This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/ZYsXASnkg3GpzgGeoChJlpRl-5o.roa File: ZYsXASnkg3GpzgGeoChJlpRl-5o.roa (raw, json) Hash identifier: 6V0eDvFU4yNZMpGJtWMlf8YpvSOsb+FqlK4BReAXsLc= Subject key identifier: 65:8B:17:01:29:E4:83:71:A9:CE:01:9E:A0:28:49:96:94:65:FB:9A Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C792AC6A0C017292C2361A22BFA215 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/ZYsXASnkg3GpzgGeoChJlpRl-5o.roa Signing time: Thu 01 Jan 2026 04:18:46 +0000 ROA not before: Thu 01 Jan 2026 04:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207735 IP address blocks: 88.220.118.0/23 maxlen: 23 88.220.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:92:ac:6a:0c:01:72:92:c2:36:1a:22:bf:a2:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=658b170129e48371a9ce019ea02849969465fb9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:17:df:f5:58:fd:bd:25:5d:3c:26:51:59:ce: 98:62:78:b3:cb:1d:35:ed:ce:53:73:25:56:ac:3f: 55:96:91:e0:2c:4e:f1:04:c6:b6:f8:c4:0e:3b:fc: c1:32:5c:c6:04:98:78:47:c1:65:fb:54:47:64:8e: 1a:73:60:5a:ad:04:eb:a9:2e:bc:b9:23:89:59:41: 22:12:ea:74:67:ef:f6:cd:c2:c3:e5:62:51:62:fc: be:6c:7d:d8:3a:95:bb:48:7b:03:f0:39:44:5c:2c: e4:39:ad:41:8d:dd:21:c5:44:36:92:4b:8c:8e:57: ac:78:8f:06:8c:92:25:d7:11:5b:25:2b:53:6f:58: 39:df:13:21:78:cf:b8:2c:ca:a3:23:1a:4e:f1:5d: 2b:42:9a:01:58:00:85:3d:03:54:45:9d:0b:d7:17: d8:10:f5:ee:30:e7:57:26:a6:44:95:9b:28:e0:39: a0:c6:95:45:58:0a:54:4f:f5:ba:97:f6:1f:d0:b9: fa:9c:f5:83:4a:e6:ea:7d:3e:30:15:93:87:64:9b: a2:17:59:7d:08:20:2f:2e:c0:ee:4d:dc:da:a8:7e: 23:15:2c:a5:04:00:d7:50:6b:8e:4e:18:23:2a:e3: 80:cd:ce:d3:3e:43:f4:31:24:f9:c2:ae:04:86:c8: c7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:8B:17:01:29:E4:83:71:A9:CE:01:9E:A0:28:49:96:94:65:FB:9A X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/ZYsXASnkg3GpzgGeoChJlpRl-5o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.220.118.0/23 88.220.125.0/24 Signature Algorithm: sha256WithRSAEncryption 01:61:fa:3f:0a:f0:cc:a0:33:a9:02:3d:aa:f3:14:f0:84:27: 93:fa:30:6b:b2:e7:db:44:3a:a7:0b:83:d3:ee:fd:1a:e0:86: d4:11:c3:60:49:35:67:59:b3:f7:46:00:74:04:ec:b3:f8:5d: 15:2f:c4:1b:96:0a:d8:b0:4b:b4:d3:20:63:9d:79:10:96:1d: a1:e2:82:71:ad:73:af:ad:37:78:49:8c:23:25:cc:6a:c3:a9: 3b:0e:0c:ea:fd:54:3b:15:66:87:96:5d:7f:79:03:a1:dd:e4: 0e:d4:8d:bb:96:da:7b:12:75:c7:79:88:22:a6:88:bd:49:3b: 2d:71:38:52:0c:6e:92:21:5f:80:2d:f7:42:a4:fe:fd:2a:80: 71:ea:ac:bf:b6:fa:26:d7:fc:7c:8f:f9:b4:fd:1c:95:da:e5: 34:12:77:1b:01:8d:68:5e:f3:f7:5b:af:2f:89:4a:e1:44:1c: 46:fa:7d:9d:8c:e5:b9:16:0d:b4:dc:21:2e:5b:ff:1b:4a:0b: db:da:12:22:6d:49:1f:12:9a:a3:f2:57:9d:dd:3f:35:86:70: 42:f9:1f:dd:8f:9c:a1:34:03:6f:f0:dc:fe:46:65:62:7a:58: b3:a9:86:c7:e5:d7:1d:47:69:75:87:2d:94:b3:e1:c9:4c:ac: 02:ed:a1:ae -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x5KsagwBcpLCNhoiv6IVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NThiMTcwMTI5ZTQ4MzcxYTljZTAxOWVhMDI4NDk5Njk0NjVmYjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBff9Vj9vSVdPCZRWc6YYnizyx01 7c5TcyVWrD9VlpHgLE7xBMa2+MQOO/zBMlzGBJh4R8Fl+1RHZI4ac2BarQTrqS68 uSOJWUEiEup0Z+/2zcLD5WJRYvy+bH3YOpW7SHsD8DlEXCzkOa1Bjd0hxUQ2kkuM jleseI8GjJIl1xFbJStTb1g53xMheM+4LMqjIxpO8V0rQpoBWACFPQNURZ0L1xfY EPXuMOdXJqZElZso4DmgxpVFWApUT/W6l/Yf0Ln6nPWDSubqfT4wFZOHZJuiF1l9 CCAvLsDuTdzaqH4jFSylBADXUGuOThgjKuOAzc7TPkP0MST5wq4EhsjHZwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGWLFwEp5INxqc4BnqAoSZaUZfuaMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvWllzWEFTbmtnM0dwemdHZW9DaEpscFJsLTVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBWNx2AwQA WNx9MA0GCSqGSIb3DQEBCwUAA4IBAQABYfo/CvDMoDOpAj2q8xTwhCeT+jBrsufb RDqnC4PT7v0a4IbUEcNgSTVnWbP3RgB0BOyz+F0VL8QblgrYsEu00yBjnXkQlh2h 4oJxrXOvrTd4SYwjJcxqw6k7Dgzq/VQ7FWaHll1/eQOh3eQO1I27ltp7EnXHeYgi poi9STstcThSDG6SIV+ALfdCpP79KoBx6qy/tvom1/x8j/m0/RyV2uU0EncbAY1o XvP3W68viUrhRBxG+n2djOW5Fg203CEuW/8bSgvb2hIibUkfEpqj8led3T81hnBC +R/dj5yhNANv8Nz+RmVielizqYbH5dcdR2l1hy2Us+HJTKwC7aGu -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:55 2026 by rpki-client