This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/zY81wydMae1na7lPVw5aCX9EnXM.roa File: zY81wydMae1na7lPVw5aCX9EnXM.roa (raw, json) Hash identifier: nNfFZfbfNdUHAnCea0HZqbv6bL4Ykk/ho7JpFBjrXqA= Subject key identifier: CD:8F:35:C3:27:4C:69:ED:67:6B:B9:4F:57:0E:5A:09:7F:44:9D:73 Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C7955D66B4C5E0F11BC0B21206A615 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/zY81wydMae1na7lPVw5aCX9EnXM.roa Signing time: Thu 01 Jan 2026 04:18:47 +0000 ROA not before: Thu 01 Jan 2026 04:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209388 IP address blocks: 82.177.101.0/24 maxlen: 24 82.177.131.0/24 maxlen: 24 88.220.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:95:5d:66:b4:c5:e0:f1:1b:c0:b2:12:06:a6:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd8f35c3274c69ed676bb94f570e5a097f449d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:db:2e:91:bf:79:1d:b8:57:e6:08:43:1e:de: 1b:88:2e:96:47:a9:09:fa:8c:a3:bf:a6:f6:36:4d: e9:2c:84:f1:91:71:75:5e:57:ed:26:98:ad:6f:c1: af:78:a8:81:be:88:d7:6b:54:fe:e8:89:35:10:1e: fb:d0:cc:3d:e1:1d:19:b3:0d:fa:dd:29:bf:28:41: d1:17:dd:59:83:4a:fd:d8:09:eb:1f:7d:fc:42:c8: f9:17:2d:f8:bd:c2:6d:cb:f7:c5:08:7c:ad:9f:2d: e5:4c:8e:15:76:d8:53:00:9a:d3:18:6e:1b:b4:a9: fa:8e:3d:d6:93:e4:02:30:59:8f:6e:5f:ac:4d:cc: 3d:10:3b:ba:0d:97:90:e9:17:46:62:36:4d:89:25: 69:0d:9e:71:6b:07:17:20:f5:c8:47:f8:b1:d3:05: 9e:eb:69:37:5e:f2:1c:d0:a4:ca:d3:98:df:80:b2: 1e:17:a6:5e:7c:79:4f:37:91:fd:94:b3:aa:d3:3a: dd:5e:fd:23:70:17:b0:a9:16:e4:75:17:c6:1b:af: a8:66:aa:8c:b4:f3:06:4d:9a:e7:35:f0:17:80:8b: 86:4c:84:b2:87:f6:ff:7b:82:12:d2:fe:93:b3:c2: 30:29:36:a9:9f:7a:40:8d:b2:20:3c:72:af:96:00: 10:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8F:35:C3:27:4C:69:ED:67:6B:B9:4F:57:0E:5A:09:7F:44:9D:73 X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/zY81wydMae1na7lPVw5aCX9EnXM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.177.101.0/24 82.177.131.0/24 88.220.164.0/24 Signature Algorithm: sha256WithRSAEncryption 45:cc:37:0e:6b:a7:a7:ea:48:cd:bc:0e:51:ec:ff:17:ba:c8: 22:18:d6:3e:91:fd:c8:7c:df:19:86:f4:d0:a3:ba:5d:ac:08: 0f:7d:c7:d2:d1:84:2f:f3:de:ca:91:59:96:33:e6:66:9c:6d: 9b:69:3f:26:ef:17:33:22:25:3d:95:6a:d5:bc:40:e1:a7:fd: 56:44:96:40:a0:ae:c9:54:2c:c8:50:ae:3f:66:3a:e2:0f:f6: e2:1b:80:1a:05:39:03:3f:51:ec:c3:65:04:04:50:cf:f6:3e: 65:6c:53:dd:59:a1:42:06:21:ba:38:04:f0:7a:00:8e:01:af: bd:03:fe:8f:c0:c7:d5:90:ed:6d:ed:49:fe:06:cd:4e:87:8d: 2b:4c:9f:50:d1:54:f1:32:93:f7:b7:12:95:42:65:13:f5:49: 06:b5:c3:dd:e1:52:1f:76:6b:71:60:5a:2a:94:77:23:07:95: 4e:1c:c2:f6:3a:c6:06:43:0e:33:11:88:7b:77:9e:e2:44:1a: d7:45:a5:14:9a:b2:24:86:93:1d:b3:4b:f3:62:8e:76:c6:9a: 12:ed:d6:17:84:ee:7f:5a:72:44:9c:c6:16:24:9b:51:33:cd: 48:34:86:d0:36:ae:60:78:0c:b0:22:5f:9c:8e:c9:4c:48:38: fa:e1:5a:7f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3x5VdZrTF4PEbwLISBqYVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDhmMzVjMzI3NGM2OWVkNjc2YmI5NGY1NzBlNWEwOTdmNDQ5ZDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Nsukb95HbhX5ghDHt4biC6WR6kJ +oyjv6b2Nk3pLITxkXF1XlftJpitb8GveKiBvojXa1T+6Ik1EB770Mw94R0Zsw36 3Sm/KEHRF91Zg0r92AnrH338Qsj5Fy34vcJty/fFCHytny3lTI4VdthTAJrTGG4b tKn6jj3Wk+QCMFmPbl+sTcw9EDu6DZeQ6RdGYjZNiSVpDZ5xawcXIPXIR/ix0wWe 62k3XvIc0KTK05jfgLIeF6ZefHlPN5H9lLOq0zrdXv0jcBewqRbkdRfGG6+oZqqM tPMGTZrnNfAXgIuGTISyh/b/e4IS0v6Ts8IwKTapn3pAjbIgPHKvlgAQ8wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFM2PNcMnTGntZ2u5T1cOWgl/RJ1zMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvelk4MXd5ZE1hZTFuYTdsUFZ3NWFDWDlFblhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUrFlAwQA UrGDAwQAWNykMA0GCSqGSIb3DQEBCwUAA4IBAQBFzDcOa6en6kjNvA5R7P8Xusgi GNY+kf3IfN8ZhvTQo7pdrAgPfcfS0YQv897KkVmWM+ZmnG2baT8m7xczIiU9lWrV vEDhp/1WRJZAoK7JVCzIUK4/ZjriD/biG4AaBTkDP1Hsw2UEBFDP9j5lbFPdWaFC BiG6OATwegCOAa+9A/6PwMfVkO1t7Un+Bs1Oh40rTJ9Q0VTxMpP3txKVQmUT9UkG tcPd4VIfdmtxYFoqlHcjB5VOHML2OsYGQw4zEYh7d57iRBrXRaUUmrIkhpMds0vz Yo52xpoS7dYXhO5/WnJEnMYWJJtRM81INIbQNq5geAywIl+cjslMSDj64Vp/ -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:36 2026 by rpki-client