This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/UTSVX3B31qE6acA-2M3EInvqjqs.roa File: UTSVX3B31qE6acA-2M3EInvqjqs.roa (raw, json) Hash identifier: 2V2E0vmwbEv4vLiGDwB2fco3T0rwdLt7wl4GPwkBEC8= Subject key identifier: 51:34:95:5F:70:77:D6:A1:3A:69:C0:3E:D8:CD:C4:22:7B:EA:8E:AB Certificate issuer: /CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d Certificate serial: 019B7E37F66629BF7D7271FD8D6338D00686 Authority key identifier: 68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/UTSVX3B31qE6acA-2M3EInvqjqs.roa Signing time: Fri 02 Jan 2026 10:19:15 +0000 ROA not before: Fri 02 Jan 2026 10:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 2001:67c:4f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:f6:66:29:bf:7d:72:71:fd:8d:63:38:d0:06:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d Validity Not Before: Jan 2 10:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5134955f7077d6a13a69c03ed8cdc4227bea8eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:83:db:4d:4f:47:56:28:5f:53:12:16:15:13: fd:54:16:20:8c:73:64:7c:01:72:32:6a:87:81:4b: 39:2f:26:eb:29:4f:d1:18:81:78:46:e0:11:46:97: 27:94:a6:4e:dd:23:b6:6a:5a:f4:08:62:61:a2:cc: be:ab:f0:a0:4e:89:0d:a0:3f:bb:36:46:09:74:33: 1c:dc:41:6a:64:fa:60:0f:6e:ac:5c:d2:5f:5e:d9: 35:f5:51:32:6a:e2:c8:ff:a1:f2:1a:94:53:c9:e7: 41:f8:fd:a3:33:50:e3:cb:f1:58:00:ad:32:e4:1b: d2:34:29:1b:97:f8:03:8a:bc:cd:81:6e:70:f6:ec: c4:e7:4f:b6:24:18:36:89:6f:1f:dc:6d:c3:9e:9b: 4f:c5:83:a5:a2:c0:fe:6d:4c:31:28:e8:36:e7:3a: 9a:76:65:9e:e5:bc:78:16:4c:89:1a:84:b3:bc:e3: c9:da:ab:10:4d:03:d4:ba:7c:7f:4c:51:f7:aa:6e: 85:e7:51:93:c7:46:a5:2f:e9:2d:a7:35:dc:fc:ca: d3:9e:29:b2:b0:ae:32:87:2b:47:dd:4d:c9:61:7f: 92:f1:3c:66:e2:6d:95:2f:97:d5:b3:29:c3:17:c1: 87:25:23:85:2f:a3:c5:da:da:6c:a0:74:d5:4a:38: de:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:34:95:5F:70:77:D6:A1:3A:69:C0:3E:D8:CD:C4:22:7B:EA:8E:AB X509v3 Authority Key Identifier: keyid:68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/UTSVX3B31qE6acA-2M3EInvqjqs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:4f0::/48 Signature Algorithm: sha256WithRSAEncryption 3f:4d:f5:64:fb:6f:39:ed:12:9a:b7:e2:6c:df:d6:e1:7e:c1: 23:88:bd:54:1f:3d:e9:f3:da:af:9c:b7:51:70:64:f6:f2:15: 47:cb:0d:92:75:d3:fb:ae:93:57:e2:3e:e9:07:e7:33:6f:70: 2d:57:11:2e:36:8f:38:ab:38:cd:a9:c9:44:95:a1:5e:72:dc: 58:2d:0c:4e:93:6b:56:50:c0:24:85:c0:92:f1:66:85:79:be: a9:31:c5:a5:a6:4a:65:08:33:f0:80:21:b7:35:23:0d:3d:cc: 0a:32:08:87:8a:5d:f8:18:85:a1:52:5d:99:1b:49:44:a8:8d: a6:4a:1e:34:95:88:ae:48:8c:aa:16:91:9b:d6:1a:d7:41:31: 1e:89:a8:1f:b8:37:4b:3a:11:24:6d:e3:45:48:1b:96:40:46: 19:62:83:5b:60:5e:e6:47:6b:b7:6d:ac:07:aa:46:e4:76:36: 0a:7a:f1:93:39:46:7d:74:ef:73:b2:a1:40:6a:88:b9:fc:8b: ca:e3:df:fa:bb:90:d7:bc:fe:58:e5:f1:b2:23:35:04:af:1b: 58:48:2d:3b:38:ee:8a:5c:5b:90:4d:69:d8:93:60:3d:c2:85: d1:bc:04:89:fa:5d:ee:bd:72:1a:18:15:e9:2c:3a:d4:4e:94: ed:ed:d2:d3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+N/ZmKb99cnH9jWM40AaGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NzcyNmQzOGZjZjJhN2ZiYmI3YmZjMjhkNjNmZTM1Nzll ZDIxMWQwHhcNMjYwMTAyMTAxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTM0OTU1ZjcwNzdkNmExM2E2OWMwM2VkOGNkYzQyMjdiZWE4ZWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIPbTU9HVihfUxIWFRP9VBYgjHNk fAFyMmqHgUs5LybrKU/RGIF4RuARRpcnlKZO3SO2alr0CGJhosy+q/CgTokNoD+7 NkYJdDMc3EFqZPpgD26sXNJfXtk19VEyauLI/6HyGpRTyedB+P2jM1Djy/FYAK0y 5BvSNCkbl/gDirzNgW5w9uzE50+2JBg2iW8f3G3DnptPxYOlosD+bUwxKOg25zqa dmWe5bx4FkyJGoSzvOPJ2qsQTQPUunx/TFH3qm6F51GTx0alL+ktpzXc/MrTnimy sK4yhytH3U3JYX+S8Txm4m2VL5fVsynDF8GHJSOFL6PF2tpsoHTVSjjeRwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFE0lV9wd9ahOmnAPtjNxCJ76o6rMB8GA1UdIwQY MBaAFGh3JtOPzyp/u7e/wo1j/jV57SEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUhjbTA0X1BLbi03dDdfQ2pXUC1OWG50SVIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lNzFlMjctYzY4Ny00ZmQ3LTgxODAt NGIyZGExOTdhN2U2LzEvVVRTVlgzQjMxcUU2YWNBLTJNM0VJbnZxanFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9lNzFlMjctYzY4Ny00ZmQ3LTgxODAtNGIyZGExOTdhN2U2 LzEvYUhjbTA0X1BLbi03dDdfQ2pXUC1OWG50SVIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfATw MA0GCSqGSIb3DQEBCwUAA4IBAQA/TfVk+2857RKat+Js39bhfsEjiL1UHz3p89qv nLdRcGT28hVHyw2SddP7rpNX4j7pB+czb3AtVxEuNo84qzjNqclElaFectxYLQxO k2tWUMAkhcCS8WaFeb6pMcWlpkplCDPwgCG3NSMNPcwKMgiHil34GIWhUl2ZG0lE qI2mSh40lYiuSIyqFpGb1hrXQTEeiagfuDdLOhEkbeNFSBuWQEYZYoNbYF7mR2u3 bawHqkbkdjYKevGTOUZ9dO9zsqFAaoi5/IvK49/6u5DXvP5Y5fGyIzUErxtYSC07 OO6KXFuQTWnYk2A9woXRvASJ+l3uvXIaGBXpLDrUTpTt7dLT -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:33 2026 by rpki-client