This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/X6HiUUsi7bN6eQwhujEt3w8fesY.roa File: X6HiUUsi7bN6eQwhujEt3w8fesY.roa (raw, json) Hash identifier: mMi6UK/TzvDyPIYWResi0LtijCtWN/vb7qkMXMJG7K4= Subject key identifier: 5F:A1:E2:51:4B:22:ED:B3:7A:79:0C:21:BA:31:2D:DF:0F:1F:7A:C6 Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C79A08B026E0AD94A44664EAAA6E95 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/X6HiUUsi7bN6eQwhujEt3w8fesY.roa Signing time: Thu 01 Jan 2026 04:18:48 +0000 ROA not before: Thu 01 Jan 2026 04:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215652 IP address blocks: 88.220.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:9a:08:b0:26:e0:ad:94:a4:46:64:ea:aa:6e:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fa1e2514b22edb37a790c21ba312ddf0f1f7ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:13:ca:ee:ba:64:3b:68:d2:bf:07:ee:28:07: 96:01:d3:1d:b2:02:38:b5:a2:76:ec:54:62:d7:e5: 1a:7e:97:cd:68:b7:2f:bd:2d:bf:28:f9:36:6b:a4: d6:55:f9:6e:c0:16:35:2b:a3:7b:49:ae:4d:6d:aa: da:54:99:52:06:34:44:86:10:b0:a2:74:57:ce:c5: 4d:11:f0:b9:88:1c:89:3b:f2:b2:ef:35:47:c1:43: 97:5f:bb:a3:8a:9b:db:5f:c1:04:b9:55:f5:4a:7f: 82:e2:23:26:15:84:92:ab:db:99:e2:c1:3c:51:8a: 21:3f:7e:a7:93:e2:ea:8a:5f:24:f0:91:b4:21:9c: 99:79:f0:c6:d0:75:9f:e4:8e:ec:25:69:8c:37:43: d2:26:f3:b7:53:2d:0f:0f:f9:ee:15:c2:a0:99:10: c7:80:cb:92:c4:36:4f:75:e0:8a:b2:1f:e5:98:d4: d3:37:6c:44:4a:67:ee:4f:bf:90:4e:2e:ed:c5:7e: 16:2e:e5:ff:1f:0d:8d:d5:5f:9e:22:e3:00:6a:36: 9a:29:fb:35:df:af:7a:e9:3f:e0:61:55:e5:c2:25: a1:09:d1:79:41:9d:57:68:aa:87:ea:17:53:e4:36: 99:25:08:b4:8b:c1:75:6b:38:76:f8:6a:06:1f:3d: af:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A1:E2:51:4B:22:ED:B3:7A:79:0C:21:BA:31:2D:DF:0F:1F:7A:C6 X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/X6HiUUsi7bN6eQwhujEt3w8fesY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.220.88.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:0b:5d:e6:b3:25:49:e2:39:b6:77:f6:4d:2d:2b:29:34:c3: 44:86:cf:2b:54:5d:f8:c4:7a:22:4d:04:d1:7b:39:d7:80:78: d8:86:6f:e5:99:a3:14:6a:52:38:d8:ba:32:9c:d4:21:fe:f7: 65:d3:3e:7c:20:e1:aa:f5:c5:48:ca:c8:f1:a2:75:28:a1:a5: fc:a9:20:98:92:70:9b:38:b3:05:3e:d3:12:7f:73:37:67:bd: 13:fe:0b:8d:bc:88:61:99:e4:cc:f7:95:56:6f:fb:26:21:63: 0e:c5:8d:a5:b7:b7:cd:29:4c:6c:24:e3:c6:20:84:6b:27:79: b3:a8:f3:10:84:4d:55:5e:1b:46:52:fd:d1:3f:3a:6c:5b:70: 45:e8:5f:e0:df:80:5e:91:26:35:1a:39:e7:1a:fe:af:70:8f: a8:13:69:83:19:c9:cd:5b:62:90:f3:cb:98:ba:96:2b:25:c4: 86:c4:89:07:8a:50:a7:d9:b1:03:ee:7a:ba:c2:4c:21:ee:91: 26:53:81:22:b0:6b:d0:c3:6d:ae:24:85:75:cb:88:49:eb:fe: 3c:45:57:10:76:84:3d:f9:a4:42:d3:bc:57:2c:ad:2b:ab:cf: ea:d9:fd:05:36:6a:ff:e3:9a:2e:45:05:de:f1:b8:ec:90:43: d1:9b:0c:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x5oIsCbgrZSkRmTqqm6VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmExZTI1MTRiMjJlZGIzN2E3OTBjMjFiYTMxMmRkZjBmMWY3YWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RPK7rpkO2jSvwfuKAeWAdMdsgI4 taJ27FRi1+UafpfNaLcvvS2/KPk2a6TWVfluwBY1K6N7Sa5NbaraVJlSBjREhhCw onRXzsVNEfC5iByJO/Ky7zVHwUOXX7ujipvbX8EEuVX1Sn+C4iMmFYSSq9uZ4sE8 UYohP36nk+Lqil8k8JG0IZyZefDG0HWf5I7sJWmMN0PSJvO3Uy0PD/nuFcKgmRDH gMuSxDZPdeCKsh/lmNTTN2xESmfuT7+QTi7txX4WLuX/Hw2N1V+eIuMAajaaKfs1 36966T/gYVXlwiWhCdF5QZ1XaKqH6hdT5DaZJQi0i8F1azh2+GoGHz2vjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF+h4lFLIu2zenkMIboxLd8PH3rGMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvWDZIaVVVc2k3Yk42ZVF3aHVqRXQzdzhmZXNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNxYMA0G CSqGSIb3DQEBCwUAA4IBAQA/C13msyVJ4jm2d/ZNLSspNMNEhs8rVF34xHoiTQTR eznXgHjYhm/lmaMUalI42LoynNQh/vdl0z58IOGq9cVIysjxonUooaX8qSCYknCb OLMFPtMSf3M3Z70T/guNvIhhmeTM95VWb/smIWMOxY2lt7fNKUxsJOPGIIRrJ3mz qPMQhE1VXhtGUv3RPzpsW3BF6F/g34BekSY1GjnnGv6vcI+oE2mDGcnNW2KQ88uY upYrJcSGxIkHilCn2bED7nq6wkwh7pEmU4EisGvQw22uJIV1y4hJ6/48RVcQdoQ9 +aRC07xXLK0rq8/q2f0FNmr/45ouRQXe8bjskEPRmwyU -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:38 2026 by rpki-client