This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/0UGDI8RA4ikQpQTFcofCBOI7pok.roa File: 0UGDI8RA4ikQpQTFcofCBOI7pok.roa (raw, json) Hash identifier: 0Yi/SCqGm10A/qaehmQPolk2SyxaZrDlQqK63HLj7qA= Subject key identifier: D1:41:83:23:C4:40:E2:29:10:A5:04:C5:72:87:C2:04:E2:3B:A6:89 Certificate issuer: /CN=b504bcceb9c363f13e3adaa4c0fa52780f064684 Certificate serial: 019B7C12C6AA28C2541F47F005B5E5C4C3D3 Authority key identifier: B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/0UGDI8RA4ikQpQTFcofCBOI7pok.roa Signing time: Fri 02 Jan 2026 00:19:23 +0000 ROA not before: Fri 02 Jan 2026 00:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213216 IP address blocks: 194.61.0.0/24 maxlen: 32 2a13:7fc0:4201::/48 maxlen: 48 2a13:7fc0:a42a::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 21:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:c6:aa:28:c2:54:1f:47:f0:05:b5:e5:c4:c3:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b504bcceb9c363f13e3adaa4c0fa52780f064684 Validity Not Before: Jan 2 00:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1418323c440e22910a504c57287c204e23ba689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d2:f4:05:c4:e4:08:9f:64:f4:f1:70:23:22: 4a:df:a1:35:6a:a9:44:75:bf:67:61:79:6a:44:81: 59:d8:a9:75:a8:d3:1f:25:63:8e:72:f7:bd:28:d2: 5c:4e:20:ae:6c:fc:f4:ee:e3:20:a4:99:a8:cb:06: 50:2c:0f:c9:3c:21:8e:8a:c5:11:ff:73:8b:b4:25: d0:c7:ac:84:9d:96:15:e4:54:98:db:5f:41:89:89: 57:d5:4e:44:19:05:e2:97:94:ae:41:e9:f0:a1:45: d9:36:cb:a5:1d:90:e7:7c:0d:bf:64:12:89:1d:58: b3:f8:55:8a:0c:57:03:db:51:ee:9f:f2:72:47:00: 5d:27:05:e7:0e:a5:b8:11:2e:ec:ce:94:2d:fc:b7: 8c:51:64:5a:56:84:92:10:6e:f5:cc:0a:3c:18:56: f2:da:55:9f:e8:4e:95:f4:d2:1f:a8:f6:25:57:f2: d3:42:53:15:93:9a:2c:70:fb:17:cc:69:1f:bf:e7: 61:92:ee:35:4e:83:ab:f7:ca:eb:c4:83:8c:92:35: 4c:2f:03:40:4c:f8:91:25:ab:b0:a9:86:35:8d:89: 1f:96:74:7c:49:5b:75:22:f7:2b:e4:0f:92:e2:12: 75:f1:81:aa:18:53:c1:b9:24:f2:35:68:1e:c3:37: 27:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:41:83:23:C4:40:E2:29:10:A5:04:C5:72:87:C2:04:E2:3B:A6:89 X509v3 Authority Key Identifier: keyid:B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/0UGDI8RA4ikQpQTFcofCBOI7pok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.61.0.0/24 IPv6: 2a13:7fc0:4201::/48 2a13:7fc0:a42a::/48 Signature Algorithm: sha256WithRSAEncryption 54:74:52:6b:46:fa:72:ec:17:0c:6b:02:35:d1:24:5d:e3:af: d6:87:21:6f:cf:ff:4e:db:2d:8a:fa:e4:52:b2:50:64:e6:bf: 