This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/UJudbdHaQF50Sph8SS93Ii0CNBg.roa File: UJudbdHaQF50Sph8SS93Ii0CNBg.roa (raw, json) Hash identifier: BhW8Ppudpr7Ja11wBjitKBz/FAThXnQThhUCrlT7gwQ= Subject key identifier: 50:9B:9D:6D:D1:DA:40:5E:74:4A:98:7C:49:2F:77:22:2D:02:34:18 Certificate issuer: /CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a Certificate serial: 019B7AC8A667A7ABACBCB8C14310CD7A3E1D Authority key identifier: 61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/UJudbdHaQF50Sph8SS93Ii0CNBg.roa Signing time: Thu 01 Jan 2026 18:18:48 +0000 ROA not before: Thu 01 Jan 2026 18:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205679 IP address blocks: 84.234.114.0/23 maxlen: 23 84.234.114.0/24 maxlen: 24 84.234.115.0/24 maxlen: 24 88.218.252.0/22 maxlen: 24 92.118.164.0/22 maxlen: 24 185.210.36.0/22 maxlen: 24 2a0b:51c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a6:67:a7:ab:ac:bc:b8:c1:43:10:cd:7a:3e:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a Validity Not Before: Jan 1 18:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=509b9d6dd1da405e744a987c492f77222d023418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:42:3b:e0:7f:3a:f3:bf:d4:53:71:30:d5:01: 51:16:44:a7:b4:0c:50:db:79:e8:03:61:31:3b:3f: 5d:d0:93:c6:1f:6e:f9:ac:96:b4:58:4d:76:d9:fe: e8:73:1d:47:a0:20:54:0e:41:e1:3c:3d:4b:54:4d: 08:4b:8b:f2:20:91:04:6e:2f:87:31:16:36:9e:18: 26:8d:5b:ea:86:9a:cd:e6:6a:2f:4b:45:8d:1f:91: 24:ed:05:21:53:e3:6c:21:f9:22:ab:f4:71:3e:c2: 27:81:05:09:37:ca:2d:b7:0b:38:6e:30:0d:47:39: 96:0f:60:36:af:66:52:42:2b:30:1f:96:59:76:7c: 39:fb:c3:fd:51:5c:06:ee:de:28:80:25:c5:13:07: 21:d5:35:07:e9:ef:16:d7:ae:c1:d0:35:70:0c:60: 3e:08:56:5d:49:42:2f:87:62:ad:b3:55:27:1f:4e: 58:08:f5:db:8a:10:51:c0:4f:4e:e6:e1:20:12:9f: 3e:1c:ef:cb:e6:43:a0:10:69:b6:dd:0c:b4:33:71: f0:a3:ce:4f:55:99:f5:79:96:b0:31:fd:5a:4a:38: a9:f0:59:d9:46:b3:e4:59:da:b0:ee:5b:fa:56:b9: 5a:59:17:d6:76:3e:e5:55:76:58:58:3e:7f:95:dd: af:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9B:9D:6D:D1:DA:40:5E:74:4A:98:7C:49:2F:77:22:2D:02:34:18 X509v3 Authority Key Identifier: keyid:61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/UJudbdHaQF50Sph8SS93Ii0CNBg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.234.114.0/23 88.218.252.0/22 92.118.164.0/22 185.210.36.0/22 IPv6: 2a0b:51c0::/29 Signature Algorithm: sha256WithRSAEncryption 