This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/utnxuCdQ1PAwYtBIQdlWNiNR4Uc.roa File: utnxuCdQ1PAwYtBIQdlWNiNR4Uc.roa (raw, json) Hash identifier: 4Zxs7imh2v9OypwWBLyvUBMlzHoY/4pgzfFtHfz7Sbw= Subject key identifier: BA:D9:F1:B8:27:50:D4:F0:30:62:D0:48:41:D9:56:36:23:51:E1:47 Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f Certificate serial: 019B7C12BC9AE5362837BB14DC0F63F12C88 Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/utnxuCdQ1PAwYtBIQdlWNiNR4Uc.roa Signing time: Fri 02 Jan 2026 00:19:21 +0000 ROA not before: Fri 02 Jan 2026 00:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213327 IP address blocks: 2a0a:280:2600::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:bc:9a:e5:36:28:37:bb:14:dc:0f:63:f1:2c:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f Validity Not Before: Jan 2 00:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bad9f1b82750d4f03062d04841d956362351e147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:81:6c:de:de:f9:07:31:79:8e:cb:e3:0c:30: 45:7f:1c:42:f4:81:5f:b6:c2:64:1a:45:19:84:3e: 0e:80:13:55:b3:2b:30:e6:2c:00:c1:7f:72:77:32: cb:23:66:fb:3e:c6:4c:cd:07:10:37:1c:01:35:6d: d0:a5:1b:33:ab:ab:2a:a5:c6:aa:8a:87:b3:a8:64: fb:57:0b:c9:84:1e:77:b7:a1:95:ab:78:96:fc:6e: b2:4c:bb:16:08:b1:c8:26:59:29:a1:a9:c8:c8:4a: 78:b6:27:7e:9e:57:18:d3:98:39:b8:a3:1b:aa:5c: c6:82:36:0b:f4:c4:9c:81:e9:68:ff:90:24:f8:8d: 6c:74:8c:85:e6:bc:b6:8c:01:45:ff:8e:24:6f:21: 35:ea:1d:2c:9b:28:46:d9:67:7f:de:06:e5:0e:8d: c9:57:b0:81:a3:90:ce:5b:e9:ea:bb:40:e9:92:8b: 85:91:59:f7:42:a4:02:a5:f1:c2:91:a8:6b:6d:75: 43:b3:ec:e8:a2:fa:8a:86:84:36:be:00:e6:b3:5d: 12:f2:63:3e:ea:9b:e2:f5:57:38:27:60:cf:d3:ed: bb:d3:35:92:d3:1f:f5:ef:b7:c4:1d:78:82:4b:6c: fd:32:bd:6a:48:3f:50:6d:7f:85:52:fd:bd:d9:34: 54:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D9:F1:B8:27:50:D4:F0:30:62:D0:48:41:D9:56:36:23:51:E1:47 X509v3 Authority Key Identifier: keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/utnxuCdQ1PAwYtBIQdlWNiNR4Uc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:280:2600::/40 Signature Algorithm: sha256WithRSAEncryption b3:e5:27:a2:0a:97:30:46:7c:29:21:0c:6b:04:75:d1:17:f6: 8a:03:38:8c:5b:0a:f4:14:74:49:ed:72:95:d8:42:e7:8a:76: 8e:58:1d:f9:a8:2d:43:b4:4f:a2:4c:11:4b:dc:bc:f7:e4:90: 80:dd:a7:eb:ee:93:79:07:6b:ee:90:da:5d:42:85:39:e3:d8: 24:5d:dd:ac:cf:5d:50:20:bb:81:ee:63:51:9c:b7:9b:b7:52: 83:97:a7:17:6d:89:cb:b5:8b:f7:c4:f8:e6:ed:e2:ab:af:9d: 73:54:5a:a8:6d:fe:ca:9c:4b:29:58:3f:1b:7d:f9:1a:b5:95: 52:31:c3:87:4d:7f:90:92:b1:ef:62:2e:44:9f:2c:b7:f6:7c: 59:01:6c:68:05:72:04:44:29:4d:45:d4:b5:84:a5:15:0c:24: 90:75:f0:fb:ef:1d:ac:2b:c5:ff:cc:02:d4:2e:ed:2b:d1:3c: 02:69:44:6e:9a:73:2b:c7:f5:84:6e:73:f7:23:31:f4:65:45: 42:e9:93:92:0f:92:db:86:e9:87:9e:d4:b4:1a:ad:69:3e:41: ac:17:fb:d0:23:ce:03:6f:c4:34:b2:55:af:44:a3:7b:86:00: 90:81:03:39:00:d2:ad:8d:54:da:60:59:ee:90:63:b6:2a:cb: cc:e5:0b:0c -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8Erya5TYoN7sU3A9j8SyIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiOWYyMWJhMDRlNWUzMDc3YjM5MWUzZDQ4ZmY1YjBhNTBi MzM2OWYwHhcNMjYwMTAyMDAxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWQ5ZjFiODI3NTBkNGYwMzA2MmQwNDg0MWQ5NTYzNjIzNTFlMTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooFs3t75BzF5jsvjDDBFfxxC9IFf tsJkGkUZhD4OgBNVsysw5iwAwX9ydzLLI2b7PsZMzQcQNxwBNW3QpRszq6sqpcaq ioezqGT7VwvJhB53t6GVq3iW/G6yTLsWCLHIJlkpoanIyEp4tid+nlcY05g5uKMb qlzGgjYL9MScgelo/5Ak+I1sdIyF5ry2jAFF/44kbyE16h0smyhG2Wd/3gblDo3J V7CBo5DOW+nqu0DpkouFkVn3QqQCpfHCkahrbXVDs+zoovqKhoQ2vgDms10S8mM+ 6pvi9Vc4J2DP0+270zWS0x/177fEHXiCS2z9Mr1qSD9QbX+FUv292TRUqwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFLrZ8bgnUNTwMGLQSEHZVjYjUeFHMB8GA1UdIwQY MBaAFBufIboE5eMHezkePUj/WwpQszafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUt ZjUxYzVmYjNkZjlhLzEvdXRueHVDZFExUEF3WXRCSVFkbFdOaU5SNFVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUtZjUxYzVmYjNkZjlh LzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgoCgCYw DQYJKoZIhvcNAQELBQADggEBALPlJ6IKlzBGfCkhDGsEddEX9ooDOIxbCvQUdEnt cpXYQueKdo5YHfmoLUO0T6JMEUvcvPfkkIDdp+vuk3kHa+6Q2l1ChTnj2CRd3azP XVAgu4HuY1Gct5u3UoOXpxdticu1i/fE+Obt4quvnXNUWqht/sqcSylYPxt9+Rq1 lVIxw4dNf5CSse9iLkSfLLf2fFkBbGgFcgREKU1F1LWEpRUMJJB18PvvHawrxf/M AtQu7SvRPAJpRG6acyvH9YRuc/cjMfRlRULpk5IPktuG6Yee1LQarWk+QawX+9Aj zgNvxDSyVa9Eo3uGAJCBAzkA0q2NVNpgWe6QY7Yqy8zlCww= -----END CERTIFICATE-----Generated at Wed Jan 21 17:34:13 2026 by rpki-client