This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/5gYY22Jz1wKNyzXN9Gt_xzvZSfY.roa File: 5gYY22Jz1wKNyzXN9Gt_xzvZSfY.roa (raw, json) Hash identifier: 5wrEQMdQmaY0xkABdOrQufd1yopCOpthee6ppiUQDI8= Subject key identifier: E6:06:18:DB:62:73:D7:02:8D:CB:35:CD:F4:6B:7F:C7:3B:D9:49:F6 Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Certificate serial: 019B7E390817AAA5EBA248D58BD669BCD979 Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/5gYY22Jz1wKNyzXN9Gt_xzvZSfY.roa Signing time: Fri 02 Jan 2026 10:20:25 +0000 ROA not before: Fri 02 Jan 2026 10:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211736 IP address blocks: 88.210.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:08:17:aa:a5:eb:a2:48:d5:8b:d6:69:bc:d9:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Validity Not Before: Jan 2 10:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e60618db6273d7028dcb35cdf46b7fc73bd949f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bb:a7:e5:69:34:b1:f9:c5:00:b4:09:06:8e: 31:43:79:0f:23:70:5c:ef:5a:99:60:cb:ec:ad:e5: 5a:f0:47:8d:c7:16:a5:4d:0a:23:5a:95:82:86:10: b1:9a:c6:a9:30:1a:a6:e1:de:6e:27:03:74:bc:52: c1:3a:bd:e7:e3:25:1f:93:47:e4:53:f5:cf:91:c6: 4d:cd:5f:34:dc:fc:72:70:f5:8c:23:28:5a:99:fc: 71:c6:f6:81:6d:cf:39:a0:e1:60:8d:f5:f1:08:b9: 0f:78:3d:6d:3e:48:f9:78:7c:b1:a4:40:df:b8:c1: 6e:8e:fd:8e:a4:94:4d:00:20:3f:aa:6e:5b:3e:b7: 01:e2:b6:95:11:ed:e3:49:b0:29:28:bd:5b:b8:be: ce:e4:a6:92:b3:96:0f:6e:bc:fc:60:c5:82:b2:2b: 5e:31:08:39:8c:6e:14:bf:68:77:c0:93:8d:40:a5: b7:ed:3d:21:1d:31:89:cd:32:9d:88:d1:0a:e7:d1: d6:5b:83:6f:09:65:0c:66:45:12:e0:6b:60:42:ea: fa:77:46:c2:40:69:e3:4b:84:70:21:7a:25:47:ac: 5a:21:c2:57:d4:e2:f1:64:e1:19:bf:c1:16:10:a3: 8c:2e:00:e0:c7:7f:f6:b0:5a:fd:4d:7e:8f:3c:5c: 52:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:06:18:DB:62:73:D7:02:8D:CB:35:CD:F4:6B:7F:C7:3B:D9:49:F6 X509v3 Authority Key Identifier: keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/5gYY22Jz1wKNyzXN9Gt_xzvZSfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.210.63.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:6f:96:52:43:dc:2f:f2:21:37:ed:bc:9e:86:b9:51:a7:42: 1c:13:0f:fa:e2:b8:88:ef:26:0c:af:c6:43:b6:e0:f2:cf:b8: 0e:b3:7e:ff:62:4f:ae:2c:70:25:04:8e:44:d4:9d:50:f2:30: 9a:4d:c3:15:c2:4d:ad:f0:61:88:92:2a:5e:20:dd:58:cf:73: e4:9f:45:14:03:38:44:15:29:66:3a:70:7d:1e:a1:b7:ba:92: 9f:3f:50:22:46:e8:85:0c:48:df:14:15:91:46:40:4d:c1:5a: 26:03:4b:5b:be:af:0b:9d:33:7a:70:78:11:67:a8:54:97:10: f4:27:d3:47:eb:50:50:b0:c1:fb:be:23:c6:41:d2:49:9d:67: 28:7c:f4:d9:94:42:e7:20:95:de:48:38:3a:d4:38:e6:a5:47: a6:02:1c:e4:1b:3d:de:cf:c3:c3:30:b3:25:a8:b2:01:2e:c8: ee:cc:73:9b:7c:97:99:e4:9d:6a:f0:46:ed:d5:35:ba:0e:08: 9e:8a:0c:20:f2:12:10:fb:78:63:a6:96:eb:2f:27:22:bd:10: 0d:dd:da:f9:66:8a:bb:2c:ed:75:5c:c3:da:23:22:6e:02:9f: 30:9c:f7:25:1e:57:0f:16:51:68:0a:45:a2:5b:37:98:58:65: bc:36:4d:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OQgXqqXrokjVi9ZpvNl5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNjQ0MWQ5ZDgwN2UwZDc4Y2U3NTIxM2ExMDM0MDBlZTE0 YTdjZGMwHhcNMjYwMTAyMTAyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjA2MThkYjYyNzNkNzAyOGRjYjM1Y2RmNDZiN2ZjNzNiZDk0OWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrun5Wk0sfnFALQJBo4xQ3kPI3Bc 71qZYMvsreVa8EeNxxalTQojWpWChhCxmsapMBqm4d5uJwN0vFLBOr3n4yUfk0fk U/XPkcZNzV803PxycPWMIyhamfxxxvaBbc85oOFgjfXxCLkPeD1tPkj5eHyxpEDf uMFujv2OpJRNACA/qm5bPrcB4raVEe3jSbApKL1buL7O5KaSs5YPbrz8YMWCsite MQg5jG4Uv2h3wJONQKW37T0hHTGJzTKdiNEK59HWW4NvCWUMZkUS4GtgQur6d0bC QGnjS4RwIXolR6xaIcJX1OLxZOEZv8EWEKOMLgDgx3/2sFr9TX6PPFxSSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOYGGNtic9cCjcs1zfRrf8c72Un2MB8GA1UdIwQY MBaAFMpkQdnYB+DXjOdSE6EDQA7hSnzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYt MmUyOGI5NjQ5OGE5LzEvNWdZWTIySnoxd0tOeXpYTjlHdF94enZaU2ZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYtMmUyOGI5NjQ5OGE5 LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNI/MA0G CSqGSIb3DQEBCwUAA4IBAQAPb5ZSQ9wv8iE37byehrlRp0IcEw/64riI7yYMr8ZD tuDyz7gOs37/Yk+uLHAlBI5E1J1Q8jCaTcMVwk2t8GGIkipeIN1Yz3Pkn0UUAzhE FSlmOnB9HqG3upKfP1AiRuiFDEjfFBWRRkBNwVomA0tbvq8LnTN6cHgRZ6hUlxD0 J9NH61BQsMH7viPGQdJJnWcofPTZlELnIJXeSDg61DjmpUemAhzkGz3ez8PDMLMl qLIBLsjuzHObfJeZ5J1q8Ebt1TW6Dgieigwg8hIQ+3hjppbrLycivRAN3dr5Zoq7 LO11XMPaIyJuAp8wnPclHlcPFlFoCkWiWzeYWGW8Nk0O -----END CERTIFICATE-----Generated at Mon Jan 26 02:02:03 2026 by rpki-client