This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/umtuM_FmqhTzc1RRlhZLeY1IeUA.roa File: umtuM_FmqhTzc1RRlhZLeY1IeUA.roa (raw, json) Hash identifier: RnJvpvTVhtgv/Olo7lWTvhCJN296TqeNatCSInAYxYY= Subject key identifier: BA:6B:6E:33:F1:66:AA:14:F3:73:54:51:96:16:4B:79:8D:48:79:40 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797EC9FFB939CFDAD35AB167B6082269 Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/umtuM_FmqhTzc1RRlhZLeY1IeUA.roa Signing time: Thu 01 Jan 2026 12:18:30 +0000 ROA not before: Thu 01 Jan 2026 12:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197897 IP address blocks: 88.203.250.0/24 maxlen: 24 88.203.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c9:ff:b9:39:cf:da:d3:5a:b1:67:b6:08:22:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba6b6e33f166aa14f373545196164b798d487940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:26:fb:28:cc:f1:9f:7d:d8:69:12:36:ec:94: dc:c2:56:a2:49:48:b6:3b:bb:af:dc:3b:53:a9:92: c2:68:42:af:ea:12:e2:76:55:a5:d0:f9:4d:cf:b7: 66:12:9d:77:cd:94:89:ad:22:41:8c:7f:44:b0:fb: cf:6f:e3:1e:64:2f:ed:4f:ba:c9:7e:76:43:11:09: 62:32:1a:ad:2a:ee:2c:a4:d4:80:e3:c8:2b:34:b9: 1c:59:35:23:69:0c:65:b6:60:00:6c:e7:8d:6a:1f: 4d:69:10:17:67:e3:65:88:8e:fb:6c:41:75:ed:48: 83:3d:49:a8:f6:b6:6b:a8:3d:d6:12:65:8d:40:78: a4:2f:b1:a9:30:c7:a5:08:ee:6a:2a:f8:88:ea:66: 48:e6:df:01:d8:d8:88:f7:84:dc:e7:6e:89:7d:cd: 70:b0:7d:4a:5c:f4:9b:b2:e7:66:31:15:df:06:67: d4:65:40:db:61:61:a4:76:7e:0c:41:04:c8:3e:c6: 1b:97:a3:42:ed:f4:23:40:bf:72:cc:ca:a4:94:96: 9e:e2:46:dd:42:1b:c6:5b:00:9e:aa:1d:66:0b:a1: 6c:be:05:8e:16:c4:5e:9d:8d:64:c9:2c:68:34:4c: 41:e2:20:a4:e8:b9:8a:79:5b:4e:94:39:ac:3e:77: 4a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:6B:6E:33:F1:66:AA:14:F3:73:54:51:96:16:4B:79:8D:48:79:40 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/umtuM_FmqhTzc1RRlhZLeY1IeUA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.203.250.0/23 Signature Algorithm: sha256WithRSAEncryption 64:f6:ff:8b:e8:ca:5b:fd:57:e3:b7:13:36:3a:21:d7:25:10: 94:a9:96:75:5d:fd:89:c8:3c:a9:84:af:cc:26:fd:6c:d5:be: 38:d2:13:b3:63:fc:96:d6:da:4b:b2:b6:b5:f2:22:1f:c2:bb: 26:ed:c1:0e:50:79:4e:0b:ef:60:29:12:80:5e:a7:ad:1b:1f: 1a:4c:d5:02:59:69:b2:02:fd:b0:c2:b6:d7:8c:f8:ba:e8:f2: 29:1a:04:64:f9:e6:c5:a1:9d:c0:08:67:e6:a9:d0:10:39:e4: 49:1a:11:c8:03:b1:bd:c4:9e:f5:0b:ba:c8:1c:80:c0:00:72: 98:e2:9c:17:15:e2:c9:34:48:1c:24:dc:63:da:80:61:7b:40: f7:66:f7:46:37:22:46:cf:60:6a:41:32:27:fe:17:fa:0b:99: b5:5e:ca:40:d9:6d:fa:d3:d6:25:da:a7:6f:71:6c:0e:91:70: f8:8f:bb:34:c1:0e:0b:a1:c6:fa:46:63:fd:fc:73:ca:29:80: 13:d9:40:8b:48:ad:fe:1d:03:d7:6b:59:b6:d8:89:54:0a:60: 8a:3d:9d:6f:7f:b5:be:82:84:f1:b8:c5:53:6c:f4:73:a3:55: 53:da:50:23:5e:d4:fb:23:7a:ff:2d:f3:ce:5e:6d:17:c8:4a: a4:41:47:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fsn/uTnP2tNasWe2CCJpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTZiNmUzM2YxNjZhYTE0ZjM3MzU0NTE5NjE2NGI3OThkNDg3OTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSb7KMzxn33YaRI27JTcwlaiSUi2 O7uv3DtTqZLCaEKv6hLidlWl0PlNz7dmEp13zZSJrSJBjH9EsPvPb+MeZC/tT7rJ fnZDEQliMhqtKu4spNSA48grNLkcWTUjaQxltmAAbOeNah9NaRAXZ+NliI77bEF1 7UiDPUmo9rZrqD3WEmWNQHikL7GpMMelCO5qKviI6mZI5t8B2NiI94Tc526Jfc1w sH1KXPSbsudmMRXfBmfUZUDbYWGkdn4MQQTIPsYbl6NC7fQjQL9yzMqklJae4kbd QhvGWwCeqh1mC6FsvgWOFsRenY1kySxoNExB4iCk6LmKeVtOlDmsPndKuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLprbjPxZqoU83NUUZYWS3mNSHlAMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvdW10dU1fRm1xaFR6YzFSUmxoWkxlWTFJZVVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWMv6MA0G CSqGSIb3DQEBCwUAA4IBAQBk9v+L6Mpb/VfjtxM2OiHXJRCUqZZ1Xf2JyDyphK/M Jv1s1b440hOzY/yW1tpLsra18iIfwrsm7cEOUHlOC+9gKRKAXqetGx8aTNUCWWmy Av2wwrbXjPi66PIpGgRk+ebFoZ3ACGfmqdAQOeRJGhHIA7G9xJ71C7rIHIDAAHKY 4pwXFeLJNEgcJNxj2oBhe0D3ZvdGNyJGz2BqQTIn/hf6C5m1XspA2W3609Yl2qdv cWwOkXD4j7s0wQ4Locb6RmP9/HPKKYAT2UCLSK3+HQPXa1m22IlUCmCKPZ1vf7W+ goTxuMVTbPRzo1VT2lAjXtT7I3r/LfPOXm0XyEqkQUdJ -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:49 2026 by rpki-client