This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/UDNnbwScWIceduT3mK8HBVvLzOg.roa File: UDNnbwScWIceduT3mK8HBVvLzOg.roa (raw, json) Hash identifier: vhtxGUgVNJ9daTmq66lTJXKGFzwiSTw9nac1gcWaxBE= Subject key identifier: 50:33:67:6F:04:9C:58:87:1E:76:E4:F7:98:AF:07:05:5B:CB:CC:E8 Certificate issuer: /CN=389c030036756ab8cdac922b1af237bce1367ce0 Certificate serial: 019B7FF195DD7F38A1BCC4E93DFBC20B86B6 Authority key identifier: 38:9C:03:00:36:75:6A:B8:CD:AC:92:2B:1A:F2:37:BC:E1:36:7C:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwDADZ1arjNrJIrGvI3vOE2fOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/UDNnbwScWIceduT3mK8HBVvLzOg.roa Signing time: Fri 02 Jan 2026 18:21:37 +0000 ROA not before: Fri 02 Jan 2026 18:21:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54994 IP address blocks: 185.119.40.0/24 maxlen: 24 185.119.41.0/24 maxlen: 24 185.119.42.0/24 maxlen: 24 185.119.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.crl rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft rsync://rpki.ripe.net/repository/DEFAULT/OJwDADZ1arjNrJIrGvI3vOE2fOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:95:dd:7f:38:a1:bc:c4:e9:3d:fb:c2:0b:86:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=389c030036756ab8cdac922b1af237bce1367ce0 Validity Not Before: Jan 2 18:21:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5033676f049c58871e76e4f798af07055bcbcce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:68:b7:89:63:76:91:bc:42:3a:40:58:ce:80: 62:27:7a:5b:60:47:c5:2a:dc:13:10:3a:52:5a:ea: 44:56:a6:3e:dc:76:19:f7:07:42:27:e6:c0:64:eb: 67:b2:06:61:33:a8:4e:43:85:09:4e:74:34:a3:bd: 64:0a:3e:50:24:00:70:23:9e:67:00:2e:64:31:bf: 0a:30:a5:0e:d2:aa:64:ba:5f:ac:4a:43:e0:92:63: de:6a:d4:81:d0:66:fd:a0:cb:ef:1a:cf:7b:8f:99: 63:19:29:26:07:42:b6:da:56:4f:9f:59:aa:dd:bc: cc:d5:cf:51:ba:f1:fb:ed:d6:14:11:56:44:82:c3: 0a:b2:3e:b2:1d:7b:79:d0:0f:98:05:9d:e4:f8:a1: 30:b3:38:26:bc:dd:eb:22:0b:ee:53:c7:e6:e0:75: ea:df:01:3c:9d:83:aa:f9:93:98:f9:c2:44:0c:9c: c2:8c:a2:73:68:0d:7d:02:0e:0a:65:be:80:7c:ff: f0:c3:4b:ef:16:f6:28:f5:f4:ad:68:db:be:d0:5f: dd:e2:e0:6a:01:ee:ba:13:c9:52:5e:81:9a:df:bf: 6a:d3:57:17:33:e0:d0:d3:5b:39:e4:5a:a9:0e:94: 19:3d:7b:01:d5:bb:93:7c:33:b6:fd:a9:42:e2:ac: d6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:33:67:6F:04:9C:58:87:1E:76:E4:F7:98:AF:07:05:5B:CB:CC:E8 X509v3 Authority Key Identifier: keyid:38:9C:03:00:36:75:6A:B8:CD:AC:92:2B:1A:F2:37:BC:E1:36:7C:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwDADZ1arjNrJIrGvI3vOE2fOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/UDNnbwScWIceduT3mK8HBVvLzOg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.119.40.0/22 