This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/udlDPIlNU9_znjFLULaVfUNC8mo.roa
File: udlDPIlNU9_znjFLULaVfUNC8mo.roa (raw, json)
Hash identifier: kSRhHw29yQQpPh2VvScWipMltj3vi77lpfUylOp1tu8=
Subject key identifier: B9:D9:43:3C:89:4D:53:DF:F3:9E:31:4B:50:B6:95:7D:43:42:F2:6A
Certificate issuer: /CN=c1d710d8ac31b1f6daf7046c45374ae8e405f18e
Certificate serial: 019B7910DCB12F55EBFC5033254C8A4E99F7
Authority key identifier: C1:D7:10:D8:AC:31:B1:F6:DA:F7:04:6C:45:37:4A:E8:E4:05:F1:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/udlDPIlNU9_znjFLULaVfUNC8mo.roa
Signing time: Thu 01 Jan 2026 10:18:26 +0000
ROA not before: Thu 01 Jan 2026 10:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 194.116.188.0/23 maxlen: 32
2001:7f8:15::/48 maxlen: 128
2a04:80c0::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Jan 2026 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:dc:b1:2f:55:eb:fc:50:33:25:4c:8a:4e:99:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d710d8ac31b1f6daf7046c45374ae8e405f18e
Validity
Not Before: Jan 1 10:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9d9433c894d53dff39e314b50b6957d4342f26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fe:0a:f3:d6:82:3c:49:62:36:6a:b1:8f:4d:
94:00:53:18:e2:b0:72:db:a5:4a:d5:45:c1:3e:71:
23:9a:60:c4:ab:55:50:bf:5f:5c:f8:48:af:09:79:
73:97:00:0b:44:18:c0:52:70:8b:86:d3:50:e7:65:
07:b1:d4:48:b6:b4:92:d6:2c:0d:42:e9:78:73:0e:
6a:d7:60:0a:f0:fe:9b:45:2e:0a:3c:8c:c3:a5:de:
3e:ef:0d:9c:3d:93:db:25:82:51:51:32:e6:aa:52:
a6:6a:52:5d:5c:21:8c:1e:ca:d3:22:7b:7d:39:49:
f3:62:4a:24:53:2c:60:62:81:95:a6:88:44:b4:f2:
c8:45:37:9f:9c:df:3a:bf:18:b0:48:e9:ba:0d:d5:
2b:6a:94:ca:79:87:25:85:fa:c2:98:b8:92:df:ab:
6e:7d:c2:48:6e:e9:03:9b:b6:ec:76:6d:8a:c3:eb:
6f:e9:de:90:f9:44:c6:55:d1:f0:4e:53:f3:20:8b:
56:37:e2:5e:bc:cb:42:a3:e7:7a:a8:54:0c:3d:95:
df:34:30:e4:26:6c:ad:36:9c:ce:8a:89:ea:47:d2:
99:89:d4:e7:af:71:58:69:4d:d8:27:08:61:00:16:
25:70:ef:cf:49:41:7d:40:4b:ef:d0:a8:eb:f3:31:
1f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D9:43:3C:89:4D:53:DF:F3:9E:31:4B:50:B6:95:7D:43:42:F2:6A
X509v3 Authority Key Identifier:
keyid:C1:D7:10:D8:AC:31:B1:F6:DA:F7:04:6C:45:37:4A:E8:E4:05:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/udlDPIlNU9_znjFLULaVfUNC8mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.188.0/23
IPv6:
2001:7f8:15::/48
2a04:80c0::/29
Signature Algorithm: sha256WithRSAEncryption
8f:60:e6:c5:fd:c2:b5:0b:04:9a:3c:5c:2b:d3:77:6d:8a:fd:
