This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/SM6e5UqBHogNbgt0o12BmkZX2DY.roa File: SM6e5UqBHogNbgt0o12BmkZX2DY.roa (raw, json) Hash identifier: U4nFBrr+xudjO3gD5UENImDfwahddAJuHGHpyaSej5k= Subject key identifier: 48:CE:9E:E5:4A:81:1E:88:0D:6E:0B:74:A3:5D:81:9A:46:57:D8:36 Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Certificate serial: 019B7AC7B5267D3D52C6DF9DCB740EAA724B Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/SM6e5UqBHogNbgt0o12BmkZX2DY.roa Signing time: Thu 01 Jan 2026 18:17:46 +0000 ROA not before: Thu 01 Jan 2026 18:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57797 IP address blocks: 81.27.84.0/24 maxlen: 24 209.131.64.0/21 maxlen: 21 2a12:8ac0::/29 maxlen: 48 2a12:8ac0::/40 maxlen: 48 2a12:8ac1::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:b5:26:7d:3d:52:c6:df:9d:cb:74:0e:aa:72:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Validity Not Before: Jan 1 18:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48ce9ee54a811e880d6e0b74a35d819a4657d836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:54:4d:7a:a8:90:c0:77:04:38:06:13:2f:e9: 78:96:b1:e2:8f:58:96:4b:00:ea:ee:4f:86:12:bd: 05:f3:65:7a:5a:b6:78:9f:97:cd:0d:c8:c0:2a:c5: f2:c3:fb:17:1c:07:6c:88:99:3a:ca:cb:ab:8d:2e: 11:26:1d:ec:1b:e6:c1:d8:0e:17:c6:15:b7:8b:9f: cf:e1:93:1c:c1:e9:fb:56:d7:7d:c6:d7:cc:51:1a: bd:ec:f8:ef:69:db:4e:a3:62:2c:18:89:c2:7b:3d: 6a:37:68:7a:5e:03:a2:bf:de:5c:9b:78:ed:e4:ce: d8:d2:69:24:3d:29:ee:2f:ad:86:46:15:d4:eb:d2: 8c:fc:9e:9c:be:76:03:3c:75:70:bf:df:67:54:1a: 8e:42:d9:2c:69:bc:f5:97:f0:3c:9c:82:34:aa:70: 48:61:93:7a:24:15:e9:53:8f:14:c9:b8:a5:b0:85: 7c:05:f8:77:37:1d:14:51:78:2c:63:fe:28:1e:df: d3:4a:69:32:1b:f2:0e:8c:f7:5b:22:fc:2e:8b:b0: 9a:32:dd:5d:e6:7e:c3:32:fa:0b:b2:ca:fb:28:f0: 46:9f:cd:86:c2:af:bc:6a:a0:38:f9:47:64:69:6e: 39:da:55:5d:05:b0:0a:69:b0:1f:be:02:cc:e9:bd: 69:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:CE:9E:E5:4A:81:1E:88:0D:6E:0B:74:A3:5D:81:9A:46:57:D8:36 X509v3 Authority Key Identifier: keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/SM6e5UqBHogNbgt0o12BmkZX2DY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.27.84.0/24 209.131.64.0/21 IPv6: 2a12:8ac0::/29 Signature Algorithm: sha256WithRSAEncryption 8b:0d:bf:20:5c:74:5f:f7:3b:2a:d5:71:59:34:30:5a:49:f7: 23:79:13:2b:b8:f1:3c:d6:77:45:9f:d8:0f:b6:33:25:6e:d8: 28:69:b4:48:f3:c3:5d:cf:d0:77:ae:d6:d6:22:8d:ed:4c:79: a8:e9:f6:25:50:3d:7c:62:48:fd:f5:89:99:f0:c0:d7:9d:24: fa:7b:9e:e6:91:fb:cd:25:62:e9:2b:e5:f7:f7:53:6a:ff:ba: fd:28:ec:15:cf:25:8b:82:d2:02:81:b8:74:7f:67:77:c2:67: 00:8e:d8:8a:38:26:d9:80:6f:85:9d:0a:ed:ee:f8:a0:43:ad: 76:32:88:c0:c1:d2:59:8b:de:5d:88:c4:c6:2e:78:68:a1:d2: 1f:41:5b:f4:90:90:f2:ca:b2:19:ef:48:d3:47:06:22:b0:a5: 82:58:c5:34:d5:2b:ec:ed:24:e3:89:ff:34:2b:ee:f3:5f:a9: 54:1f:2f:eb:bd:0a:61:66:f2:54:36:1a:76:6b:ad:50:b3:df: ec:c1:6c:fe:d3:86:fe:a1:60:0f:5a:17:92:ae:69:dd:8a:1f: 3c:a8:c7:7b:1a:01:9d:9a:f6:0a:4a:e7:5c:40:da:cb:10:e8: ed:8c:d4:b5:53:83:a2:02:2f:b9:cd:b9:88:3b:ee:12:3a:66: 3b:b6:3e:15 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6x7UmfT1Sxt+dy3QOqnJLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNjdiZmY3YmFkMWViODM4NGI1ODVkZjdiZWYxMjA2Zjdm MTlmN2UwHhcNMjYwMTAxMTgxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGNlOWVlNTRhODExZTg4MGQ2ZTBiNzRhMzVkODE5YTQ2NTdkODM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01RNeqiQwHcEOAYTL+l4lrHij1iW SwDq7k+GEr0F82V6WrZ4n5fNDcjAKsXyw/sXHAdsiJk6ysurjS4RJh3sG+bB2A4X xhW3i5/P4ZMcwen7Vtd9xtfMURq97PjvadtOo2IsGInCez1qN2h6XgOiv95cm3jt 5M7Y0mkkPSnuL62GRhXU69KM/J6cvnYDPHVwv99nVBqOQtksabz1l/A8nII0qnBI YZN6JBXpU48UybilsIV8Bfh3Nx0UUXgsY/4oHt/TSmkyG/IOjPdbIvwui7CaMt1d 5n7DMvoLssr7KPBGn82Gwq+8aqA4+UdkaW452lVdBbAKabAfvgLM6b1pUwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFEjOnuVKgR6IDW4LdKNdgZpGV9g2MB8GA1UdIwQY MBaAFLpnv/e60euDhLWF33vvEgb38Z9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYt ZGE0NTM4MDIyYWM3LzEvU002ZTVVcUJIb2dOYmd0MG8xMkJta1pYMkRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYtZGE0NTM4MDIyYWM3 LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAURtUAwQD 0YNAMA0EAgACMAcDBQMqEorAMA0GCSqGSIb3DQEBCwUAA4IBAQCLDb8gXHRf9zsq 1XFZNDBaSfcjeRMruPE81ndFn9gPtjMlbtgoabRI88Ndz9B3rtbWIo3tTHmo6fYl UD18Ykj99YmZ8MDXnST6e57mkfvNJWLpK+X391Nq/7r9KOwVzyWLgtICgbh0f2d3 wmcAjtiKOCbZgG+FnQrt7vigQ612MojAwdJZi95diMTGLnhoodIfQVv0kJDyyrIZ 70jTRwYisKWCWMU01Svs7STjif80K+7zX6lUHy/rvQphZvJUNhp2a61Qs9/swWz+ 04b+oWAPWheSrmndih88qMd7GgGdmvYKSudcQNrLEOjtjNS1U4OiAi+5zbmIO+4S OmY7tj4V -----END CERTIFICATE-----Generated at Mon Jan 26 11:31:05 2026 by rpki-client