This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/UdK_lrXjU_RXFJaKpiGojC6Knx4.roa File: UdK_lrXjU_RXFJaKpiGojC6Knx4.roa (raw, json) Hash identifier: bQIDLxO4MoGuoCmOcdj5dBlm87MBMRINMg+4C8KgQWM= Subject key identifier: 51:D2:BF:96:B5:E3:53:F4:57:14:96:8A:A6:21:A8:8C:2E:8A:9F:1E Certificate issuer: /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e Certificate serial: 019B4F408F17696C1D3918258F2707A8E00F Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/UdK_lrXjU_RXFJaKpiGojC6Knx4.roa Signing time: Wed 24 Dec 2025 07:26:29 +0000 ROA not before: Wed 24 Dec 2025 07:26:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 35753 IP address blocks: 80.240.64.0/20 maxlen: 20 82.167.0.0/16 maxlen: 24 82.167.0.0/17 maxlen: 17 82.167.0.0/18 maxlen: 24 82.167.64.0/22 maxlen: 22 82.167.68.0/22 maxlen: 22 82.167.72.0/22 maxlen: 22 82.167.76.0/22 maxlen: 22 82.167.80.0/22 maxlen: 22 82.167.84.0/22 maxlen: 22 82.167.88.0/22 maxlen: 22 82.167.92.0/22 maxlen: 22 82.167.96.0/22 maxlen: 22 82.167.100.0/22 maxlen: 22 82.167.104.0/22 maxlen: 22 82.167.108.0/22 maxlen: 22 82.167.112.0/22 maxlen: 22 82.167.116.0/22 maxlen: 22 82.167.120.0/22 maxlen: 22 82.167.124.0/22 maxlen: 22 82.167.128.0/19 maxlen: 19 82.167.144.0/22 maxlen: 22 82.167.148.0/22 maxlen: 22 82.167.152.0/22 maxlen: 22 82.167.156.0/22 maxlen: 22 82.167.160.0/22 maxlen: 22 82.167.164.0/22 maxlen: 22 82.167.168.0/22 maxlen: 22 82.167.172.0/22 maxlen: 22 82.167.180.0/22 maxlen: 22 82.167.180.0/23 maxlen: 23 82.167.192.0/18 maxlen: 18 82.167.192.0/20 maxlen: 20 82.167.208.0/20 maxlen: 20 82.167.224.0/21 maxlen: 21 82.167.232.0/21 maxlen: 21 82.167.240.0/22 maxlen: 22 82.167.244.0/22 maxlen: 22 82.167.248.0/24 maxlen: 24 82.167.249.0/24 maxlen: 24 82.167.250.0/23 maxlen: 23 82.167.252.0/23 maxlen: 23 82.167.254.0/23 maxlen: 23 82.167.254.0/24 maxlen: 24 82.167.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:40:8f:17:69:6c:1d:39:18:25:8f:27:07:a8:e0:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e Validity Not Before: Dec 24 07:26:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=51d2bf96b5e353f45714968aa621a88c2e8a9f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c9:ad:d8:9e:8b:a6:7f:b5:6c:29:2f:42:ef: 5e:d1:e1:27:df:39:76:2a:42:0d:19:57:10:c9:5d: 5d:17:44:3f:dd:27:e1:e3:9c:3f:16:01:90:1b:84: 8b:11:55:fd:dc:4b:1a:58:48:5e:de:53:5f:89:b3: c8:1e:89:d1:fe:aa:8e:c2:28:e4:70:51:c5:f8:23: d1:05:c3:63:b4:9c:fd:f8:60:e4:fe:26:45:f1:8b: 21:23:99:ce:57:f9:db:02:3c:e3:f0:3e:72:f9:96: da:fa:5d:c4:ac:fe:85:8b:38:c5:17:b6:ec:5c:8a: cc:f7:a2:7b:bb:5e:f0:e4:ec:36:6e:17:52:3a:3a: 1a:f1:c8:da:59:3f:9c:bc:6c:27:75:ec:a1:c0:62: 9c:8b:f6:95:12:8a:7f:ef:cc:fa:18:6f:6c:65:66: ca:9c:b1:f4:62:7b:ad:c6:38:ed:e4:27:65:0f:ad: 70:46:8c:0b:bc:a5:c1:bf:46:36:8a:71:26:11:06: ae:77:49:b6:f0:20:6e:33:87:31:75:f8:e7:97:98: 5d:c1:b4:bb:26:88:85:16:e5:3b:5a:32:d5:3e:72: a6:6d:c9:46:8d:e0:88:bc:26:4c:51:8b:13:ec:bf: 