This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/6ia4b5Gb-k30pcLXBBr62isAMWs.roa File: 6ia4b5Gb-k30pcLXBBr62isAMWs.roa (raw, json) Hash identifier: Z0tiZk3K7xXG4+1mOb7RLXw0ygqWdtpdfp+vG6K7H+Q= Subject key identifier: EA:26:B8:6F:91:9B:FA:4D:F4:A5:C2:D7:04:1A:FA:DA:2B:00:31:6B Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C787277651C7B9AEA1581B8AA9C690 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/6ia4b5Gb-k30pcLXBBr62isAMWs.roa Signing time: Thu 01 Jan 2026 04:18:43 +0000 ROA not before: Thu 01 Jan 2026 04:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199694 IP address blocks: 88.220.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:87:27:76:51:c7:b9:ae:a1:58:1b:8a:a9:c6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea26b86f919bfa4df4a5c2d7041afada2b00316b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:83:a5:24:ec:33:0c:34:dd:6c:57:a8:57:d3: 1d:e6:ab:8a:bc:1d:ab:5b:61:a8:da:1f:87:2f:5d: 45:c6:93:b5:c8:a2:e4:67:0c:81:cc:34:4e:95:a5: 4b:a8:cb:53:4c:ac:d3:08:d7:70:e1:fc:38:61:18: 98:7d:44:d6:00:e6:cd:a2:3c:8e:a1:07:cf:e4:43: 3a:f6:93:e0:9f:f9:d2:6a:09:0e:33:43:af:61:45: 44:83:e6:dc:bb:3c:b5:26:ec:e7:eb:4d:ce:cc:cc: 5f:f0:6b:49:a0:5d:fa:ca:84:bc:40:52:6f:d7:5d: ad:49:89:bb:9f:b3:83:a3:10:8a:0c:d6:d2:b4:33: 6d:40:fd:a9:92:0a:1b:78:17:1d:5e:21:0a:5c:a2: 4f:74:5c:0e:53:7b:7f:42:9b:2c:20:dc:f4:6d:00: 9f:3e:0b:2b:5a:c0:b4:f2:3c:56:1f:cc:89:68:5d: 5e:0a:a1:1e:50:42:a5:26:b1:6e:be:3a:b4:23:03: 68:c9:14:7b:c0:47:c0:43:f0:83:d9:b3:65:4c:1a: 22:5d:52:fa:9f:56:27:cd:6e:e4:88:5e:a4:75:f4: 79:8f:ea:d1:08:c6:e1:46:9b:71:ec:a7:47:cf:04: 27:df:e4:5a:ba:cb:48:44:f2:07:14:c3:67:00:4e: a0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:26:B8:6F:91:9B:FA:4D:F4:A5:C2:D7:04:1A:FA:DA:2B:00:31:6B X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/6ia4b5Gb-k30pcLXBBr62isAMWs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.220.71.0/24 Signature Algorithm: sha256WithRSAEncryption b3:01:da:46:b6:82:03:c0:aa:49:58:8a:ae:75:9a:e9:cd:6c: 2e:69:a0:b2:31:2a:24:bf:94:16:a0:46:a0:05:1c:ae:b0:e0: 77:fb:3a:f5:2d:8b:7d:2a:4b:01:50:bc:22:1a:55:88:df:0e: a0:84:3a:d2:9b:ec:11:3b:30:e4:ec:8c:3b:88:30:4a:d6:42: f4:cd:4b:ac:41:82:7a:a1:96:29:e9:ed:d5:18:8e:a1:7c:34: 82:76:a9:ee:83:57:b2:47:2c:c1:b8:48:34:7a:73:7f:4b:e4: 45:5d:fa:30:ad:b6:e7:c0:a6:1c:a8:89:11:a5:45:ea:ba:66: 5c:40:70:0c:d9:57:68:b6:29:a4:dc:3b:79:f5:cf:e3:b2:1b: a7:e9:1d:f5:eb:01:c7:fd:61:d6:5f:10:3b:d4:ab:29:a3:3e: 6c:7e:af:9e:8c:fe:46:6d:ae:87:74:69:bf:5f:f6:84:f7:89: 4f:db:28:ec:4c:5b:0f:6f:36:4c:d8:91:7f:22:a6:89:b9:1d: 71:3b:d0:bd:c7:cb:29:42:08:a3:89:47:2d:1c:ea:45:d9:b4: 23:55:33:42:0b:7f:56:8c:e9:b1:c9:73:cd:11:5e:d9:7c:ec: 22:8d:fa:15:9e:5b:29:47:e0:95:d3:dd:98:3b:f2:7f:27:e8: 78:1b:58:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x4cndlHHua6hWBuKqcaQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTI2Yjg2ZjkxOWJmYTRkZjRhNWMyZDcwNDFhZmFkYTJiMDAzMTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYOlJOwzDDTdbFeoV9Md5quKvB2r W2Go2h+HL11FxpO1yKLkZwyBzDROlaVLqMtTTKzTCNdw4fw4YRiYfUTWAObNojyO oQfP5EM69pPgn/nSagkOM0OvYUVEg+bcuzy1Juzn603OzMxf8GtJoF36yoS8QFJv 112tSYm7n7ODoxCKDNbStDNtQP2pkgobeBcdXiEKXKJPdFwOU3t/QpssINz0bQCf PgsrWsC08jxWH8yJaF1eCqEeUEKlJrFuvjq0IwNoyRR7wEfAQ/CD2bNlTBoiXVL6 n1YnzW7kiF6kdfR5j+rRCMbhRptx7KdHzwQn3+RaustIRPIHFMNnAE6gvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOomuG+Rm/pN9KXC1wQa+torADFrMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvNmlhNGI1R2ItazMwcGNMWEJCcjYyaXNBTVdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNxHMA0G CSqGSIb3DQEBCwUAA4IBAQCzAdpGtoIDwKpJWIqudZrpzWwuaaCyMSokv5QWoEag BRyusOB3+zr1LYt9KksBULwiGlWI3w6ghDrSm+wROzDk7Iw7iDBK1kL0zUusQYJ6 oZYp6e3VGI6hfDSCdqnug1eyRyzBuEg0enN/S+RFXfowrbbnwKYcqIkRpUXqumZc QHAM2Vdotimk3Dt59c/jshun6R316wHH/WHWXxA71Kspoz5sfq+ejP5Gba6HdGm/ X/aE94lP2yjsTFsPbzZM2JF/IqaJuR1xO9C9x8spQgijiUctHOpF2bQjVTNCC39W jOmxyXPNEV7ZfOwijfoVnlspR+CV092YO/J/J+h4G1jk -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:43 2026 by rpki-client