This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/Udssf4fE6o3QNpke-lB6PuA0Uo0.roa File: Udssf4fE6o3QNpke-lB6PuA0Uo0.roa (raw, json) Hash identifier: 9+ibfBkyOgj0hAuo5PA4Hd1TB41jIqZV5+PkUc7DWA8= Subject key identifier: 51:DB:2C:7F:87:C4:EA:8D:D0:36:99:1E:FA:50:7A:3E:E0:34:52:8D Certificate issuer: /CN=247405e9cee39d71944d5e3149eb01b61f9adb1e Certificate serial: 019B79ECFD7A5FCD0C4F95266F43EEB9D469 Authority key identifier: 24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/Udssf4fE6o3QNpke-lB6PuA0Uo0.roa Signing time: Thu 01 Jan 2026 14:18:53 +0000 ROA not before: Thu 01 Jan 2026 14:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 185.194.100.0/24 maxlen: 24 185.194.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:fd:7a:5f:cd:0c:4f:95:26:6f:43:ee:b9:d4:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=247405e9cee39d71944d5e3149eb01b61f9adb1e Validity Not Before: Jan 1 14:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51db2c7f87c4ea8dd036991efa507a3ee034528d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:96:92:31:2a:9b:29:4c:1e:0d:17:07:c9:6b: 5d:e8:dd:38:09:98:fb:a4:a9:50:8e:f7:9b:88:1c: 85:3d:98:a1:0a:be:41:f2:4c:76:f3:de:83:77:f8: d8:4b:47:c8:c9:82:ee:82:e2:d8:62:82:54:3a:b1: 8f:57:8f:28:e6:dc:f7:45:7e:67:8c:fe:6f:e4:4e: a6:2b:33:3e:50:92:58:29:fc:d8:14:8d:48:62:a1: 17:f8:88:0c:2a:4e:08:f9:a9:91:c6:da:08:bc:2c: 68:b0:20:78:bf:88:41:43:3d:5d:4d:b7:5e:59:0e: 72:19:28:c0:ae:05:78:31:dd:0b:f4:c7:4f:b6:12: 34:b1:7e:f2:8b:96:ec:1e:68:fc:53:5d:3c:cb:01: 49:56:f9:07:17:b5:bd:2c:44:23:6c:3d:dc:ee:8f: 18:59:38:ec:8c:f5:c0:56:7b:43:00:b3:88:30:73: 3e:9e:bc:06:70:bc:33:e9:d6:fd:bd:f3:56:4c:35: 92:42:b8:db:12:6c:65:04:ca:c7:fa:5d:29:61:f0: dd:17:e1:95:36:aa:aa:f3:84:cc:aa:89:87:b2:00: 46:f6:f3:ae:14:dd:dd:c5:41:c8:47:16:1b:1c:6d: 0d:4b:98:02:c6:4b:4a:cf:ff:d4:7b:76:20:7d:58: c1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DB:2C:7F:87:C4:EA:8D:D0:36:99:1E:FA:50:7A:3E:E0:34:52:8D X509v3 Authority Key Identifier: keyid:24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/Udssf4fE6o3QNpke-lB6PuA0Uo0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.194.100.0/23 Signature Algorithm: sha256WithRSAEncryption cf:ae:ba:6a:e3:70:c4:ff:c2:f9:39:53:38:bc:fd:c3:5e:e1: 7b:cb:5a:6f:fa:f5:d9:f9:ec:6d:65:71:13:c9:e9:42:ea:1b: a7:7b:df:8b:b8:f3:28:a5:cc:69:70:5e:b6:80:a3:29:83:82: 