This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/udBrJ3T-NYKKoeYtbZRYxqxJAsw.roa File: udBrJ3T-NYKKoeYtbZRYxqxJAsw.roa (raw, json) Hash identifier: eGa8wlpDIYuSpHtudBMXIxKlPXfc/7lUctf+s49iEA4= Subject key identifier: B9:D0:6B:27:74:FE:35:82:8A:A1:E6:2D:6D:94:58:C6:AC:49:02:CC Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F1448452EE72411762ECAE6F5031C36 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/udBrJ3T-NYKKoeYtbZRYxqxJAsw.roa Signing time: Fri 02 Jan 2026 14:19:54 +0000 ROA not before: Fri 02 Jan 2026 14:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44834 IP address blocks: 193.233.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:48:45:2e:e7:24:11:76:2e:ca:e6:f5:03:1c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9d06b2774fe35828aa1e62d6d9458c6ac4902cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d8:94:dc:97:23:b0:a6:be:7f:32:9b:11:2e: 2d:b4:c2:58:e7:33:0a:2a:3c:39:6a:a5:bd:dc:02: 21:36:fd:af:8e:77:10:9a:90:fa:7a:2c:2e:7c:8d: 2e:5a:87:ae:c1:85:90:36:dd:d9:85:70:23:24:17: 37:01:e7:04:0e:f2:56:6e:18:f4:ea:a1:b0:1a:d2: d0:43:86:83:15:a6:7a:af:c0:b3:b3:9d:42:78:85: 3c:f3:f9:30:f9:03:0e:6c:7e:5d:74:58:27:53:cd: 28:68:98:30:42:fd:3f:e6:14:37:99:05:0f:9a:ee: 6a:52:99:77:ba:42:bf:09:d1:b6:9e:e5:49:e9:6b: 73:a3:de:a6:80:fb:1e:55:62:98:f3:f2:8c:94:7e: 0c:44:12:dc:e7:12:47:4e:32:85:86:f2:05:d6:bb: 17:6d:d5:2a:43:75:2d:3b:37:08:90:f4:8a:fb:be: 2d:6f:ee:07:ca:22:a3:05:22:72:47:7f:d2:2f:c6: 77:aa:75:55:75:5c:f4:32:8b:49:4f:8d:92:99:94: e7:a2:74:98:53:80:60:12:c6:1c:b1:08:cd:a6:d8: 71:59:e0:9c:f1:b4:1e:cc:65:6a:29:bd:c7:53:65: c4:e2:46:84:ae:5b:19:58:fb:ea:77:e1:4a:b5:eb: e4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D0:6B:27:74:FE:35:82:8A:A1:E6:2D:6D:94:58:C6:AC:49:02:CC X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/udBrJ3T-NYKKoeYtbZRYxqxJAsw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.104.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:25:a5:ec:27:d4:85:55:4b:f7:3b:ad:fc:a9:62:55:1b:71: 9c:4a:96:66:10:db:07:62:16:57:d6:7b:73:8e:2b:72:58:21: ed:61:f4:b9:4f:4c:51:12:5a:2d:f7:af:e8:bc:e0:be:e1:f1: 99:2a:c5:f8:95:73:de:c2:b0:a8:c7:11:55:06:1b:e6:16:51: 7f:fe:ea:28:78:22:d5:be:6b:fb:d8:2c:d1:6b:97:02:f1:d0: 65:8c:b9:2e:ea:04:10:a5:37:5d:7d:50:d1:02:76:5a:24:2f: e3:e4:d0:53:aa:e6:e4:ce:d7:36:6e:57:c6:b2:6f:b4:03:b0: be:62:31:7c:41:2f:97:02:e9:ea:a8:aa:b3:1e:7f:8f:7f:1a: cc:cb:16:8a:6d:a8:e5:84:19:b1:18:a3:75:62:6b:4b:72:62: f1:05:3c:94:f0:b2:a2:34:46:63:02:06:d2:40:b6:b4:d1:59: 77:20:a7:d3:54:69:0e:7b:5b:c3:59:e7:60:20:6f:bd:2d:4c: 95:ac:0c:ab:ac:1f:42:86:d2:0c:38:39:47:61:7b:a6:f5:ad: 1c:43:9d:b0:e0:04:5d:64:16:5c:c0:dc:d2:d1:bc:b9:de:2e: 9a:8c:0d:b8:69:10:23:08:6b:82:cb:d9:5e:a4:2e:c0:49:3b: e3:a7:8a:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FEhFLuckEXYuyub1Axw2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWQwNmIyNzc0ZmUzNTgyOGFhMWU2MmQ2ZDk0NThjNmFjNDkwMmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdiU3JcjsKa+fzKbES4ttMJY5zMK Kjw5aqW93AIhNv2vjncQmpD6eiwufI0uWoeuwYWQNt3ZhXAjJBc3AecEDvJWbhj0 6qGwGtLQQ4aDFaZ6r8Czs51CeIU88/kw+QMObH5ddFgnU80oaJgwQv0/5hQ3mQUP mu5qUpl3ukK/CdG2nuVJ6Wtzo96mgPseVWKY8/KMlH4MRBLc5xJHTjKFhvIF1rsX bdUqQ3UtOzcIkPSK+74tb+4HyiKjBSJyR3/SL8Z3qnVVdVz0MotJT42SmZTnonSY U4BgEsYcsQjNpthxWeCc8bQezGVqKb3HU2XE4kaErlsZWPvqd+FKtevkTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLnQayd0/jWCiqHmLW2UWMasSQLMMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvdWRCckozVC1OWUtLb2VZdGJaUll4cXhKQXN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweloMA0G CSqGSIb3DQEBCwUAA4IBAQBNJaXsJ9SFVUv3O638qWJVG3GcSpZmENsHYhZX1ntz jityWCHtYfS5T0xRElot96/ovOC+4fGZKsX4lXPewrCoxxFVBhvmFlF//uooeCLV vmv72CzRa5cC8dBljLku6gQQpTddfVDRAnZaJC/j5NBTqubkztc2blfGsm+0A7C+ YjF8QS+XAunqqKqzHn+PfxrMyxaKbajlhBmxGKN1YmtLcmLxBTyU8LKiNEZjAgbS QLa00Vl3IKfTVGkOe1vDWedgIG+9LUyVrAyrrB9ChtIMODlHYXum9a0cQ52w4ARd ZBZcwNzS0by53i6ajA24aRAjCGuCy9lepC7ASTvjp4pl -----END CERTIFICATE-----Generated at Tue Jan 20 12:49:41 2026 by rpki-client