This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/ldUoE3_0FMEhK7M4IIqXrcx_tFg.roa File: ldUoE3_0FMEhK7M4IIqXrcx_tFg.roa (raw, json) Hash identifier: 2/oHW0XAzr31GVYCmaSRug3uxo6wQHc+WQmqSyK3WQY= Subject key identifier: 95:D5:28:13:7F:F4:14:C1:21:2B:B3:38:20:8A:97:AD:CC:7F:B4:58 Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C7763A2B6F1082F2BE2ACA5254DF66 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/ldUoE3_0FMEhK7M4IIqXrcx_tFg.roa Signing time: Thu 01 Jan 2026 04:18:39 +0000 ROA not before: Thu 01 Jan 2026 04:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43372 IP address blocks: 88.220.112.0/24 maxlen: 24 88.220.130.0/23 maxlen: 23 88.220.134.0/23 maxlen: 23 88.220.161.0/24 maxlen: 24 195.136.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:76:3a:2b:6f:10:82:f2:be:2a:ca:52:54:df:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95d528137ff414c1212bb338208a97adcc7fb458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:85:cb:4e:18:c7:21:68:5e:9a:81:9b:e2:33: 07:34:7a:2c:82:e2:4f:c9:25:2f:37:87:57:02:96: 4b:d2:4c:9b:4f:18:b0:4f:82:31:a4:f3:6c:9d:14: 4c:2b:6b:e8:39:70:a5:ed:f0:7b:ff:8c:34:ee:ed: 97:8d:10:8a:fc:e2:1c:8c:61:d1:39:af:a9:be:b4: f8:d1:85:e6:0f:83:16:51:e2:e6:95:02:2d:7d:73: 74:60:0d:d5:09:20:ae:de:6b:84:17:99:b5:5b:1e: 06:af:f5:a7:2e:35:7b:d9:4f:ff:1c:08:7b:7f:31: 5b:47:c3:f9:27:d9:e2:91:d9:9c:77:c1:5d:cc:12: 63:eb:f3:e9:88:a0:69:04:46:42:1a:ce:77:21:9a: 18:71:39:a6:cb:60:3a:a4:f0:54:cc:4a:aa:19:ee: 6d:cf:09:11:9d:24:ce:08:7f:7a:49:da:ce:f4:1d: 6d:c9:78:02:1a:1b:47:fe:ce:c9:5e:fe:d9:c5:20: f5:95:39:f8:21:78:0f:01:ba:d4:71:59:08:2a:a2: 07:00:4b:b2:a3:2c:8f:f7:cc:8b:ed:70:63:9f:e5: dd:aa:d1:c4:36:f4:5f:4b:c4:ee:13:71:88:3a:39: d2:f7:e0:a7:46:1e:62:c2:be:dc:13:f2:97:d9:90: 43:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D5:28:13:7F:F4:14:C1:21:2B:B3:38:20:8A:97:AD:CC:7F:B4:58 X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/ldUoE3_0FMEhK7M4IIqXrcx_tFg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.220.112.0/24 88.220.130.0/23 88.220.134.0/23 88.220.161.0/24 195.136.168.0/22 Signature Algorithm: sha256WithRSAEncryption 90:41:94:c9:f3:df:73:d9:98:2b:1b:d2:30:cf:de:e1:f7:53: 68:e8:9d:6f:4c:b6:e0:e9:80:53:54:8f:73:08:8c:1e:6a:f6: 0b:84:d4:8d:4a:e9:b7:42:12:a5:83:03:7d:37:db:86:9b:ce: b9:79:5c:80:e7:19:a4:90:e6:9a:ec:c3:c6:2d:fe:65:11:6d: 45:50:1d:4d:82:dc:d6:8b:3a:77:a9:34:4a:8c:49:e2:dd:10: 1b:c7:f8:39:34:d2:59:0e:3a:d3:1d:49:f0:db:c2:20:94:62: 36:c6:91:ee:ef:91:26:e1:f2:be:0d:2e:7c:59:2c:cb:d4:9c: 02:62:13:bd:61:c3:f1:dc:da:63:19:3a:a0:03:c3:96:b7:b8: 22:ca:68:17:f3:bd:5c:82:27:1b:60:cb:b7:55:b5:45:d5:d6: b1:b7:64:66:82:08:5c:c2:43:32:4a:0e:40:cf:64:a8:71:14: da:e3:4a:8c:91:b0:54:80:3a:b1:aa:ff:02:3f:de:29:bd:3d: e3:c5:5c:f3:3e:2a:93:97:89:5d:91:60:bd:45:d2:9f:a4:16: b8:3d:bd:78:b6:9b:41:94:d7:6c:5d:4c:13:51:0e:d5:15:93: a6:66:93:6c:49:df:6d:8e:35:15:c7:87:82:71:d0:cb:49:c1: 54:9f:10:c2 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt3x3Y6K28QgvK+KspSVN9mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWQ1MjgxMzdmZjQxNGMxMjEyYmIzMzgyMDhhOTdhZGNjN2ZiNDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4XLThjHIWhemoGb4jMHNHosguJP ySUvN4dXApZL0kybTxiwT4IxpPNsnRRMK2voOXCl7fB7/4w07u2XjRCK/OIcjGHR Oa+pvrT40YXmD4MWUeLmlQItfXN0YA3VCSCu3muEF5m1Wx4Gr/WnLjV72U//HAh7 fzFbR8P5J9nikdmcd8FdzBJj6/PpiKBpBEZCGs53IZoYcTmmy2A6pPBUzEqqGe5t zwkRnSTOCH96SdrO9B1tyXgCGhtH/s7JXv7ZxSD1lTn4IXgPAbrUcVkIKqIHAEuy oyyP98yL7XBjn+XdqtHENvRfS8TuE3GIOjnS9+CnRh5iwr7cE/KX2ZBD6wIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFJXVKBN/9BTBISuzOCCKl63Mf7RYMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvbGRVb0UzXzBGTUVoSzdNNElJcVhyY3hfdEZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAWNxwAwQB WNyCAwQBWNyGAwQAWNyhAwQCw4ioMA0GCSqGSIb3DQEBCwUAA4IBAQCQQZTJ899z 2ZgrG9Iwz97h91No6J1vTLbg6YBTVI9zCIweavYLhNSNSum3QhKlgwN9N9uGm865 eVyA5xmkkOaa7MPGLf5lEW1FUB1NgtzWizp3qTRKjEni3RAbx/g5NNJZDjrTHUnw 28IglGI2xpHu75Em4fK+DS58WSzL1JwCYhO9YcPx3NpjGTqgA8OWt7giymgX871c gicbYMu3VbVF1daxt2RmgghcwkMySg5Az2SocRTa40qMkbBUgDqxqv8CP94pvT3j xVzzPiqTl4ldkWC9RdKfpBa4Pb14tptBlNdsXUwTUQ7VFZOmZpNsSd9tjjUVx4eC cdDLScFUnxDC -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:44 2026 by rpki-client