This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/udJoXx6SrWMuMK6jZ122dieN47A.roa File: udJoXx6SrWMuMK6jZ122dieN47A.roa (raw, json) Hash identifier: XPA3Wkk2p2nbhHbQxZ80mWOEn3OR3Bs5szWaHz85HJo= Subject key identifier: B9:D2:68:5F:1E:92:AD:63:2E:30:AE:A3:67:5D:B6:76:27:8D:E3:B0 Certificate issuer: /CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e Certificate serial: 019B7BA3E26521FD5F80BEAAE21239858019 Authority key identifier: 69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/udJoXx6SrWMuMK6jZ122dieN47A.roa Signing time: Thu 01 Jan 2026 22:18:16 +0000 ROA not before: Thu 01 Jan 2026 22:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203836 IP address blocks: 194.34.200.0/24 maxlen: 24 194.34.201.0/24 maxlen: 24 194.34.202.0/24 maxlen: 24 194.34.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:e2:65:21:fd:5f:80:be:aa:e2:12:39:85:80:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e Validity Not Before: Jan 1 22:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9d2685f1e92ad632e30aea3675db676278de3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2c:0d:55:42:e8:31:5e:89:bb:86:a1:73:14: 3c:a5:b3:39:9f:8f:72:21:2e:2a:7d:33:49:19:f9: af:39:d0:74:ec:c8:2f:69:d0:ef:38:58:7c:aa:91: ca:3d:95:6e:81:2b:94:d0:ea:2d:a5:51:25:7b:a8: 51:91:c0:4a:c2:48:e0:34:f3:c9:b8:33:95:29:3c: d2:85:02:14:18:27:1d:bb:79:6a:e8:a1:2b:b5:8f: c0:3d:89:5e:fc:f9:fc:0c:ce:6e:95:8f:8c:13:4e: c2:f1:e3:19:d4:0a:30:90:eb:a1:14:a9:8b:ee:7b: ea:d8:4d:a9:ea:96:43:b0:ca:ba:08:89:86:3d:91: 1b:e7:3b:c4:cc:04:42:89:69:07:42:10:9f:21:2c: 09:e3:d3:53:88:9a:e4:d0:8f:f4:f8:a0:6c:33:20: 3b:93:dc:fd:7d:ac:5e:00:5e:ab:18:e5:37:8a:e4: dc:3c:e7:0d:81:ce:c1:35:25:da:c6:43:64:be:42: a3:d3:fb:88:74:22:0b:8a:08:af:d9:2e:f8:65:23: ce:4e:03:84:f2:77:77:38:95:f7:14:38:c4:5b:2c: fe:91:cd:b8:27:ec:62:87:39:6c:53:f9:17:5e:6d: 30:97:c8:24:9a:4c:a5:ed:d1:58:6c:5c:9d:ad:47: ce:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D2:68:5F:1E:92:AD:63:2E:30:AE:A3:67:5D:B6:76:27:8D:E3:B0 X509v3 Authority Key Identifier: keyid:69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/udJoXx6SrWMuMK6jZ122dieN47A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.34.200.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:8e:4d:9c:2e:6a:ce:ee:ba:cb:68:4d:11:ec:04:97:a2:e6: a3:6b:18:e1:74:d5:a2:8e:15:a5:e5:04:09:39:08:28:f7:40: 5d:05:9c:bf:84:e2:17:0d:0c:c5:f5:26:0c:35:e3:80:a3:c5: 39:40:18:8e:a7:02:c8:90:12:7d:1d:30:a9:04:bf:40:24:6c: ef:f2:66:b9:76:a2:66:41:6b:e8:71:1b:85:a2:7e:fc:a0:cc: 91:53:70:7d:49:5d:4b:d1:a1:63:e1:86:88:2b:79:3d:b3:e2: f3:05:77:51:c4:72:43:87:ec:b0:f6:ce:b1:40:81:b3:d6:f3: 46:34:1f:15:eb:e7:f6:92:a8:99:95:c5:34:6a:ae:16:35:f2: c4:37:94:f9:04:60:ba:2d:69:0a:2c:f7:37:ad:5e:09:d8:fc: c4:11:5c:f3:13:79:ac:a5:8c:1b:80:e6:d3:24:2b:74:78:c8: 59:5a:2b:93:13:fe:d2:df:14:75:87:6c:ed:6b:d7:86:11:06: 88:39:54:13:6b:9c:eb:e4:0d:a1:31:30:ac:29:1a:a4:3b:51: de:46:93:55:b0:a4:19:7f:ca:21:7a:fa:1a:fc:fd:8f:ec:72: b6:70:a9:37:ea:66:02:7f:d2:ff:3e:0d:c9:69:3f:e3:12:e8: e2:b1:e2:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o+JlIf1fgL6q4hI5hYAZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ODU0YTU3YWIwZDhhM2M5MjJjOGY2YTc5YWE4ZmU4YTZh MmMwOWUwHhcNMjYwMTAxMjIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWQyNjg1ZjFlOTJhZDYzMmUzMGFlYTM2NzVkYjY3NjI3OGRlM2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CwNVULoMV6Ju4ahcxQ8pbM5n49y IS4qfTNJGfmvOdB07MgvadDvOFh8qpHKPZVugSuU0OotpVEle6hRkcBKwkjgNPPJ uDOVKTzShQIUGCcdu3lq6KErtY/APYle/Pn8DM5ulY+ME07C8eMZ1AowkOuhFKmL 7nvq2E2p6pZDsMq6CImGPZEb5zvEzARCiWkHQhCfISwJ49NTiJrk0I/0+KBsMyA7 k9z9faxeAF6rGOU3iuTcPOcNgc7BNSXaxkNkvkKj0/uIdCILigiv2S74ZSPOTgOE 8nd3OJX3FDjEWyz+kc24J+xihzlsU/kXXm0wl8gkmkyl7dFYbFydrUfO6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLnSaF8ekq1jLjCuo2ddtnYnjeOwMB8GA1UdIwQY MBaAFGmFSlerDYo8kiyPanmqj+imosCeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVlWS1Y2c05panlTTEk5cWVhcVA2S2Fpd0o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZjgxMDctZmMxNS00YzcxLTgxZDQt NTIzOGIwMzU0NWNhLzEvdWRKb1h4NlNyV011TUs2aloxMjJkaWVONDdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZjgxMDctZmMxNS00YzcxLTgxZDQtNTIzOGIwMzU0NWNh LzEvYVlWS1Y2c05panlTTEk5cWVhcVA2S2Fpd0o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwiLIMA0G CSqGSIb3DQEBCwUAA4IBAQBrjk2cLmrO7rrLaE0R7ASXouajaxjhdNWijhWl5QQJ OQgo90BdBZy/hOIXDQzF9SYMNeOAo8U5QBiOpwLIkBJ9HTCpBL9AJGzv8ma5dqJm QWvocRuFon78oMyRU3B9SV1L0aFj4YaIK3k9s+LzBXdRxHJDh+yw9s6xQIGz1vNG NB8V6+f2kqiZlcU0aq4WNfLEN5T5BGC6LWkKLPc3rV4J2PzEEVzzE3mspYwbgObT JCt0eMhZWiuTE/7S3xR1h2zta9eGEQaIOVQTa5zr5A2hMTCsKRqkO1HeRpNVsKQZ f8ohevoa/P2P7HK2cKk36mYCf9L/Pg3JaT/jEujiseIz -----END CERTIFICATE-----Generated at Mon Feb 9 18:45:01 2026 by rpki-client