This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/uTqH0u_s-IU2Vk9vmWdhxaYSyic.roa File: uTqH0u_s-IU2Vk9vmWdhxaYSyic.roa (raw, json) Hash identifier: 9sZ3q1jipefxchnNxsLL7TK0ls/g4aJ+SwCfkFkgkOk= Subject key identifier: B9:3A:87:D2:EF:EC:F8:85:36:56:4F:6F:99:67:61:C5:A6:12:CA:27 Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Certificate serial: 019B7F15A7778F4547104DC8553BD4352085 Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/uTqH0u_s-IU2Vk9vmWdhxaYSyic.roa Signing time: Fri 02 Jan 2026 14:21:24 +0000 ROA not before: Fri 02 Jan 2026 14:21:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213120 IP address blocks: 2.21.122.0/24 maxlen: 24 2a02:2370:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a7:77:8f:45:47:10:4d:c8:55:3b:d4:35:20:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Validity Not Before: Jan 2 14:21:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b93a87d2efecf88536564f6f996761c5a612ca27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e6:89:a2:c7:94:b5:3e:26:f9:27:c5:ea:27: 0d:76:b1:51:bf:85:dc:59:7a:16:ab:7c:23:02:71: 79:8b:5e:5d:96:96:8f:5a:fa:2a:57:22:fb:fb:74: 75:50:55:8d:c0:6d:fb:af:b5:09:bc:b8:1f:4a:52: 6a:e0:b5:34:3e:96:55:08:fe:67:b3:89:17:19:a5: a4:bf:18:1e:0a:1f:8e:aa:dc:2a:e2:1f:c3:77:83: af:e2:32:24:59:ca:ec:ec:1b:ba:4b:00:ad:5f:95: e9:70:6f:74:2c:4a:b5:79:cd:8d:4c:ac:5d:9f:d8: a9:3c:ca:2a:24:33:24:4d:b7:65:3d:55:e4:73:c0: ef:6c:f6:49:3a:28:d6:93:db:45:76:ed:14:62:38: b6:7e:c3:ab:29:f1:8a:96:66:9d:27:0e:07:c9:05: 4f:e4:91:ab:24:71:c5:59:ae:cf:6c:ed:50:33:ef: dd:15:22:42:6d:3a:1f:8b:55:d0:0f:32:d9:73:f9: 3b:6e:57:03:7e:09:f5:17:86:99:0c:cd:09:a6:97: 46:93:60:d8:57:d0:7c:a5:b7:f9:57:2a:8b:bd:02: fe:87:38:78:73:99:71:1c:6d:2f:57:5e:73:c9:66: fc:9b:f7:1c:47:84:e2:10:fc:e9:47:ae:1b:ee:67: c3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3A:87:D2:EF:EC:F8:85:36:56:4F:6F:99:67:61:C5:A6:12:CA:27 X509v3 Authority Key Identifier: keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/uTqH0u_s-IU2Vk9vmWdhxaYSyic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.21.122.0/24 IPv6: 2a02:2370:1000::/48 Signature Algorithm: sha256WithRSAEncryption 41:66:fc:69:ee:73:f4:d8:23:ab:50:98:94:5a:33:cb:3e:27: 02:4e:a6:87:a2:2d:04:d8:3b:dc:5e:f6:b9:76:0c:88:ca:9e: 49:1b:34:3c:92:ca:67:f0:b2:e3:0a:34:99:6b:7d:3f:d6:e4: 55:2a:9a:e0:9a:65:86:bd:3a:1e:6a:7d:37:45:fc:da:05:2b: aa:e5:09:5f:e5:4d:72:a8:c3:24:34:93:45:02:6d:8f:1a:d0: ca:d8:df:82:d4:8c:e9:3c:81:26:9d:13:0c:3e:0d:7b:05:d5: 0b:4f:f3:a1:6e:b2:a4:a5:81:85:6c:f8:85:9e:66:ba:3b:5a: 15:b8:47:a4:ad:39:cf:bb:38:79:66:f0:8e:fc:13:ec:7a:70: da:a1:a8:ee:a6:00:4f:cb:52:88:50:eb:53:e2:5a:4b:61:b6: 13:e7:59:62:d4:ba:5c:02:86:7e:91:08:f4:5c:d0:fa:00:fc: 5c:2e:1c:23:ae:1a:d2:e6:4c:61:06:5b:88:e9:9b:b8:4b:d9: 3d:7d:00:7f:29:c9:6b:ad:8a:ad:f7:6a:a2:c1:0c:86:b2:65: 07:6c:70:79:f2:c0:ff:73:ab:34:98:8a:66:df:ca:60:50:b3: b9:ce:5a:1a:bd:ef:10:c0:09:d9:3c:2b:ee:fd:36:d4:43:3f: 78:1a:95:ff -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/Fad3j0VHEE3IVTvUNSCFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5 YmQ2YWEwHhcNMjYwMTAyMTQyMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTNhODdkMmVmZWNmODg1MzY1NjRmNmY5OTY3NjFjNWE2MTJjYTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuaJoseUtT4m+SfF6icNdrFRv4Xc WXoWq3wjAnF5i15dlpaPWvoqVyL7+3R1UFWNwG37r7UJvLgfSlJq4LU0PpZVCP5n s4kXGaWkvxgeCh+Oqtwq4h/Dd4Ov4jIkWcrs7Bu6SwCtX5XpcG90LEq1ec2NTKxd n9ipPMoqJDMkTbdlPVXkc8DvbPZJOijWk9tFdu0UYji2fsOrKfGKlmadJw4HyQVP 5JGrJHHFWa7PbO1QM+/dFSJCbTofi1XQDzLZc/k7blcDfgn1F4aZDM0JppdGk2DY V9B8pbf5VyqLvQL+hzh4c5lxHG0vV15zyWb8m/ccR4TiEPzpR64b7mfDXwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLk6h9Lv7PiFNlZPb5lnYcWmEsonMB8GA1UdIwQY MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt ODhkMWNhYzllNGYxLzEvdVRxSDB1X3MtSVUyVms5dm1XZGh4YVlTeWljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAAhV6MA8E AgACMAkDBwAqAiNwEAAwDQYJKoZIhvcNAQELBQADggEBAEFm/Gnuc/TYI6tQmJRa M8s+JwJOpoeiLQTYO9xe9rl2DIjKnkkbNDySymfwsuMKNJlrfT/W5FUqmuCaZYa9 Oh5qfTdF/NoFK6rlCV/lTXKowyQ0k0UCbY8a0MrY34LUjOk8gSadEww+DXsF1QtP 86FusqSlgYVs+IWeZro7WhW4R6StOc+7OHlm8I78E+x6cNqhqO6mAE/LUohQ61Pi WkththPnWWLUulwChn6RCPRc0PoA/FwuHCOuGtLmTGEGW4jpm7hL2T19AH8pyWut iq33aqLBDIayZQdscHnywP9zqzSYimbfymBQs7nOWhq97xDACdk8K+79NtRDP3ga lf8= -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:45 2026 by rpki-client