27:51:58:4b:e5:b0:5e:0c:ac:79:7c:74:db:82:0b:1d:dc:02: b5:3c:55:0c:10:22:cf:58:ed:18:d6:5c:1e:ef:6d:6a:cf:14: 92:76:c1:51:6d:57:c5:2d:76:5e:2b:74:75:74:58:64:ce:4a: b5:3f:d8:5e:d0:be:a2:0d:64:82:d4:7e:68:28:b8:ee:c3:34: 3a:47:50:fb:8a:cf:b7:8a:e2:27:fb:6a:e7:9c:b7:f5:22:89: 68:07:d3:78:16:6b:07:a3:7b:b6:cf:75:ec:ff:a1:ea:fb:a9: c8:a4:8e:5a:57:66:16:d8:2b:b1:ef:0e:12:24:01:e9:65:83: 24:d2:2d:4c:ff:43:36:d1:b3:54:e4:a7:25:40:dc:68:2f:fb: 94:71:0a:21:95:82:03:d5:bf:96:f0:ec:5d:be:9f:06:2d:ea: d7:e5:ee:cf:59:d4:94:f3:ae:c0:9b:ea:47:5f:a6:ab:13:d0: df:b1:ed:b5:c4:33:de:df:36:a0:79:af:bc:a8:98:f5:c7:37: 7c:3d:20:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57P16X80MT5Umb0PuudRpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NzQwNWU5Y2VlMzlkNzE5NDRkNWUzMTQ5ZWIwMWI2MWY5 YWRiMWUwHhcNMjYwMTAxMTQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWRiMmM3Zjg3YzRlYThkZDAzNjk5MWVmYTUwN2EzZWUwMzQ1MjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJaSMSqbKUweDRcHyWtd6N04CZj7 pKlQjvebiByFPZihCr5B8kx2896Dd/jYS0fIyYLuguLYYoJUOrGPV48o5tz3RX5n jP5v5E6mKzM+UJJYKfzYFI1IYqEX+IgMKk4I+amRxtoIvCxosCB4v4hBQz1dTbde WQ5yGSjArgV4Md0L9MdPthI0sX7yi5bsHmj8U108ywFJVvkHF7W9LEQjbD3c7o8Y WTjsjPXAVntDALOIMHM+nrwGcLwz6db9vfNWTDWSQrjbEmxlBMrH+l0pYfDdF+GV Nqqq84TMqomHsgBG9vOuFN3dxUHIRxYbHG0NS5gCxktKz//Ue3YgfVjBmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFHbLH+HxOqN0DaZHvpQej7gNFKNMB8GA1UdIwQY MBaAFCR0BenO451xlE1eMUnrAbYfmtseMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkhRRjZjN2puWEdVVFY0eFNlc0J0aC1hMng0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC85YTNhOTgtZDY3MC00MzQzLTkyMDYt NDdiYmFjYTA3OGZmLzEvVWRzc2Y0ZkU2bzNRTnBrZS1sQjZQdUEwVW8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC85YTNhOTgtZDY3MC00MzQzLTkyMDYtNDdiYmFjYTA3OGZm LzEvSkhRRjZjN2puWEdVVFY0eFNlc0J0aC1hMng0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBucJkMA0G CSqGSIb3DQEBCwUAA4IBAQDPrrpq43DE/8L5OVM4vP3DXuF7y1pv+vXZ+extZXET yelC6hune9+LuPMopcxpcF62gKMpg4InUVhL5bBeDKx5fHTbggsd3AK1PFUMECLP WO0Y1lwe721qzxSSdsFRbVfFLXZeK3R1dFhkzkq1P9he0L6iDWSC1H5oKLjuwzQ6 R1D7is+3iuIn+2rnnLf1IoloB9N4FmsHo3u2z3Xs/6Hq+6nIpI5aV2YW2Cux7w4S JAHpZYMk0i1M/0M20bNU5KclQNxoL/uUcQohlYID1b+W8Oxdvp8GLerX5e7PWdSU 867Am+pHX6arE9Dfse21xDPe3zagea+8qJj1xzd8PSA0 -----END CERTIFICATE-----Generated at Sun Jan 25 16:40:25 2026 by rpki-client