91:a3:d2:c3:1c:ec:01:4d:8f:8f:b0:60:2a:7d:90:50:35:77:
46:89:14:ad:82:bd:86:81:e3:84:50:9c:b8:8e:34:af:82:49:
c2:ca:38:d6:d1:ca:51:df:f6:2a:35:1f:67:2d:f1:45:4b:f6:
3d:04:5b:48:29:b1:73:c0:42:3d:61:ec:90:2c:7a:fb:61:be:
62:c1:87:1f:5e:4d:a5:04:e0:b4:5b:d0:43:70:4d:b4:25:56:
ff:15:56:87:a3:1a:74:fe:36:05:c2:1a:38:27:b7:d4:75:02:
3e:78:21:fe:94:62:69:18:7b:18:08:b2:be:f6:8c:92:b1:8a:
aa:a8:e7:69:78:05:d0:fc:5f:ab:bd:cb:68:b0:62:69:d4:74:
06:d5:ed:4b:4b:94:cc:91:1d:64:62:81:c8:da:6b:cc:30:95:
d0:4f:76:5e:a0:0f:d0:08:e1:15:c5:24:75:19:ce:aa:6a:78:
03:41:11:54:b0:ba:a0:1f:74:3e:e0:13:71:b4:8f:7d:ea:f4:
08:00:60:97:9f:b0:5a:f7:60:95:8f:d6:59:68:a7:92:fb:8d:
b0:70:97:46:3b:a0:b4:57:2b:a9:2c:d1:32:59:9b:4f:58:b1:
18:59:5f:99
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZt5ENyxL1Xr/FAzJUyKTpn3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZDcxMGQ4YWMzMWIxZjZkYWY3MDQ2YzQ1Mzc0YWU4ZTQw
NWYxOGUwHhcNMjYwMTAxMTAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWQ5NDMzYzg5NGQ1M2RmZjM5ZTMxNGI1MGI2OTU3ZDQzNDJmMjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf4K89aCPEliNmqxj02UAFMY4rBy
26VK1UXBPnEjmmDEq1VQv19c+EivCXlzlwALRBjAUnCLhtNQ52UHsdRItrSS1iwN
Qul4cw5q12AK8P6bRS4KPIzDpd4+7w2cPZPbJYJRUTLmqlKmalJdXCGMHsrTInt9
OUnzYkokUyxgYoGVpohEtPLIRTefnN86vxiwSOm6DdUrapTKeYclhfrCmLiS36tu
fcJIbukDm7bsdm2Kw+tv6d6Q+UTGVdHwTlPzIItWN+JevMtCo+d6qFQMPZXfNDDk
JmytNpzOionqR9KZidTnr3FYaU3YJwhhABYlcO/PSUF9QEvv0Kjr8zEfIQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFLnZQzyJTVPf854xS1C2lX1DQvJqMB8GA1UdIwQY
MBaAFMHXENisMbH22vcEbEU3SujkBfGOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2RjUTJLd3hzZmJhOXdSc1JUZEs2T1FGOFk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kYjMzMDMtNzg3OS00YjY5LTg4NDgt
MTE1ZjE1YjIwZGU3LzEvdWRsRFBJbE5VOV96bmpGTFVMYVZmVU5DOG1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9kYjMzMDMtNzg3OS00YjY5LTg4NDgtMTE1ZjE1YjIwZGU3
LzEvd2RjUTJLd3hzZmJhOXdSc1JUZEs2T1FGOFk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQBwnS8MBYE
AgACMBADBwAgAQf4ABUDBQMqBIDAMA0GCSqGSIb3DQEBCwUAA4IBAQCPYObF/cK1
CwSaPFwr03dtiv2Ro9LDHOwBTY+PsGAqfZBQNXdGiRStgr2GgeOEUJy4jjSvgknC
yjjW0cpR3/YqNR9nLfFFS/Y9BFtIKbFzwEI9YeyQLHr7Yb5iwYcfXk2lBOC0W9BD
cE20JVb/FVaHoxp0/jYFwho4J7fUdQI+eCH+lGJpGHsYCLK+9oySsYqqqOdpeAXQ
/F+rvctosGJp1HQG1e1LS5TMkR1kYoHI2mvMMJXQT3ZeoA/QCOEVxSR1Gc6qangD
QRFUsLqgH3Q+4BNxtI996vQIAGCXn7Ba92CVj9ZZaKeS+42wcJdGO6C0VyupLNEy
WZtPWLEYWV+Z
-----END CERTIFICATE-----
Generated at Fri Jan 9 17:05:26 2026 by rpki-client