This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/UDdtWtEx2c-mJVngKL09z-S1X_w.roa File: UDdtWtEx2c-mJVngKL09z-S1X_w.roa (raw, json) Hash identifier: n8+XH3U5jIdTXKGtH/veEO5lPUmQphGGe2oVJecsaes= Subject key identifier: 50:37:6D:5A:D1:31:D9:CF:A6:25:59:E0:28:BD:3D:CF:E4:B5:5F:FC Certificate issuer: /CN=daac15b782bc32747b538dec2a222416cd684825 Certificate serial: 019B7D5C34AA8A18682917A21024C41CE0C3 Authority key identifier: DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/UDdtWtEx2c-mJVngKL09z-S1X_w.roa Signing time: Fri 02 Jan 2026 06:19:13 +0000 ROA not before: Fri 02 Jan 2026 06:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201953 IP address blocks: 91.212.25.0/24 maxlen: 24 185.253.228.0/22 maxlen: 22 2001:67c:5c8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:34:aa:8a:18:68:29:17:a2:10:24:c4:1c:e0:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daac15b782bc32747b538dec2a222416cd684825 Validity Not Before: Jan 2 06:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50376d5ad131d9cfa62559e028bd3dcfe4b55ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:83:89:2f:ea:11:f6:a1:21:27:20:3e:af:b1: 3b:d4:5c:82:16:df:0b:d6:6c:85:8b:9f:3d:0c:f0: 37:b2:03:38:d7:51:77:38:cc:a4:ae:76:02:1b:a5: ff:c0:fc:a5:ab:69:a5:f1:41:99:af:a8:27:d1:09: 32:43:5a:5e:43:d2:69:fb:e1:b4:4b:8a:26:37:95: ec:39:e4:bc:10:d3:26:c2:93:5f:56:13:9a:35:96: 10:a4:80:76:49:f4:fa:d2:ca:43:86:2d:68:c8:69: 3f:21:45:a1:c9:68:9e:ba:2a:9f:f1:8f:a1:c5:a3: 3c:81:62:d5:18:a9:b8:b1:4b:7d:ad:85:ae:ea:8b: 40:b0:ab:62:46:42:6f:4e:f8:cc:15:f0:41:7f:d9: 44:15:99:c9:bf:ba:b6:2f:58:38:0f:07:a6:59:2c: 91:e6:71:f3:ff:ae:61:b0:97:77:6c:db:fc:fe:d0: d8:c2:ef:8c:de:c2:f4:df:d4:8d:7f:b2:b5:c4:cf: 3e:4d:0b:1a:21:25:5d:18:c7:66:d5:7c:9d:59:1a: 0e:8f:62:ed:e4:7a:00:f9:16:53:78:46:55:f8:6a: 18:1e:de:b2:af:2a:9e:6b:e8:ed:1f:7c:47:21:9d: 8a:35:79:21:c1:cf:61:70:b7:4a:fb:95:2d:db:b1: cd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:37:6D:5A:D1:31:D9:CF:A6:25:59:E0:28:BD:3D:CF:E4:B5:5F:FC X509v3 Authority Key Identifier: keyid:DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/UDdtWtEx2c-mJVngKL09z-S1X_w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.25.0/24 185.253.228.0/22 IPv6: 2001:67c:5c8::/48 Signature Algorithm: sha256WithRSAEncryption 79:b1:ed:95:d3:d4:a2:69:3d:bc:a5:5a:90:ce:09:00:04:bc: a0:dd:6a:64:54:7a:39:a5:5f:da:d2:ea:4f:77:9f:08:0a:89: 