This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/UtiFZtL_HZNhvCp3NE4gj8KHJk0.roa File: UtiFZtL_HZNhvCp3NE4gj8KHJk0.roa (raw, json) Hash identifier: SZjDJdSP9xhfFY4NmPF1GoIqEJcEkNvbLODMn5V8ot8= Subject key identifier: 52:D8:85:66:D2:FF:1D:93:61:BC:2A:77:34:4E:20:8F:C2:87:26:4D Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019B7B3607DB1416AA4052735C0D00557634 Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/UtiFZtL_HZNhvCp3NE4gj8KHJk0.roa Signing time: Thu 01 Jan 2026 20:18:17 +0000 ROA not before: Thu 01 Jan 2026 20:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142019 IP address blocks: 45.93.17.0/24 maxlen: 24 45.155.225.0/24 maxlen: 24 103.240.148.0/22 maxlen: 24 160.238.64.0/24 maxlen: 24 160.238.65.0/24 maxlen: 24 160.238.67.0/24 maxlen: 24 185.245.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:07:db:14:16:aa:40:52:73:5c:0d:00:55:76:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Jan 1 20:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52d88566d2ff1d9361bc2a77344e208fc287264d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e6:92:b6:b9:40:f9:6e:3c:27:ea:92:c7:b1: d8:31:92:07:55:fa:5f:ec:58:a8:3f:87:51:2d:c0: b0:f3:a0:6b:f1:db:57:2d:ab:66:b5:d8:cc:51:82: cf:91:af:47:00:f9:8d:43:95:20:fc:e6:79:47:b6: 7a:6a:2f:17:84:5b:61:7c:a7:6c:f3:76:8d:41:15: 3e:7e:af:7d:18:a7:1e:05:2f:a1:c0:2b:dc:43:61: 75:b1:7a:db:2a:37:b6:ce:02:78:bd:99:02:99:a8: 8e:a7:f9:dc:29:71:56:3a:e8:77:d5:a1:01:5d:d2: 41:be:90:13:00:47:6d:12:59:e0:18:c0:ae:d9:ce: d1:be:19:87:9e:a6:ff:63:59:8a:66:5c:cc:de:78: 6e:a5:8f:de:45:d3:91:63:61:f7:04:7b:b8:2b:a1: 87:e8:73:fb:27:c7:42:0f:cb:a1:ab:77:00:7d:b8: d8:7e:d5:44:d1:47:c8:6f:6e:b6:18:c6:2a:3f:6c: 59:76:a2:e6:ee:1e:2f:dc:75:7c:79:34:ef:37:84: 3e:5f:51:d9:c9:23:15:95:70:80:20:b6:1b:77:75: 40:e2:92:0a:47:5a:75:73:6c:f2:11:a9:c8:11:c4: e2:b4:d4:fb:b4:7d:31:21:f1:fd:4d:97:54:58:5c: 87:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D8:85:66:D2:FF:1D:93:61:BC:2A:77:34:4E:20:8F:C2:87:26:4D X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/UtiFZtL_HZNhvCp3NE4gj8KHJk0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.17.0/24 45.155.225.0/24 103.240.148.0/22 160.238.64.0/23 160.238.67.0/24 185.245.3.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:5e:ab:64:ff:5c:5e:72:18:ed:40:cc:01:10:eb:f4:34:40: d1:cc:b2:64:ad:68:d8:fa:72:68:46:25:80:1e:be:a9:2e:d6: 97:8c:44:ef:2c:2c:86:ed:54:f7:86:4b:8e:e5:5e:38:3d:8a: 5c:07:5d:74:6f:6a:91:8d:72:cc:1e:d3:64:23:04:35:a7:96: bb:29:10:67:a1:60:d4:b2:ab:89:11:20:48:17:18:70:b3:37: 0b:e9:ce:05:c2:03:f8:37:25:22:15:f7:c4:34:1a:be:5f:82: 86:1e:5f:4e:6b:86:90:52:25:03:1b:a7:c1:c0:b0:b0:98:b1: de:b3:71:f2:7c:cd:a8:50:5e:7f:95:fe:74:8e:9d:cd:d3:a8: 32:5c:1e:82:f3:19:3a:f0:09:ee:34:09:88:1d:18:ee:7c:d3: f3:02:7f:bb:c2:c0:c1:fa:11:c3:f9:d4:31:a6:ab:db:f7:ee: 7a:4d:e1:d0:e4:fd:b6:63:1c:22:06:79:f6:72:83:36:dd:02: d9:fd:5a:12:7d:d8:a9:59:e8:6f:42:bd:4b:b1:1f:5b:8f:5d: 58:d6:bb:e2:14:a6:dc:9b:a9:30:c1:48:e6:a3:cd:2c:7d:51: 8d:95:93:53:8f:59:cc:13:7a:55:69:1e:c5:2c:8e:e8:15:4f: b3:95:e5:99 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt7NgfbFBaqQFJzXA0AVXY0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjYwMTAxMjAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmQ4ODU2NmQyZmYxZDkzNjFiYzJhNzczNDRlMjA4ZmMyODcyNjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+aStrlA+W48J+qSx7HYMZIHVfpf 7FioP4dRLcCw86Br8dtXLatmtdjMUYLPka9HAPmNQ5Ug/OZ5R7Z6ai8XhFthfKds 83aNQRU+fq99GKceBS+hwCvcQ2F1sXrbKje2zgJ4vZkCmaiOp/ncKXFWOuh31aEB XdJBvpATAEdtElngGMCu2c7RvhmHnqb/Y1mKZlzM3nhupY/eRdORY2H3BHu4K6GH 6HP7J8dCD8uhq3cAfbjYftVE0UfIb262GMYqP2xZdqLm7h4v3HV8eTTvN4Q+X1HZ ySMVlXCAILYbd3VA4pIKR1p1c2zyEanIEcTitNT7tH0xIfH9TZdUWFyHXQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFFLYhWbS/x2TYbwqdzROII/ChyZNMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvVXRpRlp0TF9IWk5odkNwM05FNGdqOEtISmswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALV0RAwQA LZvhAwQCZ/CUAwQBoO5AAwQAoO5DAwQAufUDMA0GCSqGSIb3DQEBCwUAA4IBAQA/ Xqtk/1xechjtQMwBEOv0NEDRzLJkrWjY+nJoRiWAHr6pLtaXjETvLCyG7VT3hkuO 5V44PYpcB110b2qRjXLMHtNkIwQ1p5a7KRBnoWDUsquJESBIFxhwszcL6c4FwgP4 NyUiFffENBq+X4KGHl9Oa4aQUiUDG6fBwLCwmLHes3HyfM2oUF5/lf50jp3N06gy XB6C8xk68AnuNAmIHRjufNPzAn+7wsDB+hHD+dQxpqvb9+56TeHQ5P22YxwiBnn2 coM23QLZ/VoSfdipWehvQr1LsR9bj11Y1rviFKbcm6kwwUjmo80sfVGNlZNTj1nM E3pVaR7FLI7oFU+zleWZ -----END CERTIFICATE-----Generated at Wed Jan 21 09:24:15 2026 by rpki-client