This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/udQHwvMaQFYWV18CqsCLMWLxJIM.roa File: udQHwvMaQFYWV18CqsCLMWLxJIM.roa (raw, json) Hash identifier: dwSnbtlSG6PsFZPTt+vqZ5Fno6b6h9RJD6bfYxlk92Y= Subject key identifier: B9:D4:07:C2:F3:1A:40:56:16:57:5F:02:AA:C0:8B:31:62:F1:24:83 Certificate issuer: /CN=17a10234cfb5522aa29b3260a75f8a9f79933e7b Certificate serial: 019B7D5CF3203F6C43B4900F1660BB6AFF07 Authority key identifier: 17:A1:02:34:CF:B5:52:2A:A2:9B:32:60:A7:5F:8A:9F:79:93:3E:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6ECNM-1UiqimzJgp1-Kn3mTPns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/udQHwvMaQFYWV18CqsCLMWLxJIM.roa Signing time: Fri 02 Jan 2026 06:20:02 +0000 ROA not before: Fri 02 Jan 2026 06:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44177 IP address blocks: 91.201.100.0/22 maxlen: 24 194.76.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.crl rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.mft rsync://rpki.ripe.net/repository/DEFAULT/F6ECNM-1UiqimzJgp1-Kn3mTPns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f3:20:3f:6c:43:b4:90:0f:16:60:bb:6a:ff:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17a10234cfb5522aa29b3260a75f8a9f79933e7b Validity Not Before: Jan 2 06:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9d407c2f31a405616575f02aac08b3162f12483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:13:1f:89:d5:9b:78:e5:fc:36:51:7f:c7:07: 61:f3:af:d2:7a:ae:db:31:19:8b:16:c8:e0:04:07: d4:d4:31:bc:fb:34:53:2a:72:10:cb:cf:8c:1d:55: 83:16:76:8d:17:47:94:88:ab:7c:5d:f2:9e:d5:88: 59:35:0e:b3:a4:95:4d:c5:d4:06:a4:94:52:fb:78: 28:ac:46:b9:07:6c:86:8c:b6:08:26:ff:69:2b:92: 41:d6:65:5b:cc:a6:c4:8a:e7:0e:66:05:4e:a5:cb: 87:d4:99:d9:bf:1a:58:8e:c7:0f:1d:b0:22:78:2c: f7:de:cf:6f:de:ca:e1:f1:de:81:79:2a:65:21:dc: 99:5e:15:1c:8a:51:e2:3d:ce:82:d3:7f:6e:60:9f: 35:e2:d1:69:bd:68:b3:e1:58:4c:33:29:37:90:a1: c7:19:a6:65:27:e0:fa:c5:3c:b8:30:55:af:61:18: 58:2b:78:af:4d:f3:77:d5:8a:b6:72:85:9e:70:29: 2d:20:f2:9a:9d:a5:6f:65:cf:ee:ea:a0:d5:54:22: fa:5e:78:a2:95:c3:d4:20:13:00:84:3c:ad:b2:8b: b0:66:38:1c:1b:65:76:2b:f4:ba:3f:ee:0c:ba:be: 56:5e:fd:a7:41:84:00:dd:0a:f8:a5:96:4a:2b:04: 4d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D4:07:C2:F3:1A:40:56:16:57:5F:02:AA:C0:8B:31:62:F1:24:83 X509v3 Authority Key Identifier: keyid:17:A1:02:34:CF:B5:52:2A:A2:9B:32:60:A7:5F:8A:9F:79:93:3E:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6ECNM-1UiqimzJgp1-Kn3mTPns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/udQHwvMaQFYWV18CqsCLMWLxJIM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.201.100.0/22 