This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/utBF4pjjAxN8gnwEZw-ZaW9VBYk.roa
File: utBF4pjjAxN8gnwEZw-ZaW9VBYk.roa (raw, json)
Hash identifier: Rb/8giga2DKHr0xu9FiYkuTdiT2IO1AvhtunEnimjeM=
Subject key identifier: BA:D0:45:E2:98:E3:03:13:7C:82:7C:04:67:0F:99:69:6F:55:05:89
Certificate issuer: /CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Certificate serial: 019B7F82947F2A11575E2734076CFFA32C62
Authority key identifier: 77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/utBF4pjjAxN8gnwEZw-ZaW9VBYk.roa
Signing time: Fri 02 Jan 2026 16:20:22 +0000
ROA not before: Fri 02 Jan 2026 16:20:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39182
IP address blocks: 81.16.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:82:94:7f:2a:11:57:5e:27:34:07:6c:ff:a3:2c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Validity
Not Before: Jan 2 16:20:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bad045e298e303137c827c04670f99696f550589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ae:13:ad:b3:3d:29:c6:6e:32:cd:3b:71:0d:
f0:08:44:3c:06:fa:a1:d8:a1:38:bf:ca:d8:7c:ca:
c7:d9:70:cf:88:11:f4:5f:81:f0:94:6f:de:72:30:
d0:56:98:c8:f7:71:d7:e6:ba:a0:a9:74:cb:4e:60:
a4:c1:7a:3f:6b:ec:5f:40:fc:a8:00:29:41:0c:91:
8c:96:69:15:f6:b2:c7:e0:98:ed:c3:62:36:68:10:
c5:c4:4a:d1:1b:4a:68:fb:4d:d9:4b:10:36:77:8b:
ec:11:b0:e6:75:f2:7e:8a:5d:5c:b2:5e:c9:10:7b:
23:4c:f8:fb:56:f2:ea:e2:83:21:94:73:05:93:1d:
99:77:d6:ca:38:17:85:5a:d0:a1:e7:d7:0d:cb:41:
16:21:44:24:e9:b8:9b:05:bb:1c:73:bb:f5:da:25:
58:ff:2c:4e:65:ea:2c:e1:df:13:c1:4d:6d:9d:cf:
dc:cc:df:ec:b0:49:1a:c1:70:91:39:e1:61:13:b5:
d6:cb:fd:75:5a:69:be:4b:38:7f:b5:7e:2e:f9:cc:
4f:d6:88:56:e0:0b:b0:99:cf:de:f3:22:e9:15:59:
fb:14:95:ef:e7:8c:c0:29:cb:96:91:f0:9b:d4:76:
21:b1:c4:2d:43:d7:16:7c:ca:d5:11:67:ee:03:dd:
4f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D0:45:E2:98:E3:03:13:7C:82:7C:04:67:0F:99:69:6F:55:05:89
X509v3 Authority Key Identifier:
keyid:77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/utBF4pjjAxN8gnwEZw-ZaW9VBYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.16.184.0/21
Signature Algorithm: sha256WithRSAEncryption
56:39:8d:d5:35:9e:1d:1d:d6:bf:d3:70:dd:d5:9f:eb:18:b1:
34:e7:95:84:4c:0e:22:43:4d:d9:49:17:5e:4d:a1:df:d5:1f:
ca:cf:c4:d9:a6:1f:ee:64:9c:9c:ef:67:47:a6:9f:33:83:91:
0e:a7:c7:11:d7:47:2a:6f:ad:ca:2c:d0:ba:38:ff:40:19:89:
84:d0:09:f8:dd:19:68:be:6b:b9:94:63:ed:a3:9a:44:7e:e1:
d1:d6:68:7c:44:bf:4e:94:3a:e6:8d:02:7e:ca:62:34:e6:9e:
d9:0f:e8:9c:49:a0:f4:85:4d:b4:1e:c6:57:d7:2b:0b:5f:99:
27:ea:24:0a:b1:24:62:e0:81:3c:63:08:a7:3f:40:ab:e3:d6:
f6:a7:66:6d:0b:d5:6f:e8:9f:b5:21:84:a9:9f:f5:7f:32:ad:
60:ac:0e:23:2b:8b:a1:8c:e9:49:b9:aa:02:ff:d2:c0:21:05:
e3:2c:e8:1b:6a:1f:58:41:67:1e:e1:76:fd:5f:31:d6:ad:ae:
d5:07:26:c0:3e:94:1c:e6:9e:63:49:5e:31:92:bf:0b:8d:5f:
c4:36:0f:bd:aa:3f:37:af:13:b2:0e:55:c2:3f:68:84:a8:5d:
9d:47:7a:70:0e:aa:d2:38:ce:f9:00:07:ea:17:d5:2d:35:d1:
51:48:0a:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/gpR/KhFXXic0B2z/oyxiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzdkZDI1Y2E1ZmIxZGM5MTNjMmZmYjkxNmZhMjJmYjg2
MTBiNzgwHhcNMjYwMTAyMTYyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWQwNDVlMjk4ZTMwMzEzN2M4MjdjMDQ2NzBmOTk2OTZmNTUwNTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK4TrbM9KcZuMs07cQ3wCEQ8Bvqh
2KE4v8rYfMrH2XDPiBH0X4HwlG/ecjDQVpjI93HX5rqgqXTLTmCkwXo/a+xfQPyo
AClBDJGMlmkV9rLH4Jjtw2I2aBDFxErRG0po+03ZSxA2d4vsEbDmdfJ+il1csl7J
EHsjTPj7VvLq4oMhlHMFkx2Zd9bKOBeFWtCh59cNy0EWIUQk6bibBbscc7v12iVY
/yxOZeos4d8TwU1tnc/czN/ssEkawXCROeFhE7XWy/11Wmm+Szh/tX4u+cxP1ohW
4Auwmc/e8yLpFVn7FJXv54zAKcuWkfCb1HYhscQtQ9cWfMrVEWfuA91PgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLrQReKY4wMTfIJ8BGcPmWlvVQWJMB8GA1UdIwQY
MBaAFHfH3SXKX7HckTwv+5Fvoi+4YQt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhmZEpjcGZzZHlSUENfN2tXLWlMN2hoQzNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80OTNhYjgtNTRjNC00MmY1LWI0YWYt
ZGRiMzViMWFiYWQ1LzEvdXRCRjRwampBeE44Z253RVp3LVphVzlWQllrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC80OTNhYjgtNTRjNC00MmY1LWI0YWYtZGRiMzViMWFiYWQ1
LzEvZDhmZEpjcGZzZHlSUENfN2tXLWlMN2hoQzNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDURC4MA0G
CSqGSIb3DQEBCwUAA4IBAQBWOY3VNZ4dHda/03Dd1Z/rGLE055WETA4iQ03ZSRde
TaHf1R/Kz8TZph/uZJyc72dHpp8zg5EOp8cR10cqb63KLNC6OP9AGYmE0An43Rlo
vmu5lGPto5pEfuHR1mh8RL9OlDrmjQJ+ymI05p7ZD+icSaD0hU20HsZX1ysLX5kn
6iQKsSRi4IE8YwinP0Cr49b2p2ZtC9Vv6J+1IYSpn/V/Mq1grA4jK4uhjOlJuaoC
/9LAIQXjLOgbah9YQWce4Xb9XzHWra7VBybAPpQc5p5jSV4xkr8LjV/ENg+9qj83
rxOyDlXCP2iEqF2dR3pwDqrSOM75AAfqF9UtNdFRSApF
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:24:52 2026 by rpki-client