This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/oAr2WFKUbpqJWx0WB06JllnXJVM.roa File: oAr2WFKUbpqJWx0WB06JllnXJVM.roa (raw, json) Hash identifier: z+mFEWwZCZi6sj9INOcw7VyXMuDGzIhmkjP9QMraMbk= Subject key identifier: A0:0A:F6:58:52:94:6E:9A:89:5B:1D:16:07:4E:89:96:59:D7:25:53 Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C78B19A022225BC290653C1E551BE1 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/oAr2WFKUbpqJWx0WB06JllnXJVM.roa Signing time: Thu 01 Jan 2026 04:18:44 +0000 ROA not before: Thu 01 Jan 2026 04:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203389 IP address blocks: 82.177.184.0/22 maxlen: 22 82.177.210.0/23 maxlen: 23 88.220.62.0/23 maxlen: 23 88.220.96.0/23 maxlen: 23 88.220.100.0/22 maxlen: 22 195.136.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:8b:19:a0:22:22:5b:c2:90:65:3c:1e:55:1b:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a00af65852946e9a895b1d16074e899659d72553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:09:23:e1:57:fb:6a:b4:7a:ce:a5:3d:61:83: 46:e7:3d:5c:e6:63:46:b4:87:75:71:5a:72:89:be: bb:c7:4a:92:d4:3d:6d:70:dc:a8:1b:7e:d5:b9:49: 02:45:bd:9d:71:37:61:9b:7e:e4:ae:25:9c:cd:a0: b3:3a:62:06:65:dd:52:69:dd:e6:d1:dc:b9:21:89: 13:68:e2:12:11:66:31:e8:92:c8:d7:de:54:e7:58: b4:8d:8f:ba:03:ba:31:14:bb:d2:71:9c:f4:7b:e2: 8b:70:f7:35:ac:e0:71:58:10:b6:e5:61:c9:47:33: 5a:98:59:91:fe:01:74:3c:bd:6d:fa:ae:04:37:d1: 73:e5:7e:71:9b:cf:2a:be:9d:9f:6c:83:7c:9a:52: 62:de:d2:94:e3:f1:31:50:22:24:7a:12:7e:4c:17: b7:6b:1e:2f:04:4d:81:9e:9f:b4:e1:26:c1:86:ab: f1:8d:eb:1d:22:73:d5:fb:38:9d:fe:3f:3a:47:1f: 55:f0:14:b9:cf:a1:6e:19:d9:77:61:ca:ac:c7:14: fb:9d:46:02:dd:51:bf:53:98:82:ad:84:09:09:b8: 1f:9e:ac:3a:ae:67:54:1e:a9:b6:43:78:c2:ab:75: 6a:fe:cf:7f:41:0f:4a:48:b8:32:5d:a6:3f:d0:7f: e9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0A:F6:58:52:94:6E:9A:89:5B:1D:16:07:4E:89:96:59:D7:25:53 X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/oAr2WFKUbpqJWx0WB06JllnXJVM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.177.184.0/22 82.177.210.0/23 88.220.62.0/23 88.220.96.0/23 88.220.100.0/22 195.136.124.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:11:a6:1d:75:54:4f:3b:29:6c:ad:ee:68:45:4b:4c:ba:e8: 93:ba:22:27:d9:72:71:e6:63:de:54:11:c4:7e:c9:3a:cb:df: 94:12:93:21:64:c3:79:f2:df:7f:08:72:c7:48:21:4f:cb:79: ab:e4:b7:ef:54:bd:b6:11:09:30:09:52:19:0a:a6:52:42:cc: b6:0f:5e:7f:a8:d1:b1:91:3d:7c:fb:92:2e:bc:7c:8d:18:b7: 1a:d3:51:e4:39:e0:40:f8:ec:75:09:43:8b:1c:c8:20:f5:b0: 40:cd:ee:4c:6a:5a:31:e8:69:8f:d2:45:96:7a:b7:3f:b0:2f: c4:ac:9f:e4:b8:08:63:5a:7a:49:54:2c:92:a6:58:d3:10:df: 9a:e0:b9:82:5a:c2:62:ec:64:45:34:91:43:56:b4:be:25:9f: 38:a6:97:66:31:5f:e5:99:50:a1:f4:1c:26:d5:ee:8a:93:d4: 52:22:56:c2:8c:7d:b5:93:5a:0b:28:e3:dc:f3:57:8e:8f:e0: cd:92:22:4d:2c:c9:8e:d9:4f:a4:9e:97:40:2e:16:38:9d:73: 26:b7:a2:97:82:cf:85:c2:e3:8c:57:63:a9:c8:7d:be:0c:db: 1c:f0:25:8f:54:80:41:e7:ba:cc:e3:98:50:07:19:65:3e:86: 34:52:c0:d0 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt3x4sZoCIiW8KQZTweVRvhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDBhZjY1ODUyOTQ2ZTlhODk1YjFkMTYwNzRlODk5NjU5ZDcyNTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wkj4Vf7arR6zqU9YYNG5z1c5mNG tId1cVpyib67x0qS1D1tcNyoG37VuUkCRb2dcTdhm37kriWczaCzOmIGZd1Sad3m 0dy5IYkTaOISEWYx6JLI195U51i0jY+6A7oxFLvScZz0e+KLcPc1rOBxWBC25WHJ RzNamFmR/gF0PL1t+q4EN9Fz5X5xm88qvp2fbIN8mlJi3tKU4/ExUCIkehJ+TBe3 ax4vBE2Bnp+04SbBhqvxjesdInPV+zid/j86Rx9V8BS5z6FuGdl3YcqsxxT7nUYC 3VG/U5iCrYQJCbgfnqw6rmdUHqm2Q3jCq3Vq/s9/QQ9KSLgyXaY/0H/pbwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFKAK9lhSlG6aiVsdFgdOiZZZ1yVTMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvb0FyMldGS1VicHFKV3gwV0IwNkpsbG5YSlZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCUrG4AwQB UrHSAwQBWNw+AwQBWNxgAwQCWNxkAwQCw4h8MA0GCSqGSIb3DQEBCwUAA4IBAQBK EaYddVRPOylsre5oRUtMuuiTuiIn2XJx5mPeVBHEfsk6y9+UEpMhZMN58t9/CHLH SCFPy3mr5LfvVL22EQkwCVIZCqZSQsy2D15/qNGxkT18+5IuvHyNGLca01HkOeBA +Ox1CUOLHMgg9bBAze5Malox6GmP0kWWerc/sC/ErJ/kuAhjWnpJVCySpljTEN+a 4LmCWsJi7GRFNJFDVrS+JZ84ppdmMV/lmVCh9Bwm1e6Kk9RSIlbCjH21k1oLKOPc 81eOj+DNkiJNLMmO2U+knpdALhY4nXMmt6KXgs+FwuOMV2OpyH2+DNsc8CWPVIBB 57rM45hQBxllPoY0UsDQ -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:18 2026 by rpki-client