This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/uDoJkgFguikcxRpI0Sh5smoTvbo.roa File: uDoJkgFguikcxRpI0Sh5smoTvbo.roa (raw, json) Hash identifier: fSPjqDFCQlE12J56viSWxC0b9IeSny9NSS4QGpXzPsc= Subject key identifier: B8:3A:09:92:01:60:BA:29:1C:C5:1A:48:D1:28:79:B2:6A:13:BD:BA Certificate issuer: /CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752 Certificate serial: 019B7AC7D5E40AEB373D2E78E79806B2DB8D Authority key identifier: BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/uDoJkgFguikcxRpI0Sh5smoTvbo.roa Signing time: Thu 01 Jan 2026 18:17:55 +0000 ROA not before: Thu 01 Jan 2026 18:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24634 IP address blocks: 80.89.176.0/20 maxlen: 24 194.26.4.0/22 maxlen: 24 2a06:b940::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d5:e4:0a:eb:37:3d:2e:78:e7:98:06:b2:db:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752 Validity Not Before: Jan 1 18:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b83a09920160ba291cc51a48d12879b26a13bdba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7f:31:3b:52:a3:cb:26:49:6a:ff:ee:44:cd: 0f:f1:af:99:1c:12:45:56:91:73:73:40:3f:82:25: b5:40:eb:59:c1:62:5e:9a:10:c8:af:a4:6e:69:07: 8d:8d:cf:40:79:ad:8b:b5:7e:df:fc:ad:bf:11:a2: f2:3d:94:db:d5:d1:af:7e:2f:bb:67:16:5f:61:a7: 8c:b1:41:49:d8:c3:bc:27:88:f5:95:99:04:f1:d1: e5:76:92:ff:32:ea:4b:32:df:0c:dd:20:76:df:69: 9f:f6:67:c1:58:8b:6b:ac:8e:06:29:ac:3c:93:d2: 2b:19:1e:26:4b:a9:70:42:2a:21:24:3f:b4:74:7b: 86:f0:cc:e0:67:cb:2d:fa:d0:fc:f1:dc:d6:95:54: 3e:b4:3d:ed:f5:08:ee:b9:5f:5e:99:9c:4c:5c:27: 58:df:2d:32:f1:31:99:89:d9:f4:f0:fb:db:58:22: f3:d8:72:0a:dd:24:96:b7:c3:fa:1c:d4:b8:14:2d: 91:7e:51:42:9e:82:09:2e:81:fc:e0:9e:cf:ac:ce: fd:ff:81:4a:c2:b7:44:69:fc:9d:aa:c6:6c:de:6d: e2:9b:da:cb:3b:5f:60:26:0d:4c:e8:63:3d:9e:c4: 45:8c:67:f0:40:fb:34:6a:86:25:8c:e0:8b:a8:2e: 2a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3A:09:92:01:60:BA:29:1C:C5:1A:48:D1:28:79:B2:6A:13:BD:BA X509v3 Authority Key Identifier: keyid:BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/uDoJkgFguikcxRpI0Sh5smoTvbo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.89.176.0/20 194.26.4.0/22 IPv6: 2a06:b940::/29 Signature Algorithm: sha256WithRSAEncryption 44:57:b4:76:b3:57:6e:53:6a:5a:ad:29:60:01:36:34:4d:3a: 3c:50:77:08:93:13:48:8d:15:5a:92:bd:12:9d:ef:5a:e1:ce: