This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/UdthD-mHKRSAmhucefcr8Jq7Psc.roa File: UdthD-mHKRSAmhucefcr8Jq7Psc.roa (raw, json) Hash identifier: lVsaOqAelHfvqHNn/6/Wb6tKGvQfaZI6JG0LsDpyxOY= Subject key identifier: 51:DB:61:0F:E9:87:29:14:80:9A:1B:9C:79:F7:2B:F0:9A:BB:3E:C7 Certificate issuer: /CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f Certificate serial: 019B7E37FED3C4BC5286E0CDF2BFC7EE4DE1 Authority key identifier: CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/UdthD-mHKRSAmhucefcr8Jq7Psc.roa Signing time: Fri 02 Jan 2026 10:19:17 +0000 ROA not before: Fri 02 Jan 2026 10:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51175 IP address blocks: 188.123.199.0/24 maxlen: 24 188.123.204.0/22 maxlen: 22 188.123.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:fe:d3:c4:bc:52:86:e0:cd:f2:bf:c7:ee:4d:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f Validity Not Before: Jan 2 10:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51db610fe9872914809a1b9c79f72bf09abb3ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:61:e6:af:b8:53:b2:c2:d3:55:25:95:cf:6b: d2:75:7b:df:fd:e4:d8:b4:92:b6:10:78:75:39:19: 6b:cb:b3:c6:fb:2d:57:a1:0e:57:65:d6:a1:33:83: 15:69:42:2a:69:07:4a:57:41:dc:28:5e:1f:03:01: cc:64:1f:71:28:6b:65:51:12:73:d1:a5:40:f4:99: 12:29:6e:d7:00:51:e3:0d:e2:0d:c7:e1:89:b8:d8: 78:89:1c:20:37:06:67:b1:19:2a:e9:4f:a3:1e:b8: fb:05:28:89:8b:d6:de:c2:2a:2d:06:59:f2:3d:86: 2d:64:64:50:12:57:4c:41:56:c1:bb:02:b1:75:4c: 20:64:5b:14:77:f1:d9:58:53:84:dc:f3:a9:1a:22: 14:4e:08:21:5d:09:ee:65:00:e5:77:98:38:82:31: f2:5e:8f:cb:e7:1b:ae:6d:d7:d8:f9:64:96:b2:ad: bf:09:73:12:0e:a7:e9:d3:3f:df:50:aa:45:2d:54: 32:64:a2:78:27:e5:84:0e:48:75:5d:12:d7:89:ce: c6:60:db:88:16:38:a3:32:be:d3:a5:e2:ea:67:4d: ce:60:6e:6e:47:53:33:9c:16:31:46:5c:da:46:03: 26:34:ed:3e:e2:78:fe:87:a7:e1:9d:9c:a4:ce:f1: b4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DB:61:0F:E9:87:29:14:80:9A:1B:9C:79:F7:2B:F0:9A:BB:3E:C7 X509v3 Authority Key Identifier: keyid:CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/UdthD-mHKRSAmhucefcr8Jq7Psc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.123.199.0/24 188.123.204.0/22 188.123.212.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:5d:d8:df:75:3b:1e:2a:96:9c:53:ed:4b:02:60:20:d3:7c: f4:f7:5a:25:83:ca:ac:c2:20:f4:48:22:95:b7:40:11:fd:86: bc:7b:27:24:b5:c2:7e:0a:1c:77:63:8f:9e:82:53:3f:0e:7e: 00:fd:78:0c:0f:29:3c:bc:b8:c0:36:c7:94:5a:27:ea:a6:1c: 0a:6b:f5:23:1e:ab:ed:0b:14:ce:98:35:38:45:04:6e:43:0a: a7:11:71:0f:fc:ed:d0:cc:f6:3c:30:fe:6a:af:c4:b4:2d:07: b0:72:b8:b7:47:3f:7a:cf:61:24:1d:8f:93:71:82:dd:e7:38: b1:eb:6d:04:bb:13:b4:9d:6e:83:05:ea:11:51:01:90:55:3e: 88:22:70:fa:d0:eb:01:86:17:58:96:bd:9a:6f:fe:17:05:15: 23:cf:df:46:dc:4f:8b:2a:c6:3e:64:cb:6e:b5:ca:c2:4d:ff: 01:91:bf:5e:34:c8:af:aa:94:e4:b8:b0:0a:77:73:c5:e9:b9: bb:f4:4e:7f:2c:fa:8a:99:f0:86:86:96:da:36:41:54:d2:09: 97:4f:72:75:f1:71:61:bd:83:5a:b3:6e:46:03:8f:ab:39:a8: 71:0b:84:71:02:9b:ca:8a:21:a9:b1:ee:f0:1a:fa:cc:63:96: ec:47:db:90 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+N/7TxLxShuDN8r/H7k3hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYmUzYzZkOTk4MTE4MTljZWRkZGNkMjdlNGJlMjViYzBj ZjUwNmYwHhcNMjYwMTAyMTAxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWRiNjEwZmU5ODcyOTE0ODA5YTFiOWM3OWY3MmJmMDlhYmIzZWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GHmr7hTssLTVSWVz2vSdXvf/eTY tJK2EHh1ORlry7PG+y1XoQ5XZdahM4MVaUIqaQdKV0HcKF4fAwHMZB9xKGtlURJz 0aVA9JkSKW7XAFHjDeINx+GJuNh4iRwgNwZnsRkq6U+jHrj7BSiJi9bewiotBlny PYYtZGRQEldMQVbBuwKxdUwgZFsUd/HZWFOE3POpGiIUTgghXQnuZQDld5g4gjHy Xo/L5xuubdfY+WSWsq2/CXMSDqfp0z/fUKpFLVQyZKJ4J+WEDkh1XRLXic7GYNuI FjijMr7TpeLqZ03OYG5uR1MznBYxRlzaRgMmNO0+4nj+h6fhnZykzvG0twIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFHbYQ/phykUgJobnHn3K/Cauz7HMB8GA1UdIwQY MBaAFMu+PG2ZgRgZzt3c0n5L4lvAz1BvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84NDhjOGItMGU5Yy00ZDZlLTg3M2Ut OGNmN2Q0NDkzMzU4LzEvVWR0aEQtbUhLUlNBbWh1Y2VmY3I4SnE3UHNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS84NDhjOGItMGU5Yy00ZDZlLTg3M2UtOGNmN2Q0NDkzMzU4 LzEveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAvHvHAwQC vHvMAwQBvHvUMA0GCSqGSIb3DQEBCwUAA4IBAQArXdjfdTseKpacU+1LAmAg03z0 91olg8qswiD0SCKVt0AR/Ya8eycktcJ+Chx3Y4+eglM/Dn4A/XgMDyk8vLjANseU WifqphwKa/UjHqvtCxTOmDU4RQRuQwqnEXEP/O3QzPY8MP5qr8S0LQewcri3Rz96 z2EkHY+TcYLd5zix620EuxO0nW6DBeoRUQGQVT6IInD60OsBhhdYlr2ab/4XBRUj z99G3E+LKsY+ZMtutcrCTf8Bkb9eNMivqpTkuLAKd3PF6bm79E5/LPqKmfCGhpba NkFU0gmXT3J18XFhvYNas25GA4+rOahxC4RxApvKiiGpse7wGvrMY5bsR9uQ -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:41 2026 by rpki-client