This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/kte7grWY5h0jkrQKoHZDa0Tgc4g.roa File: kte7grWY5h0jkrQKoHZDa0Tgc4g.roa (raw, json) Hash identifier: zHAcd5D6dQKKHEs3PoblpfRKaTtc0iKi0wb0t4U+QSk= Subject key identifier: 92:D7:BB:82:B5:98:E6:1D:23:92:B4:0A:A0:76:43:6B:44:E0:73:88 Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C7849D26A3AA00221D7AB9772CADE9 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/kte7grWY5h0jkrQKoHZDa0Tgc4g.roa Signing time: Thu 01 Jan 2026 04:18:42 +0000 ROA not before: Thu 01 Jan 2026 04:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198023 IP address blocks: 88.220.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:84:9d:26:a3:aa:00:22:1d:7a:b9:77:2c:ad:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92d7bb82b598e61d2392b40aa076436b44e07388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d8:06:8d:cf:1f:bd:84:41:14:42:6c:6e:f7: 91:ba:55:cf:1b:b9:f2:8c:79:18:1e:35:6d:de:4c: 4e:cc:b4:28:26:c8:e1:ba:60:06:69:b6:8a:12:07: d1:af:73:7d:d2:52:33:d0:10:e6:fb:96:8f:bf:77: 2e:7a:f4:c1:35:17:d4:c5:1c:27:b6:30:06:3b:67: b5:ba:9a:9e:94:06:18:25:61:a1:f6:0e:b6:e7:a5: 06:dc:ee:cd:f7:cd:b7:e5:8c:a4:ae:3b:ad:8d:08: 6f:e2:01:73:84:d2:1c:3c:a6:46:be:34:1a:f6:a0: 56:a7:19:41:4a:75:b4:3d:7a:fe:ab:49:22:4c:94: 01:6b:8c:ea:6b:f0:ab:f4:4a:49:0c:6d:f9:33:eb: 95:c9:e5:38:56:d5:c1:12:9b:41:03:ce:e4:56:5f: 5b:07:c0:c5:35:e1:6b:ff:cd:48:07:e6:59:68:ff: c1:ee:9f:f1:37:a5:10:4b:31:68:f0:6b:ac:ff:1f: 8a:47:48:36:3c:61:95:6f:30:49:ac:cd:90:f2:81: a4:46:7f:64:e3:1b:bc:84:e7:62:64:0f:12:25:89: 27:d6:23:64:7c:58:b1:5d:99:b5:90:b1:88:24:1c: f5:1f:37:54:2c:e6:ff:b7:a5:42:de:0d:f2:63:da: cb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D7:BB:82:B5:98:E6:1D:23:92:B4:0A:A0:76:43:6B:44:E0:73:88 X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/kte7grWY5h0jkrQKoHZDa0Tgc4g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.220.181.0/24 Signature Algorithm: sha256WithRSAEncryption 76:9a:fd:2b:08:8d:b9:e5:27:da:3f:e3:f0:62:e6:7a:de:cd: 6a:87:47:e4:ae:67:d3:11:76:05:9c:a4:6d:d0:cd:53:8c:8a: df:a4:ba:03:c3:67:e7:86:86:34:cf:1e:2a:f2:f7:58:7a:f9: ff:46:07:60:4c:c2:79:37:56:02:92:f4:e2:5c:73:3c:19:76: 02:f7:22:e0:21:24:3f:61:2f:11:f8:c3:ff:54:b1:45:52:97: ed:d4:48:32:da:84:f8:15:8a:36:d9:95:3c:a1:25:d4:0f:d0: 12:0d:3b:a0:20:d9:36:12:4b:3a:b9:53:2d:c1:df:ec:8a:10: 17:8c:cf:46:2d:2a:06:e9:74:99:8c:d4:9b:42:32:ce:1c:05: 1e:4d:11:5d:7f:6f:25:0b:b8:21:a6:4f:6b:33:d4:a1:09:29: be:2e:f1:48:fe:ec:8c:b0:e4:42:53:54:72:00:10:c1:0b:b5: 4e:66:e4:eb:8c:6c:a3:5e:3f:ed:98:b8:08:59:1c:b9:68:26: 0c:7e:d6:45:7f:c6:80:6e:a2:c5:85:02:5a:6a:2e:bf:5a:c3: 2e:f8:84:68:38:62:79:9c:0e:d0:7c:a5:c9:d1:03:a2:12:ce: e7:0a:45:89:5d:f5:2f:fd:d9:28:f1:37:e3:52:23:15:8a:0c: 87:4f:d1:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x4SdJqOqACIderl3LK3pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmQ3YmI4MmI1OThlNjFkMjM5MmI0MGFhMDc2NDM2YjQ0ZTA3Mzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdgGjc8fvYRBFEJsbveRulXPG7ny jHkYHjVt3kxOzLQoJsjhumAGabaKEgfRr3N90lIz0BDm+5aPv3cuevTBNRfUxRwn tjAGO2e1upqelAYYJWGh9g6256UG3O7N98235YykrjutjQhv4gFzhNIcPKZGvjQa 9qBWpxlBSnW0PXr+q0kiTJQBa4zqa/Cr9EpJDG35M+uVyeU4VtXBEptBA87kVl9b B8DFNeFr/81IB+ZZaP/B7p/xN6UQSzFo8Gus/x+KR0g2PGGVbzBJrM2Q8oGkRn9k 4xu8hOdiZA8SJYkn1iNkfFixXZm1kLGIJBz1HzdULOb/t6VC3g3yY9rLxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJLXu4K1mOYdI5K0CqB2Q2tE4HOIMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEva3RlN2dyV1k1aDBqa3JRS29IWkRhMFRnYzRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNy1MA0G CSqGSIb3DQEBCwUAA4IBAQB2mv0rCI255SfaP+PwYuZ63s1qh0fkrmfTEXYFnKRt 0M1TjIrfpLoDw2fnhoY0zx4q8vdYevn/RgdgTMJ5N1YCkvTiXHM8GXYC9yLgISQ/ YS8R+MP/VLFFUpft1Egy2oT4FYo22ZU8oSXUD9ASDTugINk2Eks6uVMtwd/sihAX jM9GLSoG6XSZjNSbQjLOHAUeTRFdf28lC7ghpk9rM9ShCSm+LvFI/uyMsORCU1Ry ABDBC7VOZuTrjGyjXj/tmLgIWRy5aCYMftZFf8aAbqLFhQJaai6/WsMu+IRoOGJ5 nA7QfKXJ0QOiEs7nCkWJXfUv/dko8TfjUiMVigyHT9Gx -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:48 2026 by rpki-client