This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/cc_umhGdm9vRcpW01sJADWEvMNE.roa File: cc_umhGdm9vRcpW01sJADWEvMNE.roa (raw, json) Hash identifier: f/aMj40WHYUpw+snTVgDPeB471BLH76+3mEygF8rzKE= Subject key identifier: 71:CF:EE:9A:11:9D:9B:DB:D1:72:95:B4:D6:C2:40:0D:61:2F:30:D1 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019AA69BBFD12DF034D25BE2E7F37B99323F Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/cc_umhGdm9vRcpW01sJADWEvMNE.roa Signing time: Fri 21 Nov 2025 13:30:16 +0000 ROA not before: Fri 21 Nov 2025 13:30:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59974 IP address blocks: 93.171.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:9b:bf:d1:2d:f0:34:d2:5b:e2:e7:f3:7b:99:32:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Nov 21 13:30:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=71cfee9a119d9bdbd17295b4d6c2400d612f30d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0d:dc:6c:83:ea:f7:aa:fb:88:83:22:60:18: f4:92:22:1b:f3:74:8d:a0:e2:46:38:5a:4e:7e:d9: 3a:4f:c4:03:ed:23:c1:97:58:6e:93:be:1c:0d:b3: 6d:b3:20:9a:2a:43:8c:ef:d8:60:12:bd:01:4e:88: 1d:10:67:1a:d9:a1:c1:be:08:77:86:8b:fd:4d:5e: 9f:1d:d8:6c:43:55:79:bc:b8:dc:91:34:65:fa:ed: d8:f4:c7:75:42:9e:d5:6e:8b:a0:63:54:3a:77:ab: 19:69:a3:38:ed:da:19:e0:4c:ca:ca:91:fb:d1:7d: ae:3a:25:f9:b3:33:98:d4:54:79:e1:4c:59:e9:94: 4d:fe:23:ac:24:6a:2a:6b:5a:3a:0a:5e:b0:73:7f: 65:c2:fa:3f:fb:96:13:0a:81:d6:b9:24:b9:9b:53: d5:e8:a6:2b:f9:3f:b6:e9:cf:fe:83:43:29:a2:09: 81:fc:20:fd:46:be:45:d9:a3:b5:cf:8e:85:1b:93: 03:72:c5:f3:1c:dd:06:ac:6a:2a:66:43:26:71:d7: cd:2b:a4:69:5a:2d:70:63:ba:8f:2e:b8:74:9c:3f: 3e:31:fb:14:ae:c9:64:ea:c0:17:ca:07:9d:a7:13: 95:20:4e:dd:1d:45:1a:35:d5:22:11:01:99:23:96: 9b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CF:EE:9A:11:9D:9B:DB:D1:72:95:B4:D6:C2:40:0D:61:2F:30:D1 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/cc_umhGdm9vRcpW01sJADWEvMNE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.171.174.0/24 Signature Algorithm: sha256WithRSAEncryption a4:21:cd:9b:ec:70:06:b7:57:b9:d2:c6:ee:a9:60:66:25:24: d2:c1:02:24:14:66:ea:b3:52:68:b1:d7:cc:c6:4a:50:a9:59: 00:17:69:a9:73:49:e0:3d:56:c2:4b:4c:30:e7:6e:7e:86:61: 55:c8:04:56:ae:ff:a5:fc:9b:98:74:ad:8e:b6:8c:64:2a:ee: fc:83:dd:49:fd:ef:4d:5e:c6:7e:f3:b8:46:41:39:c7:94:af: 8c:cd:6d:ec:12:e6:78:fe:9e:e6:5c:8c:f6:33:07:04:57:e9: 51:50:cb:35:db:8b:dd:34:c7:54:c5:77:6f:9b:f6:53:e7:28: 9f:d1:4e:72:90:b6:6a:4c:49:e6:71:a8:52:f3:6d:25:f1:49: 8c:c4:5e:d0:d2:f2:9d:e7:7e:7c:ad:3a:28:41:1c:7b:b1:7e: 4c:2e:9a:2a:a9:60:81:54:30:b6:ad:d7:7f:2a:12:29:0c:73: 38:01:d6:cf:1f:82:6b:eb:44:d2:e0:53:97:32:c8:3e:6f:d3: 61:25:2a:24:a7:7f:88:1a:73:c3:84:c4:af:f3:26:fa:ee:67: 45:4a:a5:ed:4c:20:b4:aa:37:98:70:55:3d:a7:c9:c6:ac:f2: 20:ac:40:0c:0c:80:28:a6:83:04:b7:89:43:09:bf:8b:b9:f7: 24:70:3f:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqmm7/RLfA00lvi5/N7mTI/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjUxMTIxMTMzMDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWNmZWU5YTExOWQ5YmRiZDE3Mjk1YjRkNmMyNDAwZDYxMmYzMGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg3cbIPq96r7iIMiYBj0kiIb83SN oOJGOFpOftk6T8QD7SPBl1huk74cDbNtsyCaKkOM79hgEr0BTogdEGca2aHBvgh3 hov9TV6fHdhsQ1V5vLjckTRl+u3Y9Md1Qp7VbougY1Q6d6sZaaM47doZ4EzKypH7 0X2uOiX5szOY1FR54UxZ6ZRN/iOsJGoqa1o6Cl6wc39lwvo/+5YTCoHWuSS5m1PV 6KYr+T+26c/+g0MpogmB/CD9Rr5F2aO1z46FG5MDcsXzHN0GrGoqZkMmcdfNK6Rp Wi1wY7qPLrh0nD8+MfsUrslk6sAXygedpxOVIE7dHUUaNdUiEQGZI5abTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHHP7poRnZvb0XKVtNbCQA1hLzDRMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvY2NfdW1oR2RtOXZSY3BXMDFzSkFEV0V2TU5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXauuMA0G CSqGSIb3DQEBCwUAA4IBAQCkIc2b7HAGt1e50sbuqWBmJSTSwQIkFGbqs1JosdfM xkpQqVkAF2mpc0ngPVbCS0ww525+hmFVyARWrv+l/JuYdK2OtoxkKu78g91J/e9N XsZ+87hGQTnHlK+MzW3sEuZ4/p7mXIz2MwcEV+lRUMs124vdNMdUxXdvm/ZT5yif 0U5ykLZqTEnmcahS820l8UmMxF7Q0vKd5358rTooQRx7sX5MLpoqqWCBVDC2rdd/ KhIpDHM4AdbPH4Jr60TS4FOXMsg+b9NhJSokp3+IGnPDhMSv8yb67mdFSqXtTCC0 qjeYcFU9p8nGrPIgrEAMDIAopoMEt4lDCb+LufckcD9r -----END CERTIFICATE-----Generated at Sat Dec 6 12:53:43 2025 by rpki-client