This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/uDd7qf0zqTIG_un_H67lDJDvk3s.roa File: uDd7qf0zqTIG_un_H67lDJDvk3s.roa (raw, json) Hash identifier: l340O99LFVdvjl2XUUdkm7/CjXO188wPPi/icNbdVIQ= Subject key identifier: B8:37:7B:A9:FD:33:A9:32:06:FE:E9:FF:1F:AE:E5:0C:90:EF:93:7B Certificate issuer: /CN=64753d20b98a0ee770c3b5166a3f4a07f0515bdd Certificate serial: 019B7C7F86E228FB3BF977FACA2408FACAF8 Authority key identifier: 64:75:3D:20:B9:8A:0E:E7:70:C3:B5:16:6A:3F:4A:07:F0:51:5B:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/uDd7qf0zqTIG_un_H67lDJDvk3s.roa Signing time: Fri 02 Jan 2026 02:18:10 +0000 ROA not before: Fri 02 Jan 2026 02:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9023 IP address blocks: 194.37.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:86:e2:28:fb:3b:f9:77:fa:ca:24:08:fa:ca:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64753d20b98a0ee770c3b5166a3f4a07f0515bdd Validity Not Before: Jan 2 02:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8377ba9fd33a93206fee9ff1faee50c90ef937b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:df:b8:e8:ab:01:93:51:d8:9d:99:0e:2a:18: 35:ac:af:a0:30:dc:b5:41:34:a6:80:3c:8a:3b:d0: 49:08:18:d4:33:61:0a:55:d4:eb:37:49:ad:65:57: a7:31:04:c8:47:b3:99:18:99:70:04:63:3b:72:08: 93:b1:60:55:1d:06:34:6a:f2:e2:5c:49:f6:11:2c: 0c:9e:25:d1:99:2d:1f:aa:ce:5e:43:53:19:2f:9a: 64:a2:2e:81:a2:c7:71:85:73:20:23:a9:62:2d:68: a1:56:d9:f0:85:42:19:55:dc:77:48:c7:45:7e:f5: 94:4f:af:cc:42:57:8f:3e:25:67:a1:ab:3c:ce:89: 7c:2e:d5:c3:ad:43:5c:44:9a:08:df:60:8c:5d:ab: cc:57:8b:b1:2c:aa:93:9e:e8:ab:ff:49:29:57:a3: 18:c7:94:18:87:ad:28:eb:7d:4f:29:29:c5:18:87: c4:91:e5:43:bb:77:45:c9:d7:a9:93:98:7d:7a:57: a6:8c:cf:6f:4c:1e:94:07:64:e7:9e:84:4c:d3:dc: 14:03:32:84:2e:fd:4d:fa:1f:f5:c5:bc:e2:08:8c: 08:ef:b1:2d:06:81:14:26:f6:68:aa:80:8e:ca:03: 2a:aa:70:72:75:ea:d0:3f:6a:fa:64:35:ca:23:d3: 9e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:37:7B:A9:FD:33:A9:32:06:FE:E9:FF:1F:AE:E5:0C:90:EF:93:7B X509v3 Authority Key Identifier: keyid:64:75:3D:20:B9:8A:0E:E7:70:C3:B5:16:6A:3F:4A:07:F0:51:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/uDd7qf0zqTIG_un_H67lDJDvk3s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.37.253.0/24 Signature Algorithm: sha256WithRSAEncryption 74:69:ce:89:9e:3f:66:1d:a4:3f:73:87:ee:b6:18:3e:c8:32: cb:fa:16:5f:7a:ed:fd:ad:2b:73:51:e8:c1:e8:52:ec:ff:ad: 