77:1f:c6:73:61:99:a6:b9:1a:09:51:b4:b4:04:d7: aa:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D2:BF:96:B5:E3:53:F4:57:14:96:8A:A6:21:A8:8C:2E:8A:9F:1E X509v3 Authority Key Identifier: keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/UdK_lrXjU_RXFJaKpiGojC6Knx4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.240.64.0/20 82.167.0.0/16 Signature Algorithm: sha256WithRSAEncryption 42:29:95:97:84:fd:a1:f5:0e:21:14:c6:78:10:1a:4a:50:5c: 09:65:44:90:51:3c:bb:4e:32:c7:b2:9f:8e:23:9e:16:c7:37: 35:0a:60:1d:17:64:83:82:0f:66:4e:4d:de:ab:c7:2b:66:ca: 3b:6c:a2:d4:e4:10:6f:7e:22:4d:e3:82:78:30:b5:da:31:63: bc:0d:c0:6c:f1:e9:de:8c:b6:9a:95:7c:85:40:4c:90:d6:e1: 51:26:f9:2b:7b:0f:57:00:e7:3d:f7:9a:c0:56:ec:9f:eb:52: ba:af:6e:ae:fc:e6:be:c5:03:21:a6:4e:cc:00:48:52:0f:2a: fa:d4:a8:3b:b6:5a:f0:88:29:2a:63:d0:e4:dd:51:d9:6c:44: 11:26:92:71:2b:84:16:0b:7f:bb:80:04:31:f3:4b:13:ba:a4: e7:fa:12:98:b2:eb:d3:24:af:87:e3:a0:45:1f:0e:0c:ae:89: 80:dd:14:3f:2f:b1:7d:25:17:3b:df:12:b0:41:84:93:b1:2b: bd:65:25:bd:f4:24:7e:65:c2:56:5d:e6:6a:d1:f2:be:ff:ef: f4:87:02:60:71:cf:e1:0d:0b:06:a9:e9:5e:90:da:77:1d:2e: 4c:b6:59:05:38:3e:05:5f:d9:af:f3:a2:0d:db:c6:c8:48:ef: 68:5a:3d:11 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZtPQI8XaWwdORgljycHqOAPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5Y2QyMThhYmNkZjY2ZTc5NTAwYWI5MTNjZDIxY2YwNmU0 MDVkNGUwHhcNMjUxMjI0MDcyNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWQyYmY5NmI1ZTM1M2Y0NTcxNDk2OGFhNjIxYTg4YzJlOGE5ZjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsmt2J6Lpn+1bCkvQu9e0eEn3zl2 KkINGVcQyV1dF0Q/3Sfh45w/FgGQG4SLEVX93EsaWEhe3lNfibPIHonR/qqOwijk cFHF+CPRBcNjtJz9+GDk/iZF8YshI5nOV/nbAjzj8D5y+Zba+l3ErP6FizjFF7bs XIrM96J7u17w5Ow2bhdSOjoa8cjaWT+cvGwndeyhwGKci/aVEop/78z6GG9sZWbK nLH0Ynutxjjt5CdlD61wRowLvKXBv0Y2inEmEQaud0m28CBuM4cxdfjnl5hdwbS7 JoiFFuU7WjLVPnKmbclGjeCIvCZMUYsT7L93H8ZzYZmmuRoJUbS0BNeq6wIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFFHSv5a141P0VxSWiqYhqIwuip8eMB8GA1UdIwQY MBaAFAnNIYq832bnlQCrkTzSHPBuQF1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2MwaGlyemZadWVWQUt1UlBOSWM4RzVBWFU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi83N2ZlNDgtZDFmMS00NDlhLTgwN2Qt NGMxOWVjNWI1N2NhLzEvVWRLX2xyWGpVX1JYRkphS3BpR29qQzZLbng0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi83N2ZlNDgtZDFmMS00NDlhLTgwN2QtNGMxOWVjNWI1N2Nh LzEvQ2MwaGlyemZadWVWQUt1UlBOSWM4RzVBWFU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwQEUPBAAwMA UqcwDQYJKoZIhvcNAQELBQADggEBAEIplZeE/aH1DiEUxngQGkpQXAllRJBRPLtO Mseyn44jnhbHNzUKYB0XZIOCD2ZOTd6rxytmyjtsotTkEG9+Ik3jgngwtdoxY7wN wGzx6d6MtpqVfIVATJDW4VEm+St7D1cA5z33msBW7J/rUrqvbq785r7FAyGmTswA SFIPKvrUqDu2WvCIKSpj0OTdUdlsRBEmknErhBYLf7uABDHzSxO6pOf6Epiy69Mk r4fjoEUfDgyuiYDdFD8vsX0lFzvfErBBhJOxK71lJb30JH5lwlZd5mrR8r7/7/SH AmBxz+ENCwap6V6Q2ncdLky2WQU4PgVf2a/zog3bxshI72haPRE= -----END CERTIFICATE-----Generated at Sat Dec 27 02:45:09 2025 by rpki-client