This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Uduw9c-DE_dfoycuiwb4xf5l9SI.roa File: Uduw9c-DE_dfoycuiwb4xf5l9SI.roa (raw, json) Hash identifier: 5jJoYPLcC+GW/l63zk1kiB+DMHRehOrGf/4mnVjVkXA= Subject key identifier: 51:DB:B0:F5:CF:83:13:F7:5F:A3:27:2E:8B:06:F8:C5:FE:65:F5:22 Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5AF4E1BA5933747A357F766AFC6718 Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Uduw9c-DE_dfoycuiwb4xf5l9SI.roa Signing time: Fri 02 Jan 2026 06:17:51 +0000 ROA not before: Fri 02 Jan 2026 06:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8100 IP address blocks: 89.33.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:f4:e1:ba:59:33:74:7a:35:7f:76:6a:fc:67:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51dbb0f5cf8313f75fa3272e8b06f8c5fe65f522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:45:e3:40:24:96:56:b3:d1:61:71:b4:56:b8: d0:8d:90:a8:a6:96:a5:2f:cd:b9:70:22:2a:5f:d6: 85:c3:44:4f:57:c4:4f:e7:24:31:04:56:f5:38:84: e6:7e:72:bf:b3:ac:58:03:06:a0:4d:24:49:95:9f: da:67:d8:48:40:15:dc:5a:0e:a6:7a:22:74:85:6e: 59:0d:ac:50:e4:61:78:72:4d:ae:f6:9e:fb:57:4c: 85:18:82:3b:61:24:06:b2:b2:20:e1:b7:37:68:16: 7b:d9:fd:80:53:33:e4:54:7f:10:43:90:86:8e:0c: 42:ca:8e:44:f6:c7:5a:38:94:b9:d7:d3:a2:94:29: dc:d4:43:eb:3e:f0:a9:5d:eb:85:2d:f8:a8:b2:be: 15:26:fb:78:5f:a9:4a:36:f1:5c:3a:9c:34:2c:24: 4c:2d:fa:70:f3:0e:a0:0d:4c:15:71:52:15:76:cd: 46:68:ed:ab:69:a7:91:16:26:9c:c1:90:66:db:92: 29:71:d7:3e:a0:d8:2c:38:42:73:10:c8:6e:9a:dd: 02:7c:7b:d9:74:54:77:d3:a8:9d:67:5f:e5:dc:a2: 3b:66:87:83:e3:7c:38:31:37:11:c8:a7:28:07:5e: 57:63:59:87:10:cc:c4:68:cb:53:67:d0:1c:c2:2a: c7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DB:B0:F5:CF:83:13:F7:5F:A3:27:2E:8B:06:F8:C5:FE:65:F5:22 X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Uduw9c-DE_dfoycuiwb4xf5l9SI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.33.192.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:2e:b6:31:13:15:ec:01:26:59:ab:5f:d1:0e:a2:76:d5:7e: b1:34:8b:51:fa:f8:58:9c:a6:99:e6:cd:6b:50:79:a4:23:40: 15:ee:42:e5:65:a9:cc:11:e9:e4:63:97:fc:7e:65:a4:31:16: e4:e3:2b:36:e0:38:c6:77:3f:28:b6:54:8f:9b:77:2e:02:0e: b2:0d:50:64:71:89:24:f2:8c:ae:5e:8c:8c:92:1c:a4:89:7b: 2c:26:1b:c6:19:bb:2b:c2:02:34:f8:bc:c6:5e:c7:6d:6d:63: 90:22:54:44:6b:67:4c:11:07:a8:b4:95:7c:43:9c:3c:64:a3: 7c:b8:a1:61:8b:68:bf:99:e3:39:32:1b:c7:95:ad:b8:9f:a4: 8d:16:94:7b:53:ad:dd:96:ec:94:92:49:1e:44:12:d5:06:25: 5a:22:2b:ed:74:76:4d:b1:0f:8f:b6:1e:24:7e:5c:60:73:ef: ac:a8:09:20:ee:9a:c6:7d:d1:65:2f:98:d3:23:62:e7:19:e3: 52:ac:64:8f:32:4a:fa:a7:af:1e:4d:01:2f:15:e8:18:f6:c7: 4a:d5:a5:56:ad:ca:33:a2:58:41:1c:52:02:80:86:87:64:20: a1:9c:37:5c:b1:5a:66:24:29:b8:e1:fa:04:a0:d4:d9:46:b0: 75:0d:ca:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WvThulkzdHo1f3Zq/GcYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWRiYjBmNWNmODMxM2Y3NWZhMzI3MmU4YjA2ZjhjNWZlNjVmNTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUXjQCSWVrPRYXG0VrjQjZCoppal L825cCIqX9aFw0RPV8RP5yQxBFb1OITmfnK/s6xYAwagTSRJlZ/aZ9hIQBXcWg6m eiJ0hW5ZDaxQ5GF4ck2u9p77V0yFGII7YSQGsrIg4bc3aBZ72f2AUzPkVH8QQ5CG jgxCyo5E9sdaOJS519OilCnc1EPrPvCpXeuFLfiosr4VJvt4X6lKNvFcOpw0LCRM Lfpw8w6gDUwVcVIVds1GaO2raaeRFiacwZBm25Ipcdc+oNgsOEJzEMhumt0CfHvZ dFR306idZ1/l3KI7ZoeD43w4MTcRyKcoB15XY1mHEMzEaMtTZ9AcwirHfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFHbsPXPgxP3X6MnLosG+MX+ZfUiMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvVWR1dzljLURFX2Rmb3ljdWl3YjR4ZjVsOVNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSHAMA0G CSqGSIb3DQEBCwUAA4IBAQAaLrYxExXsASZZq1/RDqJ21X6xNItR+vhYnKaZ5s1r UHmkI0AV7kLlZanMEenkY5f8fmWkMRbk4ys24DjGdz8otlSPm3cuAg6yDVBkcYkk 8oyuXoyMkhykiXssJhvGGbsrwgI0+LzGXsdtbWOQIlREa2dMEQeotJV8Q5w8ZKN8 uKFhi2i/meM5MhvHla24n6SNFpR7U63dluyUkkkeRBLVBiVaIivtdHZNsQ+Pth4k flxgc++sqAkg7prGfdFlL5jTI2LnGeNSrGSPMkr6p68eTQEvFegY9sdK1aVWrcoz olhBHFICgIaHZCChnDdcsVpmJCm44foEoNTZRrB1DcqM -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:47 2026 by rpki-client