This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/UDOQeKm21_HbogaX80qPDYGLszg.roa File: UDOQeKm21_HbogaX80qPDYGLszg.roa (raw, json) Hash identifier: oQCYUWGJBiukXuu22aVYGVLYnrdXQVCn7RQqhgm8PBQ= Subject key identifier: 50:33:90:78:A9:B6:D7:F1:DB:A2:06:97:F3:4A:8F:0D:81:8B:B3:38 Certificate issuer: /CN=a0c8cda814e777d9fe154b92e9959ce120b0ad58 Certificate serial: 019B791036C22919C7E53FA23FF5D410C289 Authority key identifier: A0:C8:CD:A8:14:E7:77:D9:FE:15:4B:92:E9:95:9C:E1:20:B0:AD:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/UDOQeKm21_HbogaX80qPDYGLszg.roa Signing time: Thu 01 Jan 2026 10:17:44 +0000 ROA not before: Thu 01 Jan 2026 10:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206934 IP address blocks: 193.30.23.0/24 maxlen: 24 193.30.90.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft rsync://rpki.ripe.net/repository/DEFAULT/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:36:c2:29:19:c7:e5:3f:a2:3f:f5:d4:10:c2:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0c8cda814e777d9fe154b92e9959ce120b0ad58 Validity Not Before: Jan 1 10:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50339078a9b6d7f1dba20697f34a8f0d818bb338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:46:a2:3d:9d:a4:4b:1b:89:a3:3f:f4:66:68: a2:85:0b:a0:86:a3:b4:57:eb:50:15:f8:5a:1f:e1: 0d:19:5b:5c:e2:57:36:a7:a3:62:4a:9c:11:3a:e9: 8a:25:1a:08:21:50:28:e9:ff:f0:a4:13:04:99:bb: 28:c0:b5:30:39:0e:e4:12:17:87:d7:46:12:19:8a: b7:b0:70:ac:ee:98:62:9e:ed:fc:e5:13:3e:64:25: c6:51:f1:67:c0:9d:74:b1:57:ad:7c:8c:df:5a:a5: c0:8d:1a:f7:e3:63:b0:c1:97:b6:b9:2e:d9:46:8d: 3d:cc:e1:a0:01:0d:18:94:1c:3a:74:f6:34:75:89: 02:14:e2:f0:2c:89:c1:9a:95:2f:61:9f:50:76:fb: 10:c5:c7:3c:37:37:59:18:2b:8f:3d:c9:48:eb:8c: 9c:c9:23:9f:6c:b6:35:76:25:f4:0d:6f:bb:a5:0b: 74:65:f3:7f:14:bc:c3:99:3e:1e:18:3b:48:a1:61: 7c:90:3a:91:e7:e5:13:cc:52:18:aa:e2:60:ac:f7: 51:9f:65:12:07:65:18:65:f6:99:8d:f8:77:26:cc: 6d:f2:39:b9:cf:ba:20:45:fb:dc:40:3f:0a:74:e2: 77:f2:02:33:4b:f5:22:e0:05:6b:95:11:ca:3c:21: 6b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:33:90:78:A9:B6:D7:F1:DB:A2:06:97:F3:4A:8F:0D:81:8B:B3:38 X509v3 Authority Key Identifier: keyid:A0:C8:CD:A8:14:E7:77:D9:FE:15:4B:92:E9:95:9C:E1:20:B0:AD:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/UDOQeKm21_HbogaX80qPDYGLszg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.30.23.0/24 193.30.90.0/23 Signature Algorithm: sha256WithRSAEncryption 65:eb:8f:c2:df:8d:02:5c:95:2e:66:97:54:8f:4f:ec:6f:c9: 