This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/njxDDTyiQW1fBxdIX8g6DzdZVsw.roa File: njxDDTyiQW1fBxdIX8g6DzdZVsw.roa (raw, json) Hash identifier: YfSVgrQnj+e2k9BTCCnnWmZiORJ3XWjBdMncGLL+xg4= Subject key identifier: 9E:3C:43:0D:3C:A2:41:6D:5F:07:17:48:5F:C8:3A:0F:37:59:56:CC Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C76DC282249FB6D005C3CE0508E76F Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/njxDDTyiQW1fBxdIX8g6DzdZVsw.roa Signing time: Thu 01 Jan 2026 04:18:37 +0000 ROA not before: Thu 01 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30816 IP address blocks: 88.220.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6d:c2:82:24:9f:b6:d0:05:c3:ce:05:08:e7:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e3c430d3ca2416d5f0717485fc83a0f375956cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0e:b4:0e:b8:0d:02:b9:95:f8:61:50:ba:0c: 75:3e:ac:37:68:6e:ed:b2:ec:82:5a:db:ff:a2:d3: 7c:bf:2a:a1:2f:6c:2f:63:5f:c7:55:22:e9:3f:15: cf:6f:89:27:c0:75:bd:c5:df:82:98:5c:10:a3:b6: 81:76:28:b0:ba:e5:7f:ad:bb:62:36:35:60:33:fb: c8:bb:40:7f:57:f8:ce:41:ab:37:04:d4:b8:d2:69: 35:60:f4:e6:c4:52:91:90:04:fe:9a:a7:ca:ad:80: e4:42:d5:27:40:ba:99:ff:1c:b2:17:d3:82:61:7e: f6:17:46:ec:23:ef:85:65:66:86:97:58:31:5b:f8: 12:f0:69:58:c1:0a:ac:7d:ec:7a:54:04:25:8f:8e: f4:b0:2b:3f:a9:4e:f6:02:5a:2f:c2:81:81:52:d6: 63:5e:ac:2f:1a:24:5a:11:5b:f1:da:0c:9e:c6:a7: 4d:68:9f:d8:83:69:25:a1:53:d2:57:33:83:82:2e: a6:66:20:84:70:b7:cf:44:1f:46:ab:75:48:1f:3b: dd:2e:bd:08:eb:8e:b1:f8:b6:39:76:47:74:e3:18: b7:bd:3b:0c:04:1d:f8:05:ae:fd:fb:aa:38:f5:b4: 42:dd:23:65:70:f5:d6:44:1b:3b:23:06:cb:53:1d: 67:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:3C:43:0D:3C:A2:41:6D:5F:07:17:48:5F:C8:3A:0F:37:59:56:CC X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/njxDDTyiQW1fBxdIX8g6DzdZVsw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.220.139.0/24 Signature Algorithm: sha256WithRSAEncryption 80:95:a4:df:1e:b2:92:88:ec:f8:89:b0:cb:d6:ba:ee:59:c1: 5d:af:14:46:55:d1:0c:07:50:f5:27:39:a3:e1:06:30:fa:f8: 89:2a:21:65:06:3e:63:8c:bf:4b:bd:b7:60:86:98:13:53:6a: b9:16:c7:68:d2:d8:ad:da:b8:94:6d:a4:01:fe:64:37:d9:b3: 81:93:f8:72:10:37:17:3c:3a:77:33:c0:34:e9:ec:63:fb:d3: bc:a0:45:9c:08:c7:f0:66:b0:36:65:9d:a3:81:37:89:ec:25: e9:71:96:54:fe:41:4b:67:d4:21:3c:cb:ca:6e:8f:93:8e:2e: f2:15:f1:4b:42:8c:cd:17:b5:7a:01:af:82:18:79:a1:89:09: d0:ff:44:de:b7:2b:79:5d:0f:99:07:ea:55:07:b9:49:70:bb: 39:26:1b:cf:44:c7:c2:58:fb:17:cd:2d:8f:76:d5:95:03:c2: 98:06:ac:04:da:42:9c:34:9a:c2:c5:83:03:57:22:11:21:ba: 18:1f:9e:cd:38:4e:36:02:81:da:15:b2:7b:31:d8:9e:e6:ae: 85:0d:f0:17:7d:e8:72:29:14:e5:c0:cb:bc:06:ea:c3:c4:df: 30:71:92:e4:a2:55:2c:a2:c8:0f:84:21:28:26:6b:90:26:5f: 9a:8f:04:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x23CgiSfttAFw84FCOdvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTNjNDMwZDNjYTI0MTZkNWYwNzE3NDg1ZmM4M2EwZjM3NTk1NmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg60DrgNArmV+GFQugx1Pqw3aG7t suyCWtv/otN8vyqhL2wvY1/HVSLpPxXPb4knwHW9xd+CmFwQo7aBdiiwuuV/rbti NjVgM/vIu0B/V/jOQas3BNS40mk1YPTmxFKRkAT+mqfKrYDkQtUnQLqZ/xyyF9OC YX72F0bsI++FZWaGl1gxW/gS8GlYwQqsfex6VAQlj470sCs/qU72AlovwoGBUtZj XqwvGiRaEVvx2gyexqdNaJ/Yg2kloVPSVzODgi6mZiCEcLfPRB9Gq3VIHzvdLr0I 646x+LY5dkd04xi3vTsMBB34Ba79+6o49bRC3SNlcPXWRBs7IwbLUx1nWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ48Qw08okFtXwcXSF/IOg83WVbMMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvbmp4RERUeWlRVzFmQnhkSVg4ZzZEemRaVnN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNyLMA0G CSqGSIb3DQEBCwUAA4IBAQCAlaTfHrKSiOz4ibDL1rruWcFdrxRGVdEMB1D1Jzmj 4QYw+viJKiFlBj5jjL9LvbdghpgTU2q5Fsdo0tit2riUbaQB/mQ32bOBk/hyEDcX PDp3M8A06exj+9O8oEWcCMfwZrA2ZZ2jgTeJ7CXpcZZU/kFLZ9QhPMvKbo+Tji7y FfFLQozNF7V6Aa+CGHmhiQnQ/0Tetyt5XQ+ZB+pVB7lJcLs5JhvPRMfCWPsXzS2P dtWVA8KYBqwE2kKcNJrCxYMDVyIRIboYH57NOE42AoHaFbJ7Mdie5q6FDfAXfehy KRTlwMu8BurDxN8wcZLkolUsosgPhCEoJmuQJl+ajwQ9 -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:53 2026 by rpki-client