This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/jF9C8AO7wV3_FrKrqpQztVKkkVU.roa File: jF9C8AO7wV3_FrKrqpQztVKkkVU.roa (raw, json) Hash identifier: NaZ2l5lyHWZwRn/GaCPInP46sVcv97DjimJvdmrgwfA= Subject key identifier: 8C:5F:42:F0:03:BB:C1:5D:FF:16:B2:AB:AA:94:33:B5:52:A4:91:55 Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C78B844497FC69B5DA3592533A22B9 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/jF9C8AO7wV3_FrKrqpQztVKkkVU.roa Signing time: Thu 01 Jan 2026 04:18:44 +0000 ROA not before: Thu 01 Jan 2026 04:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204301 IP address blocks: 81.15.191.0/24 maxlen: 24 81.15.201.0/24 maxlen: 24 88.220.48.0/24 maxlen: 24 88.220.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:8b:84:44:97:fc:69:b5:da:35:92:53:3a:22:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c5f42f003bbc15dff16b2abaa9433b552a49155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:09:db:44:bd:34:8c:aa:a6:5e:a0:aa:a9:86: f6:d5:b3:35:fa:54:8d:f9:6e:f4:2e:37:5d:2e:bd: ec:48:3e:29:7b:61:b7:35:39:b5:27:27:14:00:21: ac:cc:34:1e:2b:3d:4e:86:a8:38:e1:94:8f:1f:b7: 05:d3:98:c3:ce:b9:68:4f:64:97:cc:e3:d9:51:c2: 69:3a:b9:69:a1:43:f6:d2:82:21:0d:11:95:08:01: a2:35:6d:dd:23:80:d7:b1:6a:03:e7:d2:9a:6f:68: 7f:95:12:ff:54:fb:61:6d:cc:c5:38:01:8f:19:b9: de:67:c9:6b:9b:c7:88:32:f8:1b:8b:09:e0:54:1b: 42:e4:1c:20:7e:4b:4b:26:58:f4:f9:6f:d5:ef:79: db:98:ea:b7:66:95:d7:d3:20:61:72:8e:64:17:ab: b1:2b:94:39:32:1b:d1:91:ae:0c:58:89:b4:05:60: 55:5f:dd:0c:20:d2:6c:d1:f3:71:c4:61:aa:c7:d1: 06:cf:69:30:dc:95:22:ff:c7:88:62:18:7b:bf:6d: 1c:af:80:b1:09:9c:77:4f:04:78:b3:df:83:ea:14: 2c:ac:7b:e4:76:79:f0:e0:32:1f:a5:61:ba:f6:d2: 66:f6:ca:a5:21:5b:7f:c1:47:f7:97:29:b9:d6:2c: b3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:5F:42:F0:03:BB:C1:5D:FF:16:B2:AB:AA:94:33:B5:52:A4:91:55 X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/jF9C8AO7wV3_FrKrqpQztVKkkVU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.15.191.0/24 81.15.201.0/24 88.220.48.0/24 88.220.84.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:b8:7f:85:c5:6a:45:26:a6:4c:d9:e4:6b:bf:cb:22:f9:78: c7:f4:0e:c6:67:5f:9e:22:a7:0e:5f:af:ef:20:a3:c1:11:23: 5e:fa:32:7e:01:11:31:ca:d1:03:79:a3:67:1a:7d:aa:fe:11: 93:de:9b:2f:cd:01:de:22:d9:37:e8:d8:6c:a8:52:e0:89:ce: 42:07:08:fd:7c:c0:65:a7:7a:7f:a7:70:a5:02:0b:6f:cc:49: f6:96:33:7a:87:05:a4:25:9b:83:85:18:8d:44:00:4a:08:93: 50:94:e3:a1:55:86:55:83:a8:8f:f4:4c:2e:17:a9:d9:11:13: 9e:fe:f8:68:84:a9:68:78:45:0f:c4:5b:22:b9:88:c1:36:09: 28:55:03:83:36:06:d4:e2:08:a5:ce:64:2c:94:01:1e:0d:c2: 79:a2:d5:67:ea:c6:cb:3c:24:d5:eb:eb:c4:3e:e5:0f:9b:7d: 5c:29:7f:cc:73:1f:f2:88:94:b3:7c:fb:5e:e3:4b:06:2b:1f: ac:4c:5c:85:47:f9:a9:19:ee:50:4e:7c:32:80:cd:40:00:bf: 83:aa:56:64:d7:82:35:47:3a:3e:13:c4:a3:83:cd:0c:77:49: 47:2e:45:d8:a7:00:de:52:df:fa:39:bc:ed:be:3f:66:16:60: ca:28:98:f5 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3x4uERJf8abXaNZJTOiK5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzVmNDJmMDAzYmJjMTVkZmYxNmIyYWJhYTk0MzNiNTUyYTQ5MTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQnbRL00jKqmXqCqqYb21bM1+lSN +W70LjddLr3sSD4pe2G3NTm1JycUACGszDQeKz1Ohqg44ZSPH7cF05jDzrloT2SX zOPZUcJpOrlpoUP20oIhDRGVCAGiNW3dI4DXsWoD59Kab2h/lRL/VPthbczFOAGP GbneZ8lrm8eIMvgbiwngVBtC5BwgfktLJlj0+W/V73nbmOq3ZpXX0yBhco5kF6ux K5Q5MhvRka4MWIm0BWBVX90MINJs0fNxxGGqx9EGz2kw3JUi/8eIYhh7v20cr4Cx CZx3TwR4s9+D6hQsrHvkdnnw4DIfpWG69tJm9sqlIVt/wUf3lym51iyzHQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFIxfQvADu8Fd/xayq6qUM7VSpJFVMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvakY5QzhBTzd3VjNfRnJLcnFwUXp0Vktra1ZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUQ+/AwQA UQ/JAwQAWNwwAwQAWNxUMA0GCSqGSIb3DQEBCwUAA4IBAQAOuH+FxWpFJqZM2eRr v8si+XjH9A7GZ1+eIqcOX6/vIKPBESNe+jJ+ARExytEDeaNnGn2q/hGT3psvzQHe Itk36NhsqFLgic5CBwj9fMBlp3p/p3ClAgtvzEn2ljN6hwWkJZuDhRiNRABKCJNQ lOOhVYZVg6iP9EwuF6nZEROe/vhohKloeEUPxFsiuYjBNgkoVQODNgbU4gilzmQs lAEeDcJ5otVn6sbLPCTV6+vEPuUPm31cKX/Mcx/yiJSzfPte40sGKx+sTFyFR/mp Ge5QTnwygM1AAL+DqlZk14I1Rzo+E8Sjg80Md0lHLkXYpwDeUt/6Obztvj9mFmDK KJj1 -----END CERTIFICATE-----Generated at Mon Jan 26 05:34:14 2026 by rpki-client