92:78:1d:21:ce:8d:8d:6a:a7:7c:fb:2b:8b:0b:ef:c5:1c:7e: 69:88:2c:0f:f7:1f:cb:25:ff:c6:fe:b9:06:e4:0d:28:78:ed: 00:cd:1b:42:17:dd:6f:86:67:3a:59:ed:81:91:2c:20:d8:a5: 82:ea:3f:5b:da:bb:6b:4f:46:76:38:62:e1:c5:41:74:35:ed: db:3c:3c:54:e2:7c:77:f4:ce:20:65:09:7a:ae:ff:b8:be:e8: 19:96:c2:23:3c:9d:60:58:84:f5:f0:28:fc:5c:61:b0:74:5b: 37:91:23:db:43:54:5c:ac:34:7b:8f:34:1b:45:7b:12:b3:a0: ab:c6:cd:ec:8c:42:f1:bb:79:5e:27:ea:b4:2e:0c:fe:94:0c: 83:24:d3:ce:de:22:8d:47:cd:fb:35:c5:9c:8c:93:11:00:16: f6:b3:84:02:5a:1e:2e:b9:2b:ef:56:b6:7e:2a:0d:31:bc:b8: b7:58:f7:34:4d:49:6d:3c:9a:7d:ea:1b:6e:8c:ae:d7:0a:38: 8c:6c:f6:d6:66:d1:b3:b3:e9:1c:16:f2:a8:d4:51:ee:eb:19: c2:d6:0c:c8 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt9XDSqihhoKReiECTEHODDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWMxNWI3ODJiYzMyNzQ3YjUzOGRlYzJhMjIyNDE2Y2Q2 ODQ4MjUwHhcNMjYwMTAyMDYxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDM3NmQ1YWQxMzFkOWNmYTYyNTU5ZTAyOGJkM2RjZmU0YjU1ZmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYOJL+oR9qEhJyA+r7E71FyCFt8L 1myFi589DPA3sgM411F3OMykrnYCG6X/wPylq2ml8UGZr6gn0QkyQ1peQ9Jp++G0 S4omN5XsOeS8ENMmwpNfVhOaNZYQpIB2SfT60spDhi1oyGk/IUWhyWieuiqf8Y+h xaM8gWLVGKm4sUt9rYWu6otAsKtiRkJvTvjMFfBBf9lEFZnJv7q2L1g4DwemWSyR 5nHz/65hsJd3bNv8/tDYwu+M3sL039SNf7K1xM8+TQsaISVdGMdm1XydWRoOj2Lt 5HoA+RZTeEZV+GoYHt6yryqea+jtH3xHIZ2KNXkhwc9hcLdK+5Ut27HNxQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFFA3bVrRMdnPpiVZ4Ci9Pc/ktV/8MB8GA1UdIwQY MBaAFNqsFbeCvDJ0e1ON7CoiJBbNaEglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnF3VnQ0SzhNblI3VTQzc0tpSWtGczFvU0NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81NmYyZTktNzJhYS00YTQxLTg5NDYt MTgyNDMyYTk2ZGJkLzEvVURkdFd0RXgyYy1tSlZuZ0tMMDl6LVMxWF93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi81NmYyZTktNzJhYS00YTQxLTg5NDYtMTgyNDMyYTk2ZGJk LzEvMnF3VnQ0SzhNblI3VTQzc0tpSWtGczFvU0NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAW9QZAwQC uf3kMA8EAgACMAkDBwAgAQZ8BcgwDQYJKoZIhvcNAQELBQADggEBAHmx7ZXT1KJp PbylWpDOCQAEvKDdamRUejmlX9rS6k93nwgKiZJ4HSHOjY1qp3z7K4sL78UcfmmI LA/3H8sl/8b+uQbkDSh47QDNG0IX3W+GZzpZ7YGRLCDYpYLqP1vau2tPRnY4YuHF QXQ17ds8PFTifHf0ziBlCXqu/7i+6BmWwiM8nWBYhPXwKPxcYbB0WzeRI9tDVFys NHuPNBtFexKzoKvGzeyMQvG7eV4n6rQuDP6UDIMk087eIo1Hzfs1xZyMkxEAFvaz hAJaHi65K+9Wtn4qDTG8uLdY9zRNSW08mn3qG26MrtcKOIxs9tZm0bOz6RwW8qjU Ue7rGcLWDMg= -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:40 2026 by rpki-client