This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/ULNyY9ornMb2XkpkkXNvWN1gP2I.roa File: ULNyY9ornMb2XkpkkXNvWN1gP2I.roa (raw, json) Hash identifier: r5UnkkjvCogYCq6Zu3PdGG9tZrgdqzPy7q2Pvmc7Y4w= Subject key identifier: 50:B3:72:63:DA:2B:9C:C6:F6:5E:4A:64:91:73:6F:58:DD:60:3F:62 Certificate issuer: /CN=da21d02464b38aff3a31c90878d62723b9c742a6 Certificate serial: 019B7F8573BB2DD9F1FF3C74AB99288AE98A Authority key identifier: DA:21:D0:24:64:B3:8A:FF:3A:31:C9:08:78:D6:27:23:B9:C7:42:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iHQJGSziv86MckIeNYnI7nHQqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/ULNyY9ornMb2XkpkkXNvWN1gP2I.roa Signing time: Fri 02 Jan 2026 16:23:30 +0000 ROA not before: Fri 02 Jan 2026 16:23:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214107 IP address blocks: 81.27.78.0/24 maxlen: 24 81.27.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.mft rsync://rpki.ripe.net/repository/DEFAULT/2iHQJGSziv86MckIeNYnI7nHQqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:73:bb:2d:d9:f1:ff:3c:74:ab:99:28:8a:e9:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da21d02464b38aff3a31c90878d62723b9c742a6 Validity Not Before: Jan 2 16:23:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50b37263da2b9cc6f65e4a6491736f58dd603f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b7:ed:2e:c5:ea:e7:44:a2:7b:6f:04:52:25: 85:5a:75:a5:86:7a:bf:e9:75:fd:d2:c5:b7:51:d7: b7:4a:4f:df:ca:37:2c:9a:40:39:22:f2:59:72:13: 3c:9f:b1:f1:1b:6c:2a:c0:a1:06:a5:09:d2:92:16: 47:28:e7:d9:bb:ef:e8:46:9d:4f:ec:69:49:e4:ae: 27:bf:6a:56:e4:32:5a:b0:87:f6:01:73:a6:ee:d6: cd:be:94:a0:4a:f9:46:ee:da:3c:ce:22:f5:a0:24: 51:7b:43:b3:ae:b4:f0:5e:95:07:f9:84:cc:3c:94: 61:84:5d:55:44:78:b6:e3:24:da:42:22:e1:3b:ad: 0d:e9:ad:ff:0d:9a:e8:71:0e:8a:6c:a6:a4:45:6e: 9e:31:b6:e1:75:99:ee:19:84:9b:fe:17:42:d4:4f: 2c:06:65:e9:9c:7e:4e:f9:cc:a0:ad:c1:16:f0:85: 7b:c2:3a:2f:c5:c3:e8:3d:6c:95:3e:f1:69:1f:d4: 82:77:db:aa:d6:f8:88:d0:da:4b:5b:e7:72:0b:e1: 05:e6:3f:6c:1f:de:da:be:8f:4d:93:a6:18:2a:82: 35:20:ff:04:03:50:9c:97:8a:0d:8a:86:fb:d7:c3: 62:2e:ea:21:f6:a4:d7:52:b8:0a:c2:e8:a6:fa:7e: cb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B3:72:63:DA:2B:9C:C6:F6:5E:4A:64:91:73:6F:58:DD:60:3F:62 X509v3 Authority Key Identifier: keyid:DA:21:D0:24:64:B3:8A:FF:3A:31:C9:08:78:D6:27:23:B9:C7:42:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iHQJGSziv86MckIeNYnI7nHQqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/ULNyY9ornMb2XkpkkXNvWN1gP2I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.27.78.