80:95:11:7a:5b:cc:f3:ac:ef:71:ad:41:cf:de:a0:f1:d2:4b: 38:34:67:fc:82:ec:5b:b5:f4:c1:9b:05:5a:89:17:1e:af:56: 4f:d3:be:18:99:95:07:00:c7:90:9b:6b:99:80:5a:54:06:36: 6f:8a:17:a2:f9:7f:a2:b4:44:88:54:36:15:c3:7d:b2:44:aa: 46:50:cd:82:08:c4:1a:4a:29:fc:4f:0c:16:da:c8:97:a1:93: 5d:a1:5e:04:5d:fb:88:1e:74:46:2e:62:87:9e:e7:5a:92:dd: be:6f:a7:fa:d9:fd:bd:2f:f2:e9:96:20:1f:b1:04:12:13:3b: a6:cd:5d:b2:2d:4c:d5:a8:73:ec:75:8a:ca:0c:1b:c7:38:56: 92:ad:9d:38:db:da:b3:5b:9f:10:82:f2:b7:2e:eb:c9:8c:82: da:0a:75:07:74:42:f6:6b:ad:db:ac:b8:05:ef:ef:6e:22:b1: bd:fd:b0:e3:e3:2c:c1:17:6d:39:23:19:92:a9:23:15:a2:77: 10:9b:bd:3f:78:3c:b5:0d:d0:1c:78:93:94:5a:42:1b:10:b4: 49:ca:b5:83:a1:25:b8:46:28:c3:ba:ea:d3:8c:df:15:46:8f: 22:eb:45:d0:1e:ee:cd:52:3f:33:d2:5a:6e:02:97:e2:c1:70: 28:d3:14:1a -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt6yKZnp6usvLjBQxDNej4dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxZmUyZWFmYTY0YWNlYWYxZmNmY2ZiY2E2MTUwYTdhMmQz NWJlNGEwHhcNMjYwMTAxMTgxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDliOWQ2ZGQxZGE0MDVlNzQ0YTk4N2M0OTJmNzcyMjJkMDIzNDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUI74H8687/UU3Ew1QFRFkSntAxQ 23noA2ExOz9d0JPGH275rJa0WE122f7ocx1HoCBUDkHhPD1LVE0IS4vyIJEEbi+H MRY2nhgmjVvqhprN5movS0WNH5Ek7QUhU+NsIfkiq/RxPsIngQUJN8ottws4bjAN RzmWD2A2r2ZSQiswH5ZZdnw5+8P9UVwG7t4ogCXFEwch1TUH6e8W167B0DVwDGA+ CFZdSUIvh2Kts1UnH05YCPXbihBRwE9O5uEgEp8+HO/L5kOgEGm23Qy0M3Hwo85P VZn1eZawMf1aSjip8FnZRrPkWdqw7lv6VrlaWRfWdj7lVXZYWD5/ld2vQQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFFCbnW3R2kBedEqYfEkvdyItAjQYMB8GA1UdIwQY MBaAFGH+Lq+mSs6vH8/PvKYVCnotNb5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8yMWNhNDMtZDNlMS00ZWMwLTlhOWQt MzlhZmQ5MzE2NTk4LzEvVUp1ZGJkSGFRRjUwU3BoOFNTOTNJaTBDTkJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8yMWNhNDMtZDNlMS00ZWMwLTlhOWQtMzlhZmQ5MzE2NTk4 LzEvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBVOpyAwQC WNr8AwQCXHakAwQCudIkMA0EAgACMAcDBQMqC1HAMA0GCSqGSIb3DQEBCwUAA4IB AQCAlRF6W8zzrO9xrUHP3qDx0ks4NGf8guxbtfTBmwVaiRcer1ZP074YmZUHAMeQ m2uZgFpUBjZvihei+X+itESIVDYVw32yRKpGUM2CCMQaSin8TwwW2siXoZNdoV4E XfuIHnRGLmKHnudakt2+b6f62f29L/LpliAfsQQSEzumzV2yLUzVqHPsdYrKDBvH OFaSrZ0429qzW58QgvK3LuvJjILaCnUHdEL2a63brLgF7+9uIrG9/bDj4yzBF205 IxmSqSMVoncQm70/eDy1DdAceJOUWkIbELRJyrWDoSW4RijDuurTjN8VRo8i60XQ Hu7NUj8z0lpuApfiwXAo0xQa -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:37 2026 by rpki-client