This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/b7IDEmcV17pr99op4NIM8-cO4PY.roa File: b7IDEmcV17pr99op4NIM8-cO4PY.roa (raw, json) Hash identifier: dVrqO5nQqRPl3Gw5wcbS8Y/ZlAmNKTvSdm94A1VhQD8= Subject key identifier: 6F:B2:03:12:67:15:D7:BA:6B:F7:DA:29:E0:D2:0C:F3:E7:0E:E0:F6 Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C77FD95ADD64A6CAA16802C63B0C6D Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/b7IDEmcV17pr99op4NIM8-cO4PY.roa Signing time: Thu 01 Jan 2026 04:18:41 +0000 ROA not before: Thu 01 Jan 2026 04:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62147 IP address blocks: 88.220.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:7f:d9:5a:dd:64:a6:ca:a1:68:02:c6:3b:0c:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fb203126715d7ba6bf7da29e0d20cf3e70ee0f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d7:81:66:87:e5:c7:54:39:53:12:58:8b:cb: 98:bf:3b:3f:3f:22:cc:58:70:40:ad:c3:83:31:2e: 5b:fd:b3:8c:44:4e:4a:ea:30:37:e5:6c:c8:ac:c8: e1:14:65:d5:4e:8b:b4:de:b2:69:31:e3:0a:6e:de: b5:a7:86:f0:3b:95:c8:06:32:43:c0:24:0e:80:86: 54:7c:62:06:82:72:3e:5e:18:69:d5:de:ca:42:e6: 95:d0:15:f0:1d:a3:f7:79:ef:54:06:d5:3c:15:13: cc:10:84:b5:b5:52:5b:22:01:6e:d9:18:71:13:91: 60:f1:51:09:8a:60:09:a7:7b:5d:b4:bc:c3:a0:a9: e8:9b:7a:47:35:b9:88:0d:2a:d6:f5:c9:ab:55:1b: 05:97:dd:70:61:d2:5c:06:59:e2:aa:12:8c:14:fe: 36:21:d1:3b:84:be:a7:4a:d0:c4:68:b0:12:df:7e: 2c:05:19:a6:57:d8:15:f1:b2:b0:27:93:c1:f1:27: 0c:7a:40:e9:8d:f9:29:f3:9f:69:bb:68:85:e9:1b: 23:0d:e9:db:3b:89:e5:e8:87:71:17:64:b6:f1:4a: c8:3d:88:33:d0:32:ef:07:2b:e3:c4:d8:d2:b1:a9: 3b:0e:ae:89:de:d4:61:fd:84:b4:f7:3b:ac:ba:05: 32:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B2:03:12:67:15:D7:BA:6B:F7:DA:29:E0:D2:0C:F3:E7:0E:E0:F6 X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/b7IDEmcV17pr99op4NIM8-cO4PY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.220.250.0/23 Signature Algorithm: sha256WithRSAEncryption a4:52:51:f8:6e:56:93:ad:89:9b:8b:69:2b:b9:d7:1e:78:33: 9f:f5:76:01:c4:fc:17:08:65:88:8c:31:d4:86:bd:75:8e:fd: 31:ba:3c:5d:58:63:13:ea:20:20:db:3e:bc:3f:1c:c7:e7:5e: 66:3d:3f:37:8f:25:e7:c6:df:44:e8:50:92:8f:de:2a:1e:3f: 6c:4b:32:bc:b5:04:d5:f4:f5:e7:12:55:09:49:5c:09:f4:48: 29:51:f3:ff:3b:b0:9d:8c:06:71:4d:71:9a:e7:dc:48:c9:be: 60:d1:db:58:64:90:f7:37:cc:ff:47:2a:ac:e6:bd:cd:75:c9: c6:0b:e4:d0:96:0b:83:70:b4:e9:23:22:67:11:89:cd:b2:6e: d4:c0:3e:ee:7d:65:bd:01:ea:b7:64:2b:ca:03:bf:c7:1a:67: ce:a1:5f:22:4e:a8:bc:e0:93:2b:8b:b1:19:86:27:30:03:ba: df:5e:9c:e1:bc:cd:86:ed:fd:3d:f9:a2:55:5d:65:4d:a6:41: 9e:db:60:9a:94:bb:16:4c:6d:77:0b:3f:9b:66:82:13:c9:0e: ae:2f:e9:26:7d:4d:98:ca:e5:5e:19:71:5b:38:eb:5f:22:8b: 03:02:4b:f8:75:c9:4b:57:36:56:2e:c8:9d:37:1a:8f:aa:8a: 04:85:c9:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3/ZWt1kpsqhaALGOwxtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmIyMDMxMjY3MTVkN2JhNmJmN2RhMjllMGQyMGNmM2U3MGVlMGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdeBZoflx1Q5UxJYi8uYvzs/PyLM WHBArcODMS5b/bOMRE5K6jA35WzIrMjhFGXVTou03rJpMeMKbt61p4bwO5XIBjJD wCQOgIZUfGIGgnI+Xhhp1d7KQuaV0BXwHaP3ee9UBtU8FRPMEIS1tVJbIgFu2Rhx E5Fg8VEJimAJp3tdtLzDoKnom3pHNbmIDSrW9cmrVRsFl91wYdJcBlniqhKMFP42 IdE7hL6nStDEaLAS334sBRmmV9gV8bKwJ5PB8ScMekDpjfkp859pu2iF6RsjDenb O4nl6IdxF2S28UrIPYgz0DLvByvjxNjSsak7Dq6J3tRh/YS09zusugUyiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG+yAxJnFde6a/faKeDSDPPnDuD2MB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvYjdJREVtY1YxN3ByOTlvcDROSU04LWNPNFBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWNz6MA0G CSqGSIb3DQEBCwUAA4IBAQCkUlH4blaTrYmbi2krudceeDOf9XYBxPwXCGWIjDHU hr11jv0xujxdWGMT6iAg2z68PxzH515mPT83jyXnxt9E6FCSj94qHj9sSzK8tQTV 9PXnElUJSVwJ9EgpUfP/O7CdjAZxTXGa59xIyb5g0dtYZJD3N8z/Ryqs5r3NdcnG C+TQlguDcLTpIyJnEYnNsm7UwD7ufWW9Aeq3ZCvKA7/HGmfOoV8iTqi84JMri7EZ hicwA7rfXpzhvM2G7f09+aJVXWVNpkGe22CalLsWTG13Cz+bZoITyQ6uL+kmfU2Y yuVeGXFbOOtfIosDAkv4dclLVzZWLsidNxqPqooEhcl9 -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:57 2026 by rpki-client