1f:3d:e0:6e:56:87:26:28:60:26:3f:55:38:fb:62:f2:48:49: 67:2b:1e:e9:c3:bb:39:3c:89:9a:1e:05:04:f2:fa:a9:ec:fe: 85:82:2f:ef:c8:04:ba:97:8e:ee:9e:70:71:5b:7e:e1:16:ac: 4b:c5:11:3a:b6:11:f3:3a:b3:8a:8e:43:4e:a6:0b:ab:20:81: 2e:75:16:b6:16:c1:b3:f8:be:e5:f2:91:22:62:71:78:d7:04: a4:84:35:3d:67:19:69:e6:b8:5a:6b:8f:4a:d6:88:29:32:5f: b6:ee:73:71:1c:84:d7:80:db:7f:fd:3e:95:7b:ce:8f:b6:f6: 37:25:76:97:2c:a4:68:6e:ea:f9:73:a9:9c:a0:1a:df:9c:21: 7a:80:64:d5:7c:70:3a:0a:b8:3c:c6:1f:7c:9f:56:d6:20:b9: 46:c6:b8:f0:93:d0:a2:a9:25:b6:54:52:3e:11:ef:69:a6:77: f8:5d:18:43:f1:f0:bf:73:7d:f9:77:59:f4:89:f6:5b:30:73: db:24:4e:bb:e3:02:a3:d9:f2:3f:b2:99:e7:aa:4a:27:16:27: 28:c7:a4:be:50:dd:31:92:80:3d:4b:9d:0e:43:36:7c:be:c1: 43:14:a0:64 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EDbCKRnH5T+iP/XUEMKJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYzhjZGE4MTRlNzc3ZDlmZTE1NGI5MmU5OTU5Y2UxMjBi MGFkNTgwHhcNMjYwMTAxMTAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDMzOTA3OGE5YjZkN2YxZGJhMjA2OTdmMzRhOGYwZDgxOGJiMzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskaiPZ2kSxuJoz/0ZmiihQughqO0 V+tQFfhaH+ENGVtc4lc2p6NiSpwROumKJRoIIVAo6f/wpBMEmbsowLUwOQ7kEheH 10YSGYq3sHCs7phinu385RM+ZCXGUfFnwJ10sVetfIzfWqXAjRr342OwwZe2uS7Z Ro09zOGgAQ0YlBw6dPY0dYkCFOLwLInBmpUvYZ9QdvsQxcc8NzdZGCuPPclI64yc ySOfbLY1diX0DW+7pQt0ZfN/FLzDmT4eGDtIoWF8kDqR5+UTzFIYquJgrPdRn2US B2UYZfaZjfh3Jsxt8jm5z7ogRfvcQD8KdOJ38gIzS/Ui4AVrlRHKPCFrMwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFAzkHipttfx26IGl/NKjw2Bi7M4MB8GA1UdIwQY MBaAFKDIzagU53fZ/hVLkumVnOEgsK1YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb01qTnFCVG5kOW4tRlV1UzZaV2M0U0N3clZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9hYTI3MGEtYzA4OS00Nzc4LTkzNDMt YjczNjJlZGJkOGFjLzEvVURPUWVLbTIxX0hib2dhWDgwcVBEWUdMc3pnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9hYTI3MGEtYzA4OS00Nzc4LTkzNDMtYjczNjJlZGJkOGFj LzEvb01qTnFCVG5kOW4tRlV1UzZaV2M0U0N3clZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwR4XAwQB wR5aMA0GCSqGSIb3DQEBCwUAA4IBAQBl64/C340CXJUuZpdUj0/sb8kfPeBuVocm KGAmP1U4+2LySElnKx7pw7s5PImaHgUE8vqp7P6Fgi/vyAS6l47unnBxW37hFqxL xRE6thHzOrOKjkNOpgurIIEudRa2FsGz+L7l8pEiYnF41wSkhDU9Zxlp5rhaa49K 1ogpMl+27nNxHITXgNt//T6Ve86PtvY3JXaXLKRobur5c6mcoBrfnCF6gGTVfHA6 Crg8xh98n1bWILlGxrjwk9CiqSW2VFI+Ee9ppnf4XRhD8fC/c335d1n0ifZbMHPb JE674wKj2fI/spnnqkonFicox6S+UN0xkoA9S50OQzZ8vsFDFKBk -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:47 2026 by rpki-client