This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/UTSR5iQJ6IBH6DGdS5VKMlXv2h8.roa
File: UTSR5iQJ6IBH6DGdS5VKMlXv2h8.roa (raw, json)
Hash identifier: g/yB397DTMizFh5pcVuRPR6yN/SI5ugHQKZHi+BSisU=
Subject key identifier: 51:34:91:E6:24:09:E8:80:47:E8:31:9D:4B:95:4A:32:55:EF:DA:1F
Certificate issuer: /CN=1fa8ac37f9695169627f75e098963396de9638cc
Certificate serial: 019B7E38FD6B1BD836564BBD63B7D3153739
Authority key identifier: 1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/UTSR5iQJ6IBH6DGdS5VKMlXv2h8.roa
Signing time: Fri 02 Jan 2026 10:20:22 +0000
ROA not before: Fri 02 Jan 2026 10:20:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43016
IP address blocks: 146.66.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:fd:6b:1b:d8:36:56:4b:bd:63:b7:d3:15:37:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa8ac37f9695169627f75e098963396de9638cc
Validity
Not Before: Jan 2 10:20:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=513491e62409e88047e8319d4b954a3255efda1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d9:ca:9a:1e:92:70:82:4f:1a:96:6a:2c:a0:
94:c9:92:5c:93:94:4d:f9:9c:02:58:67:90:4a:a9:
32:19:0a:06:af:dc:b4:51:cd:38:c6:ab:b2:13:8b:
71:f7:c1:6d:5b:b0:95:40:e3:d6:1d:65:f9:63:4e:
e7:8f:2c:60:ff:85:b3:5f:ae:77:b7:f4:1d:ff:5b:
c1:e0:ab:31:ca:bc:b7:33:e2:21:e1:e8:c3:ef:e7:
eb:00:31:96:fa:29:dd:3b:ec:6d:df:33:89:9e:2b:
f6:3a:74:a4:e5:da:77:ca:12:fd:69:81:c3:bf:f3:
90:69:e8:ed:94:43:8c:f1:40:e1:6f:e3:3e:4e:fb:
6c:51:06:0f:d0:c8:12:c7:77:7a:73:ad:e3:40:87:
c0:64:cf:78:23:ce:41:94:c6:c3:68:21:2b:b5:c8:
7d:57:2f:f5:43:b5:8d:cc:2a:6d:67:6a:9a:8c:b6:
74:eb:22:d1:4c:29:b8:8f:97:2f:c1:a7:d9:28:f2:
c7:80:f9:fe:4c:35:66:17:7b:7a:cc:43:fc:53:91:
36:fe:21:4c:b4:0c:d2:e7:28:24:9f:cd:56:50:c0:
59:53:71:09:f1:f5:25:ac:c4:8a:e4:57:45:bf:8c:
34:95:4d:4a:58:24:8b:b8:ab:ea:b2:75:97:15:d2:
72:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:34:91:E6:24:09:E8:80:47:E8:31:9D:4B:95:4A:32:55:EF:DA:1F
X509v3 Authority Key Identifier:
keyid:1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/UTSR5iQJ6IBH6DGdS5VKMlXv2h8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.66.28.0/22
Signature Algorithm: sha256WithRSAEncryption
95:2a:d1:a8:c9:65:41:cc:32:fc:49:a4:d7:52:68:a5:6a:0d:
7b:70:ce:67:fd:f7:26:a4:97:33:40:54:a4:20:51:78:7f:68:
75:2a:ee:8c:a9:f7:52:8c:33:09:8a:28:15:85:64:77:dc:79:
1e:2b:af:ac:a0:84:78:a5:3f:65:40:7e:b9:49:de:cb:f4:2b:
d0:6d:e2:d0:f3:3e:20:d5:e1:24:a3:c0:cd:d8:fe:ea:bb:16:
68:34:95:d6:a2:b5:73:39:80:38:8a:5a:0d:3c:77:8b:e8:60:
b7:5e:2c:1b:7a:32:b9:3d:87:7e:fb:ec:1e:c7:ff:91:e2:0d:
fc:51:0e:4f:f4:16:59:aa:3b:42:73:df:50:b1:6b:6e:3f:31:
6a:f9:2c:a2:85:11:cf:86:48:0c:41:23:d9:1d:62:bd:31:f3:
1f:db:28:6c:0d:1c:1b:15:b3:28:e5:21:4f:92:ea:7d:21:94:
b1:17:ce:45:46:dc:b9:24:e1:8a:aa:5f:cf:c8:86:7c:4b:3c:
db:78:a5:fc:a0:e1:89:c3:c7:6e:48:ec:f4:9e:1c:85:7b:f9:
87:19:6e:ba:6c:18:79:e9:78:fe:63:33:64:08:37:8a:30:06:
28:ef:aa:d0:cf:58:c7:06:e3:fe:5c:82:0c:11:5e:0d:a7:e1:
96:c5:27:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:59:37 2026 by rpki-client