ce:f5:91:dc:1e:65:4e:d2:91:48:b6:2a:3f:d8:94:8c:72:c4: 05:c7:69:21:20:2b:0f:a5:4e:14:97:aa:ff:30:9f:b9:41:a0: 91:34:06:ef:2a:33:c8:76:94:dd:7b:40:07:fb:8f:22:45:51: 10:6d:06:2c:3c:04:74:bb:a0:ed:76:e4:5f:93:eb:03:72:0e: b9:68:ba:e2:89:a4:3c:29:bc:3a:e6:a8:7d:49:4a:d2:b4:62: a0:46:37:72:82:15:5f:bb:6a:bb:bf:a2:43:a2:4c:f9:a9:1d: 62:19:cd:7c:8c:58:14:e2:c8:3d:d6:30:62:8b:63:92:12:ba: 27:d3:19:fd:df:4d:36:2e:57:50:bc:aa:ec:35:39:d6:d8:8a: 3d:f5:00:d5:f2:47:04:a6:7e:bf:ae:95:e5:54:ad:ea:83:d7: 4d:3e:b3:c2:b8:c8:31:5d:95:3f:17:77:6d:e0:06:99:11:d9: 6a:ca:28:b9:a1:c5:88:24:e0:14:6b:83:c7:45:f5:eb:b6:62: 54:ed:76:46:92:f0:b7:a6:bd:ce:c1:50:16:64:3b:e1:d4:33: 13:bf:43:6d -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6x9XkCus3PS5455gGstuNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNGU2ZWRkMjZlZjFiMTZkODQ4ZTk4MTMwZTZmYzQ0NTBi MzI3NTIwHhcNMjYwMTAxMTgxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODNhMDk5MjAxNjBiYTI5MWNjNTFhNDhkMTI4NzliMjZhMTNiZGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH8xO1KjyyZJav/uRM0P8a+ZHBJF VpFzc0A/giW1QOtZwWJemhDIr6RuaQeNjc9Aea2LtX7f/K2/EaLyPZTb1dGvfi+7 ZxZfYaeMsUFJ2MO8J4j1lZkE8dHldpL/MupLMt8M3SB232mf9mfBWItrrI4GKaw8 k9IrGR4mS6lwQiohJD+0dHuG8MzgZ8st+tD88dzWlVQ+tD3t9QjuuV9emZxMXCdY 3y0y8TGZidn08PvbWCLz2HIK3SSWt8P6HNS4FC2RflFCnoIJLoH84J7PrM79/4FK wrdEafydqsZs3m3im9rLO19gJg1M6GM9nsRFjGfwQPs0aoYljOCLqC4qcQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFLg6CZIBYLopHMUaSNEoebJqE726MB8GA1UdIwQY MBaAFL1Obt0m7xsW2EjpgTDm/ERQsydSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlU1dTNTYnZHeGJZU09tQk1PYjhSRkN6SjFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9hY2UzNzMtYjgxYi00MDBjLTg0NWMt OTYyOGY1MjY2NTQyLzEvdURvSmtnRmd1aWtjeFJwSTBTaDVzbW9UdmJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9hY2UzNzMtYjgxYi00MDBjLTg0NWMtOTYyOGY1MjY2NTQy LzEvdlU1dTNTYnZHeGJZU09tQk1PYjhSRkN6SjFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUFmwAwQC whoEMA0EAgACMAcDBQMqBrlAMA0GCSqGSIb3DQEBCwUAA4IBAQBEV7R2s1duU2pa rSlgATY0TTo8UHcIkxNIjRVakr0Sne9a4c7O9ZHcHmVO0pFItio/2JSMcsQFx2kh ICsPpU4Ul6r/MJ+5QaCRNAbvKjPIdpTde0AH+48iRVEQbQYsPAR0u6DtduRfk+sD cg65aLriiaQ8Kbw65qh9SUrStGKgRjdyghVfu2q7v6JDokz5qR1iGc18jFgU4sg9 1jBii2OSEron0xn93002LldQvKrsNTnW2Io99QDV8kcEpn6/rpXlVK3qg9dNPrPC uMgxXZU/F3dt4AaZEdlqyii5ocWIJOAUa4PHRfXrtmJU7XZGkvC3pr3OwVAWZDvh 1DMTv0Nt -----END CERTIFICATE-----Generated at Mon Jan 26 04:51:33 2026 by rpki-client