74:9d:a5:37:60:ed:46:32:07:4c:92:71:b0:98:dd:74:b2:c0: c1:51:af:e9:43:a3:18:51:06:9a:9c:7b:71:30:f3:b4:e9:bb: 6a:da:02:cd:f6:9a:5c:ce:d4:92:22:3e:8b:75:c4:66:98:d9: ff:8b:40:29:f1:b2:21:b7:7d:78:b7:ea:40:36:a0:10:26:88: 93:97:58:be:68:a6:af:3d:d0:e2:67:39:ff:d5:73:79:e6:e8: 87:e7:26:f1:73:a8:56:75:7f:75:49:74:63:0a:55:7f:2f:e6: 27:ae:29:f6:7c:23:7e:8f:29:8d:fa:b3:77:a6:0a:27:24:c1: b4:ca:92:9e:ad:3d:ce:f0:06:d9:00:43:de:1c:ec:03:7b:94: 05:93:6d:36:ef:6d:c5:1b:cf:5f:a7:e9:5d:32:37:9a:32:06: d3:b2:48:4a:81:ac:4f:cd:b2:a8:5f:22:e7:01:0a:29:b7:72: bf:1e:ab:fe:e6:43:70:b6:4f:d1:41:e0:24:e9:23:fa:95:67: ac:e7:73:df:7c:40:2a:76:ed:b3:4b:b7:b1:80:a7:10:6d:e0: 9b:70:36:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f4biKPs7+Xf6yiQI+sr4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NzUzZDIwYjk4YTBlZTc3MGMzYjUxNjZhM2Y0YTA3ZjA1 MTViZGQwHhcNMjYwMTAyMDIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODM3N2JhOWZkMzNhOTMyMDZmZWU5ZmYxZmFlZTUwYzkwZWY5MzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd+46KsBk1HYnZkOKhg1rK+gMNy1 QTSmgDyKO9BJCBjUM2EKVdTrN0mtZVenMQTIR7OZGJlwBGM7cgiTsWBVHQY0avLi XEn2ESwMniXRmS0fqs5eQ1MZL5pkoi6BosdxhXMgI6liLWihVtnwhUIZVdx3SMdF fvWUT6/MQlePPiVnoas8zol8LtXDrUNcRJoI32CMXavMV4uxLKqTnuir/0kpV6MY x5QYh60o631PKSnFGIfEkeVDu3dFydepk5h9elemjM9vTB6UB2TnnoRM09wUAzKE Lv1N+h/1xbziCIwI77EtBoEUJvZoqoCOygMqqnByderQP2r6ZDXKI9OeqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLg3e6n9M6kyBv7p/x+u5QyQ75N7MB8GA1UdIwQY MBaAFGR1PSC5ig7ncMO1Fmo/SgfwUVvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkhVOUlMbUtEdWR3dzdVV2FqOUtCX0JSVzkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lYmVkN2QtNTA5MC00MTdhLWI1Yjgt YWE5OTU5MDJiODRiLzEvdURkN3FmMHpxVElHX3VuX0g2N2xESkR2azNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9lYmVkN2QtNTA5MC00MTdhLWI1YjgtYWE5OTU5MDJiODRi LzEvWkhVOUlMbUtEdWR3dzdVV2FqOUtCX0JSVzkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiX9MA0G CSqGSIb3DQEBCwUAA4IBAQB0ac6Jnj9mHaQ/c4futhg+yDLL+hZfeu39rStzUejB 6FLs/610naU3YO1GMgdMknGwmN10ssDBUa/pQ6MYUQaanHtxMPO06btq2gLN9ppc ztSSIj6LdcRmmNn/i0Ap8bIht314t+pANqAQJoiTl1i+aKavPdDiZzn/1XN55uiH 5ybxc6hWdX91SXRjClV/L+Ynrin2fCN+jymN+rN3pgonJMG0ypKerT3O8AbZAEPe HOwDe5QFk202723FG89fp+ldMjeaMgbTskhKgaxPzbKoXyLnAQopt3K/Hqv+5kNw tk/RQeAk6SP6lWes53PffEAqdu2zS7exgKcQbeCbcDb2 -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:00 2026 by rpki-client