This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/UtXzH5Oi0AulZFx0l8qig6QKaPg.roa File: UtXzH5Oi0AulZFx0l8qig6QKaPg.roa (raw, json) Hash identifier: 1qkvw5zb1r9z9CjOBe9UqDsw7BNtoAEFm0cGx+TLWUU= Subject key identifier: 52:D5:F3:1F:93:A2:D0:0B:A5:64:5C:74:97:CA:A2:83:A4:0A:68:F8 Certificate issuer: /CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e Certificate serial: 019B79ECAF01448BB3DEE61A9F123E2FBB0E Authority key identifier: 8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/UtXzH5Oi0AulZFx0l8qig6QKaPg.roa Signing time: Thu 01 Jan 2026 14:18:32 +0000 ROA not before: Thu 01 Jan 2026 14:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207995 IP address blocks: 194.24.162.0/23 maxlen: 24 194.24.176.0/23 maxlen: 24 212.221.128.0/17 maxlen: 24 2a10:340::/30 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:af:01:44:8b:b3:de:e6:1a:9f:12:3e:2f:bb:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e Validity Not Before: Jan 1 14:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52d5f31f93a2d00ba5645c7497caa283a40a68f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0d:09:f3:4b:bd:e0:b1:dc:cb:03:ee:d2:91: de:7c:03:ee:82:38:a7:e0:3d:e2:02:bd:0e:5b:21: b5:3d:2e:ac:c1:91:a4:a8:b9:68:89:3e:95:59:91: 87:52:49:a4:44:8c:dc:9a:6d:67:ff:2d:da:f9:ee: 80:87:aa:79:61:5d:2c:21:f7:64:22:29:d9:1c:ad: 22:e6:eb:03:4d:be:3a:f6:4b:ce:8f:93:97:17:9f: 41:20:42:be:a8:d0:ee:6e:ad:bd:e5:1b:94:13:a8: 75:cd:33:5a:36:ba:a2:3c:c0:fe:ae:38:52:70:de: b4:3a:00:c2:8c:da:3a:72:ff:76:ec:e9:6a:a5:e3: c9:38:1c:4b:12:a1:35:ae:52:f3:8a:2d:e9:89:b4: bf:6e:a2:00:ad:dd:93:34:02:37:4b:e8:27:b2:60: d4:5b:8d:c7:e6:98:60:76:26:01:45:67:f8:7c:b7: cf:a1:c5:5b:69:01:60:71:40:7f:1e:1a:93:79:69: 6b:cc:4c:6e:69:7d:81:ec:33:98:b8:72:1b:3e:b6: 31:14:4b:31:58:5c:c9:bc:4e:76:3d:60:d8:ab:5c: cc:57:6b:f2:ff:39:de:d2:93:98:3c:6b:fd:1c:4a: 1f:93:ac:27:d2:69:dc:f9:69:ca:8d:2f:5f:6f:1a: 34:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D5:F3:1F:93:A2:D0:0B:A5:64:5C:74:97:CA:A2:83:A4:0A:68:F8 X509v3 Authority Key Identifier: keyid:8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/UtXzH5Oi0AulZFx0l8qig6QKaPg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.24.162.0/23 194.24.176.0/23 212.221.128.0/17 IPv6: 2a10:340::/30 Signature Algorithm: sha256WithRSAEncryption 36:55:ee:f0:2e:3b:95:36:f9:77:bb:dd:2d:a5:d7:44:99:20: ad:17:19:70:ff:d9:c9:9f:1a:05:11:d4:2b:f1:39:69:76:91: 