This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/ud-rlEsNj2HyrWtwR6QbOfrF-vY.roa File: ud-rlEsNj2HyrWtwR6QbOfrF-vY.roa (raw, json) Hash identifier: uWoRD0bpqfoPSwtBo6lWNrXknFwbcuRdkomzveOU4Qk= Subject key identifier: B9:DF:AB:94:4B:0D:8F:61:F2:AD:6B:70:47:A4:1B:39:FA:C5:FA:F6 Certificate issuer: /CN=50e696e6e25b492bb7e07cb329bb4354b111a681 Certificate serial: 019B76EAF84BCEFE3D92E9B80469FE791529 Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/ud-rlEsNj2HyrWtwR6QbOfrF-vY.roa Signing time: Thu 01 Jan 2026 00:17:49 +0000 ROA not before: Thu 01 Jan 2026 00:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213250 IP address blocks: 45.155.172.0/22 maxlen: 22 2a0f:580::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 21:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f8:4b:ce:fe:3d:92:e9:b8:04:69:fe:79:15:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681 Validity Not Before: Jan 1 00:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9dfab944b0d8f61f2ad6b7047a41b39fac5faf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9d:40:a7:cf:e0:92:d9:43:6c:04:db:e0:5e: 24:6b:44:5c:ca:ca:11:18:19:40:3a:3e:6c:a2:c1: 82:11:7e:93:db:b4:f0:ed:7e:c6:a5:af:a7:f2:ad: bb:78:2c:0b:c0:15:6d:a0:da:10:c7:9e:cb:74:69: c7:03:3f:92:97:31:7a:40:d3:75:2b:66:0d:08:55: 95:3b:49:59:9a:c6:18:7d:95:43:ce:5b:c9:b6:26: d8:1d:06:f3:1a:d1:ec:ca:68:ae:93:1e:be:1c:8e: f0:62:20:13:e8:0d:e9:86:34:9a:e5:bf:da:bf:7e: a2:21:d2:82:5b:b1:87:cd:02:f2:0e:9f:50:53:d8: 0a:4b:23:d6:2a:8b:2c:78:e9:f5:ac:7a:ba:fd:3d: b3:3a:50:e2:27:00:d3:5c:c3:62:d5:27:59:c8:70: 6b:6d:61:2f:e5:d1:00:64:07:45:5a:64:30:f5:a4: 97:88:b5:32:24:ff:50:29:8c:fd:2e:b0:83:cd:1b: 37:e6:2c:7f:bf:54:3a:f0:c3:7a:b8:49:d9:8a:3f: b3:74:04:2e:9a:4e:a3:ef:33:e4:9d:ac:dd:ea:cd: 61:16:76:8f:18:4b:43:22:dd:d8:9c:a6:05:cc:4b: 4e:3f:ef:c6:43:96:d4:32:7f:54:fc:34:29:92:19: 01:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:DF:AB:94:4B:0D:8F:61:F2:AD:6B:70:47:A4:1B:39:FA:C5:FA:F6 X509v3 Authority Key Identifier: keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/ud-rlEsNj2HyrWtwR6QbOfrF-vY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.172.0/22 IPv6: 2a0f:580::/29 Signature Algorithm: sha256WithRSAEncryption 2a:f2:0f:e6:d3:86:da:90:13:64:0b:0b:76:7a:c6:9f:8c:5a: 81:18:fd:57:62:a3:c8:74:39:4f:47:9f:37:5a:2c:ba:9e:80: d1:dc:21:85:a9:62:5d:85:ee:ed:24:44:76:a4:a4:9d:89:6b: