This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/I2Umub_SU4NDlntrD-fNKlSfw2A.roa File: I2Umub_SU4NDlntrD-fNKlSfw2A.roa (raw, json) Hash identifier: +WIWYqc1qAYKSxLwYH4qBjDRq+jDT6j8Mg3i7GXbP1w= Subject key identifier: 23:65:26:B9:BF:D2:53:83:43:96:7B:6B:0F:E7:CD:2A:54:9F:C3:60 Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81 Certificate serial: 019B959DB2B9221D09A00EB14FD89F348DF9 Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/I2Umub_SU4NDlntrD-fNKlSfw2A.roa Signing time: Tue 06 Jan 2026 23:21:38 +0000 ROA not before: Tue 06 Jan 2026 23:21:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49373 IP address blocks: 185.149.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:95:9d:b2:b9:22:1d:09:a0:0e:b1:4f:d8:9f:34:8d:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81 Validity Not Before: Jan 6 23:21:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=236526b9bfd2538343967b6b0fe7cd2a549fc360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:dc:ae:9e:fc:02:c0:8a:58:bd:f1:d5:b0:24: d9:bd:98:b7:8d:cf:26:f5:83:70:80:60:18:f4:58: 3c:6e:00:5f:c7:82:0a:aa:df:b6:ad:59:92:3b:8f: 40:a4:88:b2:ec:12:87:01:4d:f7:47:a0:03:58:66: 08:ef:8b:e7:24:ce:4c:58:e2:14:dc:3e:33:c7:cf: 1c:6d:d0:af:44:f5:0f:9a:f3:a0:79:11:c1:20:13: 6f:8f:3b:92:d0:ad:39:bf:c3:cc:e5:9d:e6:bf:ba: 7c:76:b2:ec:dd:35:c1:a7:c6:93:bc:ba:15:47:0b: 19:ad:47:3f:b9:ab:fc:23:8f:d9:d3:c2:e7:0b:ce: ae:d9:12:39:14:b6:2d:64:e2:53:ba:8c:b1:3c:1a: 46:da:c3:29:38:6f:a1:9a:b7:2f:46:ae:cc:48:75: 72:8d:47:78:ff:2d:9c:00:83:26:4e:3a:2f:00:db: fc:0f:fb:44:7f:01:ab:ee:a8:5d:cb:ec:da:7d:8c: e4:bd:e7:d9:13:9b:d3:de:62:a2:86:99:b2:38:75: 84:c2:d8:a3:4b:86:46:9f:5c:67:bf:46:a4:99:d3: 84:3b:c2:47:33:ec:89:d7:58:3b:da:ff:82:ab:98: 65:04:5f:f3:cb:68:e5:91:db:68:ef:bf:f5:2b:cc: 8e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:65:26:B9:BF:D2:53:83:43:96:7B:6B:0F:E7:CD:2A:54:9F:C3:60 X509v3 Authority Key Identifier: keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/I2Umub_SU4NDlntrD-fNKlSfw2A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.149.144.0/22 Signature Algorithm: sha256WithRSAEncryption 26:50:16:5c:63:6c:7e:18:77:90:c6:7b:35:90:ef:f6:11:75: dd:8a:b6:94:c4:7d:bc:cb:33:1d:a7:e7:f3:c8:6e:58:aa:81: 13:f7:2e:5e:34:e2:85:3a:39:c3:cc:58:9c:78:b9:d3:26:90: fd:e4:f9:c6:96:40:d7:b5:2c:12:43:75:51:82:e0:7e:02:4f: f0:51:dd:52:18:46:89:5a:a2:4a:e8:77:fc:bc:b9:f3:da:40: 10:9c:86:af:2a:f0:be:43:5c:5f:c1:a6:bb:be:68:1d:3b:94: cc:54:cc:f6:f9:d0:05:ed:00:e2:79:67:58:2e:b9:50:eb:b9: 9e:56:5e:73:49:fa:78:6d:0c:db:9f:3e:a0:60:56:aa:75:4c: a5:66:8b:22:55:69:0c:bd:41:c1:09:9e:ca:4e:b5:70:e2:b7: 62:80:f9:79:c5:43:83:61:fa:43:56:83:92:95:28:17:ab:d6: b9:b7:63:06:6b:8c:af:37:53:96:b2:52:38:91:de:9c:51:bf: a6:b1:c9:3b:93:28:92:1b:4b:87:70:84:14:eb:33:25:e7:8c: 2b:f0:d1:cd:c1:8b:73:ce:0c:99:0d:c7:69:5e:51:e4:e2:4e: 5a:97:6a:bd:b2:a7:87:d1:5b:ca:6c:85:fc:71:16:73:b8:01: a3:70:c5:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuVnbK5Ih0JoA6xT9ifNI35MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMmQzMGIwMTVlYzRlZjFiMGQzYzY0MzQ3YzhkMWI1OTgy OTNmODEwHhcNMjYwMTA2MjMyMTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzY1MjZiOWJmZDI1MzgzNDM5NjdiNmIwZmU3Y2QyYTU0OWZjMzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAityunvwCwIpYvfHVsCTZvZi3jc8m 9YNwgGAY9Fg8bgBfx4IKqt+2rVmSO49ApIiy7BKHAU33R6ADWGYI74vnJM5MWOIU 3D4zx88cbdCvRPUPmvOgeRHBIBNvjzuS0K05v8PM5Z3mv7p8drLs3TXBp8aTvLoV RwsZrUc/uav8I4/Z08LnC86u2RI5FLYtZOJTuoyxPBpG2sMpOG+hmrcvRq7MSHVy jUd4/y2cAIMmTjovANv8D/tEfwGr7qhdy+zafYzkvefZE5vT3mKihpmyOHWEwtij S4ZGn1xnv0akmdOEO8JHM+yJ11g72v+Cq5hlBF/zy2jlkdto77/1K8yONQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCNlJrm/0lODQ5Z7aw/nzSpUn8NgMB8GA1UdIwQY MBaAFE8tMLAV7E7xsNPGQ0fI0bWYKT+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85NjY4YjUtNWU5Mi00YzE4LTliYjkt NDM1MWJiZjc0YzBjLzEvSTJVbXViX1NVNE5EbG50ckQtZk5LbFNmdzJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi85NjY4YjUtNWU5Mi00YzE4LTliYjktNDM1MWJiZjc0YzBj LzEvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZWQMA0G CSqGSIb3DQEBCwUAA4IBAQAmUBZcY2x+GHeQxns1kO/2EXXdiraUxH28yzMdp+fz yG5YqoET9y5eNOKFOjnDzFiceLnTJpD95PnGlkDXtSwSQ3VRguB+Ak/wUd1SGEaJ WqJK6Hf8vLnz2kAQnIavKvC+Q1xfwaa7vmgdO5TMVMz2+dAF7QDieWdYLrlQ67me Vl5zSfp4bQzbnz6gYFaqdUylZosiVWkMvUHBCZ7KTrVw4rdigPl5xUODYfpDVoOS lSgXq9a5t2MGa4yvN1OWslI4kd6cUb+msck7kyiSG0uHcIQU6zMl54wr8NHNwYtz zgyZDcdpXlHk4k5al2q9sqeH0VvKbIX8cRZzuAGjcMXK -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:53 2026 by rpki-client