This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/UDD4U9oh5woq1sTFQu5LzTFUSVI.roa File: UDD4U9oh5woq1sTFQu5LzTFUSVI.roa (raw, json) Hash identifier: gBskSlesmYDIcJaF0F0FSqoN+kHk6oOKBdSTOSK9ftw= Subject key identifier: 50:30:F8:53:DA:21:E7:0A:2A:D6:C4:C5:42:EE:4B:CD:31:54:49:52 Certificate issuer: /CN=56e8521e80f2f071a31385bcdfbc31a621c68f94 Certificate serial: 019B7834C48B43625AA70102576601931363 Authority key identifier: 56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/UDD4U9oh5woq1sTFQu5LzTFUSVI.roa Signing time: Thu 01 Jan 2026 06:18:02 +0000 ROA not before: Thu 01 Jan 2026 06:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58095 IP address blocks: 37.252.16.0/24 maxlen: 24 37.252.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:c4:8b:43:62:5a:a7:01:02:57:66:01:93:13:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56e8521e80f2f071a31385bcdfbc31a621c68f94 Validity Not Before: Jan 1 06:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5030f853da21e70a2ad6c4c542ee4bcd31544952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3d:4b:bc:6b:bf:e2:fa:08:df:bd:fd:db:a5: ed:1e:d7:9b:74:fc:74:68:69:a2:56:01:02:9b:dc: 21:05:2b:b1:35:e2:48:19:bb:16:43:71:09:ce:fd: 01:12:f4:c2:c7:50:eb:24:22:b7:a2:3f:da:e9:c0: b3:d0:2b:de:ac:a9:af:0a:35:dd:d7:86:c6:1e:d1: 41:a6:17:a3:4f:b9:68:da:2e:73:60:b7:a3:f0:60: 45:f4:c2:c4:15:f2:67:f5:bd:ba:a7:d9:7d:63:13: 60:c8:da:6e:29:65:9b:7d:22:34:86:49:6a:d0:a0: 61:1c:4e:8d:18:7a:a2:a2:d3:29:08:25:58:ea:7f: 0e:00:15:d4:1d:bb:31:20:44:5c:c4:ae:f5:27:37: 8b:b6:46:c2:5d:ae:4f:34:64:9d:b2:41:33:84:04: 0b:aa:d8:71:09:ab:18:4a:ed:6f:99:35:a0:21:5a: 22:c8:c0:38:11:87:77:1a:ff:13:bb:a4:07:f0:07: ae:2c:de:76:54:5d:46:b1:81:a0:95:34:3e:8c:a0: f9:b4:03:d6:ce:c7:97:0a:92:66:2e:18:c6:f0:fe: 56:5e:7f:5e:fc:f5:4a:61:d1:53:d6:65:d8:cf:fd: 14:f7:eb:db:4c:70:fb:8c:f5:f5:a3:36:85:7f:fe: 87:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:30:F8:53:DA:21:E7:0A:2A:D6:C4:C5:42:EE:4B:CD:31:54:49:52 X509v3 Authority Key Identifier: keyid:56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/UDD4U9oh5woq1sTFQu5LzTFUSVI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.252.16.0/24 37.252.18.0/24 Signature Algorithm: sha256WithRSAEncryption 81:a6:3a:4e:bc:3c:44:80:e8:18:7e:d0:a3:86:07:95:42:d5: 8e:2a:89:9c:e4:e6:ee:13:ef:0e:d2:80:b7:27:d5:f0:8f:fe: 6a:b2:da:1d:3a:e9:a8:e8:44:4c:91:de:8e:06:68:d6:61:3d: 09:7f:16:aa:b3:5a:64:eb:b5:74:43:03:c5:c4:1d:38:06:54: 33:a3:ef:ba:e6:cd:cc:29:8b:f7:de:df:37:a7:ad:58:72:ac: 92:0c:08:54:86:8c:4f:4f:53:f9:4e:78:0c:80:a3:17:57:09: d8:47:5f:95:99:43:ed:0e:ca:f3:1d:8e:6e:12:2a:a2:db:cf: da:6c:60:de:1f:e0:61:7b:45:3a:64:c4:95:77:03:b6:e7:f6: d6:8e:c1:2b:25:ec:cd:3d:2e:17:e3:ae:ca:2e:a9:b9:4f:7a: 5a:2a:14:d8:0b:eb:a4:87:0f:d2:65:2a:1d:f6:c7:d4:57:54: 1e:d4:58:1a:f3:ec:b5:61:85:cb:de:34:5c:fd:2d:43:ab:78: a8:69:13:14:80:a0:49:5b:c6:c5:bc:f7:1a:c9:9d:2f:08:17: 27:04:2b:c0:6e:ba:48:fe:96:10:a2:d0:45:1d:47:15:fe:a9: b2:10:25:6d:b0:3d:77:c7:d7:7d:73:fb:c5:dc:98:ea:e4:8b: 86:07:ef:35 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NMSLQ2JapwECV2YBkxNjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ZTg1MjFlODBmMmYwNzFhMzEzODViY2RmYmMzMWE2MjFj NjhmOTQwHhcNMjYwMTAxMDYxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDMwZjg1M2RhMjFlNzBhMmFkNmM0YzU0MmVlNGJjZDMxNTQ0OTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D1LvGu/4voI373926XtHtebdPx0 aGmiVgECm9whBSuxNeJIGbsWQ3EJzv0BEvTCx1DrJCK3oj/a6cCz0CverKmvCjXd 14bGHtFBphejT7lo2i5zYLej8GBF9MLEFfJn9b26p9l9YxNgyNpuKWWbfSI0hklq 0KBhHE6NGHqiotMpCCVY6n8OABXUHbsxIERcxK71JzeLtkbCXa5PNGSdskEzhAQL qthxCasYSu1vmTWgIVoiyMA4EYd3Gv8Tu6QH8AeuLN52VF1GsYGglTQ+jKD5tAPW zseXCpJmLhjG8P5WXn9e/PVKYdFT1mXYz/0U9+vbTHD7jPX1ozaFf/6HkwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFAw+FPaIecKKtbExULuS80xVElSMB8GA1UdIwQY MBaAFFboUh6A8vBxoxOFvN+8MaYhxo+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnVoU0hvRHk4SEdqRTRXODM3d3hwaUhHajVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWYzOTktMGE4OS00OGNhLTk0NzMt MGRhMGYyYWQ0Njg4LzEvVURENFU5b2g1d29xMXNURlF1NUx6VEZVU1ZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWYzOTktMGE4OS00OGNhLTk0NzMtMGRhMGYyYWQ0Njg4 LzEvVnVoU0hvRHk4SEdqRTRXODM3d3hwaUhHajVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJfwQAwQA JfwSMA0GCSqGSIb3DQEBCwUAA4IBAQCBpjpOvDxEgOgYftCjhgeVQtWOKomc5Obu E+8O0oC3J9Xwj/5qstodOumo6ERMkd6OBmjWYT0Jfxaqs1pk67V0QwPFxB04BlQz o++65s3MKYv33t83p61YcqySDAhUhoxPT1P5TngMgKMXVwnYR1+VmUPtDsrzHY5u Eiqi28/abGDeH+Bhe0U6ZMSVdwO25/bWjsErJezNPS4X467KLqm5T3paKhTYC+uk hw/SZSod9sfUV1Qe1Fga8+y1YYXL3jRc/S1Dq3ioaRMUgKBJW8bFvPcayZ0vCBcn BCvAbrpI/pYQotBFHUcV/qmyECVtsD13x9d9c/vF3Jjq5IuGB+81 -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:44 2026 by rpki-client