This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/YhBolksDWVHTN-zJ1ieDr6rh-7k.roa File: YhBolksDWVHTN-zJ1ieDr6rh-7k.roa (raw, json) Hash identifier: UYCr/ovYg1esT8fa7GfmnilQ+Y+AIHt8oDNr7PNZe1o= Subject key identifier: 62:10:68:96:4B:03:59:51:D3:37:EC:C9:D6:27:83:AF:AA:E1:FB:B9 Certificate issuer: /CN=5a68d699d1a9457c78acfbec004f98677aa4cc16 Certificate serial: 019B77C6FA3037A16993C5B0718D1D9A30A2 Authority key identifier: 5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/YhBolksDWVHTN-zJ1ieDr6rh-7k.roa Signing time: Thu 01 Jan 2026 04:18:07 +0000 ROA not before: Thu 01 Jan 2026 04:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29014 IP address blocks: 88.205.24.0/22 maxlen: 24 88.205.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:fa:30:37:a1:69:93:c5:b0:71:8d:1d:9a:30:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a68d699d1a9457c78acfbec004f98677aa4cc16 Validity Not Before: Jan 1 04:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=621068964b035951d337ecc9d62783afaae1fbb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4d:31:33:b0:68:02:ea:24:d6:d1:21:19:b1: 49:e5:c9:c0:77:5b:62:d8:ab:b1:89:3d:8b:12:d3: a7:2c:47:52:1f:1d:07:e0:b1:e0:92:e6:a1:47:50: 67:4d:ea:e1:2b:ea:32:ca:01:20:39:dd:b6:89:f6: 2d:90:9a:ba:d4:80:3e:54:a4:c6:b6:65:cc:4e:c9: 1f:1a:5d:a5:6d:30:2a:53:19:d0:97:06:a8:fe:a7: b7:12:05:1d:bc:8f:4b:f1:04:38:3a:47:41:4b:1a: ac:8b:11:54:6d:b6:e2:1e:ea:c8:e3:12:5a:00:eb: 6b:55:29:52:be:02:17:95:d4:39:ef:cb:cc:6a:fb: b8:a7:bd:35:77:b7:26:cd:01:31:b6:fc:e7:66:d1: 95:4a:18:25:4f:4a:f4:16:63:b3:57:cb:83:7c:2f: 0d:ea:09:3e:82:04:50:d1:35:49:79:a7:a6:79:53: 77:82:f0:1d:ea:f1:e0:79:90:7e:03:cf:a8:87:ea: 9f:d9:a3:cd:ce:a2:b9:dc:5a:90:38:83:69:91:f4: 54:b0:f6:63:a0:5d:ae:64:9e:6c:ab:b9:14:c2:f9: ac:30:94:2d:32:0f:c4:5e:2f:66:de:d4:eb:c0:70: 7e:ec:29:33:5c:a1:de:89:fb:27:c7:68:aa:f6:b7: e5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:10:68:96:4B:03:59:51:D3:37:EC:C9:D6:27:83:AF:AA:E1:FB:B9 X509v3 Authority Key Identifier: keyid:5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/YhBolksDWVHTN-zJ1ieDr6rh-7k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.205.24.0/21 Signature Algorithm: sha256WithRSAEncryption 10:8c:34:9d:5b:b3:57:64:93:d7:47:1b:98:2a:be:3e:9e:11: 9b:7e:15:71:f1:ab:79:75:6a:02:e3:93:97:3a:48:3e:23:c8: 2d:b9:b7:66:5f:97:03:65:e6:62:03:1f:80:d9:c2:a0:20:54: 72:9f:61:05:95:5f:b7:a8:42:78:55:a2:65:a6:89:86:67:03: ae:2f:82:7b:63:f3:04:78:b1:49:e0:c7:9e:90:76:ef:28:90: ee:d8:88:d5:0e:9d:c3:f8:35:56:6f:32:0e:51:2e:97:4c:b3: cf:07:ee:6a:30:5b:54:4a:c8:cf:fd:fc:76:a6:5d:ee:f0:19: 67:87:13:6c:9f:60:f0:86:88:2a:07:2c:ef:95:03:27:62:ea: f1:8d:71:42:53:b2:ba:0d:69:a4:b5:c2:e3:16:4e:f0:6a:8a: d0:7f:1a:46:1e:51:88:df:95:b0:79:3b:68:03:7b:49:78:99: 91:7d:00:a7:70:49:fe:0f:56:86:04:9e:76:36:b5:ed:2c:02: b7:7c:5f:58:e9:a2:b1:18:38:aa:a8:3e:24:a8:74:a1:1c:74: 0a:ef:3b:55:4e:1d:7f:cb:b0:b1:63:92:a6:1e:f3:cf:72:cd: 9e:88:82:3d:8a:08:41:1d:33:ff:e6:46:8c:53:ce:ed:f7:74: 01:71:6f:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xvowN6Fpk8WwcY0dmjCiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNjhkNjk5ZDFhOTQ1N2M3OGFjZmJlYzAwNGY5ODY3N2Fh NGNjMTYwHhcNMjYwMTAxMDQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjEwNjg5NjRiMDM1OTUxZDMzN2VjYzlkNjI3ODNhZmFhZTFmYmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU0xM7BoAuok1tEhGbFJ5cnAd1ti 2KuxiT2LEtOnLEdSHx0H4LHgkuahR1BnTerhK+oyygEgOd22ifYtkJq61IA+VKTG tmXMTskfGl2lbTAqUxnQlwao/qe3EgUdvI9L8QQ4OkdBSxqsixFUbbbiHurI4xJa AOtrVSlSvgIXldQ578vMavu4p701d7cmzQExtvznZtGVShglT0r0FmOzV8uDfC8N 6gk+ggRQ0TVJeaemeVN3gvAd6vHgeZB+A8+oh+qf2aPNzqK53FqQOINpkfRUsPZj oF2uZJ5sq7kUwvmsMJQtMg/EXi9m3tTrwHB+7CkzXKHeifsnx2iq9rflBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGIQaJZLA1lR0zfsydYng6+q4fu5MB8GA1UdIwQY MBaAFFpo1pnRqUV8eKz77ABPmGd6pMwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV21qV21kR3BSWHg0clB2c0FFLVlaM3FrekJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lMjhiYTYtYWFhZi00ZDMzLWI4ZGMt MGFlZTM2MGIwYmE0LzEvWWhCb2xrc0RXVkhUTi16SjFpZURyNnJoLTdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9lMjhiYTYtYWFhZi00ZDMzLWI4ZGMtMGFlZTM2MGIwYmE0 LzEvV21qV21kR3BSWHg0clB2c0FFLVlaM3FrekJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDWM0YMA0G CSqGSIb3DQEBCwUAA4IBAQAQjDSdW7NXZJPXRxuYKr4+nhGbfhVx8at5dWoC45OX Okg+I8gtubdmX5cDZeZiAx+A2cKgIFRyn2EFlV+3qEJ4VaJlpomGZwOuL4J7Y/ME eLFJ4MeekHbvKJDu2IjVDp3D+DVWbzIOUS6XTLPPB+5qMFtUSsjP/fx2pl3u8Bln hxNsn2DwhogqByzvlQMnYurxjXFCU7K6DWmktcLjFk7waorQfxpGHlGI35WweTto A3tJeJmRfQCncEn+D1aGBJ52NrXtLAK3fF9Y6aKxGDiqqD4kqHShHHQK7ztVTh1/ y7CxY5KmHvPPcs2eiII9ighBHTP/5kaMU87t93QBcW/y -----END CERTIFICATE-----Generated at Mon Jan 26 15:01:38 2026 by rpki-client