194.76.193.0/24 Signature Algorithm: sha256WithRSAEncryption 92:df:5e:5d:21:f8:b4:e8:81:10:6f:0c:65:84:b6:5e:eb:f9: 0f:51:34:9b:fe:a7:26:88:4a:a7:c8:b5:5f:f3:a7:cd:3d:e3: 8f:85:6f:80:3c:c0:d3:fd:c8:2e:6f:c1:78:34:0b:65:b9:89: 8c:bb:59:98:2e:63:6e:06:d0:46:c3:51:1a:7a:8f:22:99:90: 28:bf:a4:71:e8:a6:fe:ea:0c:77:6d:25:38:e4:a8:6f:2f:7f: 0e:da:ca:c1:f5:a1:3c:d6:c9:21:b3:66:16:3c:34:f9:90:ec: cf:77:d1:40:b0:98:35:84:55:2a:e4:54:d5:27:20:c2:01:e2: 37:df:ae:82:c2:4c:5d:e8:79:21:56:2f:62:bc:ac:aa:3d:f9: 46:e9:36:8f:8b:d0:39:0b:30:0d:d8:61:31:77:b7:0c:69:0b: 79:52:ae:d1:51:e2:d8:bd:cd:e9:fd:9d:24:36:fd:1f:16:53: 2b:4b:b4:20:9c:f0:de:10:4a:80:97:9f:ec:17:1b:e5:42:d4: ad:63:a2:b9:55:50:cc:9e:cb:55:14:ae:d7:60:d6:18:09:30: 1e:90:34:c6:5c:c4:92:2b:ae:43:c7:be:69:98:87:09:b0:cb: 0e:a0:17:f3:be:4d:ef:0f:f1:86:dc:72:9b:b4:d2:42:61:1c: 6d:21:fb:4e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XPMgP2xDtJAPFmC7av8HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YTEwMjM0Y2ZiNTUyMmFhMjliMzI2MGE3NWY4YTlmNzk5 MzNlN2IwHhcNMjYwMTAyMDYyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWQ0MDdjMmYzMWE0MDU2MTY1NzVmMDJhYWMwOGIzMTYyZjEyNDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRMfidWbeOX8NlF/xwdh86/Seq7b MRmLFsjgBAfU1DG8+zRTKnIQy8+MHVWDFnaNF0eUiKt8XfKe1YhZNQ6zpJVNxdQG pJRS+3gorEa5B2yGjLYIJv9pK5JB1mVbzKbEiucOZgVOpcuH1JnZvxpYjscPHbAi eCz33s9v3srh8d6BeSplIdyZXhUcilHiPc6C039uYJ814tFpvWiz4VhMMyk3kKHH GaZlJ+D6xTy4MFWvYRhYK3ivTfN31Yq2coWecCktIPKanaVvZc/u6qDVVCL6Xnii lcPUIBMAhDytsouwZjgcG2V2K/S6P+4Mur5WXv2nQYQA3Qr4pZZKKwRNEwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLnUB8LzGkBWFldfAqrAizFi8SSDMB8GA1UdIwQY MBaAFBehAjTPtVIqopsyYKdfip95kz57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjZFQ05NLTFVaXFpbXpKZ3AxLUtuM21UUG5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85ZjEwOGEtNzc4NS00ZDNmLTlmMGMt MmFkMmJiNTMyNjEzLzEvdWRRSHd2TWFRRllXVjE4Q3FzQ0xNV0x4SklNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi85ZjEwOGEtNzc4NS00ZDNmLTlmMGMtMmFkMmJiNTMyNjEz LzEvRjZFQ05NLTFVaXFpbXpKZ3AxLUtuM21UUG5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8lkAwQA wkzBMA0GCSqGSIb3DQEBCwUAA4IBAQCS315dIfi06IEQbwxlhLZe6/kPUTSb/qcm iEqnyLVf86fNPeOPhW+APMDT/cgub8F4NAtluYmMu1mYLmNuBtBGw1Eaeo8imZAo v6Rx6Kb+6gx3bSU45KhvL38O2srB9aE81skhs2YWPDT5kOzPd9FAsJg1hFUq5FTV JyDCAeI3366Cwkxd6HkhVi9ivKyqPflG6TaPi9A5CzAN2GExd7cMaQt5Uq7RUeLY vc3p/Z0kNv0fFlMrS7QgnPDeEEqAl5/sFxvlQtStY6K5VVDMnstVFK7XYNYYCTAe kDTGXMSSK65Dx75pmIcJsMsOoBfzvk3vD/GG3HKbtNJCYRxtIftO -----END CERTIFICATE-----Generated at Tue Feb 10 04:48:50 2026 by rpki-client