This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UT2iZQhS8xrFyMTusUILx59nwfw.roa File: UT2iZQhS8xrFyMTusUILx59nwfw.roa (raw, json) Hash identifier: N9EFt5Fle83RzDrlRbGEbaW3iP0kqDqmApNiWTxLULY= Subject key identifier: 51:3D:A2:65:08:52:F3:1A:C5:C8:C4:EE:B1:42:0B:C7:9F:67:C1:FC Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1CC0162C186522D84F39D0B3220B9 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UT2iZQhS8xrFyMTusUILx59nwfw.roa Signing time: Fri 02 Jan 2026 18:21:51 +0000 ROA not before: Fri 02 Jan 2026 18:21:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 45.12.61.0/24 maxlen: 24 45.128.79.0/24 maxlen: 24 45.141.178.0/24 maxlen: 24 93.190.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:cc:01:62:c1:86:52:2d:84:f3:9d:0b:32:20:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=513da2650852f31ac5c8c4eeb1420bc79f67c1fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f3:6a:28:ec:fa:13:62:1b:99:13:7a:b8:a7: de:56:c4:e8:5b:2b:dd:f7:95:11:7b:32:3a:fd:61: f6:38:c1:b2:4b:f2:8c:15:98:6a:6e:d0:7e:40:16: 5e:07:17:02:18:4e:40:e6:82:94:6d:6c:04:17:ca: 37:00:88:c2:3b:71:dd:fd:7d:1d:80:9b:b9:c7:93: b4:7f:c3:21:b2:9e:a6:35:53:40:f1:18:c3:40:7a: d5:9c:fb:59:39:be:c8:80:12:e8:91:c6:dc:2c:44: b3:43:ba:6e:b8:d1:c6:a6:0e:02:b3:1c:ad:c4:1f: 9a:49:2f:39:e0:39:f0:36:ed:56:6a:a9:3e:eb:c3: da:c8:4e:88:e6:b6:14:bb:ab:6d:4a:90:d6:26:92: 59:77:5b:a5:44:c9:ac:4a:75:92:9b:77:5c:eb:02: 06:dd:c0:75:e5:1f:84:20:a3:31:05:d3:be:f1:b5: 91:60:e7:17:28:9d:1c:e9:eb:24:7e:ac:7d:44:f6: c8:24:54:0a:dd:18:a1:a7:a3:83:25:96:89:54:7b: 36:10:f5:91:2a:79:89:b5:bb:1c:41:51:a6:2b:62: 72:6a:d3:c8:5f:1f:d4:23:3d:c0:d9:28:d3:56:fb: ae:35:db:5b:1f:bb:24:73:f8:cd:40:e2:6f:cd:95: 6b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:3D:A2:65:08:52:F3:1A:C5:C8:C4:EE:B1:42:0B:C7:9F:67:C1:FC X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UT2iZQhS8xrFyMTusUILx59nwfw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.61.0/24 45.128.79.0/24 45.141.178.0/24 93.190.246.0/24 Signature Algorithm: sha256WithRSAEncryption c1:4c:21:7d:ec:71:e0:93:3b:71:1d:d7:d5:ad:2e:45:f0:8e: ec:3f:cc:6f:da:f4:83:3c:e8:7f:26:ee:84:1e:c1:2c:fb:6c: 39:69:c3:e1:7e:36:4c:c2:5b:9d:f0:5f:97:46:16:b6:98:80: 61:d2:66:04:aa:68:30:5d:7b:1c:a2:6a:5a:44:2c:ae:87:d7: 0e:17:40:25:d4:9a:43:00:8a:7b:57:0f:aa:8d:6f:a2:8f:37: fe:59:1d:e4:92:ee:1d:b4:93:a1:66:5f:98:b3:14:95:f9:ed: 87:b4:c3:39:53:5c:fc:7a:1d:9c:9d:58:93:68:7b:77:3c:49: a8:14:10:4e:59:99:b0:a7:23:92:c8:fe:47:cb:3f:1a:4e:65: f2:33:3c:4b:00:31:55:2b:7e:12:b2:0e:e2:e7:50:72:9a:ec: 2d:3e:fd:52:dc:2c:4d:aa:ab:67:29:dd:62:f9:a1:37:b6:7d: 23:50:49:d3:60:de:f2:78:48:09:ed:9c:cb:1e:f4:3f:7e:6c: 06:b6:57:45:ac:25:cf:66:85:17:22:03:3c:a7:9e:35:cb:02: 5c:0f:99:0e:11:b1:e5:7f:ba:6c:0d:d5:c1:fc:a3:41:97:ea: f0:01:91:31:c6:ca:1a:87:b1:6e:21:7e:a5:31:96:2f:fc:56: b6:b1:ee:40 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/8cwBYsGGUi2E850LMiC5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTNkYTI2NTA4NTJmMzFhYzVjOGM0ZWViMTQyMGJjNzlmNjdjMWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvNqKOz6E2IbmRN6uKfeVsToWyvd 95URezI6/WH2OMGyS/KMFZhqbtB+QBZeBxcCGE5A5oKUbWwEF8o3AIjCO3Hd/X0d gJu5x5O0f8Mhsp6mNVNA8RjDQHrVnPtZOb7IgBLokcbcLESzQ7puuNHGpg4Csxyt xB+aSS854DnwNu1Waqk+68PayE6I5rYUu6ttSpDWJpJZd1ulRMmsSnWSm3dc6wIG 3cB15R+EIKMxBdO+8bWRYOcXKJ0c6eskfqx9RPbIJFQK3Rihp6ODJZaJVHs2EPWR KnmJtbscQVGmK2JyatPIXx/UIz3A2SjTVvuuNdtbH7skc/jNQOJvzZVrawIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFFE9omUIUvMaxcjE7rFCC8efZ8H8MB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvVVQyaVpRaFM4eHJGeU1UdXNVSUx4NTlud2Z3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALQw9AwQA LYBPAwQALY2yAwQAXb72MA0GCSqGSIb3DQEBCwUAA4IBAQDBTCF97HHgkztxHdfV rS5F8I7sP8xv2vSDPOh/Ju6EHsEs+2w5acPhfjZMwlud8F+XRha2mIBh0mYEqmgw XXscompaRCyuh9cOF0Al1JpDAIp7Vw+qjW+ijzf+WR3kku4dtJOhZl+YsxSV+e2H tMM5U1z8eh2cnViTaHt3PEmoFBBOWZmwpyOSyP5Hyz8aTmXyMzxLADFVK34Ssg7i 51BymuwtPv1S3CxNqqtnKd1i+aE3tn0jUEnTYN7yeEgJ7ZzLHvQ/fmwGtldFrCXP ZoUXIgM8p541ywJcD5kOEbHlf7psDdXB/KNBl+rwAZExxsoah7FuIX6lMZYv/Fa2 se5A -----END CERTIFICATE-----Generated at Tue Jan 20 09:07:39 2026 by rpki-client