14:e9:ed:f7:b0:2a:06:56:4f:39:ac:5f:22:2c:5a:29:71:ed: 60:fb:ab:31:db:85:72:9f:f7:92:50:c2:00:fb:cc:36:39:6d: e2:d1:4f:4b:35:b8:1a:ba:85:41:76:82:aa:bd:2d:ce:4b:ba: fa:1d:70:07:86:45:67:78:d0:e5:bb:db:4d:e2:43:b3:64:26: cc:d8:dc:e0:d0:f3:d3:22:99:58:69:ba:7e:c5:a8:de:70:93: fa:8b:97:41:91:df:61:50:1a:5c:28:68:ec:f3:21:76:9c:19: 8a:16:94:74:88:d2:3c:72:9c:7a:16:0c:ad:28:03:97:3f:d1: 83:e1:6e:18:e6:93:4a:ab:7d:1b:e5:ae:19:73:3e:6a:3f:9c: 7a:0f:60:14:59:a2:47:45:9d:76:bf:ad:9e:b2:5e:63:19:25: f3:59:30:6f:a1:45:35:f4:33:52:a0:f1:7d:f0:02:c9:83:1b: 40:27:bd:ee:d9:fe:d7:01:6d:7d:29:4e:b3:19:8d:4d:9a:07: d6:04:04:ae:d3:d6:56:82:c0:3a:62:0a:6f:e7:5d:b0:f2:3d: 84:fa:26:12 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt8EsaqKMJUH0fwBbXlxMPTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MDRiY2NlYjljMzYzZjEzZTNhZGFhNGMwZmE1Mjc4MGYw NjQ2ODQwHhcNMjYwMTAyMDAxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTQxODMyM2M0NDBlMjI5MTBhNTA0YzU3Mjg3YzIwNGUyM2JhNjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdL0BcTkCJ9k9PFwIyJK36E1aqlE db9nYXlqRIFZ2Kl1qNMfJWOOcve9KNJcTiCubPz07uMgpJmoywZQLA/JPCGOisUR /3OLtCXQx6yEnZYV5FSY219BiYlX1U5EGQXil5SuQenwoUXZNsulHZDnfA2/ZBKJ HViz+FWKDFcD21Hun/JyRwBdJwXnDqW4ES7szpQt/LeMUWRaVoSSEG71zAo8GFby 2lWf6E6V9NIfqPYlV/LTQlMVk5oscPsXzGkfv+dhku41ToOr98rrxIOMkjVMLwNA TPiRJauwqYY1jYkflnR8SVt1Ivcr5A+S4hJ18YGqGFPBuSTyNWgewzcnFQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFNFBgyPEQOIpEKUExXKHwgTiO6aJMB8GA1UdIwQY MBaAFLUEvM65w2PxPjrapMD6UngPBkaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFFTOHpybkRZX0UtT3Rxa3dQcFNlQThHUm9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xZDNjZGMtZDA0Yi00YWRiLWIwNjkt MmEzNTFhYjNiOGY2LzEvMFVHREk4UkE0aWtRcFFURmNvZkNCT0k3cG9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8xZDNjZGMtZDA0Yi00YWRiLWIwNjktMmEzNTFhYjNiOGY2 LzEvdFFTOHpybkRZX0UtT3Rxa3dQcFNlQThHUm9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAwj0AMBgE AgACMBIDBwAqE3/AQgEDBwAqE3/ApCowDQYJKoZIhvcNAQELBQADggEBAFR0UmtG +nLsFwxrAjXRJF3jr9aHIW/P/07bLYr65FKyUGTmvxTp7fewKgZWTzmsXyIsWilx 7WD7qzHbhXKf95JQwgD7zDY5beLRT0s1uBq6hUF2gqq9Lc5LuvodcAeGRWd40OW7 203iQ7NkJszY3ODQ89MimVhpun7FqN5wk/qLl0GR32FQGlwoaOzzIXacGYoWlHSI 0jxynHoWDK0oA5c/0YPhbhjmk0qrfRvlrhlzPmo/nHoPYBRZokdFnXa/rZ6yXmMZ JfNZMG+hRTX0M1Kg8X3wAsmDG0Anve7Z/tcBbX0pTrMZjU2aB9YEBK7T1laCwDpi Cm/nXbDyPYT6JhI= -----END CERTIFICATE-----Generated at Wed Jan 7 07:08:34 2026 by rpki-client