This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/UdRtC8oWULapblUxKPZMiKoK7Fg.roa File: UdRtC8oWULapblUxKPZMiKoK7Fg.roa (raw, json) Hash identifier: NCRhs0KrgrczrslxIEqi2lQhD/o2DKDw/5BIUZhQTS4= Subject key identifier: 51:D4:6D:0B:CA:16:50:B6:A9:6E:55:31:28:F6:4C:88:AA:0A:EC:58 Certificate issuer: /CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad Certificate serial: 019B7F15F1A763964971B9EDEC04BB79BFE4 Authority key identifier: D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/UdRtC8oWULapblUxKPZMiKoK7Fg.roa Signing time: Fri 02 Jan 2026 14:21:43 +0000 ROA not before: Fri 02 Jan 2026 14:21:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44484 IP address blocks: 91.201.228.0/22 maxlen: 22 91.201.228.0/24 maxlen: 24 91.201.229.0/24 maxlen: 24 91.201.230.0/24 maxlen: 24 91.201.231.0/24 maxlen: 24 176.117.192.0/19 maxlen: 19 176.117.192.0/21 maxlen: 21 176.117.204.0/24 maxlen: 24 176.117.205.0/24 maxlen: 24 176.117.207.0/24 maxlen: 24 176.117.208.0/24 maxlen: 24 176.117.209.0/24 maxlen: 24 176.117.210.0/24 maxlen: 24 176.117.211.0/24 maxlen: 24 176.117.212.0/24 maxlen: 24 176.117.213.0/24 maxlen: 24 176.117.214.0/24 maxlen: 24 176.117.215.0/24 maxlen: 24 176.117.216.0/24 maxlen: 24 176.117.217.0/24 maxlen: 24 176.117.218.0/24 maxlen: 24 176.117.219.0/24 maxlen: 24 176.117.220.0/24 maxlen: 24 176.117.221.0/24 maxlen: 24 176.117.222.0/24 maxlen: 24 176.117.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f1:a7:63:96:49:71:b9:ed:ec:04:bb:79:bf:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad Validity Not Before: Jan 2 14:21:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51d46d0bca1650b6a96e553128f64c88aa0aec58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c9:d9:46:6e:67:a3:d4:1f:d9:a5:02:50:86: 44:48:cb:43:53:12:bf:c8:1e:d4:3a:97:b3:47:f1: bc:56:d1:ef:83:a6:eb:1c:69:54:1b:99:29:72:26: 93:14:62:59:77:02:57:69:54:36:47:f9:1b:30:89: 69:04:85:ee:d8:40:1f:16:b9:39:63:87:4c:e9:f1: b4:1e:b5:a2:52:ce:9c:dc:24:8d:6b:e3:c6:a6:48: 17:9b:e3:64:9d:79:25:39:82:06:9a:3e:3b:a7:22: e9:c1:71:c0:ea:9a:14:1a:b0:e9:ca:ba:65:b1:b5: d3:62:4b:68:25:7e:06:61:97:42:f2:99:cc:11:f6: 47:f5:f6:25:18:3e:57:6f:b9:dc:31:3e:5b:13:13: a8:57:ed:5c:71:b8:c7:19:b8:b8:98:d8:17:f5:d1: 4f:fa:2b:31:9e:19:c3:c6:1d:30:98:c5:8e:66:ce: 62:15:69:3a:af:f3:dd:24:16:62:28:fc:3a:b6:8c: 7d:29:e8:71:0c:79:41:a8:24:ec:af:74:ef:43:77: 44:b1:65:38:37:cc:a7:3f:a8:58:ac:11:37:06:f3: 40:8a:d6:3d:e1:80:98:a4:d3:06:ef:9f:01:38:4b: 1d:f8:09:3e:38:09:89:a9:52:c4:c3:8d:b0:68:47: 16:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D4:6D:0B:CA:16:50:B6:A9:6E:55:31:28:F6:4C:88:AA:0A:EC:58 X509v3 Authority Key Identifier: