This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/UTiXqpOnXnL7SsApTxG7VdzoF_M.roa File: UTiXqpOnXnL7SsApTxG7VdzoF_M.roa (raw, json) Hash identifier: xvzfHxziNr26zYJwG+snS1syo+ysKboS5MzS0bjlx5U= Subject key identifier: 51:38:97:AA:93:A7:5E:72:FB:4A:C0:29:4F:11:BB:55:DC:E8:17:F3 Certificate issuer: /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3 Certificate serial: 019B7F80B4A7E8A6A18F87D7587D9EB746FA Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/UTiXqpOnXnL7SsApTxG7VdzoF_M.roa Signing time: Fri 02 Jan 2026 16:18:19 +0000 ROA not before: Fri 02 Jan 2026 16:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8220 IP address blocks: 193.111.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:b4:a7:e8:a6:a1:8f:87:d7:58:7d:9e:b7:46:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3 Validity Not Before: Jan 2 16:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=513897aa93a75e72fb4ac0294f11bb55dce817f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bb:09:99:86:97:cc:99:e2:43:3a:d7:d1:65: 9d:07:82:03:c1:72:1d:d9:47:4d:cb:08:74:10:8f: 61:3c:c2:8e:7e:0e:08:71:03:e2:a9:55:9b:26:bf: a4:b8:db:91:ce:43:f0:4f:70:33:ea:90:5d:91:f4: ac:40:a7:60:0e:b9:8a:8d:10:fa:a5:30:86:60:ed: 4d:96:19:31:39:4f:e0:b8:57:82:1f:b5:d6:81:0a: 06:e4:02:ed:ae:66:eb:8c:de:ec:37:7d:ee:a5:10: 6f:d6:50:aa:3d:47:ef:f3:8e:73:ac:c4:5a:bb:f2: 8d:ad:7b:da:bc:4a:f6:e7:26:ea:69:c1:1f:88:9f: 40:4f:00:6c:6b:87:88:f7:18:60:8e:e6:55:83:07: 0a:8a:0f:e1:67:91:b2:ab:aa:a9:82:33:95:9d:ff: 6a:f8:c6:a9:9f:a7:93:5c:03:09:7c:05:18:bf:98: 6f:e9:f7:86:26:9a:e3:22:97:1a:d2:a4:42:1b:14: 7a:f0:c6:74:c8:69:ac:37:bc:22:71:a1:b4:3b:75: 5e:72:51:16:5f:29:77:8a:00:e2:96:86:94:2c:69: 10:f8:8b:0c:44:e2:fe:95:68:55:ec:1c:b0:73:e4: 28:40:c1:96:01:b5:0e:21:ad:eb:7e:30:df:76:3d: 16:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:38:97:AA:93:A7:5E:72:FB:4A:C0:29:4F:11:BB:55:DC:E8:17:F3 X509v3 Authority Key Identifier: keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/UTiXqpOnXnL7SsApTxG7VdzoF_M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.24.0/23 Signature Algorithm: sha256WithRSAEncryption 25:9a:60:f5:be:e9:e0:36:c4:ca:0c:1b:c9:96:cc:93:0d:aa: 72:0b:ed:cc:aa:40:a7:cb:81:53:5d:47:0c:95:1a:06:27:97: 29:be:43:00:22:f8:04:a7:92:28:41:11:2a:67:b1:7f:52:5b: 82:a3:9b:5a:4b:88:ff:09:df:a5:c9:c5:96:9d:bc:f2:b4:e0: 2f:80:ad:33:e7:96:7b:2d:48:86:d9:92:8e:8f:93:42:37:fa: b4:ef:45:7d:11:3e:86:e0:8b:21:f5:ac:c6:7c:a7:85:53:f5: 42:f0:ca:cf:e0:64:e2:1b:92:a1:32:47:9c:bb:4e:ac:bf:45: ef:8a:8e:12:1f:25:da:6d:ab:ba:c8:ca:b0:76:81:45:61:b2: 3c:f5:8f:c1:53:d1:d6:ee:98:00:6f:84:32:8a:87:e2:ac:7c: 7c:3b:ff:0b:46:d5:f2:eb:7b:80:91:9d:31:b0:a5:05:39:b6: 63:0a:e3:7e:4c:78:e2:a3:8e:ce:8d:54:3f:ba:3b:e2:07:86: ba:c2:2d:8b:0c:70:cb:75:59:8f:3c:98:a4:d3:8a:2d:68:b8: 66:cc:10:fd:7c:3b:98:00:00:0f:94:a4:14:dc:62:9d:47:95: c2:0f:29:e5:27:cb:15:fe:3a:46:65:94:e9:50:83:4b:8b:44: 2b:26:4e:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gLSn6Kahj4fXWH2et0b6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MjZjMTM4YWZhNDJhN2Q2NWNjNzc2MWFjNGYxODY4MzY2 ZmE3ZTMwHhcNMjYwMTAyMTYxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTM4OTdhYTkzYTc1ZTcyZmI0YWMwMjk0ZjExYmI1NWRjZTgxN2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17sJmYaXzJniQzrX0WWdB4IDwXId 2UdNywh0EI9hPMKOfg4IcQPiqVWbJr+kuNuRzkPwT3Az6pBdkfSsQKdgDrmKjRD6 pTCGYO1NlhkxOU/guFeCH7XWgQoG5ALtrmbrjN7sN33upRBv1lCqPUfv845zrMRa u/KNrXvavEr25ybqacEfiJ9ATwBsa4eI9xhgjuZVgwcKig/hZ5Gyq6qpgjOVnf9q +Mapn6eTXAMJfAUYv5hv6feGJprjIpca0qRCGxR68MZ0yGmsN7wicaG0O3VeclEW Xyl3igDiloaULGkQ+IsMROL+lWhV7Bywc+QoQMGWAbUOIa3rfjDfdj0WQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFE4l6qTp15y+0rAKU8Ru1Xc6BfzMB8GA1UdIwQY MBaAFCUmwTivpCp9Zcx3YaxPGGg2b6fjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84ODZmMDMtZGM5MS00YTc0LWIwMzQt YjA2MjI4ZmNmMmMxLzEvVVRpWHFwT25Ybkw3U3NBcFR4RzdWZHpvRl9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC84ODZmMDMtZGM5MS00YTc0LWIwMzQtYjA2MjI4ZmNmMmMx LzEvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwW8YMA0G CSqGSIb3DQEBCwUAA4IBAQAlmmD1vungNsTKDBvJlsyTDapyC+3MqkCny4FTXUcM lRoGJ5cpvkMAIvgEp5IoQREqZ7F/UluCo5taS4j/Cd+lycWWnbzytOAvgK0z55Z7 LUiG2ZKOj5NCN/q070V9ET6G4Ish9azGfKeFU/VC8MrP4GTiG5KhMkecu06sv0Xv io4SHyXabau6yMqwdoFFYbI89Y/BU9HW7pgAb4QyiofirHx8O/8LRtXy63uAkZ0x sKUFObZjCuN+THjio47OjVQ/ujviB4a6wi2LDHDLdVmPPJik04otaLhmzBD9fDuY AAAPlKQU3GKdR5XCDynlJ8sV/jpGZZTpUINLi0QrJk5j -----END CERTIFICATE-----Generated at Wed Jan 21 12:18:52 2026 by rpki-client