This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/udnCbOKkxFL5JqA3lC_jwe4JSZE.roa File: udnCbOKkxFL5JqA3lC_jwe4JSZE.roa (raw, json) Hash identifier: B3SEhVMVlr8GcNEdoUlxzf6VIwAReMkAjboOakELRq4= Subject key identifier: B9:D9:C2:6C:E2:A4:C4:52:F9:26:A0:37:94:2F:E3:C1:EE:09:49:91 Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d Certificate serial: 019B7A5B2100D50D45ADA2F59D048A6FCE68 Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/udnCbOKkxFL5JqA3lC_jwe4JSZE.roa Signing time: Thu 01 Jan 2026 16:19:11 +0000 ROA not before: Thu 01 Jan 2026 16:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58139 IP address blocks: 91.219.182.0/24 maxlen: 24 188.93.241.224/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:21:00:d5:0d:45:ad:a2:f5:9d:04:8a:6f:ce:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d Validity Not Before: Jan 1 16:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9d9c26ce2a4c452f926a037942fe3c1ee094991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b8:0d:0b:8a:4b:46:a6:13:20:12:d6:df:2d: 94:a3:14:7c:c1:e2:a7:3f:f8:4a:9c:d1:e3:93:52: 1d:c0:f2:fe:12:c5:9d:7a:68:cf:b5:cc:21:03:ca: d8:62:3a:df:62:c8:3e:12:c5:07:04:ae:85:2e:31: a1:3e:63:80:ee:35:d5:5e:46:0a:a6:b1:c8:30:2e: 58:d8:61:6a:4b:8b:21:39:4a:ef:96:f5:b9:43:b5: c3:90:01:2a:a0:ab:3b:4d:fc:57:87:93:fd:83:19: 5d:0c:cf:c9:c4:47:0f:8d:a8:82:f3:a8:98:b0:3e: 1f:2b:2d:77:ab:eb:bc:58:82:66:08:a1:54:54:de: ab:3c:7a:07:5e:79:40:cd:df:15:e9:e3:ea:33:d1: 1c:58:23:aa:ef:de:01:b9:a9:69:12:dc:8e:e0:58: 28:71:0a:f6:94:64:20:af:a4:d0:1b:de:18:ee:2d: db:95:af:32:ac:78:08:0b:fe:0a:0b:81:81:39:04: b0:89:3a:8c:fa:c5:0e:68:5a:5a:31:fa:93:3c:f2: 85:02:50:7c:58:97:6e:17:30:d4:80:b9:f5:4a:50: 71:92:ba:59:25:ca:a8:41:3f:49:c9:b2:0a:24:7d: c1:01:ca:de:b9:6c:39:75:23:58:68:dc:73:17:2e: f7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D9:C2:6C:E2:A4:C4:52:F9:26:A0:37:94:2F:E3:C1:EE:09:49:91 X509v3 Authority Key Identifier: keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/udnCbOKkxFL5JqA3lC_jwe4JSZE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.219.182.0/24 188.93.241.224/29 Signature Algorithm: sha256WithRSAEncryption 5f:86:a8:2a:12:3e:07:ce:18:a2:01:00:11:1a:d9:13:aa:33: 6c:42:d1:37:bc:03:76:7e:6d:57:17:8a:da:1e:03:49:dd:58: a5:f5:cb:0b:f1:6d:d7:34:df:7d:f7:33:48:b7:f2:c3:34:98: f1:89:1a:d8:72:b0:a5:ff:df:2d:cc:91:1f:bf:ae:99:ae:dd: 81:a7:01:53:a7:c0:05:d6:f2:e6:70:0a:a4:11:1b:07:86:f5: 63:84:d5:8e:1f:ab:7f:1d:b1:f0:6d:9d:48:9e:36:8a:fb:64: 0c:49:c4:b0:f4:e3:e3:d6:0d:1a:8e:4d:a0:d9:2e:bc:38:33: e8:f4:49:82:f3:13:78:9a:27:30:8a:86:1e:d2:40:de:c0:10: 0f:7f:5e:58:93:38:52:b2:1f:18:a6:55:1e:d7:f6:80:63:04: 3f:f4:b0:11:00:89:80:39:4b:c0:7c:38:cd:68:3a:7c:cd:62: 0b:7f:c5:b8:e5:90:60:34:dc:1a:2f:6e:33:23:81:c0:bf:3f: f7:45:e2:71:55:a1:e1:31:53:12:5f:67:0b:70:2b:53:ff:f6: 1a:c0:75:4f:a5:72:ee:3f:ce:da:79:0c:bb:7c:a9:a8:88:b5: 90:f5:0a:e5:66:e0:e2:93:94:18:fc:ab:69:7f:45:04:67:f5: 47:c1:9d:ae -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt6WyEA1Q1FraL1nQSKb85oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYmE0OGM3ZTJjOWUwNWVkYTU0NmQ4OTkxNDZiODlmNzk5 ZGY4NWQwHhcNMjYwMTAxMTYxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWQ5YzI2Y2UyYTRjNDUyZjkyNmEwMzc5NDJmZTNjMWVlMDk0OTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LgNC4pLRqYTIBLW3y2UoxR8weKn P/hKnNHjk1IdwPL+EsWdemjPtcwhA8rYYjrfYsg+EsUHBK6FLjGhPmOA7jXVXkYK prHIMC5Y2GFqS4shOUrvlvW5Q7XDkAEqoKs7TfxXh5P9gxldDM/JxEcPjaiC86iY sD4fKy13q+u8WIJmCKFUVN6rPHoHXnlAzd8V6ePqM9EcWCOq794BualpEtyO4Fgo cQr2lGQgr6TQG94Y7i3bla8yrHgIC/4KC4GBOQSwiTqM+sUOaFpaMfqTPPKFAlB8 WJduFzDUgLn1SlBxkrpZJcqoQT9JybIKJH3BAcreuWw5dSNYaNxzFy73OwIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFLnZwmzipMRS+SagN5Qv48HuCUmRMB8GA1UdIwQY MBaAFL66SMfiyeBe2lRtiZFGuJ95nfhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYt M2Q1MjIxODFhMmM0LzEvdWRuQ2JPS2t4Rkw1SnFBM2xDX2p3ZTRKU1pFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYtM2Q1MjIxODFhMmM0 LzEvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANAwQAW9u2AwUD vF3x4DANBgkqhkiG9w0BAQsFAAOCAQEAX4aoKhI+B84YogEAERrZE6ozbELRN7wD dn5tVxeK2h4DSd1YpfXLC/Ft1zTfffczSLfywzSY8Yka2HKwpf/fLcyRH7+uma7d gacBU6fABdby5nAKpBEbB4b1Y4TVjh+rfx2x8G2dSJ42ivtkDEnEsPTj49YNGo5N oNkuvDgz6PRJgvMTeJonMIqGHtJA3sAQD39eWJM4UrIfGKZVHtf2gGMEP/SwEQCJ gDlLwHw4zWg6fM1iC3/FuOWQYDTcGi9uMyOBwL8/90XicVWh4TFTEl9nC3ArU//2 GsB1T6Vy7j/O2nkMu3ypqIi1kPUK5Wbg4pOUGPyraX9FBGf1R8Gdrg== -----END CERTIFICATE-----Generated at Mon Jan 26 23:23:02 2026 by rpki-client