This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/0UTNnPCaSBRChjd-4paFJAa8mvY.roa File: 0UTNnPCaSBRChjd-4paFJAa8mvY.roa (raw, json) Hash identifier: kU7KErkztorzfF4UTYyKtoYDyMlrOJjwkRRJcXS9JCM= Subject key identifier: D1:44:CD:9C:F0:9A:48:14:42:86:37:7E:E2:96:85:24:06:BC:9A:F6 Certificate issuer: /CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0 Certificate serial: 019B7BA3359DF46F30D46B50A1BB36535828 Authority key identifier: AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/0UTNnPCaSBRChjd-4paFJAa8mvY.roa Signing time: Thu 01 Jan 2026 22:17:32 +0000 ROA not before: Thu 01 Jan 2026 22:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20454 IP address blocks: 31.24.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:35:9d:f4:6f:30:d4:6b:50:a1:bb:36:53:58:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0 Validity Not Before: Jan 1 22:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d144cd9cf09a48144286377ee296852406bc9af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:36:6a:35:35:fd:05:3e:e1:2c:31:5d:bc:2b: ac:88:46:3a:b3:d7:92:94:cc:9a:bf:c4:88:5e:20: 6c:69:b9:4b:9f:00:35:84:5f:9d:39:60:df:a8:ee: eb:24:20:e7:ca:e0:a0:96:5e:f0:a0:3b:d9:17:7a: 25:05:33:42:6f:4e:6d:14:ff:e0:38:27:47:8f:8e: 88:22:a7:a3:53:f9:d4:51:57:0d:9c:a7:b3:64:47: 4f:13:58:de:aa:de:7b:77:a4:f3:4c:e5:68:6a:da: 15:1d:96:82:ae:84:2f:de:0e:bc:08:a7:b2:ac:c0: a1:0b:9b:59:ec:2a:13:38:18:f2:e8:a5:be:3d:90: 78:55:84:2a:17:ee:4b:a7:e9:22:53:44:82:f7:67: f9:f8:08:6d:6e:ef:70:f9:46:a9:16:40:a3:70:2a: a0:bb:7a:38:4c:34:ac:ba:cf:2f:2b:2b:e6:1c:da: d5:c5:bd:02:c2:8e:f7:a0:5e:5e:c2:e1:e4:ad:b1: 33:97:f7:9c:5f:d7:8b:13:61:a6:6f:58:c6:7d:66: 33:72:ff:d4:86:c9:f8:80:45:57:01:1f:34:c4:01: 7b:0a:eb:a7:47:f6:81:c3:b4:d8:4d:77:fa:bd:78: 8c:e5:e2:ff:22:8c:cf:0a:e0:37:db:2b:49:1f:78: 0d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:44:CD:9C:F0:9A:48:14:42:86:37:7E:E2:96:85:24:06:BC:9A:F6 X509v3 Authority Key Identifier: keyid:AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/0UTNnPCaSBRChjd-4paFJAa8mvY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.82.0/24 Signature Algorithm: sha256WithRSAEncryption 88:71:14:54:38:08:17:34:da:6c:a5:07:7b:40:57:96:eb:f2: e3:de:35:9a:b4:d0:7f:0e:f2:8a:37:0f:fc:65:16:c5:be:2f: 11:75:72:fb:35:9c:77:d0:83:33:08:69:f3:85:66:92:13:6f: e5:26:3f:60:9f:77:b2:0b:53:ff:ad:76:93:66:82:20:a8:c3: c7:41:be:50:cb:c5:1a:79:75:c0:48:21:1c:bb:bf:15:9f:c1: 36:d3:c5:ab:a0:9d:9c:92:8f:62:64:6b:6e:5f:b1:00:ec:a6: 48:1d:a3:42:b9:1f:d7:15:f0:44:5a:11:36:ef:14:cc:16:7e: da:44:88:b7:fe:41:12:c0:98:bd:e3:ae:16:07:d4:7f:b4:bd: 72:04:47:d7:06:d4:fb:10:c4:7c:84:d6:5b:47:45:40:a2:f4: f5:65:75:f2:32:c4:98:4e:f9:36:2e:db:17:57:2c:36:8b:41: d3:d7:a9:43:2c:96:7a:71:00:a3:12:d0:5d:40:97:5d:73:71: aa:b8:01:be:34:1a:33:c9:65:48:9e:91:dd:88:51:f7:4c:d0: 14:0b:a6:e7:3b:4a:32:f3:4d:01:03:94:33:ca:77:34:d4:29: 3b:28:f9:fb:3f:86:0f:0d:3a:82:33:02:4a:4b:1b:5b:58:ae: 15:53:c7:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7ozWd9G8w1GtQobs2U1goMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhY2U2NzI1YTBhMGRkZDE2ODA0ODBhODM3ODVkMmNkNTdi ZjZhYjAwHhcNMjYwMTAxMjIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTQ0Y2Q5Y2YwOWE0ODE0NDI4NjM3N2VlMjk2ODUyNDA2YmM5YWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jZqNTX9BT7hLDFdvCusiEY6s9eS lMyav8SIXiBsablLnwA1hF+dOWDfqO7rJCDnyuCgll7woDvZF3olBTNCb05tFP/g OCdHj46IIqejU/nUUVcNnKezZEdPE1jeqt57d6TzTOVoatoVHZaCroQv3g68CKey rMChC5tZ7CoTOBjy6KW+PZB4VYQqF+5Lp+kiU0SC92f5+Ahtbu9w+UapFkCjcCqg u3o4TDSsus8vKyvmHNrVxb0Cwo73oF5ewuHkrbEzl/ecX9eLE2Gmb1jGfWYzcv/U hsn4gEVXAR80xAF7CuunR/aBw7TYTXf6vXiM5eL/IozPCuA32ytJH3gNCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNFEzZzwmkgUQoY3fuKWhSQGvJr2MB8GA1UdIwQY MBaAFKrOZyWgoN3RaASAqDeF0s1Xv2qwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXM1bkphQ2czZEZvQklDb040WFN6VmVfYXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84MTEyZmYtYjIxNi00MDZmLThmNTkt NzJhMDgyY2RiMTgyLzEvMFVUTm5QQ2FTQlJDaGpkLTRwYUZKQWE4bXZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84MTEyZmYtYjIxNi00MDZmLThmNTktNzJhMDgyY2RiMTgy LzEvcXM1bkphQ2czZEZvQklDb040WFN6VmVfYXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHxhSMA0G CSqGSIb3DQEBCwUAA4IBAQCIcRRUOAgXNNpspQd7QFeW6/Lj3jWatNB/DvKKNw/8 ZRbFvi8RdXL7NZx30IMzCGnzhWaSE2/lJj9gn3eyC1P/rXaTZoIgqMPHQb5Qy8Ua eXXASCEcu78Vn8E208WroJ2cko9iZGtuX7EA7KZIHaNCuR/XFfBEWhE27xTMFn7a RIi3/kESwJi9464WB9R/tL1yBEfXBtT7EMR8hNZbR0VAovT1ZXXyMsSYTvk2LtsX Vyw2i0HT16lDLJZ6cQCjEtBdQJddc3GquAG+NBozyWVInpHdiFH3TNAUC6bnO0oy 800BA5Qzync01Ck7KPn7P4YPDTqCMwJKSxtbWK4VU8cq -----END CERTIFICATE-----Generated at Wed Jan 21 04:39:50 2026 by rpki-client