2d:67:48:3e:4f:ec:b8:d4:50:0c:54:29:60:66:25:8f:13:67: fc:4b:48:42:30:e5:9a:b5:f8:21:85:6e:e3:cd:0a:de:6e:02: 4c:07:56:87:35:4b:71:9d:ec:1a:dd:50:55:13:a5:85:cc:de: 56:87:af:2b:f3:66:7c:85:a7:6e:0a:7c:6c:f0:32:f6:70:1f: 3b:d7:7a:7c:bd:7d:51:ea:42:4d:47:a5:a6:2c:b4:ba:aa:b5: 0d:ad:f8:33:06:d0:fb:d6:ef:90:78:e8:a2:a3:3f:05:f2:23: ad:4e:a9:13:43:2d:60:a0:5e:3e:40:2f:c2:a5:df:3e:13:a6: ef:73:0d:28:21:5c:e3:b3:a4:1b:c1:6a:21:6c:c8:79:92:b6: e4:cb:3f:93:d0:49:53:7e:1d:9a:d3:78:de:9b:c0:72:a2:e3: f7:93:b6:9b:ad:8b:c7:13:35:95:f5:a1:04:f7:94:10:7d:a7: 7c:ae:e0:ef:27:9c:ec:de:80:99:c1:0f:ef:fe:03:34:19:d4: f5:3e:73:36:84:34:d9:93:1a:b2:03:63:be:5f:c6:a7:8e:cf: 69:7b:dc:b1 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt57K8BRIuz3uYanxI+L7sOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYjQ0YjA3ODUyMmRhOWMzMTA2MmI5YzdlZjdmNTE3Mjdl NzNlNWUwHhcNMjYwMTAxMTQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmQ1ZjMxZjkzYTJkMDBiYTU2NDVjNzQ5N2NhYTI4M2E0MGE2OGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQ0J80u94LHcywPu0pHefAPugjin 4D3iAr0OWyG1PS6swZGkqLloiT6VWZGHUkmkRIzcmm1n/y3a+e6Ah6p5YV0sIfdk IinZHK0i5usDTb469kvOj5OXF59BIEK+qNDubq295RuUE6h1zTNaNrqiPMD+rjhS cN60OgDCjNo6cv927OlqpePJOBxLEqE1rlLzii3pibS/bqIArd2TNAI3S+gnsmDU W43H5phgdiYBRWf4fLfPocVbaQFgcUB/HhqTeWlrzExuaX2B7DOYuHIbPrYxFEsx WFzJvE52PWDYq1zMV2vy/zne0pOYPGv9HEofk6wn0mnc+WnKjS9fbxo0ewIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFFLV8x+TotALpWRcdJfKooOkCmj4MB8GA1UdIwQY MBaAFI60SweFItqcMQYrnH739Rcn5z5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanJSTEI0VWkycHd4Qml1Y2Z2ZjFGeWZuUGw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81NzkyZTAtNmEzYS00NTI3LTkwZmMt NjdmZjVhMGNlMWE1LzEvVXRYekg1T2kwQXVsWkZ4MGw4cWlnNlFLYVBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS81NzkyZTAtNmEzYS00NTI3LTkwZmMtNjdmZjVhMGNlMWE1 LzEvanJSTEI0VWkycHd4Qml1Y2Z2ZjFGeWZuUGw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBwhiiAwQB whiwAwQH1N2AMA0EAgACMAcDBQIqEANAMA0GCSqGSIb3DQEBCwUAA4IBAQA2Ve7w LjuVNvl3u90tpddEmSCtFxlw/9nJnxoFEdQr8TlpdpEtZ0g+T+y41FAMVClgZiWP E2f8S0hCMOWatfghhW7jzQrebgJMB1aHNUtxnewa3VBVE6WFzN5Wh68r82Z8hadu Cnxs8DL2cB8713p8vX1R6kJNR6WmLLS6qrUNrfgzBtD71u+QeOiioz8F8iOtTqkT Qy1goF4+QC/Cpd8+E6bvcw0oIVzjs6QbwWohbMh5krbkyz+T0ElTfh2a03jem8By ouP3k7abrYvHEzWV9aEE95QQfad8ruDvJ5zs3oCZwQ/v/gM0GdT1PnM2hDTZkxqy A2O+X8anjs9pe9yx -----END CERTIFICATE-----Generated at Mon Feb 2 08:09:16 2026 by rpki-client