This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/Ud0XI3ub85_CL2l55YZW3cXrctA.roa File: Ud0XI3ub85_CL2l55YZW3cXrctA.roa (raw, json) Hash identifier: 2gMJyy7om8/uY1IqvCz0ubvDeUV63nAu6cUom48+3U0= Subject key identifier: 51:DD:17:23:7B:9B:F3:9F:C2:2F:69:79:E5:86:56:DD:C5:EB:72:D0 Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Certificate serial: 019B7B35C9A5E390B538A5CE36252D740F15 Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/Ud0XI3ub85_CL2l55YZW3cXrctA.roa Signing time: Thu 01 Jan 2026 20:18:01 +0000 ROA not before: Thu 01 Jan 2026 20:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35758 IP address blocks: 88.218.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c9:a5:e3:90:b5:38:a5:ce:36:25:2d:74:0f:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Validity Not Before: Jan 1 20:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51dd17237b9bf39fc22f6979e58656ddc5eb72d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:df:22:9c:60:50:24:3d:1a:4c:5f:c9:30:5a: 2e:93:97:2d:2c:e7:3e:d0:33:7d:79:4c:ea:80:2d: c1:6c:34:1e:56:f2:f8:d9:b7:2f:5a:fe:0d:6a:21: 4b:33:b4:51:79:1a:60:50:40:7e:97:ca:ed:5d:4a: ae:63:e1:77:89:57:cf:de:c1:76:64:21:5e:23:76: ba:b5:fb:c8:76:bb:9e:a5:e7:7d:4d:75:7f:90:4b: 95:36:39:0d:4c:2c:f7:20:7c:38:c2:39:d2:75:bc: 54:9e:c2:44:64:68:89:b5:1a:c9:c2:85:77:94:3a: 98:9a:0b:ac:f0:27:68:b8:be:07:3c:ec:36:6c:38: 2c:6c:0b:2a:b8:7d:a9:46:e8:e0:f2:e9:94:53:33: f5:99:6d:d5:c0:13:43:6d:15:00:7d:b0:34:c7:90: dd:b0:c9:63:1e:4e:a2:6d:e7:63:66:0b:04:76:93: f3:5d:4f:4d:78:a3:f8:ff:1a:5e:5c:04:57:23:e8: d6:a2:f9:69:4e:38:b8:62:fe:a8:e9:4f:d3:49:3b: 0d:f8:05:f7:66:f9:f0:5b:b7:6c:3e:82:b0:78:b3: 31:92:fe:33:b4:db:dc:b2:e0:76:97:44:53:bf:7b: c7:82:67:91:09:a5:c5:29:12:58:0f:04:9c:a3:69: 82:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DD:17:23:7B:9B:F3:9F:C2:2F:69:79:E5:86:56:DD:C5:EB:72:D0 X509v3 Authority Key Identifier: keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/Ud0XI3ub85_CL2l55YZW3cXrctA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.218.106.0/23 Signature Algorithm: sha256WithRSAEncryption 86:b7:72:ad:c9:6a:0a:5d:56:c8:23:09:69:03:61:c8:d6:26: 29:8a:3b:9c:0d:17:46:26:08:59:9b:6c:e1:fc:d1:b1:14:96: 84:5c:4b:52:4a:4f:90:01:51:7d:46:d4:bd:4d:c9:ee:de:fe: bc:2a:dd:1f:f0:3e:06:01:60:a9:69:d6:34:96:9c:2f:1d:a2: e6:d0:bf:e2:a7:b9:54:a2:91:4e:9d:06:9e:93:f8:e8:87:3d: 5e:e8:84:33:92:f7:35:31:62:31:62:32:8b:f8:8e:5e:03:e5: 23:d3:b7:28:f2:35:e1:77:3c:f6:d6:a7:8f:aa:94:be:e8:b7: 85:79:3f:03:31:44:5b:6c:a5:eb:1a:0d:1a:e4:bd:96:ca:37: 74:e5:d0:17:b0:19:fe:4b:c9:50:b0:39:41:d9:68:cb:ac:c9: 49:a8:14:3f:c9:ba:e4:1e:89:5f:85:8a:0e:29:79:5e:7d:ca: 60:d6:e3:7f:7d:13:1b:13:70:c9:0b:c9:99:68:fa:29:82:18: 78:bd:3a:24:b9:cb:9d:18:14:d0:27:90:dd:44:8d:95:71:d0: 61:e5:5a:c4:0a:47:15:7a:9d:43:08:79:90:ae:57:ec:86:67: 27:4c:61:18:ed:da:c6:9d:26:5b:9b:c4:4d:7f:24:9f:4e:f9: 01:6a:b4:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Ncml45C1OKXONiUtdA8VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NmQwZGFiMzQ3YTM4ZTJiODdiNWEyMmEyZjdjOWUyMWMx OGM5YmMwHhcNMjYwMTAxMjAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWRkMTcyMzdiOWJmMzlmYzIyZjY5NzllNTg2NTZkZGM1ZWI3MmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3d8inGBQJD0aTF/JMFouk5ctLOc+ 0DN9eUzqgC3BbDQeVvL42bcvWv4NaiFLM7RReRpgUEB+l8rtXUquY+F3iVfP3sF2 ZCFeI3a6tfvIdrueped9TXV/kEuVNjkNTCz3IHw4wjnSdbxUnsJEZGiJtRrJwoV3 lDqYmgus8CdouL4HPOw2bDgsbAsquH2pRujg8umUUzP1mW3VwBNDbRUAfbA0x5Dd sMljHk6ibedjZgsEdpPzXU9NeKP4/xpeXARXI+jWovlpTji4Yv6o6U/TSTsN+AX3 ZvnwW7dsPoKweLMxkv4ztNvcsuB2l0RTv3vHgmeRCaXFKRJYDwSco2mCLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFHdFyN7m/Ofwi9peeWGVt3F63LQMB8GA1UdIwQY MBaAFOdtDas0ejjiuHtaIqL3yeIcGMm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDkt YmQzYmZjOTliZGE5LzEvVWQwWEkzdWI4NV9DTDJsNTVZWlczY1hyY3RBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDktYmQzYmZjOTliZGE5 LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWNpqMA0G CSqGSIb3DQEBCwUAA4IBAQCGt3KtyWoKXVbIIwlpA2HI1iYpijucDRdGJghZm2zh /NGxFJaEXEtSSk+QAVF9RtS9Tcnu3v68Kt0f8D4GAWCpadY0lpwvHaLm0L/ip7lU opFOnQaek/johz1e6IQzkvc1MWIxYjKL+I5eA+Uj07co8jXhdzz21qePqpS+6LeF eT8DMURbbKXrGg0a5L2Wyjd05dAXsBn+S8lQsDlB2WjLrMlJqBQ/ybrkHolfhYoO KXlefcpg1uN/fRMbE3DJC8mZaPopghh4vTokucudGBTQJ5DdRI2VcdBh5VrECkcV ep1DCHmQrlfshmcnTGEY7drGnSZbm8RNfySfTvkBarSe -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:29 2026 by rpki-client