This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/HZ5yau1Rrc5jk3jytZwqBJE9Qrw.roa File: HZ5yau1Rrc5jk3jytZwqBJE9Qrw.roa (raw, json) Hash identifier: Y7LD3uxBILfQ535NYMfokzJoWAlA0gL5bkwR83DaxPs= Subject key identifier: 1D:9E:72:6A:ED:51:AD:CE:63:93:78:F2:B5:9C:2A:04:91:3D:42:BC Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C78824E09EF436705F7D6D33139A81 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/HZ5yau1Rrc5jk3jytZwqBJE9Qrw.roa Signing time: Thu 01 Jan 2026 04:18:43 +0000 ROA not before: Thu 01 Jan 2026 04:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199823 IP address blocks: 88.220.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:88:24:e0:9e:f4:36:70:5f:7d:6d:33:13:9a:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d9e726aed51adce639378f2b59c2a04913d42bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:87:a1:4e:0e:72:d3:13:d0:17:58:99:0d:c6: 5f:ea:fb:a9:57:f4:1f:e6:bf:d6:58:4e:78:0d:f3: ba:e4:12:e7:c7:f3:99:63:b0:dc:62:b1:2a:33:6f: 8b:6b:fd:30:82:a5:ec:b7:1f:60:a1:75:a8:a3:a7: b2:32:59:8b:ac:e3:de:a1:f7:f6:36:aa:95:55:ca: 2f:d9:e5:cc:18:08:8d:c5:94:1e:cd:03:c1:ca:b3: de:23:cb:c9:31:34:c8:b6:ea:ca:18:02:f6:ff:cd: 06:e7:33:0e:04:40:d3:a3:57:5d:e8:39:87:67:c0: f3:1f:92:32:af:e5:79:43:f9:21:bf:be:7d:5f:79: cd:95:e1:9b:28:d4:6d:e6:8c:a0:11:c0:23:53:a4: e3:5e:79:c0:29:2f:cd:a1:e4:54:97:2f:58:0b:d2: db:de:8a:24:f5:4e:28:70:49:e4:34:4f:fa:c0:58: 81:9d:e3:05:3d:bd:fc:1a:40:90:97:1b:5a:f7:7a: 23:e2:2a:19:67:f0:b3:a2:9b:1b:a7:8a:9d:d1:a5: b4:e4:53:6a:05:df:ff:51:44:1a:61:ec:e6:4c:25: 0c:eb:94:82:91:e8:45:85:85:a0:54:e7:ef:92:6d: 79:57:2d:da:87:c3:2c:c8:5f:bf:03:e7:5a:f9:8b: 80:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9E:72:6A:ED:51:AD:CE:63:93:78:F2:B5:9C:2A:04:91:3D:42:BC X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/HZ5yau1Rrc5jk3jytZwqBJE9Qrw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.220.72.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:6b:1e:1f:c6:9e:28:c2:b0:09:03:89:48:9b:84:9f:c9:cc: 7e:6f:2f:f0:1b:2b:40:bd:ce:df:e5:48:27:e2:8e:b1:18:7e: d3:bc:c6:19:f0:5d:b2:ad:06:db:76:10:3b:36:f8:28:5e:c1: 11:54:85:91:39:6d:71:e4:71:f5:07:c7:01:75:90:64:30:22: 7c:2c:16:f6:db:af:c3:7e:90:35:18:7d:bf:7e:dd:fb:6d:f9: a4:6d:46:39:0b:29:a0:93:9e:66:c1:44:05:23:ad:22:65:ce: 16:44:2d:c1:07:35:f9:ce:9d:aa:6f:60:3c:e9:d6:77:20:96: 52:82:2b:51:98:53:b6:d7:6d:a2:e8:e2:78:bc:e2:8b:f4:f8: 50:df:72:ad:28:70:bf:ac:2e:2c:07:28:f4:ca:53:78:52:48: 3b:95:13:25:05:43:1e:f9:86:72:91:a8:51:a2:1f:90:63:09: 60:3e:74:90:d0:f5:07:fb:d6:06:71:7b:df:91:2c:28:e3:eb: 9f:35:53:20:40:f0:a5:b3:fd:40:58:de:1b:fd:46:25:37:ea: ec:2a:fc:f3:e1:f0:b1:88:59:b5:9a:41:75:ed:de:c2:99:e5: d5:93:c7:74:e4:48:88:a4:5c:6f:bd:b1:0e:cd:11:ab:10:79: fe:21:f1:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x4gk4J70NnBffW0zE5qBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDllNzI2YWVkNTFhZGNlNjM5Mzc4ZjJiNTljMmEwNDkxM2Q0MmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4ehTg5y0xPQF1iZDcZf6vupV/Qf 5r/WWE54DfO65BLnx/OZY7DcYrEqM2+La/0wgqXstx9goXWoo6eyMlmLrOPeoff2 NqqVVcov2eXMGAiNxZQezQPByrPeI8vJMTTIturKGAL2/80G5zMOBEDTo1dd6DmH Z8DzH5Iyr+V5Q/khv759X3nNleGbKNRt5oygEcAjU6TjXnnAKS/NoeRUly9YC9Lb 3ook9U4ocEnkNE/6wFiBneMFPb38GkCQlxta93oj4ioZZ/Czopsbp4qd0aW05FNq Bd//UUQaYezmTCUM65SCkehFhYWgVOfvkm15Vy3ah8MsyF+/A+da+YuACwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB2ecmrtUa3OY5N48rWcKgSRPUK8MB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvSFo1eWF1MVJyYzVqazNqeXRad3FCSkU5UXJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNxIMA0G CSqGSIb3DQEBCwUAA4IBAQBOax4fxp4owrAJA4lIm4Sfycx+by/wGytAvc7f5Ugn 4o6xGH7TvMYZ8F2yrQbbdhA7NvgoXsERVIWROW1x5HH1B8cBdZBkMCJ8LBb226/D fpA1GH2/ft37bfmkbUY5Cymgk55mwUQFI60iZc4WRC3BBzX5zp2qb2A86dZ3IJZS gitRmFO2122i6OJ4vOKL9PhQ33KtKHC/rC4sByj0ylN4Ukg7lRMlBUMe+YZykahR oh+QYwlgPnSQ0PUH+9YGcXvfkSwo4+ufNVMgQPCls/1AWN4b/UYlN+rsKvzz4fCx iFm1mkF17d7CmeXVk8d05EiIpFxvvbEOzRGrEHn+IfF/ -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:38 2026 by rpki-client