This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/UNKE0U9fY4vtLgLGDaMWV30529Q.roa File: UNKE0U9fY4vtLgLGDaMWV30529Q.roa (raw, json) Hash identifier: hBRRFxInMVI2iUc7x3mm7CzMk2hrGE/9PAlOKvXi7I4= Subject key identifier: 50:D2:84:D1:4F:5F:63:8B:ED:2E:02:C6:0D:A3:16:57:7D:39:DB:D4 Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84D82830EC382EFF652E2FD68C0AE1 Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/UNKE0U9fY4vtLgLGDaMWV30529Q.roa Signing time: Fri 02 Jan 2026 16:22:51 +0000 ROA not before: Fri 02 Jan 2026 16:22:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 996 IP address blocks: 88.209.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d8:28:30:ec:38:2e:ff:65:2e:2f:d6:8c:0a:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50d284d14f5f638bed2e02c60da316577d39dbd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:18:5e:9c:c0:1b:06:6d:0b:1f:bf:d2:19:fe: be:2a:54:d0:6e:61:9f:c6:a3:05:d0:f4:be:ae:63: af:d4:28:9b:9f:95:ed:04:32:14:a1:22:3f:d0:ad: 51:19:ce:13:ce:7c:74:9a:92:0e:bf:a7:51:b0:05: ff:c3:58:de:15:0d:d5:46:34:6a:b4:51:16:fb:65: 92:34:7c:9c:9f:9a:76:4b:ea:cc:0d:d2:53:60:05: 24:31:fe:13:f9:d2:29:84:6f:8d:19:6d:45:0d:d2: c0:a2:c3:ee:7d:16:99:ae:31:30:46:b4:8f:fb:e8: f4:f0:ce:f9:f7:ff:0b:a3:53:7b:77:f3:ad:1f:0b: 92:65:52:a9:ba:5a:25:74:dc:bf:34:c8:b5:b8:cc: 49:d3:9b:50:f8:38:26:42:50:a1:86:c2:5e:92:7c: 0e:e8:a7:f5:25:e3:20:c9:d2:87:82:aa:21:f9:37: 95:28:2c:6b:50:bd:42:e5:8c:7d:84:f4:a8:73:2e: 8e:0e:0e:e7:ca:63:ae:0f:ac:a3:5e:73:5e:46:f6: b0:94:d9:fc:57:51:b7:8c:3a:d0:7d:96:4a:f9:a9: 59:9f:bd:40:2c:a7:bd:d4:11:aa:43:cc:f0:1e:ca: a8:24:4d:89:81:66:35:c8:81:82:ed:c1:41:59:31: b9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D2:84:D1:4F:5F:63:8B:ED:2E:02:C6:0D:A3:16:57:7D:39:DB:D4 X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/UNKE0U9fY4vtLgLGDaMWV30529Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.209.229.0/24 Signature Algorithm: sha256WithRSAEncryption a1:65:1a:6b:5a:68:a1:59:3a:8a:e1:c9:a2:47:b2:95:4b:ca: 69:67:5a:2a:bd:4d:89:60:48:34:de:a5:2c:2a:23:4b:ae:23: 02:ec:b8:53:35:ba:61:58:42:88:b2:c9:f4:78:46:b1:11:7d: 46:b4:38:81:f7:89:76:2e:47:2c:15:ee:1a:98:ce:9e:ee:dd: 98:9b:42:ee:74:6a:14:c2:90:bd:d2:5a:d3:b6:a0:a3:9b:3f: 99:04:14:01:18:56:e7:e5:9d:6b:e5:6d:8b:01:cf:f9:ea:05: 96:9f:98:21:93:fa:86:0b:d1:02:06:82:00:e3:49:88:a4:f1: a0:0e:a5:10:c1:3d:21:6a:eb:bf:c5:ee:56:bc:f5:c1:b5:28: 9a:94:88:ef:f1:99:3b:41:87:2d:4c:03:46:dd:85:a6:30:57: 68:c4:d6:77:86:64:2c:30:e2:e3:7c:da:30:13:0c:d7:a4:21: 95:62:84:6a:f5:c6:d2:a7:08:78:d5:19:bd:5f:9b:f7:33:03: c0:f1:fc:14:1f:41:ca:be:5d:1e:81:5d:07:9b:49:5d:c6:5d: 01:b1:81:36:d5:6d:af:74:de:52:4a:d9:bf:37:af:ec:74:ad: ac:10:0d:fc:3f:fb:d2:96:da:cd:55:42:15:fa:0d:93:d0:cd: 97:15:c8:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hNgoMOw4Lv9lLi/WjArhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGQyODRkMTRmNWY2MzhiZWQyZTAyYzYwZGEzMTY1NzdkMzlkYmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BhenMAbBm0LH7/SGf6+KlTQbmGf xqMF0PS+rmOv1Cibn5XtBDIUoSI/0K1RGc4Tznx0mpIOv6dRsAX/w1jeFQ3VRjRq tFEW+2WSNHycn5p2S+rMDdJTYAUkMf4T+dIphG+NGW1FDdLAosPufRaZrjEwRrSP ++j08M759/8Lo1N7d/OtHwuSZVKpuloldNy/NMi1uMxJ05tQ+DgmQlChhsJeknwO 6Kf1JeMgydKHgqoh+TeVKCxrUL1C5Yx9hPSocy6ODg7nymOuD6yjXnNeRvawlNn8 V1G3jDrQfZZK+alZn71ALKe91BGqQ8zwHsqoJE2JgWY1yIGC7cFBWTG5bQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFDShNFPX2OL7S4Cxg2jFld9OdvUMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvVU5LRTBVOWZZNHZ0TGdMR0RhTVdWMzA1MjlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNHlMA0G CSqGSIb3DQEBCwUAA4IBAQChZRprWmihWTqK4cmiR7KVS8ppZ1oqvU2JYEg03qUs KiNLriMC7LhTNbphWEKIssn0eEaxEX1GtDiB94l2LkcsFe4amM6e7t2Ym0LudGoU wpC90lrTtqCjmz+ZBBQBGFbn5Z1r5W2LAc/56gWWn5ghk/qGC9ECBoIA40mIpPGg DqUQwT0hauu/xe5WvPXBtSialIjv8Zk7QYctTANG3YWmMFdoxNZ3hmQsMOLjfNow EwzXpCGVYoRq9cbSpwh41Rm9X5v3MwPA8fwUH0HKvl0egV0Hm0ldxl0BsYE21W2v dN5SStm/N6/sdK2sEA38P/vSltrNVUIV+g2T0M2XFciM -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:53 2026 by rpki-client