This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/utuYkDSjgl6DW6FD4qnbkWDpESc.roa File: utuYkDSjgl6DW6FD4qnbkWDpESc.roa (raw, json) Hash identifier: vNrbl/jL6h1nrgmuIRvfEjHF819EKSekUKjVB/Vl0ek= Subject key identifier: BA:DB:98:90:34:A3:82:5E:83:5B:A1:43:E2:A9:DB:91:60:E9:11:27 Certificate issuer: /CN=632e3d037bf0507571b2a068cb90308374ce53ed Certificate serial: 019B7EA68760D764D447E87A59A1E517E937 Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/utuYkDSjgl6DW6FD4qnbkWDpESc.roa Signing time: Fri 02 Jan 2026 12:20:01 +0000 ROA not before: Fri 02 Jan 2026 12:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 171.22.145.0/24 maxlen: 24 185.243.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:87:60:d7:64:d4:47:e8:7a:59:a1:e5:17:e9:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed Validity Not Before: Jan 2 12:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=badb989034a3825e835ba143e2a9db9160e91127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:55:72:57:9d:27:7e:c6:aa:a0:b3:f3:9a:c5: 05:48:c9:f2:4f:c4:9b:bb:1d:f9:83:c4:ec:a5:c4: 06:b9:55:63:60:58:97:b0:6d:c3:e0:54:5d:f1:07: da:ac:fa:84:0d:0b:c4:60:3b:72:b3:0b:9f:3d:1a: 31:25:a6:54:85:f6:99:b2:f8:5b:84:b7:e9:bd:ce: 69:a6:55:da:51:b9:82:10:0d:00:1d:57:fa:72:6f: 05:ba:31:d9:95:a3:8e:e7:9b:76:0a:e9:9e:6c:9b: 75:af:53:90:2c:5d:f3:79:8f:f3:f9:10:8a:d7:29: b7:15:de:9c:bb:0c:26:72:1b:53:63:5e:3f:8c:55: ab:bd:2f:95:ae:61:7f:90:22:d6:0e:0b:2c:64:63: 96:b7:31:e2:f5:67:5e:82:24:af:56:10:53:76:73: 3f:38:bf:5d:7a:d4:4f:ef:1b:e9:32:2a:22:90:15: 3f:95:62:56:b6:14:c0:da:9e:6c:07:b4:f6:65:cf: a8:b6:89:60:cb:29:cb:4e:14:99:3b:09:7f:55:31: da:a3:99:a8:af:47:b0:e8:3b:1f:e2:24:a8:53:40: 99:d9:e0:44:a8:b7:24:66:45:7c:2b:52:a0:fb:1a: f7:f3:b5:43:a8:91:42:44:60:29:11:5b:31:1b:dc: 62:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:DB:98:90:34:A3:82:5E:83:5B:A1:43:E2:A9:DB:91:60:E9:11:27 X509v3 Authority Key Identifier: keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/utuYkDSjgl6DW6FD4qnbkWDpESc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.22.145.0/24 185.243.129.0/24 Signature Algorithm: sha256WithRSAEncryption 12:6f:9f:21:61:69:a7:9c:10:b5:7c:da:88:09:aa:85:69:05: 8b:4a:71:f6:e1:05:e1:3e:ae:62:c0:a9:12:2f:b2:b3:5d:b4: 3f:09:cd:40:d7:43:9f:f3:71:ce:52:d3:2b:34:55:44:aa:73: c3:8d:85:e5:80:cb:9c:b9:0e:65:3d:9d:ff:63:c8:d9:d0:dc: 5a:7b:67:45:bc:18:98:4c:03:6a:2d:0d:f1:b4:eb:48:59:09: 1c:53:26:df:bf:45:81:14:aa:ff:9e:8c:b5:cf:ec:44:f9:6a: b1:23:c7:d4:dd:72:93:8a:7d:c1:72:0d:17:fd:64:5b:06:b3: 1f:50:3c:81:e8:18:2c:c3:f6:6b:3e:0c:c0:73:ab:30:2d:05: f1:be:d4:e0:73:19:91:e7:4f:f0:b0:49:8c:a2:7e:f3:55:70: 6a:18:f4:29:d7:0c:66:06:d8:be:60:7d:b2:79:cd:3d:a7:20: 1c:72:3e:e5:b3:97:f5:08:2b:4c:e3:d7:da:72:09:32:6f:60: 4d:13:28:02:9c:e7:66:2a:20:98:3c:fd:dd:7b:59:c7:35:d7: 3c:2c:04:b5:99:b4:a2:fb:2a:72:75:76:d6:e8:e1:e7:1b:44: 79:03:d7:01:29:0a:48:99:b0:17:0a:a9:31:20:1f:be:20:cf: c9:17:26:58 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+podg12TUR+h6WaHlF+k3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMmUzZDAzN2JmMDUwNzU3MWIyYTA2OGNiOTAzMDgzNzRj ZTUzZWQwHhcNMjYwMTAyMTIyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWRiOTg5MDM0YTM4MjVlODM1YmExNDNlMmE5ZGI5MTYwZTkxMTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVVyV50nfsaqoLPzmsUFSMnyT8Sb ux35g8TspcQGuVVjYFiXsG3D4FRd8QfarPqEDQvEYDtyswufPRoxJaZUhfaZsvhb hLfpvc5pplXaUbmCEA0AHVf6cm8FujHZlaOO55t2CumebJt1r1OQLF3zeY/z+RCK 1ym3Fd6cuwwmchtTY14/jFWrvS+VrmF/kCLWDgssZGOWtzHi9WdegiSvVhBTdnM/ OL9detRP7xvpMioikBU/lWJWthTA2p5sB7T2Zc+otolgyynLThSZOwl/VTHao5mo r0ew6Dsf4iSoU0CZ2eBEqLckZkV8K1Kg+xr387VDqJFCRGApEVsxG9xipQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLrbmJA0o4Jeg1uhQ+Kp25Fg6REnMB8GA1UdIwQY MBaAFGMuPQN78FB1cbKgaMuQMIN0zlPtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXk0OUEzdndVSFZ4c3FCb3k1QXdnM1RPVS0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9mOWY0YTktYTBjZC00MTA3LWFhNDEt ZDUyYTE4OTg1OTk5LzEvdXR1WWtEU2pnbDZEVzZGRDRxbmJrV0RwRVNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9mOWY0YTktYTBjZC00MTA3LWFhNDEtZDUyYTE4OTg1OTk5 LzEvWXk0OUEzdndVSFZ4c3FCb3k1QXdnM1RPVS0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAqxaRAwQA ufOBMA0GCSqGSIb3DQEBCwUAA4IBAQASb58hYWmnnBC1fNqICaqFaQWLSnH24QXh Pq5iwKkSL7KzXbQ/Cc1A10Of83HOUtMrNFVEqnPDjYXlgMucuQ5lPZ3/Y8jZ0Nxa e2dFvBiYTANqLQ3xtOtIWQkcUybfv0WBFKr/noy1z+xE+WqxI8fU3XKTin3Bcg0X /WRbBrMfUDyB6Bgsw/ZrPgzAc6swLQXxvtTgcxmR50/wsEmMon7zVXBqGPQp1wxm Bti+YH2yec09pyAccj7ls5f1CCtM49facgkyb2BNEygCnOdmKiCYPP3de1nHNdc8 LAS1mbSi+ypydXbW6OHnG0R5A9cBKQpImbAXCqkxIB++IM/JFyZY -----END CERTIFICATE-----Generated at Thu Jan 8 00:16:42 2026 by rpki-client