This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/UOXbVXyzSsZqFmvvMWlFNgrUDWs.roa File: UOXbVXyzSsZqFmvvMWlFNgrUDWs.roa (raw, json) Hash identifier: SwMKdG9PQtp/UmBy8238eDwxjrTfaf4LKchtiCe136w= Subject key identifier: 50:E5:DB:55:7C:B3:4A:C6:6A:16:6B:EF:31:69:45:36:0A:D4:0D:6B Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0 Certificate serial: 019B79ECDFE063EE2B95C991EA93AD5A31A8 Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/UOXbVXyzSsZqFmvvMWlFNgrUDWs.roa Signing time: Thu 01 Jan 2026 14:18:45 +0000 ROA not before: Thu 01 Jan 2026 14:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44016 IP address blocks: 91.235.168.0/24 maxlen: 24 193.23.60.0/24 maxlen: 24 2001:67c:2d78::/48 maxlen: 48 2a09:8400::/29 maxlen: 48 2a0f:75c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:df:e0:63:ee:2b:95:c9:91:ea:93:ad:5a:31:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0 Validity Not Before: Jan 1 14:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50e5db557cb34ac66a166bef316945360ad40d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d6:11:a8:4b:b7:e2:75:56:bc:83:ed:c8:87: ae:59:96:1d:a1:5b:9d:5f:6f:9e:d7:54:06:27:be: e5:b6:be:30:62:33:cc:a2:16:02:9b:bd:f2:5e:ed: ba:45:a2:d4:27:5b:e5:f0:33:9b:fb:6e:3b:96:e5: 17:67:a9:b2:45:ad:00:76:35:56:c9:ec:50:95:ba: 20:00:29:09:da:56:a8:e2:8b:83:bf:b0:ba:49:be: 22:cb:94:36:05:8c:55:4d:29:ad:10:bf:fc:be:a3: 7f:5c:17:73:1e:59:aa:a1:fd:71:27:6e:b9:8f:13: 45:60:b2:db:87:23:2c:ba:9d:1a:df:e2:5d:6c:66: 1f:e3:4a:c2:21:8c:63:46:84:9e:cc:5e:5b:9a:42: 3f:a2:af:ec:1a:ff:52:c7:da:a8:95:30:2b:93:9c: 3d:3b:78:e2:55:cc:eb:09:b4:da:ef:89:b0:27:f4: e5:b1:67:b8:e8:20:03:b5:7c:45:c5:6e:f2:2b:af: 02:21:e3:c0:ca:37:c7:ad:72:59:48:aa:69:2c:6f: 6b:71:43:47:21:94:f5:33:3f:d1:d1:5e:43:84:93: 53:a6:f5:63:87:17:11:d0:38:e7:ee:20:f3:c6:b6: ad:a5:57:cf:f5:bc:a7:ec:38:5e:8c:ec:b2:96:2f: a6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E5:DB:55:7C:B3:4A:C6:6A:16:6B:EF:31:69:45:36:0A:D4:0D:6B X509v3 Authority Key Identifier: keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/UOXbVXyzSsZqFmvvMWlFNgrUDWs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.168.0/24 193.23.60.0/24 IPv6: 2001:67c:2d78::/48 2a09:8400::/29 2a0f:75c0::/29 Signature Algorithm: sha256WithRSAEncryption 3d:8e:f5:c4:45:d5:f2:0a:df:65:69:4a:e8:66:af:a4:3d:fd: ea:02:80:b9:ef:e6:01:f2:41:ed:37:d2:5e:95:f8:32:1b:0c: fa:6a:73:b3:70:84:a0:15:e4:4c:7b:85:2b:89:e1:ca:89:ad: 02:9b:d1:d3:0c:0c:e6:bf:89:db:10:72:75:c7:74:7a:e2:cc: 38:7f:c5:a1:32:d0:05:36:20:6a:36:f3:55:37:03:61:41:66: f0:ed:61:96:dc:f7:a0:a6:ed:ab:32:ee:53:13:1d:21:ac:5a: f2:5f:a4:72:a4:ce:43:a3:24:24:6d:61:6c:05:63:cc:02:64: cd:2f:f7:cf:b4:4d:cd:48:17:5f:b9:7f:aa:ef:3f:ba:b7:f8: 02:46:fb:3b:76:de:d8:32:93:fa:f1:5e:c6:f6:5a:c8:6e:98: f3:42:35:55:96:06:84:4a:22:0a:30:4a:f1:1d:55:49:1b:0e: c8:24:2b:c2:ff:ed:b8:97:3a:50:10:a9:7d:e4:e5:57:76:9f: a0:ab:40:69:c4:cd:ad:c1:08:72:9a:8a:01:98:06:ed:e5:11: 82:f2:e5:8c:68:47:6f:95:c4:cb:80:9e:fb:c7:92:8c:ec:97: 94:f1:87:73:ab:68:3c:bd:4e:d7:f4:10:a1:cf:3a:d8:fc:03: f0:87:b8:d2 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZt57N/gY+4rlcmR6pOtWjGoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm NGQ5ZTAwHhcNMjYwMTAxMTQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGU1ZGI1NTdjYjM0YWM2NmExNjZiZWYzMTY5NDUzNjBhZDQwZDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdYRqEu34nVWvIPtyIeuWZYdoVud X2+e11QGJ77ltr4wYjPMohYCm73yXu26RaLUJ1vl8DOb+247luUXZ6myRa0AdjVW yexQlbogACkJ2lao4ouDv7C6Sb4iy5Q2BYxVTSmtEL/8vqN/XBdzHlmqof1xJ265 jxNFYLLbhyMsup0a3+JdbGYf40rCIYxjRoSezF5bmkI/oq/sGv9Sx9qolTArk5w9 O3jiVczrCbTa74mwJ/TlsWe46CADtXxFxW7yK68CIePAyjfHrXJZSKppLG9rcUNH IZT1Mz/R0V5DhJNTpvVjhxcR0Djn7iDzxratpVfP9byn7DhejOyyli+mjwIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFFDl21V8s0rGahZr7zFpRTYK1A1rMB8GA1UdIwQY MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt ZTljOTEzMjgzNmZmLzEvVU9YYlZYeXpTc1pxRm12dk1XbEZOZ3JVRFdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzASBAIAATAMAwQAW+uoAwQA wRc8MB0EAgACMBcDBwAgAQZ8LXgDBQMqCYQAAwUDKg91wDANBgkqhkiG9w0BAQsF AAOCAQEAPY71xEXV8grfZWlK6GavpD396gKAue/mAfJB7TfSXpX4MhsM+mpzs3CE oBXkTHuFK4nhyomtApvR0wwM5r+J2xBydcd0euLMOH/FoTLQBTYgajbzVTcDYUFm 8O1hltz3oKbtqzLuUxMdIaxa8l+kcqTOQ6MkJG1hbAVjzAJkzS/3z7RNzUgXX7l/ qu8/urf4Akb7O3be2DKT+vFexvZayG6Y80I1VZYGhEoiCjBK8R1VSRsOyCQrwv/t uJc6UBCpfeTlV3afoKtAacTNrcEIcpqKAZgG7eURgvLljGhHb5XEy4Ce+8eSjOyX lPGHc6toPL1O1/QQoc862PwD8Ie40g== -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:48 2026 by rpki-client