This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/UTz-CAu9udrXHC-2_mble0zxioE.roa File: UTz-CAu9udrXHC-2_mble0zxioE.roa (raw, json) Hash identifier: khov/J99ODqiFOcvNEfOtWttZ4QbtF1bybuUhyPlZGc= Subject key identifier: 51:3C:FE:08:0B:BD:B9:DA:D7:1C:2F:B6:FE:66:E5:7B:4C:F1:8A:81 Certificate issuer: /CN=f050147ee9f62f970423cbd8b6d52ea5f4a0eda5 Certificate serial: 019B7F158580A4D24044CF7B38FF6B0E896F Authority key identifier: F0:50:14:7E:E9:F6:2F:97:04:23:CB:D8:B6:D5:2E:A5:F4:A0:ED:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/UTz-CAu9udrXHC-2_mble0zxioE.roa Signing time: Fri 02 Jan 2026 14:21:15 +0000 ROA not before: Fri 02 Jan 2026 14:21:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8881 IP address blocks: 193.28.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.crl rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:85:80:a4:d2:40:44:cf:7b:38:ff:6b:0e:89:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f050147ee9f62f970423cbd8b6d52ea5f4a0eda5 Validity Not Before: Jan 2 14:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=513cfe080bbdb9dad71c2fb6fe66e57b4cf18a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8e:b0:6d:7a:41:95:5b:1f:67:ee:13:f9:a5: f5:c2:f1:b2:a0:6c:df:41:6a:94:6f:84:85:9c:d8: a7:80:b9:06:7e:d9:41:44:5b:98:d5:12:61:01:d6: 32:de:a0:79:64:ee:cc:be:5d:80:12:86:7c:2d:8a: 6a:8e:e5:1f:61:24:c4:6a:75:54:4a:54:a6:f6:3a: bd:2c:9d:c6:c5:a9:08:4c:58:26:ee:82:6a:ac:fb: a9:73:a6:21:b3:45:53:4a:0f:dc:12:cc:9e:38:e8: d8:72:64:d0:a5:61:eb:c8:0d:de:65:2c:c1:8f:51: 1e:6e:4f:3b:75:63:b0:57:ac:1b:7d:a6:2a:bd:1f: 2e:6d:4f:b2:c4:43:c7:fc:ef:dd:f8:df:d2:35:9b: 28:24:49:22:99:1a:9c:51:98:d2:ab:f5:a4:5f:fe: 8d:83:f5:d0:2b:cf:d8:c7:7a:28:c6:d1:18:aa:f7: ae:93:69:c8:45:25:82:92:a8:1a:2b:d1:28:03:b9: 42:c7:27:b7:ee:bf:cc:46:c8:ce:bd:e4:b6:4f:e9: 5f:fc:62:c0:8f:5c:da:f4:2a:66:b0:6e:4d:88:82: fb:5d:85:80:a3:e7:d2:a5:68:f8:b4:f8:86:ec:98: b1:c8:b3:f4:87:94:9e:64:53:69:d9:92:72:7e:ef: 9a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:3C:FE:08:0B:BD:B9:DA:D7:1C:2F:B6:FE:66:E5:7B:4C:F1:8A:81 X509v3 Authority Key Identifier: keyid:F0:50:14:7E:E9:F6:2F:97:04:23:CB:D8:B6:D5:2E:A5:F4:A0:ED:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/UTz-CAu9udrXHC-2_mble0zxioE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.28.72.0/21 Signature Algorithm: sha256WithRSAEncryption 5d:94:ed:2c:b3:76:d9:85:be:12:d8:43:25:be:1f:36:90:67: aa:b3:4d:a7:40:fb:b9:68:aa:c6:99:c7:b5:b6:55:5f:72:a6: 10:94:27:e5:c4:64:93:4b:a7:d8:46:07:19:39:9d:18:47:c4: a5:6b:fc:03:00:80:5a:f2:dd:63:e3:b9:d1:96:d0:15:3f:dc: 46:c6:70:80:cc:12:fc:6d:e4:45:71:01:83:56:ca:61:83:28: ea:db:3f:1f:23:89:c8:78:99:76:ee:9d:c4:0d:27:bb:70:20: 2e:97:64:dd:7c:01:e8:ff:ba:37:e4:cc:25:1d:0e:c7:c0:a8: 7b:1b:d6:79:97:7b:64:cb:77:a5:5e:b3:df:f9:6c:49:5f:13: ec:54:07:5c:f5:ce:bb:83:aa:eb:f1:ba:f9:e9:8b:80:a8:84: 28:2d:9e:5d:b0:e1:77:fa:bc:47:6d:12:9e:fd:4f:db:0f:20: e4:5d:51:55:2f:d5:51:8b:10:b6:05:45:27:5d:cd:4b:83:29: c8:e1:14:70:20:5b:7d:ab:a4:8b:7b:7f:dd:de:7a:fe:e0:ea: 9c:c5:a5:01:23:e1:f0:08:e4:97:a1:c2:c7:94:1f:92:cf:00: 0b:6e:ff:d2:fd:e0:0d:89:23:1e:ab:0d:15:fa:ee:12:1e:c3: 6d:c8:5d:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FYWApNJARM97OP9rDolvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTAxNDdlZTlmNjJmOTcwNDIzY2JkOGI2ZDUyZWE1ZjRh MGVkYTUwHhcNMjYwMTAyMTQyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTNjZmUwODBiYmRiOWRhZDcxYzJmYjZmZTY2ZTU3YjRjZjE4YTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI6wbXpBlVsfZ+4T+aX1wvGyoGzf QWqUb4SFnNingLkGftlBRFuY1RJhAdYy3qB5ZO7Mvl2AEoZ8LYpqjuUfYSTEanVU SlSm9jq9LJ3GxakITFgm7oJqrPupc6Yhs0VTSg/cEsyeOOjYcmTQpWHryA3eZSzB j1Eebk87dWOwV6wbfaYqvR8ubU+yxEPH/O/d+N/SNZsoJEkimRqcUZjSq/WkX/6N g/XQK8/Yx3ooxtEYqveuk2nIRSWCkqgaK9EoA7lCxye37r/MRsjOveS2T+lf/GLA j1za9CpmsG5NiIL7XYWAo+fSpWj4tPiG7JixyLP0h5SeZFNp2ZJyfu+arwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFE8/ggLvbna1xwvtv5m5XtM8YqBMB8GA1UdIwQY MBaAFPBQFH7p9i+XBCPL2LbVLqX0oO2lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZBVWZ1bjJMNWNFSTh2WXR0VXVwZlNnN2FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wNzIxMDUtNDllZi00OTAzLTk2OTUt ZWViODY1ZDEwZGJhLzEvVVR6LUNBdTl1ZHJYSEMtMl9tYmxlMHp4aW9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8wNzIxMDUtNDllZi00OTAzLTk2OTUtZWViODY1ZDEwZGJh LzEvOEZBVWZ1bjJMNWNFSTh2WXR0VXVwZlNnN2FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwRxIMA0G CSqGSIb3DQEBCwUAA4IBAQBdlO0ss3bZhb4S2EMlvh82kGeqs02nQPu5aKrGmce1 tlVfcqYQlCflxGSTS6fYRgcZOZ0YR8Sla/wDAIBa8t1j47nRltAVP9xGxnCAzBL8 beRFcQGDVsphgyjq2z8fI4nIeJl27p3EDSe7cCAul2TdfAHo/7o35MwlHQ7HwKh7 G9Z5l3tky3elXrPf+WxJXxPsVAdc9c67g6rr8br56YuAqIQoLZ5dsOF3+rxHbRKe /U/bDyDkXVFVL9VRixC2BUUnXc1LgynI4RRwIFt9q6SLe3/d3nr+4OqcxaUBI+Hw COSXocLHlB+SzwALbv/S/eANiSMeqw0V+u4SHsNtyF0V -----END CERTIFICATE-----Generated at Sun Jan 25 16:11:58 2026 by rpki-client