db:3a:78:75:74:8a:63:9f:c0:77:84:73:55:e3:af:15:28:3f: 86:3c:17:c8:c6:cf:74:44:c6:ce:23:e5:6c:4c:bf:7a:ca:2c: 42:02:c9:2f:13:b4:07:22:1d:34:83:3d:96:c8:85:09:30:67: 8f:cc:c2:ac:1c:4c:18:d0:c9:ce:b5:82:92:99:18:44:82:62: f7:2f:d4:fd:7a:a7:7a:ad:b5:6c:f8:35:e6:df:28:54:10:14: bf:85:31:44:c3:2e:f2:4f:56:f0:7f:3b:03:55:6a:db:94:db: be:11:e7:a6:1e:5e:c7:f6:dd:e3:52:98:25:ec:00:34:51:9b: ae:52:e9:19:2b:5b:5d:48:2b:37:f7:f3:52:19:db:f0:16:10: 04:1f:7a:67:a1:aa:2a:02:b7:37:9d:d2:51:2a:c4:09:68:80: 89:37:d0:a3:1f:e2:e1:59:bf:ce:06:6b:2b:4b:45:96:8f:96: 43:a7:c3:dd:6c:f3:13:61:e2:22:f5:70:a5:af:3a:90:2b:db: 2b:b9:e3:55 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt26vhLzv49kum4BGn+eRUpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwZTY5NmU2ZTI1YjQ5MmJiN2UwN2NiMzI5YmI0MzU0YjEx MWE2ODEwHhcNMjYwMTAxMDAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWRmYWI5NDRiMGQ4ZjYxZjJhZDZiNzA0N2E0MWIzOWZhYzVmYWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp1Ap8/gktlDbATb4F4ka0RcysoR GBlAOj5sosGCEX6T27Tw7X7Gpa+n8q27eCwLwBVtoNoQx57LdGnHAz+SlzF6QNN1 K2YNCFWVO0lZmsYYfZVDzlvJtibYHQbzGtHsymiukx6+HI7wYiAT6A3phjSa5b/a v36iIdKCW7GHzQLyDp9QU9gKSyPWKosseOn1rHq6/T2zOlDiJwDTXMNi1SdZyHBr bWEv5dEAZAdFWmQw9aSXiLUyJP9QKYz9LrCDzRs35ix/v1Q68MN6uEnZij+zdAQu mk6j7zPknazd6s1hFnaPGEtDIt3YnKYFzEtOP+/GQ5bUMn9U/DQpkhkB8wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLnfq5RLDY9h8q1rcEekGzn6xfr2MB8GA1UdIwQY MBaAFFDmlubiW0krt+B8sym7Q1SxEaaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVU9hVzV1SmJTU3UzNEh5ektidERWTEVScG9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kYWRmM2ItYzg2Ny00MTYzLTg3Njgt NjE0MWQ5OTYzNGI1LzEvdWQtcmxFc05qMkh5cld0d1I2UWJPZnJGLXZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9kYWRmM2ItYzg2Ny00MTYzLTg3NjgtNjE0MWQ5OTYzNGI1 LzEvVU9hVzV1SmJTU3UzNEh5ektidERWTEVScG9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZusMA0E AgACMAcDBQMqDwWAMA0GCSqGSIb3DQEBCwUAA4IBAQAq8g/m04bakBNkCwt2esaf jFqBGP1XYqPIdDlPR583Wiy6noDR3CGFqWJdhe7tJER2pKSdiWvbOnh1dIpjn8B3 hHNV468VKD+GPBfIxs90RMbOI+VsTL96yixCAskvE7QHIh00gz2WyIUJMGePzMKs HEwY0MnOtYKSmRhEgmL3L9T9eqd6rbVs+DXm3yhUEBS/hTFEwy7yT1bwfzsDVWrb lNu+EeemHl7H9t3jUpgl7AA0UZuuUukZK1tdSCs39/NSGdvwFhAEH3pnoaoqArc3 ndJRKsQJaICJN9CjH+LhWb/OBmsrS0WWj5ZDp8PdbPMTYeIi9XClrzqQK9srueNV -----END CERTIFICATE-----Generated at Wed Jan 21 02:49:04 2026 by rpki-client