Signature Algorithm: sha256WithRSAEncryption 85:b2:bc:77:68:dc:f3:5f:2c:77:0d:97:ee:52:d3:08:03:a0: dc:c4:bb:63:8d:46:13:56:ee:a9:48:24:1a:84:09:2c:76:d4: 30:83:ef:e5:13:a8:b5:c4:25:f9:34:0b:f3:17:60:de:2a:b8: ba:19:98:68:b3:77:ce:ab:f0:fb:21:53:a4:3f:4a:f7:50:34: 22:88:8c:96:4b:90:2e:ea:9e:01:80:12:36:19:8a:20:52:37: 9f:1d:e3:47:3f:3b:99:fc:84:de:cd:fe:81:6b:87:63:70:37: 01:ba:c0:60:3f:b1:c6:50:44:5d:aa:f6:85:3a:b3:04:d1:3f: 44:87:67:cb:72:01:18:f8:0e:1f:fc:7d:c7:02:72:a9:7f:75: f2:2d:4c:81:f3:0f:dd:3c:4d:d0:10:aa:e3:e3:cd:fb:18:04: f7:a7:bb:2a:b9:f4:e6:71:50:a7:5e:cf:88:4e:33:f5:7e:8e: 03:d5:50:89:e7:9c:53:46:e2:5c:5b:ca:4f:75:bc:de:2b:c1: 39:01:0a:da:b8:3a:f0:c1:bb:80:38:55:25:40:9c:54:60:29: 26:e3:dc:74:94:46:a3:99:65:57:c7:23:02:ab:27:db:de:91: 60:ca:17:b6:56:b9:93:d5:29:60:65:df:38:b4:31:00:94:7b: e6:91:fc:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8ZXdfzihvMTpPfvCC4a2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4OWMwMzAwMzY3NTZhYjhjZGFjOTIyYjFhZjIzN2JjZTEz NjdjZTAwHhcNMjYwMTAyMTgyMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDMzNjc2ZjA0OWM1ODg3MWU3NmU0Zjc5OGFmMDcwNTViY2JjY2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmi3iWN2kbxCOkBYzoBiJ3pbYEfF KtwTEDpSWupEVqY+3HYZ9wdCJ+bAZOtnsgZhM6hOQ4UJTnQ0o71kCj5QJABwI55n AC5kMb8KMKUO0qpkul+sSkPgkmPeatSB0Gb9oMvvGs97j5ljGSkmB0K22lZPn1mq 3bzM1c9RuvH77dYUEVZEgsMKsj6yHXt50A+YBZ3k+KEwszgmvN3rIgvuU8fm4HXq 3wE8nYOq+ZOY+cJEDJzCjKJzaA19Ag4KZb6AfP/ww0vvFvYo9fStaNu+0F/d4uBq Ae66E8lSXoGa379q01cXM+DQ01s55FqpDpQZPXsB1buTfDO2/alC4qzWoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFAzZ28EnFiHHnbk95ivBwVby8zoMB8GA1UdIwQY MBaAFDicAwA2dWq4zaySKxryN7zhNnzgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0p3REFEWjFhcmpOckpJckd2STN2T0UyZk9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yMGZjYTAtMDRiMi00M2IwLWJkMmMt NjcxN2I5YmFiYjM0LzEvVURObmJ3U2NXSWNlZHVUM21LOEhCVnZMek9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8yMGZjYTAtMDRiMi00M2IwLWJkMmMtNjcxN2I5YmFiYjM0 LzEvT0p3REFEWjFhcmpOckpJckd2STN2T0UyZk9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXcoMA0G CSqGSIb3DQEBCwUAA4IBAQCFsrx3aNzzXyx3DZfuUtMIA6DcxLtjjUYTVu6pSCQa hAksdtQwg+/lE6i1xCX5NAvzF2DeKri6GZhos3fOq/D7IVOkP0r3UDQiiIyWS5Au 6p4BgBI2GYogUjefHeNHPzuZ/ITezf6Ba4djcDcBusBgP7HGUERdqvaFOrME0T9E h2fLcgEY+A4f/H3HAnKpf3XyLUyB8w/dPE3QEKrj4837GAT3p7squfTmcVCnXs+I TjP1fo4D1VCJ55xTRuJcW8pPdbzeK8E5AQrauDrwwbuAOFUlQJxUYCkm49x0lEaj mWVXxyMCqyfb3pFgyhe2VrmT1SlgZd84tDEAlHvmkfwa -----END CERTIFICATE-----Generated at Tue Jan 20 07:46:02 2026 by rpki-client