This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/OuxZ_InT7bKGRiDZ1UuE8iwybJU.roa File: OuxZ_InT7bKGRiDZ1UuE8iwybJU.roa (raw, json) Hash identifier: m6x/snR8uBw5mCnAOjnTlv6HYW4GCNtGTEaeU8j60tY= Subject key identifier: 3A:EC:59:FC:89:D3:ED:B2:86:46:20:D9:D5:4B:84:F2:2C:32:6C:95 Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C7894950C8E1D6295D31B864D011D1 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/OuxZ_InT7bKGRiDZ1UuE8iwybJU.roa Signing time: Thu 01 Jan 2026 04:18:44 +0000 ROA not before: Thu 01 Jan 2026 04:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201113 IP address blocks: 88.220.154.0/24 maxlen: 24 88.220.167.0/24 maxlen: 24 195.136.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:89:49:50:c8:e1:d6:29:5d:31:b8:64:d0:11:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3aec59fc89d3edb2864620d9d54b84f22c326c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:36:0c:d1:7c:c8:4c:3e:3c:ce:7f:44:d2:ad: 4a:e7:e6:06:49:86:cd:1b:59:b4:20:e9:80:37:60: 4f:b5:9e:8f:2e:1b:08:31:14:71:71:e1:24:91:01: 29:b6:33:e7:63:82:7c:b5:34:f0:3b:0a:cc:5d:0e: 82:d6:06:d4:4f:48:9a:ae:a5:c4:11:1f:16:71:88: a5:0f:5a:08:62:93:4c:6d:d0:92:50:5e:4f:0a:e5: cd:19:2b:23:19:1d:0b:97:6f:41:65:ca:ad:f9:08: 64:35:30:84:22:80:5b:82:34:cd:b8:b2:11:6f:d9: 3a:cd:ed:37:4c:89:99:9b:5c:a8:76:bf:05:45:f8: e0:41:26:2d:71:ef:1e:86:40:93:d0:4a:0b:98:d5: f7:fa:16:eb:11:84:af:e3:4c:e7:c8:6d:52:5e:48: 04:c9:ea:cb:6e:39:2e:c5:7f:06:e3:a1:6c:57:10: 77:81:cb:c8:d7:0f:b6:86:9d:44:23:28:71:1c:c6: 55:d5:92:6b:47:be:c2:f4:f5:4c:1b:cf:23:d4:62: b1:47:d7:f6:4d:ef:6b:db:b5:be:54:00:2b:c3:99: 9b:94:c9:5c:6e:30:f4:80:6a:a7:02:82:3a:6a:fe: d6:27:e8:aa:42:6b:26:0b:26:ce:02:05:11:2f:2f: 0d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EC:59:FC:89:D3:ED:B2:86:46:20:D9:D5:4B:84:F2:2C:32:6C:95 X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/OuxZ_InT7bKGRiDZ1UuE8iwybJU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.220.154.0/24 88.220.167.0/24 195.136.162.0/23 Signature Algorithm: sha256WithRSAEncryption 34:46:4b:f5:c3:3e:fb:52:d8:3d:01:57:1c:e7:70:7a:14:44: f7:a8:98:8a:49:60:1d:0c:02:5d:32:72:e5:3d:be:c7:cd:aa: 21:9c:78:90:9a:4c:76:97:a9:13:b7:6f:44:1d:74:47:c5:14: 2d:2e:4e:a4:df:b9:9b:28:9d:dc:34:28:a8:26:6a:c7:b8:be: 4e:d1:f0:bd:b2:4e:87:c7:2e:c5:b0:ed:57:91:61:62:9b:d2: 4a:6c:48:77:5a:71:d7:29:9f:11:a7:b6:06:2c:ca:03:55:2d: 39:d0:b4:bf:30:04:ff:01:93:77:ab:0e:28:7b:f2:de:22:c4: 20:54:8e:9d:bc:80:27:e7:0a:d9:3b:a5:18:bb:b1:b7:d7:19: 85:84:29:88:ad:37:9a:de:61:50:f2:d7:df:a1:49:d1:ba:72: a5:b2:7c:f0:22:da:f1:1c:e1:96:ea:aa:52:42:01:c0:81:86: 4d:a7:ab:5f:4e:55:bd:bd:28:39:82:a5:e5:9b:13:d1:c6:0b: 67:3f:0f:f1:91:3b:ad:63:60:c8:34:ec:15:b4:6b:5c:a9:6d: 67:8e:1d:a2:70:fd:7c:dd:f9:fe:01:cd:22:00:f2:80:e0:dd: bb:ee:fb:1a:ce:26:70:c1:b7:5c:6f:7f:67:87:f7:32:d1:5f: 56:ad:20:d6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3x4lJUMjh1ildMbhk0BHRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWVjNTlmYzg5ZDNlZGIyODY0NjIwZDlkNTRiODRmMjJjMzI2Yzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjYM0XzITD48zn9E0q1K5+YGSYbN G1m0IOmAN2BPtZ6PLhsIMRRxceEkkQEptjPnY4J8tTTwOwrMXQ6C1gbUT0iarqXE ER8WcYilD1oIYpNMbdCSUF5PCuXNGSsjGR0Ll29BZcqt+QhkNTCEIoBbgjTNuLIR b9k6ze03TImZm1yodr8FRfjgQSYtce8ehkCT0EoLmNX3+hbrEYSv40znyG1SXkgE yerLbjkuxX8G46FsVxB3gcvI1w+2hp1EIyhxHMZV1ZJrR77C9PVMG88j1GKxR9f2 Te9r27W+VAArw5mblMlcbjD0gGqnAoI6av7WJ+iqQmsmCybOAgURLy8NFQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDrsWfyJ0+2yhkYg2dVLhPIsMmyVMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvT3V4Wl9JblQ3YktHUmlEWjFVdUU4aXd5YkpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWNyaAwQA WNynAwQBw4iiMA0GCSqGSIb3DQEBCwUAA4IBAQA0Rkv1wz77Utg9AVcc53B6FET3 qJiKSWAdDAJdMnLlPb7HzaohnHiQmkx2l6kTt29EHXRHxRQtLk6k37mbKJ3cNCio JmrHuL5O0fC9sk6Hxy7FsO1XkWFim9JKbEh3WnHXKZ8Rp7YGLMoDVS050LS/MAT/ AZN3qw4oe/LeIsQgVI6dvIAn5wrZO6UYu7G31xmFhCmIrTea3mFQ8tffoUnRunKl snzwItrxHOGW6qpSQgHAgYZNp6tfTlW9vSg5gqXlmxPRxgtnPw/xkTutY2DINOwV tGtcqW1njh2icP183fn+Ac0iAPKA4N277vsaziZwwbdcb39nh/cy0V9WrSDW -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:12 2026 by rpki-client