This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/UtBuOFJeA4gPyVPmFEGgkw2zEFA.roa File: UtBuOFJeA4gPyVPmFEGgkw2zEFA.roa (raw, json) Hash identifier: eu9hciCdi48z/WHUFfgsqnitXTRgtMV120uloxDdTDw= Subject key identifier: 52:D0:6E:38:52:5E:03:88:0F:C9:53:E6:14:41:A0:93:0D:B3:10:50 Certificate issuer: /CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84 Certificate serial: 019B7B355605182F3AAC49DECE6FBC76B928 Authority key identifier: 33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/UtBuOFJeA4gPyVPmFEGgkw2zEFA.roa Signing time: Thu 01 Jan 2026 20:17:31 +0000 ROA not before: Thu 01 Jan 2026 20:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200665 IP address blocks: 185.135.134.0/23 maxlen: 23 185.154.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 23:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:56:05:18:2f:3a:ac:49:de:ce:6f:bc:76:b9:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84 Validity Not Before: Jan 1 20:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52d06e38525e03880fc953e61441a0930db31050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:74:a6:e9:41:0a:2e:94:d3:37:ab:14:64:05: 18:c9:5e:52:29:08:99:98:42:e8:ee:77:02:23:82: 04:d8:90:6b:58:5a:d2:6f:4b:8a:35:98:99:26:0c: db:4d:d0:84:1d:d0:b7:0c:e3:17:3c:e0:8e:3c:48: 5b:c9:99:7b:59:43:17:bb:9c:71:a3:c9:f3:03:15: e9:6e:6d:b9:97:af:d2:79:a3:cd:59:10:0b:ee:c7: 4e:ad:d9:a2:a5:99:a2:1d:57:36:39:d6:58:86:9b: e2:69:0f:7f:83:64:76:ae:cc:45:24:f7:76:7e:c6: 07:da:65:cc:d3:c5:ad:a4:74:15:a9:f3:e1:34:5f: 77:2f:13:57:24:0f:29:be:66:27:37:ed:da:ea:1b: 47:b2:cd:64:d4:a9:48:e0:b4:50:e0:44:f0:15:bc: bb:1d:50:89:7b:03:11:56:60:81:28:a1:4b:74:de: 95:42:3d:a3:78:5e:a6:ab:14:48:86:fa:5d:d1:bd: 28:b8:15:ea:5f:48:14:92:37:fe:0c:4c:91:33:8f: c9:cd:60:3b:18:d4:dc:b1:0e:a0:51:61:32:b4:05: eb:ee:07:c6:49:60:62:d1:38:3c:4f:6a:9f:56:bf: 62:30:6c:f3:ae:25:d8:e6:81:36:3c:5a:98:e4:d4: a8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D0:6E:38:52:5E:03:88:0F:C9:53:E6:14:41:A0:93:0D:B3:10:50 X509v3 Authority Key Identifier: keyid:33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/UtBuOFJeA4gPyVPmFEGgkw2zEFA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.135.134.0/23 185.154.16.0/22 Signature Algorithm: sha256WithRSAEncryption 68:c8:f7:53:48:0f:2a:7a:cc:b2:0b:f7:54:43:67:fa:93:3a: 62:14:45:c2:a5:69:88:c2:0c:cb:5d:85:61:aa:3b:7d:71:7c: 23:e8:cf:6a:36:74:2e:47:18:9b:a1:c3:b3:22:1c:63:bd:29: 5d:b7:82:96:7e:d8:71:3f:d8:0e:d2:a4:ed:11:90:d0:15:84: 37:db:94:24:bb:d8:a1:f9:4f:c1:94:d9:e5:8a:5d:f1:f1:d5: 8b:6f:62:ee:6e:85:76:54:71:24:c4:61:d8:fd:74:5c:45:0e: fa:44:7a:0b:e8:77:76:2f:09:26:a5:e5:04:fb:7b:a1:16:a6: 98:c5:a7:7b:f0:16:22:61:c6:68:e3:c8:0b:81:68:b9:2e:d6: 28:9c:c5:4c:8d:99:50:d5:ac:66:2c:ac:3f:37:89:03:d3:8f: 77:2f:95:f8:8c:37:04:44:2a:b8:9a:22:9a:c5:2b:d3:42:42: 70:d2:a8:b2:22:6a:4d:8f:11:dd:d3:60:59:6c:6f:28:79:e8: 1e:36:e8:75:c9:51:ab:52:99:e3:55:c3:fe:6d:0a:14:fa:3c: bc:1f:03:ce:43:62:25:df:75:39:60:2c:7c:91:b9:06:63:f4: 04:57:04:9d:ae:58:c4:1b:be:47:7d:11:7f:e8:84:e3:73:42: c9:d4:d4:81 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NVYFGC86rEnezm+8drkoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYTljN2JkZjJiODJlMzQzZWM0MjY2N2Q2ZWVkZTRiODA2 MTBjODQwHhcNMjYwMTAxMjAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmQwNmUzODUyNWUwMzg4MGZjOTUzZTYxNDQxYTA5MzBkYjMxMDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nSm6UEKLpTTN6sUZAUYyV5SKQiZ mELo7ncCI4IE2JBrWFrSb0uKNZiZJgzbTdCEHdC3DOMXPOCOPEhbyZl7WUMXu5xx o8nzAxXpbm25l6/SeaPNWRAL7sdOrdmipZmiHVc2OdZYhpviaQ9/g2R2rsxFJPd2 fsYH2mXM08WtpHQVqfPhNF93LxNXJA8pvmYnN+3a6htHss1k1KlI4LRQ4ETwFby7 HVCJewMRVmCBKKFLdN6VQj2jeF6mqxRIhvpd0b0ouBXqX0gUkjf+DEyRM4/JzWA7 GNTcsQ6gUWEytAXr7gfGSWBi0Tg8T2qfVr9iMGzzriXY5oE2PFqY5NSoaQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFLQbjhSXgOID8lT5hRBoJMNsxBQMB8GA1UdIwQY MBaAFDOpx73yuC40PsQmZ9bu3kuAYQyEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTZuSHZmSzRMalEteENabjF1N2VTNEJoRElRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8yZjY1OTUtZDNkMS00M2VhLWE0YTMt YWIzYjdjM2U4MjE1LzEvVXRCdU9GSmVBNGdQeVZQbUZFR2drdzJ6RUZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8yZjY1OTUtZDNkMS00M2VhLWE0YTMtYWIzYjdjM2U4MjE1 LzEvTTZuSHZmSzRMalEteENabjF1N2VTNEJoRElRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuYeGAwQC uZoQMA0GCSqGSIb3DQEBCwUAA4IBAQBoyPdTSA8qesyyC/dUQ2f6kzpiFEXCpWmI wgzLXYVhqjt9cXwj6M9qNnQuRxibocOzIhxjvSldt4KWfthxP9gO0qTtEZDQFYQ3 25Qku9ih+U/BlNnlil3x8dWLb2LuboV2VHEkxGHY/XRcRQ76RHoL6Hd2LwkmpeUE +3uhFqaYxad78BYiYcZo48gLgWi5LtYonMVMjZlQ1axmLKw/N4kD0493L5X4jDcE RCq4miKaxSvTQkJw0qiyImpNjxHd02BZbG8oeegeNuh1yVGrUpnjVcP+bQoU+jy8 HwPOQ2Il33U5YCx8kbkGY/QEVwSdrljEG75HfRF/6ITjc0LJ1NSB -----END CERTIFICATE-----Generated at Tue Jan 27 07:43:47 2026 by rpki-client