This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/xUTAvhZT3dts-fjc8vz1O07_wOw.roa File: xUTAvhZT3dts-fjc8vz1O07_wOw.roa (raw, json) Hash identifier: h+vleUOgXNI2ZWvKECnbZP2FffRv0MU5HGxcpzWRKGM= Subject key identifier: C5:44:C0:BE:16:53:DD:DB:6C:F9:F8:DC:F2:FC:F5:3B:4E:FF:C0:EC Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019B7A5B0D7F99426DD77C80AAA34CDA241D Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/xUTAvhZT3dts-fjc8vz1O07_wOw.roa Signing time: Thu 01 Jan 2026 16:19:06 +0000 ROA not before: Thu 01 Jan 2026 16:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205899 IP address blocks: 91.217.166.0/24 maxlen: 24 185.113.10.0/24 maxlen: 24 2a05:9080:5::/48 maxlen: 48 2a05:9080:14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:0d:7f:99:42:6d:d7:7c:80:aa:a3:4c:da:24:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Jan 1 16:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c544c0be1653dddb6cf9f8dcf2fcf53b4effc0ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:cf:80:61:06:bf:fb:24:ec:38:41:81:10:2d: 54:46:31:e6:94:e0:93:e8:7a:a3:5d:ee:f8:cb:d5: dc:d0:d0:9b:c1:99:76:ef:f5:64:1a:4a:82:b1:38: a5:51:37:b5:86:b2:10:84:7c:9e:85:22:07:f2:13: b9:6f:fb:8e:63:2a:f6:5b:52:14:28:3e:e8:76:1a: 59:3c:3c:b8:f2:7d:6a:77:c9:a2:f1:6d:e6:f6:b1: 06:de:ae:b7:62:f7:52:a1:b8:d0:5e:0d:55:50:62: 9a:91:82:29:d8:9c:ae:df:27:37:23:92:6b:0f:30: bb:8c:1f:82:81:fe:0d:ce:f9:b8:de:f8:02:70:b7: b9:db:59:3b:e4:20:59:08:5a:ae:2c:43:ef:1a:e0: 58:42:09:49:f5:47:b0:14:21:09:52:98:c8:e8:36: 94:3c:cd:cb:f8:36:cc:ca:1f:43:72:80:5c:f6:88: 82:fa:18:65:1b:90:f0:ea:04:82:3a:cd:12:c7:65: 4a:29:a7:73:5b:50:77:db:ef:fe:b0:d4:51:13:80: 85:f8:e7:3f:52:7e:c8:5a:e5:bf:20:bb:f7:ca:9e: 6a:38:32:80:74:5a:04:2b:a3:1a:58:43:8f:05:05: d2:ce:4f:cb:35:75:e2:3d:0a:72:b9:e2:7b:b4:ce: e7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:44:C0:BE:16:53:DD:DB:6C:F9:F8:DC:F2:FC:F5:3B:4E:FF:C0:EC X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/xUTAvhZT3dts-fjc8vz1O07_wOw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.166.0/24 185.113.10.0/24 IPv6: 2a05:9080:5::/48 2a05:9080:14::/48 Signature Algorithm: sha256WithRSAEncryption 00:2c:f8:df:74:b7:0a:04:c3:3a:ec:e9:9b:75:60:ab:eb:26: 4e:b2:cf:59:c6:05:47:b7:e3:54:21:dc:8a:e2:c1:aa:4f:9a: f6:2e:6a:d9:5f:2e:46:bb:06:89:e9:8e:79:d2:fe:c5:42:92: 62:c8:72:5b:1f:78:9f:72:c0:1f:00:6f:92:7c:4e:7a:92:82: b1:ce:b4:c6:2d:fa:10:9a:33:d9:0c:64:e7:4a:a9:0a:03:fd: 1b:38:88:3a:1f:6c:3d:a9:11:bb:c4:c4:55:53:62:39:95:59: 8a:eb:8e:b1:11:60:e6:c6:5b:19:82:bf:88:6e:e7:41:4c:b7: a0:87:87:cf:ce:92:69:6b:99:61:ba:a3:2d:d5:5a:af:0f:27: a4:3b:66:a0:05:b1:27:36:79:de:a0:11:d2:fe:39:04:99:6d: 85:d6:59:6d:b2:cf:ad:19:01:9c:1c:9f:31:3f:67:31:46:b2: b8:3d:af:e3:e5:88:ec:c0:06:ae:21:ad:df:d7:fb:d3:06:0e: 03:4d:74:a3:5e:b7:0c:68:c5:b0:d6:53:bd:0e:3e:32:af:3f: 6e:e7:2b:49:73:db:39:8f:9f:47:cd:41:d5:94:15:c2:f9:d7: 30:9e:d7:92:1e:d6:3e:ee:ac:c0:45:b4:fb:93:a0:94:26:b4: 72:d7:91:3a -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt6Ww1/mUJt13yAqqNM2iQdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMTAxMTYxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTQ0YzBiZTE2NTNkZGRiNmNmOWY4ZGNmMmZjZjUzYjRlZmZjMGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+s+AYQa/+yTsOEGBEC1URjHmlOCT 6HqjXe74y9Xc0NCbwZl27/VkGkqCsTilUTe1hrIQhHyehSIH8hO5b/uOYyr2W1IU KD7odhpZPDy48n1qd8mi8W3m9rEG3q63YvdSobjQXg1VUGKakYIp2Jyu3yc3I5Jr DzC7jB+Cgf4Nzvm43vgCcLe521k75CBZCFquLEPvGuBYQglJ9UewFCEJUpjI6DaU PM3L+DbMyh9DcoBc9oiC+hhlG5Dw6gSCOs0Sx2VKKadzW1B32+/+sNRRE4CF+Oc/ Un7IWuW/ILv3yp5qODKAdFoEK6MaWEOPBQXSzk/LNXXiPQpyueJ7tM7ngQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFMVEwL4WU93bbPn43PL89TtO/8DsMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEveFVUQXZoWlQzZHRzLWZqYzh2ejFPMDdfd093LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAW9mmAwQA uXEKMBgEAgACMBIDBwAqBZCAAAUDBwAqBZCAABQwDQYJKoZIhvcNAQELBQADggEB AAAs+N90twoEwzrs6Zt1YKvrJk6yz1nGBUe341Qh3IriwapPmvYuatlfLka7Bonp jnnS/sVCkmLIclsfeJ9ywB8Ab5J8TnqSgrHOtMYt+hCaM9kMZOdKqQoD/Rs4iDof bD2pEbvExFVTYjmVWYrrjrERYObGWxmCv4hu50FMt6CHh8/OkmlrmWG6oy3VWq8P J6Q7ZqAFsSc2ed6gEdL+OQSZbYXWWW2yz60ZAZwcnzE/ZzFGsrg9r+PliOzABq4h rd/X+9MGDgNNdKNetwxoxbDWU70OPjKvP27nK0lz2zmPn0fNQdWUFcL51zCe15Ie 1j7urMBFtPuToJQmtHLXkTo= -----END CERTIFICATE-----Generated at Mon Jan 5 13:06:12 2026 by rpki-client