This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/1-TUndm-bg_LtuyUNPnFoI5RGoqQ.roa File: 1-TUndm-bg_LtuyUNPnFoI5RGoqQ.roa (raw, json) Hash identifier: OKFwgGsCT9mJISSPXp9yYNPCYXtLlombZGntQRkGocU= Subject key identifier: F9:35:27:76:6F:9B:83:F2:ED:BB:25:0D:3E:71:68:23:94:46:A2:A4 Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88 Certificate serial: 019B89347F97D631A13472ECD4BCA651D691 Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/1-TUndm-bg_LtuyUNPnFoI5RGoqQ.roa Signing time: Sun 04 Jan 2026 13:31:17 +0000 ROA not before: Sun 04 Jan 2026 13:31:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214171 IP address blocks: 94.184.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:89:34:7f:97:d6:31:a1:34:72:ec:d4:bc:a6:51:d6:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88 Validity Not Before: Jan 4 13:31:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f93527766f9b83f2edbb250d3e7168239446a2a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:de:02:c1:fd:1c:20:20:6e:ff:14:0d:17:72: dd:0a:97:b7:e0:c2:16:8f:b4:bf:d9:d5:f2:6b:86: 10:53:5a:23:9c:1a:99:38:c9:05:7a:79:9b:c6:09: 32:4e:a7:04:00:7b:1e:18:be:68:8d:05:d8:9e:e8: 57:56:d2:1d:9f:11:1a:fa:cb:f8:19:34:ca:4a:90: 6b:b8:f0:c5:10:74:14:b4:95:36:33:a4:70:03:9a: 6e:27:76:b8:a3:6d:7d:af:7f:f1:f9:00:1e:c5:0a: 3d:5c:7d:a9:26:a7:61:38:f9:29:44:c8:94:ef:e3: 59:1c:e3:c0:9a:20:ad:bb:5b:dd:5a:8a:cf:81:57: 15:72:86:c2:2a:26:df:0b:34:43:8c:18:eb:34:bf: 87:8b:81:d5:00:78:cf:1e:87:13:56:50:01:73:68: 98:0a:2e:9e:14:b7:45:f2:fd:41:5b:45:11:37:ce: e1:9d:e1:b8:06:b9:b0:cc:de:49:25:7c:00:ff:9f: 24:d7:a0:27:24:dd:20:67:35:97:02:54:9e:38:8c: c4:e7:da:e4:aa:af:97:5f:73:9b:a2:4b:8c:77:ec: 98:0b:72:0f:f4:42:b4:82:88:87:1c:d9:de:3e:f5: 71:2d:4e:fe:f4:a6:e8:20:61:c0:52:d9:dd:18:27: 6f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:35:27:76:6F:9B:83:F2:ED:BB:25:0D:3E:71:68:23:94:46:A2:A4 X509v3 Authority Key Identifier: keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/1-TUndm-bg_LtuyUNPnFoI5RGoqQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.184.21.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:68:55:c5:a3:ba:9d:a0:8d:2b:5f:f2:cb:ad:7a:d4:27:e1: a2:0a:a5:43:ee:43:88:94:ca:cb:44:33:d1:5a:2d:2e:87:ae: af:56:d1:fe:cf:3d:cc:57:4f:1a:af:c1:30:f3:11:cd:b0:f5: 04:f0:0f:02:b7:df:7e:e5:a0:d0:b7:0c:27:a4:28:06:7a:19: 9c:03:b5:f0:30:26:de:4d:2d:6b:79:58:15:f4:dd:c5:7a:e8: 86:a7:07:63:09:f3:2d:9d:c7:da:e1:9f:cc:d5:05:86:6e:15: 47:cf:be:b7:df:25:01:0a:dc:a1:f7:29:aa:b1:fb:bf:5a:ee: 83:e7:5a:53:b2:da:ed:67:3e:c9:0a:79:6c:c4:3c:51:06:14: 78:e5:e0:bf:19:45:b0:67:fd:be:3e:f8:ab:12:c4:ee:d7:75: 0f:47:4b:a4:ec:67:46:bd:c4:ce:43:3c:e9:35:53:62:a5:fa: 7e:b7:8e:20:ec:47:e7:b6:a5:ba:52:35:d7:79:3e:ab:e6:f4: 23:29:49:b1:51:09:09:db:d0:da:19:b4:c0:f0:dd:fd:86:7c: 9e:6e:78:a6:c1:7a:ec:ea:7d:96:9d:01:b6:bd:68:10:7a:60: 28:33:36:d0:f6:ee:c1:36:6a:b8:72:94:f3:21:50:87:81:bc: 78:43:7d:91 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZuJNH+X1jGhNHLs1LymUdaRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3 YjBhODgwHhcNMjYwMTA0MTMzMTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTM1Mjc3NjZmOWI4M2YyZWRiYjI1MGQzZTcxNjgyMzk0NDZhMmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp94Cwf0cICBu/xQNF3LdCpe34MIW j7S/2dXya4YQU1ojnBqZOMkFenmbxgkyTqcEAHseGL5ojQXYnuhXVtIdnxEa+sv4 GTTKSpBruPDFEHQUtJU2M6RwA5puJ3a4o219r3/x+QAexQo9XH2pJqdhOPkpRMiU 7+NZHOPAmiCtu1vdWorPgVcVcobCKibfCzRDjBjrNL+Hi4HVAHjPHocTVlABc2iY Ci6eFLdF8v1BW0URN87hneG4BrmwzN5JJXwA/58k16AnJN0gZzWXAlSeOIzE59rk qq+XX3ObokuMd+yYC3IP9EK0goiHHNnePvVxLU7+9KboIGHAUtndGCdvIwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPk1J3Zvm4Py7bslDT5xaCOURqKkMB8GA1UdIwQY MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt ZGE2MTUzODg1ZjNiLzEvMS1UVW5kbS1iZ19MdHV5VU5QbkZvSTVSR29xUS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODQvNGYxYjI3LTMyNmEtNDY3OS1hNjRiLWRhNjE1Mzg4NWYz Yi8xL1dEMTJCUkFYMEstcEZmejdlUW9BOUdaN0NvZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF64FTAN BgkqhkiG9w0BAQsFAAOCAQEADmhVxaO6naCNK1/yy6161CfhogqlQ+5DiJTKy0Qz 0VotLoeur1bR/s89zFdPGq/BMPMRzbD1BPAPArfffuWg0LcMJ6QoBnoZnAO18DAm 3k0ta3lYFfTdxXrohqcHYwnzLZ3H2uGfzNUFhm4VR8++t98lAQrcofcpqrH7v1ru g+daU7La7Wc+yQp5bMQ8UQYUeOXgvxlFsGf9vj74qxLE7td1D0dLpOxnRr3EzkM8 6TVTYqX6freOIOxH57alulI113k+q+b0IylJsVEJCdvQ2hm0wPDd/YZ8nm54psF6 7Op9lp0Btr1oEHpgKDM20PbuwTZquHKU8yFQh4G8eEN9kQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:14 2026 by rpki-client