This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/UTis-WRbY-GU5C280jtcweSQcGM.roa File: UTis-WRbY-GU5C280jtcweSQcGM.roa (raw, json) Hash identifier: nSL7O1zv/Owqh3yoxdhgakgYNvWvR6WzZovijGhXAe0= Subject key identifier: 51:38:AC:F9:64:5B:63:E1:94:E4:2D:BC:D2:3B:5C:C1:E4:90:70:63 Certificate issuer: /CN=1492a20754c9a7650b8279b9390689c469d73595 Certificate serial: 019B7EA701ED534BCFC6A502BD22184A8940 Authority key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/UTis-WRbY-GU5C280jtcweSQcGM.roa Signing time: Fri 02 Jan 2026 12:20:32 +0000 ROA not before: Fri 02 Jan 2026 12:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15600 IP address blocks: 5.153.240.0/21 maxlen: 21 83.219.112.0/20 maxlen: 24 185.74.140.0/22 maxlen: 22 185.74.152.0/22 maxlen: 22 2a00:d2e0::/29 maxlen: 29 2a00:d560::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:01:ed:53:4b:cf:c6:a5:02:bd:22:18:4a:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1492a20754c9a7650b8279b9390689c469d73595 Validity Not Before: Jan 2 12:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5138acf9645b63e194e42dbcd23b5cc1e4907063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:57:3a:bc:1f:f1:14:72:0f:b3:63:21:36:27: 60:fb:82:ab:7e:10:f8:33:37:bd:55:f7:1a:8a:80: f2:73:14:b0:be:2c:cc:ee:42:ba:74:92:73:b2:59: 67:46:e2:2c:42:35:6f:be:8d:cb:70:23:56:7d:26: d7:f1:ab:fe:6c:fd:81:ae:7f:05:46:ab:c8:64:e3: e8:cc:56:e1:5c:d7:db:64:42:f8:5e:b8:fd:09:fd: 4b:4a:30:20:7f:19:6a:74:4a:07:7a:41:1f:73:bb: 32:df:2c:2e:fd:a9:3b:bc:6a:f2:79:57:a1:3d:ad: 46:17:da:d9:05:69:41:64:1d:99:09:66:39:4c:9b: c2:3a:28:fa:4a:bc:53:f9:c9:4d:34:bc:bc:2e:4e: bc:42:91:68:99:c0:d7:26:f2:a0:fa:d9:cc:b3:db: 0e:61:ce:f7:a7:0f:8e:5d:09:5f:8c:24:b3:ec:1b: a7:62:66:ae:83:d6:32:62:c8:ca:4f:1e:0d:b9:47: 2d:9b:91:8c:c3:1d:79:4d:58:00:bb:f7:86:26:02: d2:ad:38:03:4f:e1:29:2a:9d:48:bd:ea:45:4a:73: 8a:7a:df:7a:39:2a:ca:ac:9a:50:99:99:c7:cd:3e: 76:92:03:7a:7f:2a:1e:01:f2:bd:e6:a1:30:9e:0e: 14:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:38:AC:F9:64:5B:63:E1:94:E4:2D:BC:D2:3B:5C:C1:E4:90:70:63 X509v3 Authority Key Identifier: keyid:14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/UTis-WRbY-GU5C280jtcweSQcGM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.153.240.0/21 83.219.112.0/20 185.74.140.0/22 185.74.152.0/22 IPv6: 2a00:d2e0::/29 2a00:d560::/29 Signature Algorithm: sha256WithRSAEncryption 