This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/UTPn7sDyIDaf0ipM77C87Kdh1RA.roa File: UTPn7sDyIDaf0ipM77C87Kdh1RA.roa (raw, json) Hash identifier: yJkUEolTOzyU/wbxz5ChhzuCMevnkgv8qFIuytCOr7E= Subject key identifier: 51:33:E7:EE:C0:F2:20:36:9F:D2:2A:4C:EF:B0:BC:EC:A7:61:D5:10 Certificate issuer: /CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063 Certificate serial: 019B797E84902F198747F0C2837DFA81D6E9 Authority key identifier: 94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/UTPn7sDyIDaf0ipM77C87Kdh1RA.roa Signing time: Thu 01 Jan 2026 12:18:13 +0000 ROA not before: Thu 01 Jan 2026 12:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204719 IP address blocks: 91.132.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:84:90:2f:19:87:47:f0:c2:83:7d:fa:81:d6:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063 Validity Not Before: Jan 1 12:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5133e7eec0f220369fd22a4cefb0bceca761d510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3e:00:0d:15:c2:60:39:5d:2b:1b:03:20:5c: ba:95:37:de:1c:d8:4b:7c:23:07:80:7b:0f:e2:31: 5f:9b:cb:4a:78:37:70:b6:44:2a:cc:89:89:15:16: c6:b9:ab:45:5d:82:60:2b:98:37:89:89:85:0a:1c: dd:5d:35:d5:35:66:66:21:6a:6c:d4:a6:fe:b8:cf: eb:0c:35:a9:52:c5:ad:9c:ac:1d:f6:0e:b1:2d:32: 15:02:7a:5b:fc:0b:78:2b:dd:2b:36:a3:ff:ed:b0: 0e:a8:0b:39:25:5e:57:5e:21:9e:ab:3f:27:c7:4b: 9c:e8:b8:23:73:56:b2:39:71:85:94:8b:b8:e1:a3: 8c:93:6e:51:f7:b5:43:4c:26:56:e3:f4:7b:95:c1: c5:da:b3:7c:1a:96:91:fd:dd:8c:31:3a:7e:8d:cd: 75:eb:73:97:b3:61:e7:c6:0e:8c:c5:66:64:d1:89: 24:ca:15:6e:dd:b2:47:70:c8:d3:ab:83:02:af:63: c6:d9:a4:ef:2c:69:a9:13:b1:c3:9b:49:86:e8:de: 4a:6e:47:d6:6f:07:1d:09:d2:41:2e:e8:c7:e2:6c: 88:b7:28:84:2b:61:0a:25:74:a4:1a:b5:12:fe:1c: a0:8a:93:d9:be:cb:74:03:5a:4f:9d:34:d8:db:03: e6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:33:E7:EE:C0:F2:20:36:9F:D2:2A:4C:EF:B0:BC:EC:A7:61:D5:10 X509v3 Authority Key Identifier: keyid:94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/UTPn7sDyIDaf0ipM77C87Kdh1RA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.100.0/24 Signature Algorithm: sha256WithRSAEncryption 18:6b:70:d7:14:aa:54:b6:23:ee:12:92:da:57:81:88:74:b0: d4:3c:65:da:21:b2:cf:08:50:39:3f:32:59:bc:00:49:b7:d9: c2:2e:f9:5d:45:73:77:df:ef:39:94:ee:79:77:80:a2:d8:8d: 8e:93:a6:f7:35:e1:75:5a:d6:15:80:39:4a:87:de:9f:33:18: a3:de:93:3e:42:1b:40:6d:94:08:42:b3:d6:46:0f:6b:4d:3b: 46:f2:27:24:50:e7:b6:47:45:aa:48:34:df:47:86:76:c8:79: 6b:91:e4:3b:b9:78:29:95:fd:0e:72:56:41:11:48:60:32:e4: 0b:a5:44:f2:39:c0:fb:14:ee:f8:5e:1c:ca:da:a7:18:6b:8a: 2f:db:cc:4b:db:4b:b3:61:03:ce:c9:d0:3f:f2:57:23:19:8b: b7:c1:82:9e:41:d2:5a:29:4f:89:48:75:a3:49:8e:96:da:8a: 1b:81:46:26:fa:90:e3:f5:c6:76:9a:9a:54:4d:e3:48:17:24: a7:f9:d9:db:f2:00:ca:e5:74:2d:a0:28:69:bf:02:e9:70:ab: cb:40:13:44:85:06:3c:c6:a5:de:04:75:51:1f:20:af:ff:4d: 5b:61:bb:de:5a:ca:0e:c9:72:9c:b4:cc:15:4e:98:21:13:ad: da:a1:e6:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5foSQLxmHR/DCg336gdbpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0N2UzZTVmOWViODA4OWI1Y2E5NGYzOGU2NTE3Y2ZiYzVi MjAwNjMwHhcNMjYwMTAxMTIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTMzZTdlZWMwZjIyMDM2OWZkMjJhNGNlZmIwYmNlY2E3NjFkNTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj4ADRXCYDldKxsDIFy6lTfeHNhL fCMHgHsP4jFfm8tKeDdwtkQqzImJFRbGuatFXYJgK5g3iYmFChzdXTXVNWZmIWps 1Kb+uM/rDDWpUsWtnKwd9g6xLTIVAnpb/At4K90rNqP/7bAOqAs5JV5XXiGeqz8n x0uc6Lgjc1ayOXGFlIu44aOMk25R97VDTCZW4/R7lcHF2rN8GpaR/d2MMTp+jc11 63OXs2Hnxg6MxWZk0YkkyhVu3bJHcMjTq4MCr2PG2aTvLGmpE7HDm0mG6N5KbkfW bwcdCdJBLujH4myItyiEK2EKJXSkGrUS/hygipPZvst0A1pPnTTY2wPmswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFEz5+7A8iA2n9IqTO+wvOynYdUQMB8GA1UdIwQY MBaAFJR+Pl+euAibXKlPOOZRfPvFsgBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEg0LVg1NjRDSnRjcVU4NDVsRjgtOFd5QUdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82YzRjMjYtZTM0YS00MzM2LTkwYzgt ZjkwYWU5OTY2NDI4LzEvVVRQbjdzRHlJRGFmMGlwTTc3Qzg3S2RoMVJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC82YzRjMjYtZTM0YS00MzM2LTkwYzgtZjkwYWU5OTY2NDI4 LzEvbEg0LVg1NjRDSnRjcVU4NDVsRjgtOFd5QUdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW4RkMA0G CSqGSIb3DQEBCwUAA4IBAQAYa3DXFKpUtiPuEpLaV4GIdLDUPGXaIbLPCFA5PzJZ vABJt9nCLvldRXN33+85lO55d4Ci2I2Ok6b3NeF1WtYVgDlKh96fMxij3pM+QhtA bZQIQrPWRg9rTTtG8ickUOe2R0WqSDTfR4Z2yHlrkeQ7uXgplf0OclZBEUhgMuQL pUTyOcD7FO74XhzK2qcYa4ov28xL20uzYQPOydA/8lcjGYu3wYKeQdJaKU+JSHWj SY6W2oobgUYm+pDj9cZ2mppUTeNIFySn+dnb8gDK5XQtoChpvwLpcKvLQBNEhQY8 xqXeBHVRHyCv/01bYbveWsoOyXKctMwVTpghE63aoeac -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:54 2026 by rpki-client