This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/Y_29QVsVJvHnxddFaQdcq2kyCOc.roa File: Y_29QVsVJvHnxddFaQdcq2kyCOc.roa (raw, json) Hash identifier: ycsC5DW4Lfa6OQ8J1BIx0zDPciZcjwI4JTfmbrMI8V0= Subject key identifier: 63:FD:BD:41:5B:15:26:F1:E7:C5:D7:45:69:07:5C:AB:69:32:08:E7 Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692 Certificate serial: 019B7CEE62F769C90E8E9654DC4AD7B0DFE5 Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/Y_29QVsVJvHnxddFaQdcq2kyCOc.roa Signing time: Fri 02 Jan 2026 04:19:16 +0000 ROA not before: Fri 02 Jan 2026 04:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12527 IP address blocks: 88.157.230.0/24 maxlen: 24 88.157.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:62:f7:69:c9:0e:8e:96:54:dc:4a:d7:b0:df:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692 Validity Not Before: Jan 2 04:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63fdbd415b1526f1e7c5d74569075cab693208e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a0:7f:1e:33:3f:a5:52:00:aa:04:79:ef:c2: 42:e1:34:92:a2:61:3c:cd:ce:be:0a:de:6b:2b:bb: 73:96:ef:d8:f3:4e:0e:e7:c1:c4:c6:a3:e9:83:9f: 17:4a:25:bd:a7:e0:a9:4a:65:c9:7a:be:17:0f:f4: 11:95:33:7b:f1:75:05:02:d6:de:09:36:46:31:10: e9:c4:ae:7b:f1:c8:86:f8:b0:6a:36:5e:d5:b3:c8: 5d:66:79:af:1b:75:2d:bf:c1:bb:c2:4c:96:7e:8e: c9:b2:94:1b:b9:1a:d5:5a:54:7c:e0:b6:1f:8a:37: 70:e8:30:cf:85:8b:0f:ee:9e:e2:2b:a7:33:39:54: f7:97:40:23:53:68:49:39:07:99:b7:02:ba:c0:5e: a3:bc:70:21:a4:19:02:fd:7e:d0:6d:68:4a:20:0d: e4:3b:82:8b:51:9d:3e:aa:e2:67:28:e2:9b:4f:e7: 20:2e:76:74:56:48:cf:d2:15:21:62:3a:89:99:84: 5e:ee:da:c0:49:e2:d2:14:58:8c:e6:27:cc:60:cf: 5f:c5:60:27:f1:45:e6:c7:8f:fe:d4:9f:87:e5:a2: 24:2a:d6:32:d0:ba:b7:50:07:da:c0:c4:49:0e:f4: 06:90:1a:9c:ae:b5:4c:0c:ec:d2:dc:bd:6e:99:98: ef:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FD:BD:41:5B:15:26:F1:E7:C5:D7:45:69:07:5C:AB:69:32:08:E7 X509v3 Authority Key Identifier: keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/Y_29QVsVJvHnxddFaQdcq2kyCOc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.157.230.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:fa:29:0b:5a:5f:0f:5d:c4:dd:91:15:0a:cc:42:57:40:fc: bd:5b:97:2f:49:d2:5f:fd:12:95:6d:f9:f8:b4:ac:53:f2:36: c2:0c:e8:95:2e:92:df:1a:e7:00:8f:7f:e4:f1:b4:40:67:aa: 57:be:f7:dd:c5:1b:7d:03:5d:02:46:67:2e:b6:9f:74:88:29: b8:f4:e3:d0:50:7c:c4:95:b0:c7:86:05:e6:39:0a:66:ae:33: 8f:03:46:81:34:a9:59:fb:de:a6:37:f8:f9:9a:c4:23:a3:77: ad:93:5b:0c:fa:34:68:87:ae:c9:83:43:24:89:c4:27:38:4e: 84:bf:c3:b0:a2:77:a0:fe:a7:9b:24:c0:06:22:32:e0:6e:fa: 3b:e4:fc:5d:17:04:29:a7:b7:c3:bd:5f:f8:ad:a3:65:28:86: 6e:77:b9:ee:6c:ff:3e:cb:9d:30:c2:35:f2:bc:26:90:05:4f: be:de:e3:b5:83:d5:83:09:ad:d7:23:46:8f:0e:14:b4:79:29: 80:14:6f:e0:fc:e5:cc:dc:c3:96:6c:68:22:eb:a6:75:f1:4d: fb:3b:77:48:d2:9d:4c:ba:41:15:c0:ff:a8:cf:72:76:30:a3: cb:97:39:ae:1c:28:d1:c8:b5:3f:e2:a2:78:d9:f6:42:1f:ee: c1:a5:f2:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87mL3ackOjpZU3ErXsN/lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTlmMDUyYmM5ZTcyODQ4ODgwNzQzOTBjOWQwYmMxMjc2 MDY2OTIwHhcNMjYwMTAyMDQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2ZkYmQ0MTViMTUyNmYxZTdjNWQ3NDU2OTA3NWNhYjY5MzIwOGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aB/HjM/pVIAqgR578JC4TSSomE8 zc6+Ct5rK7tzlu/Y804O58HExqPpg58XSiW9p+CpSmXJer4XD/QRlTN78XUFAtbe CTZGMRDpxK578ciG+LBqNl7Vs8hdZnmvG3Utv8G7wkyWfo7JspQbuRrVWlR84LYf ijdw6DDPhYsP7p7iK6czOVT3l0AjU2hJOQeZtwK6wF6jvHAhpBkC/X7QbWhKIA3k O4KLUZ0+quJnKOKbT+cgLnZ0VkjP0hUhYjqJmYRe7trASeLSFFiM5ifMYM9fxWAn 8UXmx4/+1J+H5aIkKtYy0Lq3UAfawMRJDvQGkBqcrrVMDOzS3L1umZjvLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGP9vUFbFSbx58XXRWkHXKtpMgjnMB8GA1UdIwQY MBaAFBMZ8FK8nnKEiIB0OQydC8EnYGaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhud1VyeWVjb1NJZ0hRNURKMEx3U2RnWnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kNWJiY2UtNDIyMC00ZWM0LThhZjUt MmMxYTc3MzBiZDI1LzEvWV8yOVFWc1ZKdkhueGRkRmFRZGNxMmt5Q09jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kNWJiY2UtNDIyMC00ZWM0LThhZjUtMmMxYTc3MzBiZDI1 LzEvRXhud1VyeWVjb1NJZ0hRNURKMEx3U2RnWnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWJ3mMA0G CSqGSIb3DQEBCwUAA4IBAQBr+ikLWl8PXcTdkRUKzEJXQPy9W5cvSdJf/RKVbfn4 tKxT8jbCDOiVLpLfGucAj3/k8bRAZ6pXvvfdxRt9A10CRmcutp90iCm49OPQUHzE lbDHhgXmOQpmrjOPA0aBNKlZ+96mN/j5msQjo3etk1sM+jRoh67Jg0MkicQnOE6E v8Owoneg/qebJMAGIjLgbvo75PxdFwQpp7fDvV/4raNlKIZud7nubP8+y50wwjXy vCaQBU++3uO1g9WDCa3XI0aPDhS0eSmAFG/g/OXM3MOWbGgi66Z18U37O3dI0p1M ukEVwP+oz3J2MKPLlzmuHCjRyLU/4qJ42fZCH+7BpfIn -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:07 2026 by rpki-client