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:5d:36:96:de:7f:88:76:fa:bf:92:3e:ed:66:a7:73:f0:8f: 7e:3e:a5:22:3c:2e:ca:1d:17:db:1a:75:40:8e:a2:12:ac:db: 2c:f1:30:f9:37:27:ea:19:81:4a:49:2f:b8:59:36:f3:f7:36: 84:18:14:7f:29:ee:08:0a:2b:76:8a:f5:bb:38:f7:72:68:b3: 82:7c:c4:a9:c3:47:df:4c:0b:35:90:56:ca:d7:d7:69:01:f0: 32:db:ec:d2:5e:9a:5a:3c:78:29:50:d4:2d:f1:9d:09:f3:f8: 8f:01:cb:4c:16:3c:2b:91:71:67:85:d4:89:6c:4c:25:4d:65: d5:9c:20:6c:e1:85:dc:6f:db:1d:0e:f0:39:33:9a:ca:0a:b9: 76:09:ba:0e:ae:68:0c:40:ae:c6:9b:2e:62:44:33:4b:a1:c5: 29:04:a6:02:d8:f5:cc:29:c5:bc:87:ae:a2:a7:d1:9a:28:9f: c9:c5:d2:0d:f7:02:0b:40:42:83:8d:cd:dd:a1:00:a0:0e:bf: 5b:19:88:b4:96:aa:b9:64:8a:83:41:1f:fe:cb:ad:a4:08:c2: ed:a7:69:19:41:94:bf:b4:ba:ec:9c:e4:e2:4b:f9:0d:34:92: f3:45:29:15:7f:3f:47:f7:89:f5:e4:f2:b6:21:14:a6:ac:6f: ed:35:15:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hXO7Ldnx/zx0q5koiumKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMjFkMDI0NjRiMzhhZmYzYTMxYzkwODc4ZDYyNzIzYjlj NzQyYTYwHhcNMjYwMTAyMTYyMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGIzNzI2M2RhMmI5Y2M2ZjY1ZTRhNjQ5MTczNmY1OGRkNjAzZjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrftLsXq50Sie28EUiWFWnWlhnq/ 6XX90sW3Ude3Sk/fyjcsmkA5IvJZchM8n7HxG2wqwKEGpQnSkhZHKOfZu+/oRp1P 7GlJ5K4nv2pW5DJasIf2AXOm7tbNvpSgSvlG7to8ziL1oCRRe0OzrrTwXpUH+YTM PJRhhF1VRHi24yTaQiLhO60N6a3/DZrocQ6KbKakRW6eMbbhdZnuGYSb/hdC1E8s BmXpnH5O+cygrcEW8IV7wjovxcPoPWyVPvFpH9SCd9uq1viI0NpLW+dyC+EF5j9s H97avo9Nk6YYKoI1IP8EA1Ccl4oNiob718NiLuoh9qTXUrgKwuim+n7LXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFCzcmPaK5zG9l5KZJFzb1jdYD9iMB8GA1UdIwQY MBaAFNoh0CRks4r/OjHJCHjWJyO5x0KmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmlIUUpHU3ppdjg2TWNrSWVOWW5JN25IUXFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy84ZTYxZjQtMWE0MS00Y2NhLWI4NWMt NzZmNTJiMWRkNzE4LzEvVUxOeVk5b3JuTWIyWGtwa2tYTnZXTjFnUDJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy84ZTYxZjQtMWE0MS00Y2NhLWI4NWMtNzZmNTJiMWRkNzE4 LzEvMmlIUUpHU3ppdjg2TWNrSWVOWW5JN25IUXFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBURtOMA0G CSqGSIb3DQEBCwUAA4IBAQAtXTaW3n+Idvq/kj7tZqdz8I9+PqUiPC7KHRfbGnVA jqISrNss8TD5NyfqGYFKSS+4WTbz9zaEGBR/Ke4ICit2ivW7OPdyaLOCfMSpw0ff TAs1kFbK19dpAfAy2+zSXppaPHgpUNQt8Z0J8/iPActMFjwrkXFnhdSJbEwlTWXV nCBs4YXcb9sdDvA5M5rKCrl2CboOrmgMQK7Gmy5iRDNLocUpBKYC2PXMKcW8h66i p9GaKJ/JxdIN9wILQEKDjc3doQCgDr9bGYi0lqq5ZIqDQR/+y62kCMLtp2kZQZS/ tLrsnOTiS/kNNJLzRSkVfz9H94n15PK2IRSmrG/tNRUe -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:55 2026 by rpki-client