This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/ee96f8-723f-4e85-ac1e-7f1982d257f2/1/UdbPrpWZnVUI8xYJ93EGzy3y3Fo.roa File: UdbPrpWZnVUI8xYJ93EGzy3y3Fo.roa (raw, json) Hash identifier: YUbFLz2txfa5ZpLLO9VEEJXfhsSpca/Bp2yKiziVyTA= Subject key identifier: 51:D6:CF:AE:95:99:9D:55:08:F3:16:09:F7:71:06:CF:2D:F2:DC:5A Certificate issuer: /CN=336ee0f8c05313fe11c848ad46bcfd8689a4d338 Certificate serial: 019BFEB8EB548AFA27D5D46A1954496339E1 Authority key identifier: 33:6E:E0:F8:C0:53:13:FE:11:C8:48:AD:46:BC:FD:86:89:A4:D3:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M27g-MBTE_4RyEitRrz9homk0zg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/ee96f8-723f-4e85-ac1e-7f1982d257f2/1/UdbPrpWZnVUI8xYJ93EGzy3y3Fo.roa Signing time: Tue 27 Jan 2026 09:11:30 +0000 ROA not before: Tue 27 Jan 2026 09:11:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202461 IP address blocks: 91.147.80.0/22 maxlen: 24 2a06:4080::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/ee96f8-723f-4e85-ac1e-7f1982d257f2/1/M27g-MBTE_4RyEitRrz9homk0zg.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/ee96f8-723f-4e85-ac1e-7f1982d257f2/1/M27g-MBTE_4RyEitRrz9homk0zg.mft rsync://rpki.ripe.net/repository/DEFAULT/M27g-MBTE_4RyEitRrz9homk0zg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:b8:eb:54:8a:fa:27:d5:d4:6a:19:54:49:63:39:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=336ee0f8c05313fe11c848ad46bcfd8689a4d338 Validity Not Before: Jan 27 09:11:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51d6cfae95999d5508f31609f77106cf2df2dc5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c2:aa:0e:44:e5:95:c5:2d:46:8a:61:f5:b3: 21:b8:ef:5f:fc:f1:d4:9d:1d:bd:ad:cd:4a:05:99: 57:26:19:c0:e8:dd:5e:aa:3c:e4:9b:c8:5e:60:39: 79:4a:23:f5:e7:b6:fd:f0:50:8a:5b:ed:28:3d:32: 92:d1:c8:51:e7:84:bf:0e:f8:47:73:33:a2:50:83: 4b:8c:bc:70:23:67:50:a2:eb:f9:80:e8:71:af:17: 94:dc:e9:59:6c:ad:a3:60:6e:0e:19:ce:69:c3:19: 90:65:47:e5:27:6e:84:a9:13:37:1a:81:9a:f7:df: f3:3c:25:73:7d:de:08:87:91:a5:a4:42:12:87:1f: 0f:3c:be:64:73:3d:1e:89:53:59:9d:41:6b:ec:49: fa:24:ba:ba:ac:47:b1:ee:d7:dd:ef:c8:b9:84:b0: 9e:c0:79:b2:70:52:5f:b9:e0:f7:03:29:f0:4e:6f: ff:0b:2f:7a:05:37:af:84:bf:ea:67:4b:64:23:7c: 74:48:d0:01:12:ac:2c:22:71:78:5d:24:6e:bf:aa: 59:8b:24:6c:0c:54:72:5e:f7:c8:b5:09:39:80:a6: a8:2d:7d:23:c0:a9:b9:f3:0e:2a:89:d2:48:b6:ef: b4:7b:a2:97:54:dc:14:4f:52:9d:f4:87:96:4d:4b: 66:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D6:CF:AE:95:99:9D:55:08:F3:16:09:F7:71:06:CF:2D:F2:DC:5A X509v3 Authority Key Identifier: keyid:33:6E:E0:F8:C0:53:13:FE:11:C8:48:AD:46:BC:FD:86:89:A4:D3:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M27g-MBTE_4RyEitRrz9homk0zg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ee96f8-723f-4e85-ac1e-7f1982d257f2/1/UdbPrpWZnVUI8xYJ93EGzy3y3Fo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ee96f8-723f-4e85-ac1e-7f1982d257f2/1/M27g-MBTE_4RyEitRrz9homk0zg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.147.80.0/22 