This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/uDo1JMrF3KNScD7ByahXY9Q0hOM.roa File: uDo1JMrF3KNScD7ByahXY9Q0hOM.roa (raw, json) Hash identifier: 2A9Xtk9walDaSopHVstfJToBQgQNhRzATAnAC7xPnSI= Subject key identifier: B8:3A:35:24:CA:C5:DC:A3:52:70:3E:C1:C9:A8:57:63:D4:34:84:E3 Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1 Certificate serial: 019B7AC8111E09FFB4BAF788571FA4D75788 Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/uDo1JMrF3KNScD7ByahXY9Q0hOM.roa Signing time: Thu 01 Jan 2026 18:18:10 +0000 ROA not before: Thu 01 Jan 2026 18:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35916 IP address blocks: 178.236.228.0/22 maxlen: 22 178.236.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:11:1e:09:ff:b4:ba:f7:88:57:1f:a4:d7:57:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1 Validity Not Before: Jan 1 18:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b83a3524cac5dca352703ec1c9a85763d43484e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0f:8a:62:33:db:8e:2a:6f:2d:47:0c:07:20: 53:0b:89:2f:af:f8:bc:12:39:16:5b:16:bc:e3:77: 59:c0:e7:e2:c4:86:24:45:f0:67:b0:51:12:79:a9: a8:3b:b9:77:02:de:91:bb:01:fe:ee:0a:c3:34:8a: 70:44:a3:15:54:5b:4c:1c:2f:0a:38:77:32:9e:ad: 26:26:ad:ec:a8:00:17:9b:c3:79:43:c7:76:ee:09: 7f:7d:8f:d3:a4:21:f2:5d:94:20:9e:9a:9f:67:e7: 0b:0a:03:3f:b1:47:33:90:fb:d0:20:21:c6:a2:51: ba:80:6f:23:49:cf:0e:f8:49:05:55:6b:e9:02:04: fa:99:aa:36:e4:f0:54:6e:47:a8:a3:9c:6a:21:b8: c9:15:ed:23:78:f9:2a:b6:5f:58:04:0c:a7:6c:8c: 7a:19:8f:e1:9b:f7:13:32:a6:cc:fd:a5:65:06:d9: 5f:dd:99:c0:f7:5a:5b:a3:a5:a2:48:b3:a1:7c:55: ac:b1:a8:48:b6:34:14:2e:cf:2c:83:18:49:5f:6c: a4:4e:c7:d3:95:ba:33:ba:5c:25:a3:24:6c:e4:dc: 8b:65:17:64:23:e9:bf:b5:32:6f:77:34:26:d2:a6: 80:cb:2f:5d:0e:d1:bb:9f:7b:3a:fa:a5:04:f7:0a: 51:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3A:35:24:CA:C5:DC:A3:52:70:3E:C1:C9:A8:57:63:D4:34:84:E3 X509v3 Authority Key Identifier: keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/uDo1JMrF3KNScD7ByahXY9Q0hOM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.236.228.0/22 Signature Algorithm: sha256WithRSAEncryption 03:7f:07:5c:d7:e7:e4:07:37:10:3a:11:d3:85:57:18:28:69: 21:27:ce:2a:e4:31:19:9f:26:75:ef:de:a5:11:f0:9e:d9:82: 0d:b2:cb:29:f6:64:47:66:7e:1e:db:e2:aa:e1:03:6b:a7:72: 28:0a:bb:e3:98:44:2a:5a:25:65:47:68:36:a2:05:f9:78:2c: a7:ff:2b:fa:ba:02:e4:0e:50:66:1a:d5:5a:03:95:26:81:99: 2d:6a:a1:d2:2f:88:62:9c:1a:07:01:b7:d9:f4:a9:f4:d6:b7: f3:6d:fd:ac:b0:c9:cc:08:b1:50:f3:d0:07:5a:74:bc:22:4f: 05:61:d1:a3:bd:e1:44:12:8a:67:9d:d5:91:0d:25:48:67:8e: 74:5f:9c:14:2f:5d:63:ef:86:40:5a:c0:15:59:06:1a:fb:df: 1d:ff:70:93:a6:cf:b6:3a:5f:54:71:96:32:9d:e2:a4:9b:ff: c8:b3:89:cc:a6:86:0e:25:e2:dd:01:7f:0e:82:e1:0c:14:0b: 65:5d:b2:84:9e:5f:ca:b5:fd:b4:0d:24:87:7e:88:e0:ed:5b: 4d:e9:e7:d0:50:e6:73:a5:e3:9e:e8:b7:36:be:e6:79:ee:4c: e4:1c:35:fa:9a:81:06:8a:e9:bf:dc:c4:b5:72:ee:f5:18:7f: f4:e3:51:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yBEeCf+0uveIVx+k11eIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3OTRhZmRiNWU2YTE4ODU3ODA5MjBhNTRmZmE4MjQwOGVh ODViYTEwHhcNMjYwMTAxMTgxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODNhMzUyNGNhYzVkY2EzNTI3MDNlYzFjOWE4NTc2M2Q0MzQ4NGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg+KYjPbjipvLUcMByBTC4kvr/i8 EjkWWxa843dZwOfixIYkRfBnsFESeamoO7l3At6RuwH+7grDNIpwRKMVVFtMHC8K OHcynq0mJq3sqAAXm8N5Q8d27gl/fY/TpCHyXZQgnpqfZ+cLCgM/sUczkPvQICHG olG6gG8jSc8O+EkFVWvpAgT6mao25PBUbkeoo5xqIbjJFe0jePkqtl9YBAynbIx6 GY/hm/cTMqbM/aVlBtlf3ZnA91pbo6WiSLOhfFWssahItjQULs8sgxhJX2ykTsfT lbozulwloyRs5NyLZRdkI+m/tTJvdzQm0qaAyy9dDtG7n3s6+qUE9wpRDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLg6NSTKxdyjUnA+wcmoV2PUNITjMB8GA1UdIwQY MBaAFFeUr9teahiFeAkgpU/6gkCOqFuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjVTdjIxNXFHSVY0Q1NDbFRfcUNRSTZvVzZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kZGNlNGQtOTkxMi00ODdkLWI1NWQt NDdkODJhNDFhOGYzLzEvdURvMUpNckYzS05TY0Q3QnlhaFhZOVEwaE9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9kZGNlNGQtOTkxMi00ODdkLWI1NWQtNDdkODJhNDFhOGYz LzEvVjVTdjIxNXFHSVY0Q1NDbFRfcUNRSTZvVzZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsuzkMA0G CSqGSIb3DQEBCwUAA4IBAQADfwdc1+fkBzcQOhHThVcYKGkhJ84q5DEZnyZ1796l EfCe2YINsssp9mRHZn4e2+Kq4QNrp3IoCrvjmEQqWiVlR2g2ogX5eCyn/yv6ugLk DlBmGtVaA5UmgZktaqHSL4hinBoHAbfZ9Kn01rfzbf2ssMnMCLFQ89AHWnS8Ik8F YdGjveFEEopnndWRDSVIZ450X5wUL11j74ZAWsAVWQYa+98d/3CTps+2Ol9UcZYy neKkm//Is4nMpoYOJeLdAX8OguEMFAtlXbKEnl/Ktf20DSSHfojg7VtN6efQUOZz peOe6Lc2vuZ57kzkHDX6moEGium/3MS1cu71GH/041E5 -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:42 2026 by rpki-client