4jAHGlOWXCbsNRFhk05bFJeWCHN5lyVMxfDQWuLLF+v06cZFnuV18ZAMGhlShJ N+Jor4fscBlXFvI4Nyg1hNC/MBb1cTJNOISGgU14aeyY9UnWm8GJmHA0QMR9Zx+C HrQ9W6M4HY5OdxMfec2DSpN0r3mJJxmZbHQIXTWjSlzsbKpXIq+3Gv6oLfX/upy4 Y/mUJ5cz6XZWzaL2fjR8rz1gIWGQR/il4zWhOikTyN2rw5cZXPmi -----END CERTIFICATE-----Generated at Mon Jan 26 01:16:39 2026 by rpki-client