IPv6: 2a06:4080::/29 Signature Algorithm: sha256WithRSAEncryption 44:8c:79:bd:c7:40:1a:1c:55:60:70:ee:aa:cf:10:48:4c:d5: 1f:7c:c5:41:2c:31:cb:15:d7:98:f3:0c:36:f4:54:30:02:30: c1:4c:0b:52:88:7b:16:be:6c:89:ac:73:79:e9:01:a7:21:78: 27:a8:98:7f:70:b3:54:e5:d2:c4:4e:80:67:7d:b8:f3:79:1b: 20:03:d3:2c:65:af:84:c2:df:74:1a:6d:df:09:d1:2a:4e:a9: 5d:c1:41:42:2d:2b:c7:57:6d:4e:b4:1c:ed:bd:38:97:6f:64: b0:42:f4:9d:f1:66:d8:cc:69:e1:61:a1:19:6a:b9:24:43:ed: d1:00:ac:b4:88:89:98:87:fb:97:67:b2:c4:33:e8:ff:4d:d0: 0c:b3:86:da:ca:0d:e3:ad:fb:d6:a2:c9:67:82:58:e0:c6:62: e3:87:01:d4:82:42:b0:90:e6:74:45:27:ec:7f:d6:79:e4:b2: 1f:be:73:7b:e1:16:c9:f5:18:a0:96:3a:b7:c6:a9:dc:c7:b9: eb:cc:4f:8f:7b:e5:18:bf:f3:c9:f4:de:1a:34:6b:af:ee:c0: 6b:e5:8f:4e:27:47:f1:a8:24:cf:ae:73:54:ce:1a:b9:dc:bd: 12:6d:b4:4c:e5:f7:a5:eb:61:64:0f:9f:d6:db:d1:16:65:9c: 6e:f3:7b:bc -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZv+uOtUivon1dRqGVRJYznhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNmVlMGY4YzA1MzEzZmUxMWM4NDhhZDQ2YmNmZDg2ODlh NGQzMzgwHhcNMjYwMTI3MDkxMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWQ2Y2ZhZTk1OTk5ZDU1MDhmMzE2MDlmNzcxMDZjZjJkZjJkYzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMKqDkTllcUtRoph9bMhuO9f/PHU nR29rc1KBZlXJhnA6N1eqjzkm8heYDl5SiP157b98FCKW+0oPTKS0chR54S/DvhH czOiUINLjLxwI2dQouv5gOhxrxeU3OlZbK2jYG4OGc5pwxmQZUflJ26EqRM3GoGa 99/zPCVzfd4Ih5GlpEIShx8PPL5kcz0eiVNZnUFr7En6JLq6rEex7tfd78i5hLCe wHmycFJfueD3AynwTm//Cy96BTevhL/qZ0tkI3x0SNABEqwsInF4XSRuv6pZiyRs DFRyXvfItQk5gKaoLX0jwKm58w4qidJItu+0e6KXVNwUT1Kd9IeWTUtm9QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFHWz66VmZ1VCPMWCfdxBs8t8txaMB8GA1UdIwQY MBaAFDNu4PjAUxP+EchIrUa8/YaJpNM4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTI3Zy1NQlRFXzRSeUVpdFJyejlob21rMHpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lZTk2ZjgtNzIzZi00ZTg1LWFjMWUt N2YxOTgyZDI1N2YyLzEvVWRiUHJwV1puVlVJOHhZSjkzRUd6eTN5M0ZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9lZTk2ZjgtNzIzZi00ZTg1LWFjMWUtN2YxOTgyZDI1N2Yy LzEvTTI3Zy1NQlRFXzRSeUVpdFJyejlob21rMHpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCW5NQMA0E AgACMAcDBQMqBkCAMA0GCSqGSIb3DQEBCwUAA4IBAQBEjHm9x0AaHFVgcO6qzxBI TNUffMVBLDHLFdeY8ww29FQwAjDBTAtSiHsWvmyJrHN56QGnIXgnqJh/cLNU5dLE ToBnfbjzeRsgA9MsZa+Ewt90Gm3fCdEqTqldwUFCLSvHV21OtBztvTiXb2SwQvSd 8WbYzGnhYaEZarkkQ+3RAKy0iImYh/uXZ7LEM+j/TdAMs4bayg3jrfvWoslngljg xmLjhwHUgkKwkOZ0RSfsf9Z55LIfvnN74RbJ9Rigljq3xqncx7nrzE+Pe+UYv/PJ 9N4aNGuv7sBr5Y9OJ0fxqCTPrnNUzhq53L0SbbRM5fel62FkD5/W29EWZZxu83u8 -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:38 2026 by rpki-client