7f:f4:61:c8:81:17:97:9b:63:ae:08:36:7c:4f:cb:ab:9b:e5: cb:b9:40:cf:cd:c7:e2:ca:b7:4a:2b:fd:99:65:1c:cc:bb:7b: f1:5f:16:85:16:51:0f:c7:5c:e5:c6:b1:fe:4c:df:b3:cf:8f: 43:a3:fd:c4:96:8a:f2:11:60:6b:57:9d:00:1e:40:1a:15:fe: 26:ce:5d:ff:e3:6c:01:ab:ae:ff:25:b0:ef:30:11:aa:df:c5: 1c:a6:7f:85:0a:df:fd:7a:af:34:13:df:83:c8:4e:61:e5:2f: ed:7c:72:26:6a:ad:87:20:17:8c:14:82:4b:c1:d4:75:ce:8c: 43:8c:67:69:10:b8:28:8d:ed:c0:fd:10:9c:fe:dc:18:10:f2: df:1d:3a:b2:fe:2a:73:77:83:cf:ac:13:38:b1:f5:3f:eb:b6: 5f:39:77:ce:98:3e:45:ba:60:8a:4c:de:d5:0d:5d:0d:e5:7c: d9:5d:d0:a3:12:81:2c:c5:b3:73:bd:66:81:68:d1:d2:9f:ef: 42:45:c7:b6:9d:98:c0:61:26:63:a9:ee:c8:b2:d3:d8:93:39: ec:68:b9:bf:ab:5e:4a:0a:6b:a2:c2:2e:2d:ad:63:1a:4a:39: 8e:41:e7:aa:f6:eb:42:96:99:53:6e:d0:38:c0:a4:05:fa:ed: d7:ef:11:f3 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt+pwHtU0vPxqUCvSIYSolAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0OTJhMjA3NTRjOWE3NjUwYjgyNzliOTM5MDY4OWM0Njlk NzM1OTUwHhcNMjYwMTAyMTIyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTM4YWNmOTY0NWI2M2UxOTRlNDJkYmNkMjNiNWNjMWU0OTA3MDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Fc6vB/xFHIPs2MhNidg+4KrfhD4 Mze9VfcaioDycxSwvizM7kK6dJJzsllnRuIsQjVvvo3LcCNWfSbX8av+bP2Brn8F RqvIZOPozFbhXNfbZEL4Xrj9Cf1LSjAgfxlqdEoHekEfc7sy3ywu/ak7vGryeVeh Pa1GF9rZBWlBZB2ZCWY5TJvCOij6SrxT+clNNLy8Lk68QpFomcDXJvKg+tnMs9sO Yc73pw+OXQlfjCSz7BunYmaug9YyYsjKTx4NuUctm5GMwx15TVgAu/eGJgLSrTgD T+EpKp1IvepFSnOKet96OSrKrJpQmZnHzT52kgN6fyoeAfK95qEwng4UxwIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFFE4rPlkW2PhlOQtvNI7XMHkkHBjMB8GA1UdIwQY MBaAFBSSogdUyadlC4J5uTkGicRp1zWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82MzFlNmEtN2QwNi00ZmExLWJmZDkt Y2E3NGEwNjdmZWJmLzEvVVRpcy1XUmJZLUdVNUMyODBqdGN3ZVNRY0dNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS82MzFlNmEtN2QwNi00ZmExLWJmZDktY2E3NGEwNjdmZWJm LzEvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQDBZnwAwQE U9twAwQCuUqMAwQCuUqYMBQEAgACMA4DBQMqANLgAwUDKgDVYDANBgkqhkiG9w0B AQsFAAOCAQEAf/RhyIEXl5tjrgg2fE/Lq5vly7lAz83H4sq3Siv9mWUczLt78V8W hRZRD8dc5cax/kzfs8+PQ6P9xJaK8hFga1edAB5AGhX+Js5d/+NsAauu/yWw7zAR qt/FHKZ/hQrf/XqvNBPfg8hOYeUv7XxyJmqthyAXjBSCS8HUdc6MQ4xnaRC4KI3t wP0QnP7cGBDy3x06sv4qc3eDz6wTOLH1P+u2Xzl3zpg+Rbpgikze1Q1dDeV82V3Q oxKBLMWzc71mgWjR0p/vQkXHtp2YwGEmY6nuyLLT2JM57Gi5v6teSgprosIuLa1j Gko5jkHnqvbrQpaZU27QOMCkBfrt1+8R8w== -----END CERTIFICATE-----Generated at Mon Jan 26 20:41:23 2026 by rpki-client