This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/0UtZJpaH9ZhWJzvOUmqS1m2r370.roa File: 0UtZJpaH9ZhWJzvOUmqS1m2r370.roa (raw, json) Hash identifier: UdeibxbzHWRgn3KJEu2PyWPjfgCf2fUauCUDT1MFzeU= Subject key identifier: D1:4B:59:26:96:87:F5:98:56:27:3B:CE:52:6A:92:D6:6D:AB:DF:BD Certificate issuer: /CN=007e6b5aa437d3693151502a211496e37d4ae2c5 Certificate serial: 019B7B3614F57E10485414E94E1F105DE651 Authority key identifier: 00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/0UtZJpaH9ZhWJzvOUmqS1m2r370.roa Signing time: Thu 01 Jan 2026 20:18:20 +0000 ROA not before: Thu 01 Jan 2026 20:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8677 IP address blocks: 89.106.184.0/21 maxlen: 24 160.92.0.0/16 maxlen: 24 192.136.30.0/24 maxlen: 24 193.16.186.0/23 maxlen: 24 193.16.188.0/22 maxlen: 24 193.56.46.0/24 maxlen: 24 193.58.80.0/21 maxlen: 24 193.201.76.0/23 maxlen: 24 2a01:20:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:14:f5:7e:10:48:54:14:e9:4e:1f:10:5d:e6:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=007e6b5aa437d3693151502a211496e37d4ae2c5 Validity Not Before: Jan 1 20:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d14b59269687f59856273bce526a92d66dabdfbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:36:c8:be:20:89:cc:98:40:60:1d:37:f6:2a: 66:cc:42:cc:c0:04:c2:e5:e1:c4:63:84:43:72:27: 2a:5f:a2:4b:5b:3f:83:3f:c1:44:d4:0c:9f:b0:a6: 14:e6:b5:01:e0:63:45:f4:7a:73:a6:c2:1b:0a:c2: cb:7c:d6:3e:7a:cd:c6:e3:d1:bb:51:d7:1c:6d:c7: b9:29:3d:1d:cd:fe:51:3d:03:22:72:f2:59:c4:91: 47:26:a9:04:79:58:75:e1:5b:d8:84:21:75:dd:8b: 4c:5f:7f:c9:f6:c5:4a:5c:83:57:15:78:10:78:da: 77:fd:b2:d3:4e:74:36:82:6e:03:7b:0f:6b:53:20: 13:1d:e2:c2:c2:a6:b1:d0:6c:3c:cc:68:09:b6:6e: ca:b7:fb:b0:59:2e:84:cc:e6:ae:b2:5e:6a:01:b0: f7:a8:c2:68:60:de:45:97:4b:d5:31:0d:e3:fa:88: 6e:85:4f:9b:97:92:39:a4:72:dd:2a:1c:be:1b:20: b8:ee:86:8b:60:d6:91:7a:03:1a:5f:5d:f4:b7:8d: e8:cd:de:62:0b:07:77:0d:aa:5e:2e:97:f1:68:b6: 81:73:4b:cd:c2:2f:f5:0f:4a:8a:b0:40:ad:45:35: ab:18:53:21:24:bf:da:06:77:73:24:da:4f:37:9b: 48:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4B:59:26:96:87:F5:98:56:27:3B:CE:52:6A:92:D6:6D:AB:DF:BD X509v3 Authority Key Identifier: keyid:00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/0UtZJpaH9ZhWJzvOUmqS1m2r370.