This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/O_4V_zKgUR_yh6DDlnECmluNzfs.roa File: O_4V_zKgUR_yh6DDlnECmluNzfs.roa (raw, json) Hash identifier: Sx4d/Mv1LTM6DydYDYlWAR8xSjg5dwe3r3V9LKWl47A= Subject key identifier: 3B:FE:15:FF:32:A0:51:1F:F2:87:A0:C3:96:71:02:9A:5B:8D:CD:FB Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C795E92987A989F1D4C285F375F889 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/O_4V_zKgUR_yh6DDlnECmluNzfs.roa Signing time: Thu 01 Jan 2026 04:18:47 +0000 ROA not before: Thu 01 Jan 2026 04:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211025 IP address blocks: 88.220.58.0/24 maxlen: 24 195.136.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:95:e9:29:87:a9:89:f1:d4:c2:85:f3:75:f8:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bfe15ff32a0511ff287a0c39671029a5b8dcdfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a9:d3:e5:47:af:86:ff:66:e9:d4:59:83:dd: c9:53:bc:1b:77:f7:71:85:64:9d:77:f3:cb:40:cf: 83:df:56:01:f0:21:3e:10:87:34:69:54:aa:cf:1a: 33:30:35:ef:c3:8a:06:3f:a6:fd:00:61:c6:41:de: c8:eb:be:fc:78:e3:73:76:e3:22:d4:5e:ca:d5:c9: 85:93:84:c2:25:b8:fd:3b:bb:5e:a7:0f:82:f7:73: 15:6e:f1:e8:61:d8:96:f1:f1:94:90:f7:4a:a4:d6: 40:6d:14:80:26:76:9f:fd:95:e8:d1:19:4a:19:75: 86:0d:6e:68:e3:21:85:4d:c3:c6:a9:d5:29:e7:3e: 32:ff:6f:d2:1d:06:34:6c:7b:53:7e:72:e4:a7:3e: ff:e0:83:67:7a:ed:c7:c0:74:a4:64:b2:70:20:ac: 11:7a:8c:83:36:64:68:18:65:50:64:0d:1b:cf:48: 1e:45:8d:4a:72:ae:1b:98:e4:ee:53:4e:66:ae:2d: db:ce:d7:07:ff:02:9b:89:4d:9e:fb:b4:54:c4:38: 7b:a2:3b:68:67:34:23:8e:92:9b:54:24:e4:9a:99: 47:d0:8d:e6:6d:98:2f:73:bc:fd:9d:62:30:74:cc: 46:a5:aa:80:cb:2a:68:77:06:b6:16:61:0f:fe:57: 38:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:FE:15:FF:32:A0:51:1F:F2:87:A0:C3:96:71:02:9A:5B:8D:CD:FB X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/O_4V_zKgUR_yh6DDlnECmluNzfs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.220.58.0/24 195.136.70.0/24 Signature Algorithm: sha256WithRSAEncryption 15:94:f2:a0:99:d5:12:65:1e:31:3a:4f:7f:0e:b6:f9:9a:5b: d4:fa:be:55:54:4c:b3:45:2f:e7:5d:72:0f:3c:c5:96:e5:9c: 00:1f:1a:93:4b:5e:e8:f9:78:12:1c:94:4f:6c:e2:c6:fd:43: f7:78:b8:27:2c:e9:76:7d:c9:98:4b:d5:3a:05:cf:d2:bd:2b: 95:be:07:8c:ae:e8:06:81:ca:fb:e8:b0:f7:10:59:44:09:81: d3:c7:e0:69:90:e3:b3:76:61:fb:53:c7:7a:39:0f:a2:57:5c: e2:27:6f:1b:11:79:d2:09:e7:a6:6b:e1:37:6d:c4:b2:0a:7e: 3f:79:14:61:76:d8:36:16:ce:81:94:65:c5:66:93:cd:c6:29: ff:4d:6c:5d:f6:17:11:79:e8:85:ac:34:90:b4:a8:a2:bd:9b: 61:ad:5a:75:e8:a7:98:13:40:7a:f6:e1:32:ba:66:f9:23:5d: 5a:7c:76:8a:26:2c:b7:a1:f0:54:0c:a5:da:68:06:c2:35:1e: d2:aa:85:b9:c5:8f:a1:5b:e4:bb:63:c9:96:56:54:3d:04:8e: bf:9d:00:0a:bc:eb:b5:3c:93:35:ee:05:87:34:de:cd:15:9c: df:85:2e:15:29:73:1d:4e:25:32:ba:ae:94:19:ea:5d:11:50: b3:4f:5d:a0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x5XpKYepifHUwoXzdfiJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmZlMTVmZjMyYTA1MTFmZjI4N2EwYzM5NjcxMDI5YTViOGRjZGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzanT5Uevhv9m6dRZg93JU7wbd/dx hWSdd/PLQM+D31YB8CE+EIc0aVSqzxozMDXvw4oGP6b9AGHGQd7I6778eONzduMi 1F7K1cmFk4TCJbj9O7tepw+C93MVbvHoYdiW8fGUkPdKpNZAbRSAJnaf/ZXo0RlK GXWGDW5o4yGFTcPGqdUp5z4y/2/SHQY0bHtTfnLkpz7/4INneu3HwHSkZLJwIKwR eoyDNmRoGGVQZA0bz0geRY1Kcq4bmOTuU05mri3bztcH/wKbiU2e+7RUxDh7ojto ZzQjjpKbVCTkmplH0I3mbZgvc7z9nWIwdMxGpaqAyypodwa2FmEP/lc4HwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDv+Ff8yoFEf8oegw5ZxAppbjc37MB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvT180Vl96S2dVUl95aDZERGxuRUNtbHVOemZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWNw6AwQA w4hGMA0GCSqGSIb3DQEBCwUAA4IBAQAVlPKgmdUSZR4xOk9/Drb5mlvU+r5VVEyz RS/nXXIPPMWW5ZwAHxqTS17o+XgSHJRPbOLG/UP3eLgnLOl2fcmYS9U6Bc/SvSuV vgeMrugGgcr76LD3EFlECYHTx+BpkOOzdmH7U8d6OQ+iV1ziJ28bEXnSCeema+E3 bcSyCn4/eRRhdtg2Fs6BlGXFZpPNxin/TWxd9hcReeiFrDSQtKiivZthrVp16KeY E0B69uEyumb5I11afHaKJiy3ofBUDKXaaAbCNR7SqoW5xY+hW+S7Y8mWVlQ9BI6/ nQAKvOu1PJM17gWHNN7NFZzfhS4VKXMdTiUyuq6UGepdEVCzT12g -----END CERTIFICATE-----Generated at Mon Jan 26 01:16:45 2026 by rpki-client