This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/1utoEShH5AmTt79y1zx-Gta_IU4.roa File: 1utoEShH5AmTt79y1zx-Gta_IU4.roa (raw, json) Hash identifier: ORpna8ZAvXV8ys2iYurxCqgk2LCtS/yxIeHlBJ5A+tA= Subject key identifier: D6:EB:68:11:28:47:E4:09:93:B7:BF:72:D7:3C:7E:1A:D6:BF:21:4E Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e Certificate serial: 019B7EA6AC5C5BEA8E325DADB0799F9AFD41 Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/1utoEShH5AmTt79y1zx-Gta_IU4.roa Signing time: Fri 02 Jan 2026 12:20:10 +0000 ROA not before: Fri 02 Jan 2026 12:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209784 IP address blocks: 81.2.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ac:5c:5b:ea:8e:32:5d:ad:b0:79:9f:9a:fd:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e Validity Not Before: Jan 2 12:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6eb68112847e40993b7bf72d73c7e1ad6bf214e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:56:58:97:54:d9:a9:35:03:77:20:c1:5e:20: 24:aa:11:1c:da:6b:5a:15:5a:0c:ec:40:0d:f2:25: 2c:2a:1c:ac:e9:bf:df:d8:88:47:b4:79:ea:60:c2: 29:b5:06:c9:63:f7:e6:30:63:5a:18:f3:e5:45:03: 92:e9:8b:de:42:ba:c9:5f:97:87:75:f5:0c:ca:11: 1f:c6:16:2c:92:2c:7b:cf:b7:99:bf:67:2f:04:eb: 36:29:8c:13:cf:52:b7:be:4e:f9:4a:ce:f8:cc:9f: f4:cf:54:e3:40:17:3a:2c:bc:88:65:b2:c0:aa:6a: 72:72:c2:f9:e9:94:b1:23:1d:c3:d9:31:b4:ca:d7: bb:5b:80:6a:20:52:94:18:3e:c7:e0:81:b7:34:ff: 50:d6:66:87:39:d3:08:ba:3a:9c:18:dc:d4:08:b1: f8:cf:29:65:fb:a6:33:7e:da:9d:cf:9e:fe:50:5e: e6:c3:4e:db:51:fe:4d:d3:67:c3:f2:9e:f3:cb:a0: 96:93:85:82:2d:af:c5:93:88:63:d9:53:f1:cb:88: 02:7a:14:fa:ed:17:64:f6:00:b1:74:1f:b7:eb:e9: 70:88:1a:0c:e9:28:de:9c:5e:d4:60:ae:d6:df:f3: 01:92:c4:63:28:38:6b:86:27:c7:71:7f:95:5a:fe: 9a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:EB:68:11:28:47:E4:09:93:B7:BF:72:D7:3C:7E:1A:D6:BF:21:4E X509v3 Authority Key Identifier: keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/1utoEShH5AmTt79y1zx-Gta_IU4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.2.187.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:5b:59:d0:ca:01:78:fa:90:6a:6d:1f:7e:d4:08:db:a7:4c: 46:08:f3:67:69:16:a3:f5:4f:1f:ac:7d:80:40:6d:60:62:f9: 70:94:20:41:59:59:ab:d2:09:59:c5:c8:53:5b:22:83:da:3e: 81:6b:0e:aa:0e:3e:f0:d6:0d:c0:a8:80:34:8f:e8:1e:a6:82: 92:8b:23:f2:b3:42:d2:c1:97:da:3d:d7:14:27:dd:04:2f:18: 58:7c:f1:74:c7:d0:46:46:80:01:25:4c:76:82:f6:fc:ff:41: b1:1a:e4:16:76:8b:a2:24:01:08:74:19:36:25:97:7e:74:4c: 01:13:fd:ca:84:1d:b3:12:ed:bc:72:96:24:b3:e1:c7:08:fa: 75:68:c5:b9:2d:8c:1e:c9:81:d6:11:d5:28:0e:db:16:87:93: 6a:84:b6:82:a0:0d:a2:a8:10:32:00:d5:c7:f6:03:23:09:fb: fa:dd:67:76:94:bc:4f:02:8b:c2:66:5d:16:0b:78:e4:5c:dd: fc:f8:e0:fa:32:c2:80:21:14:e9:35:33:11:fd:1d:07:5b:54: a1:a5:c0:46:10:8d:47:57:18:0d:59:95:48:82:91:67:15:f9: d0:f7:86:45:15:a2:6b:ff:61:49:ab:64:43:24:54:89:db:ac: ec:c4:f3:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pqxcW+qOMl2tsHmfmv1BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2 ZGI5OWUwHhcNMjYwMTAyMTIyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmViNjgxMTI4NDdlNDA5OTNiN2JmNzJkNzNjN2UxYWQ2YmYyMTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllZYl1TZqTUDdyDBXiAkqhEc2mta FVoM7EAN8iUsKhys6b/f2IhHtHnqYMIptQbJY/fmMGNaGPPlRQOS6YveQrrJX5eH dfUMyhEfxhYskix7z7eZv2cvBOs2KYwTz1K3vk75Ss74zJ/0z1TjQBc6LLyIZbLA qmpycsL56ZSxIx3D2TG0yte7W4BqIFKUGD7H4IG3NP9Q1maHOdMIujqcGNzUCLH4 zyll+6Yzftqdz57+UF7mw07bUf5N02fD8p7zy6CWk4WCLa/Fk4hj2VPxy4gCehT6 7Rdk9gCxdB+36+lwiBoM6SjenF7UYK7W3/MBksRjKDhrhifHcX+VWv6aRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNbraBEoR+QJk7e/ctc8fhrWvyFOMB8GA1UdIwQY MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt OTU2ZjZiNWM2MTcwLzEvMXV0b0VTaEg1QW1UdDc5eTF6eC1HdGFfSVU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUQK7MA0G CSqGSIb3DQEBCwUAA4IBAQB9W1nQygF4+pBqbR9+1Ajbp0xGCPNnaRaj9U8frH2A QG1gYvlwlCBBWVmr0glZxchTWyKD2j6Baw6qDj7w1g3AqIA0j+gepoKSiyPys0LS wZfaPdcUJ90ELxhYfPF0x9BGRoABJUx2gvb8/0GxGuQWdouiJAEIdBk2JZd+dEwB E/3KhB2zEu28cpYks+HHCPp1aMW5LYweyYHWEdUoDtsWh5NqhLaCoA2iqBAyANXH 9gMjCfv63Wd2lLxPAovCZl0WC3jkXN38+OD6MsKAIRTpNTMR/R0HW1ShpcBGEI1H VxgNWZVIgpFnFfnQ94ZFFaJr/2FJq2RDJFSJ26zsxPPm -----END CERTIFICATE-----Generated at Sun Jan 25 21:04:45 2026 by rpki-client