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.184.0/21 160.92.0.0/16 192.136.30.0/24 193.16.186.0-193.16.191.255 193.56.46.0/24 193.58.80.0/21 193.201.76.0/23 IPv6: 2a01:20:6::/48 Signature Algorithm: sha256WithRSAEncryption cd:62:47:b1:c3:72:a4:c2:92:03:91:b7:d6:e9:6e:5f:92:59: 25:fc:1c:60:72:3b:14:de:3e:63:6b:5e:a4:52:27:6a:74:63: dc:c4:83:17:db:c7:f4:cd:7e:8e:1a:58:c2:b3:79:a8:6f:a4: 0c:0f:14:25:c2:09:78:33:1d:0a:f0:19:c5:a3:3d:3a:60:2a: f4:ef:7a:fc:c8:50:5f:89:12:e7:4f:5c:d6:67:44:62:98:36: 76:73:73:67:cb:2d:97:ba:16:c6:ae:6b:37:66:b2:42:f4:f5: 80:51:5c:6f:d2:a2:1b:d1:e2:87:e8:b9:12:88:c8:63:9b:89: 9b:ce:5c:e1:bf:10:dc:27:f2:03:b2:de:08:58:71:88:43:62: 00:66:21:ae:4e:89:5c:6d:7e:6a:d3:83:86:31:b3:fe:df:d7: a7:b0:c9:77:32:f9:7d:44:71:78:e9:05:b3:a9:af:c2:de:c3: 9c:58:bd:dc:2f:8d:50:1f:6b:8c:2c:2d:2a:2d:ff:74:8e:02: eb:ad:40:12:4f:d7:37:d3:b1:60:67:bd:60:a5:1e:f2:88:a7: 72:a8:c9:88:67:5f:67:cb:6b:55:5f:f6:f8:f4:da:7b:b9:5a: 60:26:da:ca:b5:6d:1c:ea:f8:2f:45:09:9f:7d:3f:97:b3:c2: d1:69:8f:8b -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt7NhT1fhBIVBTpTh8QXeZRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwN2U2YjVhYTQzN2QzNjkzMTUxNTAyYTIxMTQ5NmUzN2Q0 YWUyYzUwHhcNMjYwMTAxMjAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTRiNTkyNjk2ODdmNTk4NTYyNzNiY2U1MjZhOTJkNjZkYWJkZmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjbIviCJzJhAYB039ipmzELMwATC 5eHEY4RDcicqX6JLWz+DP8FE1AyfsKYU5rUB4GNF9HpzpsIbCsLLfNY+es3G49G7 Udccbce5KT0dzf5RPQMicvJZxJFHJqkEeVh14VvYhCF13YtMX3/J9sVKXINXFXgQ eNp3/bLTTnQ2gm4Dew9rUyATHeLCwqax0Gw8zGgJtm7Kt/uwWS6EzOausl5qAbD3 qMJoYN5Fl0vVMQ3j+ohuhU+bl5I5pHLdKhy+GyC47oaLYNaRegMaX130t43ozd5i Cwd3DapeLpfxaLaBc0vNwi/1D0qKsECtRTWrGFMhJL/aBndzJNpPN5tIWwIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFNFLWSaWh/WYVic7zlJqktZtq9+9MB8GA1UdIwQY MBaAFAB+a1qkN9NpMVFQKiEUluN9SuLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUg1cldxUTMwMmt4VVZBcUlSU1c0MzFLNHNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy81MThmYWItNzYwNi00ODMyLWFhNjYt NWE4YzY3ODQyMzg5LzEvMFV0WkpwYUg5WmhXSnp2T1VtcVMxbTJyMzcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy81MThmYWItNzYwNi00ODMyLWFhNjYtNWE4YzY3ODQyMzg5 LzEvQUg1cldxUTMwMmt4VVZBcUlSU1c0MzFLNHNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjA3BAIAATAxAwQDWWq4AwMA oFwDBADAiB4wDAMEAcEQugMEBsEQgAMEAME4LgMEA8E6UAMEAcHJTDAPBAIAAjAJ AwcAKgEAIAAGMA0GCSqGSIb3DQEBCwUAA4IBAQDNYkexw3KkwpIDkbfW6W5fklkl /BxgcjsU3j5ja16kUidqdGPcxIMX28f0zX6OGljCs3mob6QMDxQlwgl4Mx0K8BnF oz06YCr073r8yFBfiRLnT1zWZ0RimDZ2c3Nnyy2XuhbGrms3ZrJC9PWAUVxv0qIb 0eKH6LkSiMhjm4mbzlzhvxDcJ/IDst4IWHGIQ2IAZiGuTolcbX5q04OGMbP+39en sMl3Mvl9RHF46QWzqa/C3sOcWL3cL41QH2uMLC0qLf90jgLrrUAST9c307FgZ71g pR7yiKdyqMmIZ19ny2tVX/b49Np7uVpgJtrKtW0c6vgvRQmffT+Xs8LRaY+L -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:07 2026 by rpki-client