keyid:D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/UdRtC8oWULapblUxKPZMiKoK7Fg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.201.228.0/22 176.117.192.0/19 Signature Algorithm: sha256WithRSAEncryption 2e:28:e6:12:a1:27:6c:44:3d:3e:2e:3f:ef:4c:83:bb:24:a9: 71:ab:46:3c:c4:68:eb:f7:cb:dc:55:72:de:cd:df:12:11:e0: 7c:ad:81:f6:53:5a:61:aa:f9:1b:1f:5d:a7:9c:0d:c6:5c:75: 45:aa:28:1a:a9:af:0e:44:9a:f2:3d:61:75:a1:d0:3d:9e:3e: 3f:7a:c3:9c:b2:da:a6:14:1c:a6:1e:25:58:8f:68:a6:84:53: 9f:b1:12:e5:31:53:bb:80:d5:e9:07:da:4d:17:ef:e4:52:e7: 9c:3f:c7:0b:e6:bb:a1:08:ff:15:d4:d8:2f:c4:19:a7:24:f3: 24:61:bd:e5:e3:d0:d3:3b:74:21:86:bd:e7:71:a8:be:ea:c6: 8b:c7:91:eb:a2:02:8e:17:24:13:81:08:9c:51:86:33:44:90: 41:99:ee:83:c1:09:5b:e4:85:3e:32:74:28:05:5c:ca:d5:58: 08:d4:df:13:b8:8f:45:ae:08:ec:c9:8c:96:0c:46:1a:9e:1a: a5:1b:c0:55:aa:55:27:89:1e:b6:72:1a:34:97:91:dc:82:8a: 70:fa:b3:fa:2c:fc:fe:d9:43:65:24:9d:74:3f:20:ca:93:5a: 99:48:54:16:62:e9:10:f3:62:82:e5:81:65:f4:6d:65:43:47: 8b:0a:48:54 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FfGnY5ZJcbnt7AS7eb/kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ODA1ZTFjZmZjMTM5MmU3ZDE3NjhmOGYwNTU0YTFjN2Y2 MzQ0YWQwHhcNMjYwMTAyMTQyMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWQ0NmQwYmNhMTY1MGI2YTk2ZTU1MzEyOGY2NGM4OGFhMGFlYzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cnZRm5no9Qf2aUCUIZESMtDUxK/ yB7UOpezR/G8VtHvg6brHGlUG5kpciaTFGJZdwJXaVQ2R/kbMIlpBIXu2EAfFrk5 Y4dM6fG0HrWiUs6c3CSNa+PGpkgXm+NknXklOYIGmj47pyLpwXHA6poUGrDpyrpl sbXTYktoJX4GYZdC8pnMEfZH9fYlGD5Xb7ncMT5bExOoV+1ccbjHGbi4mNgX9dFP +isxnhnDxh0wmMWOZs5iFWk6r/PdJBZiKPw6tox9KehxDHlBqCTsr3TvQ3dEsWU4 N8ynP6hYrBE3BvNAitY94YCYpNMG758BOEsd+Ak+OAmJqVLEw42waEcWawIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFHUbQvKFlC2qW5VMSj2TIiqCuxYMB8GA1UdIwQY MBaAFNeAXhz/wTkufRdo+PBVShx/Y0StMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTRCZUhQX0JPUzU5RjJqNDhGVktISDlqUkswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80YTNkOGEtNTI5ZC00ZDkxLTlmMjUt MjI1NGJjMmNhNmMwLzEvVWRSdEM4b1dVTGFwYmxVeEtQWk1pS29LN0ZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80YTNkOGEtNTI5ZC00ZDkxLTlmMjUtMjI1NGJjMmNhNmMw LzEvMTRCZUhQX0JPUzU5RjJqNDhGVktISDlqUkswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8nkAwQF sHXAMA0GCSqGSIb3DQEBCwUAA4IBAQAuKOYSoSdsRD0+Lj/vTIO7JKlxq0Y8xGjr 98vcVXLezd8SEeB8rYH2U1phqvkbH12nnA3GXHVFqigaqa8ORJryPWF1odA9nj4/ esOcstqmFBymHiVYj2imhFOfsRLlMVO7gNXpB9pNF+/kUuecP8cL5ruhCP8V1Ngv xBmnJPMkYb3l49DTO3Qhhr3ncai+6saLx5HrogKOFyQTgQicUYYzRJBBme6DwQlb 5IU+MnQoBVzK1VgI1N8TuI9FrgjsyYyWDEYanhqlG8BVqlUniR62cho0l5Hcgopw +rP6LPz+2UNlJJ10PyDKk1qZSFQWYukQ82KC5YFl9G1lQ0eLCkhU -----END CERTIFICATE-----Generated at Thu Jan 8 11:01:50 2026 by rpki-client