This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UDHYkvwqQCYIk5K26_cSVjE-Nbw.roa File: UDHYkvwqQCYIk5K26_cSVjE-Nbw.roa (raw, json) Hash identifier: n2ysw4J5Te0m7023Ni+lkLaQi4UsYtlCbjvvSxVtvWM= Subject key identifier: 50:31:D8:92:FC:2A:40:26:08:93:92:B6:EB:F7:12:56:31:3E:35:BC Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AC6BDE33A3F91DFE14A71D99A2175 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UDHYkvwqQCYIk5K26_cSVjE-Nbw.roa Signing time: Thu 01 Jan 2026 16:18:48 +0000 ROA not before: Thu 01 Jan 2026 16:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211439 IP address blocks: 37.252.28.0/24 maxlen: 24 79.99.149.0/24 maxlen: 24 82.153.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c6:bd:e3:3a:3f:91:df:e1:4a:71:d9:9a:21:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5031d892fc2a4026089392b6ebf71256313e35bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:19:27:20:1c:32:28:5e:89:b8:f2:71:7a:99: 39:1d:3f:75:2e:f0:e5:ac:1a:d5:02:5e:09:6f:40: 7e:97:85:48:01:be:ae:42:84:94:7c:e6:7e:c7:4b: 84:30:a6:a7:57:4f:70:6e:5f:17:3f:14:02:87:69: dd:75:c7:2a:42:6d:87:0f:d7:34:6f:86:19:8d:80: cf:2e:9e:fe:51:a8:c2:e7:bc:5b:51:0c:e2:61:61: 9d:52:9f:48:9b:df:ca:b1:74:db:6d:79:5f:ab:1f: 02:c8:96:52:8c:c7:8b:d0:c7:b3:23:cf:21:1d:e1: 6b:f6:e6:d4:8d:52:c7:55:ab:20:15:69:ea:21:86: e7:6f:ab:cd:9a:5f:4b:e0:27:fd:1a:35:65:f3:78: 6a:e4:f3:ae:91:48:21:f7:0b:37:ff:69:2f:44:77: de:16:bd:03:4c:2e:f0:40:4b:e5:de:b0:50:e4:6b: cb:88:14:92:91:43:76:14:cb:39:d7:c9:c0:f8:ee: 91:5b:db:e5:35:8a:4e:b8:fc:9f:e6:70:b1:48:d7: 10:72:71:94:fe:8c:12:2b:d7:1b:d8:d9:e4:39:3c: 28:a0:98:48:99:81:27:f1:27:0e:11:b3:4a:55:0f: 97:89:3e:c7:e0:ff:49:ed:c9:a7:22:6a:f1:0a:b5: 80:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:31:D8:92:FC:2A:40:26:08:93:92:B6:EB:F7:12:56:31:3E:35:BC X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UDHYkvwqQCYIk5K26_cSVjE-Nbw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.252.28.0/24 79.99.149.0/24 82.153.1.0/24 Signature Algorithm: sha256WithRSAEncryption 77:b3:a8:2b:92:bd:2f:ce:02:ac:4f:66:f0:3b:20:96:90:b4: 41:f5:ec:3f:9e:6b:e3:52:6e:29:52:56:3f:2b:61:f2:2c:90: fa:9c:e0:52:90:05:9d:ea:01:96:72:20:38:82:2d:20:4c:99: e6:1c:b6:08:49:fe:72:36:87:db:61:f7:fc:cc:38:ae:06:57: b1:af:e1:06:a6:f0:22:3f:28:ba:ed:c9:33:ff:ed:04:b9:79: fa:c5:88:f4:9c:9b:a5:78:e1:10:f0:1b:01:97:38:90:aa:77: 98:c1:18:da:29:f2:09:36:e9:dc:49:d3:67:3a:86:ac:c8:4d: 36:64:1b:11:21:ea:2b:b7:b6:99:2c:50:4e:b9:38:fa:e1:e8: 0f:c1:38:c8:72:c0:47:7e:e3:9b:7a:8d:4f:e7:6d:03:ee:31: 0a:14:a3:eb:2b:ab:4e:fb:3a:7f:4c:89:2a:f2:70:86:90:1f: b6:04:4b:ce:60:86:93:69:0d:aa:13:67:90:4b:e1:1f:e1:71: ef:95:11:d4:32:6e:29:bf:47:82:c6:d2:42:ed:62:9f:42:68: 42:6a:61:0f:d1:78:76:12:bd:20:f4:fd:af:b3:67:4b:62:81: d5:b4:fb:82:3b:a5:7c:bc:bb:76:c4:d1:fe:22:43:4c:02:f2: 72:7c:45:fd -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6Wsa94zo/kd/hSnHZmiF1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDMxZDg5MmZjMmE0MDI2MDg5MzkyYjZlYmY3MTI1NjMxM2UzNWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxknIBwyKF6JuPJxepk5HT91LvDl rBrVAl4Jb0B+l4VIAb6uQoSUfOZ+x0uEMKanV09wbl8XPxQCh2nddccqQm2HD9c0 b4YZjYDPLp7+UajC57xbUQziYWGdUp9Im9/KsXTbbXlfqx8CyJZSjMeL0MezI88h HeFr9ubUjVLHVasgFWnqIYbnb6vNml9L4Cf9GjVl83hq5POukUgh9ws3/2kvRHfe Fr0DTC7wQEvl3rBQ5GvLiBSSkUN2FMs518nA+O6RW9vlNYpOuPyf5nCxSNcQcnGU /owSK9cb2NnkOTwooJhImYEn8ScOEbNKVQ+XiT7H4P9J7cmnImrxCrWAaQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFAx2JL8KkAmCJOStuv3ElYxPjW8MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvVURIWWt2d3FRQ1lJazVLMjZfY1NWakUtTmJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJfwcAwQA T2OVAwQAUpkBMA0GCSqGSIb3DQEBCwUAA4IBAQB3s6grkr0vzgKsT2bwOyCWkLRB 9ew/nmvjUm4pUlY/K2HyLJD6nOBSkAWd6gGWciA4gi0gTJnmHLYISf5yNofbYff8 zDiuBlexr+EGpvAiPyi67ckz/+0EuXn6xYj0nJuleOEQ8BsBlziQqneYwRjaKfIJ NuncSdNnOoasyE02ZBsRIeort7aZLFBOuTj64egPwTjIcsBHfuObeo1P520D7jEK FKPrK6tO+zp/TIkq8nCGkB+2BEvOYIaTaQ2qE2eQS+Ef4XHvlRHUMm4pv0eCxtJC 7WKfQmhCamEP0Xh2Er0g9P2vs2dLYoHVtPuCO6V8vLt2xNH+IkNMAvJyfEX9 -----END CERTIFICATE-----Generated at Mon Jan 19 17:09:58 2026 by rpki-client