This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/UjdtcFrldW1UqXWn32SOXzmefVM.roa File: UjdtcFrldW1UqXWn32SOXzmefVM.roa (raw, json) Hash identifier: bxMrUwIYPflK6ZOJdYilaulUqThKrbshehX97AVy/7g= Subject key identifier: 52:37:6D:70:5A:E5:75:6D:54:A9:75:A7:DF:64:8E:5F:39:9E:7D:53 Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019B7B3608B80D2E9B838CE4D0A2EAB7A319 Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/UjdtcFrldW1UqXWn32SOXzmefVM.roa Signing time: Thu 01 Jan 2026 20:18:17 +0000 ROA not before: Thu 01 Jan 2026 20:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142270 IP address blocks: 172.110.209.0/24 maxlen: 24 172.110.210.0/24 maxlen: 24 172.110.211.0/24 maxlen: 24 202.71.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:08:b8:0d:2e:9b:83:8c:e4:d0:a2:ea:b7:a3:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Jan 1 20:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52376d705ae5756d54a975a7df648e5f399e7d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3a:b8:9c:73:60:74:79:d5:59:6c:e5:db:4f: e0:8b:b9:14:67:ef:00:b0:c1:2e:9a:0e:5b:d1:38: 9d:14:c6:4f:1f:2b:92:e7:59:af:15:09:57:4c:90: 36:68:51:ba:e6:1d:c2:c4:01:99:10:b7:86:fb:7d: 27:45:e8:06:6c:fd:5f:93:a0:aa:46:cf:db:92:31: ce:ed:b5:78:c6:39:07:35:63:e0:09:23:be:b6:c1: 6e:54:22:8f:df:8b:69:4d:38:2c:cf:30:29:aa:e9: eb:ad:d1:65:64:5d:9a:e6:69:3c:5d:ff:85:ec:17: b9:92:4a:dc:aa:9d:8a:8a:db:0e:eb:25:ff:5a:33: ce:4f:34:b4:f0:84:6e:db:80:53:fb:5a:93:2b:5c: d5:09:3d:b0:95:f9:bc:6e:db:5d:3c:d1:3e:8b:4f: 8d:32:11:81:ac:aa:c5:bc:d2:00:0a:4f:c0:70:00: ad:da:10:0b:91:e1:5e:44:68:a2:3f:37:14:f7:27: 9a:fa:99:d8:c9:00:81:04:aa:d0:fc:be:9a:65:dd: ef:7b:77:0e:8f:d9:23:51:6f:ac:20:33:a3:24:7c: 95:0a:2e:6c:df:2b:74:1b:6c:6f:67:91:d1:cf:cb: 01:93:a3:90:3c:a3:ec:21:d2:01:35:84:6a:cf:f0: fb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:37:6D:70:5A:E5:75:6D:54:A9:75:A7:DF:64:8E:5F:39:9E:7D:53 X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/UjdtcFrldW1UqXWn32SOXzmefVM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.110.209.0-172.110.211.255 202.71.9.0/24 Signature Algorithm: sha256WithRSAEncryption b8:ec:fb:f1:e8:58:5f:82:58:30:9e:68:60:f5:f9:ee:fa:24: 4f:26:01:fc:b0:b6:76:06:97:26:ea:80:e2:10:7b:dc:66:5a: de:49:77:06:d1:44:0e:f0:21:1e:d7:8c:51:18:10:3d:1a:f4: 87:30:3c:b6:07:71:c6:8a:67:74:6b:8a:37:2a:fc:d6:a0:78: 64:ad:f5:e3:0a:7f:ab:98:f2:cd:2b:e9:0f:c6:0b:ed:d4:f1: 26:56:8c:16:ac:3f:f7:30:7c:a8:62:2d:df:fb:42:58:1f:46: 55:be:84:58:dc:a7:5e:04:fb:ea:b1:40:c1:07:4a:06:41:34: 89:33:6b:70:32:dc:5e:1d:2c:f7:d9:62:42:0c:85:8e:d4:c0: dc:c5:63:72:c8:72:ff:c7:e4:d3:c1:98:4e:0c:1c:25:3e:3b: 6c:bb:36:1c:f9:58:b1:ed:ab:0b:93:76:36:e2:be:0b:ed:7f: de:0d:19:89:99:1a:67:fe:42:7f:ba:a3:4b:5f:cd:19:c0:91: 01:39:4f:47:5a:93:20:00:6f:ba:a5:c8:10:bc:5f:33:46:aa: 25:20:ce:43:93:a1:7c:7a:9f:fd:1d:a7:d7:98:50:6b:1b:84: ac:2f:db:f4:22:3c:6c:74:e5:c2:51:1e:3f:0a:43:c2:04:4b: f7:ee:f2:cd -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt7Ngi4DS6bg4zk0KLqt6MZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjYwMTAxMjAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjM3NmQ3MDVhZTU3NTZkNTRhOTc1YTdkZjY0OGU1ZjM5OWU3ZDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zq4nHNgdHnVWWzl20/gi7kUZ+8A sMEumg5b0TidFMZPHyuS51mvFQlXTJA2aFG65h3CxAGZELeG+30nRegGbP1fk6Cq Rs/bkjHO7bV4xjkHNWPgCSO+tsFuVCKP34tpTTgszzApqunrrdFlZF2a5mk8Xf+F 7Be5kkrcqp2KitsO6yX/WjPOTzS08IRu24BT+1qTK1zVCT2wlfm8bttdPNE+i0+N MhGBrKrFvNIACk/AcACt2hALkeFeRGiiPzcU9yea+pnYyQCBBKrQ/L6aZd3ve3cO j9kjUW+sIDOjJHyVCi5s3yt0G2xvZ5HRz8sBk6OQPKPsIdIBNYRqz/D7qwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFFI3bXBa5XVtVKl1p99kjl85nn1TMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvVWpkdGNGcmxkVzFVcVhXbjMyU09Yem1lZlZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACsbtED BAKsbtADBADKRwkwDQYJKoZIhvcNAQELBQADggEBALjs+/HoWF+CWDCeaGD1+e76 JE8mAfywtnYGlybqgOIQe9xmWt5JdwbRRA7wIR7XjFEYED0a9IcwPLYHccaKZ3Rr ijcq/NageGSt9eMKf6uY8s0r6Q/GC+3U8SZWjBasP/cwfKhiLd/7QlgfRlW+hFjc p14E++qxQMEHSgZBNIkza3Ay3F4dLPfZYkIMhY7UwNzFY3LIcv/H5NPBmE4MHCU+ O2y7Nhz5WLHtqwuTdjbivgvtf94NGYmZGmf+Qn+6o0tfzRnAkQE5T0dakyAAb7ql yBC8XzNGqiUgzkOToXx6n/0dp9eYUGsbhKwv2/QiPGx05cJRHj8KQ8IES/fu8s0= -----END CERTIFICATE-----Generated at Wed Jan 21 09:22:09 2026 by rpki-client