This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/X_nNmu4mBrGCM07GWAPrYulFTtY.roa File: X_nNmu4mBrGCM07GWAPrYulFTtY.roa (raw, json) Hash identifier: MV9/botogucz48NtXvio8yCWIfGIxx2TIwl/eOM6YG0= Subject key identifier: 5F:F9:CD:9A:EE:26:06:B1:82:33:4E:C6:58:03:EB:62:E9:45:4E:D6 Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C7868B54B8D3C7BFF2D03ED47E1F9D Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/X_nNmu4mBrGCM07GWAPrYulFTtY.roa Signing time: Thu 01 Jan 2026 04:18:43 +0000 ROA not before: Thu 01 Jan 2026 04:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199390 IP address blocks: 195.136.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:86:8b:54:b8:d3:c7:bf:f2:d0:3e:d4:7e:1f:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ff9cd9aee2606b182334ec65803eb62e9454ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:83:4e:71:30:d0:94:87:fb:59:ed:c1:e3:fd: 37:2b:32:0e:38:e4:5a:0e:7f:93:6f:c9:06:97:ac: 76:b0:a2:16:f9:b8:ad:ae:47:6c:9c:2b:6d:42:5e: 12:77:85:a9:db:58:b6:93:7f:f1:a4:a0:34:38:d1: 0c:81:cd:5e:1a:32:45:50:65:56:ad:1a:f0:ae:18: 30:ee:1b:52:34:3b:c2:c3:a9:44:b4:8e:e0:1f:a2: f2:1e:f0:9c:9c:e0:e8:33:13:37:d1:47:a3:1c:63: 8f:08:1d:95:6b:8c:69:28:7d:39:cb:c7:db:6d:91: 7b:ec:36:67:f8:a2:1c:34:9f:af:ad:e6:94:64:79: d1:6e:76:02:c4:90:21:0b:3c:ef:1e:f8:fc:70:ab: b4:cc:f1:d1:44:73:27:9f:89:40:4e:51:12:6d:b1: 1a:3a:29:a2:95:85:ee:6a:f2:d3:a6:7f:bf:df:09: 0d:96:f1:8a:a8:e0:7b:ae:34:5e:be:ce:b8:90:a4: 7f:27:eb:da:5d:5b:8b:f5:cf:3c:27:80:5f:fe:8a: 13:93:ee:3d:49:67:f9:65:cc:12:38:4f:89:6e:49: 80:7c:20:d4:7c:71:c2:81:84:d2:57:3e:3b:f5:2f: 57:0b:f8:88:3e:92:68:c5:f1:e7:a1:37:01:8e:60: 4d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F9:CD:9A:EE:26:06:B1:82:33:4E:C6:58:03:EB:62:E9:45:4E:D6 X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/X_nNmu4mBrGCM07GWAPrYulFTtY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.136.176.0/22 Signature Algorithm: sha256WithRSAEncryption 94:b3:a4:20:4f:87:83:4d:a3:07:db:37:74:c8:5f:70:04:12: dd:46:26:74:c1:17:d7:6c:a0:0a:3c:45:90:9e:35:b2:b7:74: 50:2e:69:08:91:83:22:af:48:56:47:ef:6b:f5:d9:61:38:ca: d1:8e:af:87:f7:58:43:db:d3:8e:12:1d:ce:73:de:34:17:e6: ec:19:a7:ee:05:6c:e6:6f:04:4c:b2:c4:f6:a6:fa:75:28:07: 1c:cb:ab:bc:36:2b:23:52:77:2c:ae:7e:d6:4f:d8:bd:cc:50: a1:a0:22:94:ff:07:81:53:79:26:6c:52:b6:4a:c2:88:c8:90: d0:d3:3c:98:ca:df:bd:5a:66:f6:ba:f1:13:6f:27:47:c0:3b: 37:a9:06:d8:26:c4:c2:22:1f:6a:70:d0:52:87:2e:d3:9e:c8: 3d:fa:54:ac:c1:51:db:df:ce:85:88:db:f5:ba:2b:b1:dc:8e: cd:34:91:ea:72:7c:ef:53:fa:17:9c:a5:94:ab:32:eb:9c:37: 62:14:3d:bf:40:41:39:b7:e7:65:eb:f9:18:fb:41:80:75:24: fb:48:8c:1b:fd:c1:32:58:85:73:7d:54:35:46:2d:e1:db:cb: 09:15:79:f5:f6:b8:48:9a:23:73:af:ac:19:fa:4e:41:bd:29: b1:51:ae:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x4aLVLjTx7/y0D7Ufh+dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmY5Y2Q5YWVlMjYwNmIxODIzMzRlYzY1ODAzZWI2MmU5NDU0ZWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YNOcTDQlIf7We3B4/03KzIOOORa Dn+Tb8kGl6x2sKIW+bitrkdsnCttQl4Sd4Wp21i2k3/xpKA0ONEMgc1eGjJFUGVW rRrwrhgw7htSNDvCw6lEtI7gH6LyHvCcnODoMxM30UejHGOPCB2Va4xpKH05y8fb bZF77DZn+KIcNJ+vreaUZHnRbnYCxJAhCzzvHvj8cKu0zPHRRHMnn4lATlESbbEa OimilYXuavLTpn+/3wkNlvGKqOB7rjRevs64kKR/J+vaXVuL9c88J4Bf/ooTk+49 SWf5ZcwSOE+JbkmAfCDUfHHCgYTSVz479S9XC/iIPpJoxfHnoTcBjmBNiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF/5zZruJgaxgjNOxlgD62LpRU7WMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvWF9uTm11NG1CckdDTTA3R1dBUHJZdWxGVHRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw4iwMA0G CSqGSIb3DQEBCwUAA4IBAQCUs6QgT4eDTaMH2zd0yF9wBBLdRiZ0wRfXbKAKPEWQ njWyt3RQLmkIkYMir0hWR+9r9dlhOMrRjq+H91hD29OOEh3Oc940F+bsGafuBWzm bwRMssT2pvp1KAccy6u8NisjUncsrn7WT9i9zFChoCKU/weBU3kmbFK2SsKIyJDQ 0zyYyt+9Wmb2uvETbydHwDs3qQbYJsTCIh9qcNBShy7Tnsg9+lSswVHb386FiNv1 uiux3I7NNJHqcnzvU/oXnKWUqzLrnDdiFD2/QEE5t+dl6/kY+0GAdST7SIwb/cEy WIVzfVQ1Ri3h28sJFXn19rhImiNzr6wZ+k5BvSmxUa7j -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:58 2026 by rpki-client