This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/J3Zt7VJPQfQXYnqX_R_R_XpZeSE.roa File: J3Zt7VJPQfQXYnqX_R_R_XpZeSE.roa (raw, json) Hash identifier: KuHxb51EAmE00bzdsSzMxDPnOooFiwAVBrPwSWbHtm4= Subject key identifier: 27:76:6D:ED:52:4F:41:F4:17:62:7A:97:FD:1F:D1:FD:7A:59:79:21 Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C79729A7C5DF7AC11DE45368B164CC Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/J3Zt7VJPQfQXYnqX_R_R_XpZeSE.roa Signing time: Thu 01 Jan 2026 04:18:47 +0000 ROA not before: Thu 01 Jan 2026 04:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212305 IP address blocks: 88.220.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:97:29:a7:c5:df:7a:c1:1d:e4:53:68:b1:64:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27766ded524f41f417627a97fd1fd1fd7a597921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:37:e6:71:18:fd:93:ca:fb:a5:e0:8a:a7:76: b7:b1:2d:01:72:f9:e6:13:19:18:ae:92:57:cd:2f: 15:6c:ac:dc:db:bb:dc:04:88:7e:e4:0d:30:bc:f7: 27:62:ef:1e:3f:01:8f:a4:21:1b:3a:67:b4:e1:fb: aa:5d:3c:04:f8:1a:37:f1:a2:7e:69:c6:a5:3d:00: a7:60:d8:24:de:8f:29:ee:e1:0d:c3:a2:e9:10:4f: ba:03:08:28:0a:02:d6:44:87:c8:58:7c:5b:53:cd: 25:7d:8b:f4:13:19:fc:a6:c2:48:31:e8:7f:c1:0e: cd:2a:4b:8d:7a:4e:2b:17:bf:87:76:60:92:fb:34: 0a:d5:fe:a2:8c:54:12:c8:e3:05:a9:4b:dc:0f:19: 5b:5c:69:36:2b:b6:28:93:cc:60:d0:63:90:4a:5b: d6:fb:39:88:43:49:95:11:5c:17:ff:28:b7:88:30: 2a:fc:a6:83:ed:2e:fc:eb:7c:04:25:7c:af:51:81: 40:9b:60:b1:13:6f:19:e2:6d:72:bf:06:bb:28:d3: 87:76:cf:ac:8c:d3:fb:36:29:85:eb:49:dc:e6:b1: 37:09:56:fc:27:4e:d6:da:1f:b1:0f:60:60:36:63: 8a:98:8c:df:c5:24:1e:d8:28:38:0e:62:fa:99:f3: cf:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:76:6D:ED:52:4F:41:F4:17:62:7A:97:FD:1F:D1:FD:7A:59:79:21 X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/J3Zt7VJPQfQXYnqX_R_R_XpZeSE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.220.90.0/24 Signature Algorithm: sha256WithRSAEncryption c0:ce:c4:51:8b:09:e5:62:d5:b5:61:b4:f9:43:24:b2:7e:5b: 6f:c3:88:f4:c8:b9:92:4d:89:ca:71:9b:10:78:c0:a0:7d:49: f3:d2:5f:04:06:73:f6:d9:b4:d3:ac:dd:c2:95:85:1d:f6:a8: 43:f5:c6:bf:4d:cc:81:97:00:20:64:b0:cb:4c:b8:ef:c3:ac: 93:47:3d:d8:69:22:8e:c2:d2:6f:69:77:98:92:87:69:2d:46: 56:a7:f9:04:51:3c:e7:d6:3b:14:e3:fe:2c:5d:6f:b3:05:a1: 39:be:36:b3:e4:f8:1f:ce:11:6d:91:41:ed:ee:e4:49:13:f2: 99:e5:37:9d:00:7e:ae:43:96:f8:bb:8b:4f:5d:34:ee:26:bc: b3:a8:ce:d7:ee:6d:8b:c0:6c:6c:9b:c4:60:aa:af:d4:5f:29: 1c:77:59:24:bd:44:0d:12:35:0c:3c:ec:71:ea:34:f1:40:fa: 43:4e:2d:c2:40:d2:21:b5:d4:61:54:b0:2d:53:68:1d:7d:8c: b1:19:93:e1:9e:31:68:0b:79:1e:59:61:49:4c:11:ea:d1:4d: 31:2b:74:ed:b5:6c:31:2f:17:40:4c:22:4c:6a:87:f2:03:e2: 58:c0:90:38:a0:5f:d3:18:99:3c:26:6c:7b:51:12:35:35:f9: bb:89:26:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x5cpp8XfesEd5FNosWTMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzc2NmRlZDUyNGY0MWY0MTc2MjdhOTdmZDFmZDFmZDdhNTk3OTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTfmcRj9k8r7peCKp3a3sS0Bcvnm ExkYrpJXzS8VbKzc27vcBIh+5A0wvPcnYu8ePwGPpCEbOme04fuqXTwE+Bo38aJ+ acalPQCnYNgk3o8p7uENw6LpEE+6AwgoCgLWRIfIWHxbU80lfYv0Exn8psJIMeh/ wQ7NKkuNek4rF7+HdmCS+zQK1f6ijFQSyOMFqUvcDxlbXGk2K7Yok8xg0GOQSlvW +zmIQ0mVEVwX/yi3iDAq/KaD7S7863wEJXyvUYFAm2CxE28Z4m1yvwa7KNOHds+s jNP7NimF60nc5rE3CVb8J07W2h+xD2BgNmOKmIzfxSQe2Cg4DmL6mfPPHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCd2be1ST0H0F2J6l/0f0f16WXkhMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvSjNadDdWSlBRZlFYWW5xWF9SX1JfWHBaZVNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNxaMA0G CSqGSIb3DQEBCwUAA4IBAQDAzsRRiwnlYtW1YbT5QySyfltvw4j0yLmSTYnKcZsQ eMCgfUnz0l8EBnP22bTTrN3ClYUd9qhD9ca/TcyBlwAgZLDLTLjvw6yTRz3YaSKO wtJvaXeYkodpLUZWp/kEUTzn1jsU4/4sXW+zBaE5vjaz5PgfzhFtkUHt7uRJE/KZ 5TedAH6uQ5b4u4tPXTTuJryzqM7X7m2LwGxsm8Rgqq/UXykcd1kkvUQNEjUMPOxx 6jTxQPpDTi3CQNIhtdRhVLAtU2gdfYyxGZPhnjFoC3keWWFJTBHq0U0xK3TttWwx LxdATCJMaofyA+JYwJA4oF/TGJk8Jmx7URI1Nfm7iSYS -----END CERTIFICATE-----Generated at Mon Jan 26 02:24:41 2026 by rpki-client