This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/uMoLLTIIp3goMEn7y4z_relYCj0.roa File: uMoLLTIIp3goMEn7y4z_relYCj0.roa (raw, json) Hash identifier: OkL4CzvIc+/+beHGUC2g9z5v1OG6NY0LtX6M7jVvI9A= Subject key identifier: B8:CA:0B:2D:32:08:A7:78:28:30:49:FB:CB:8C:FF:AD:E9:58:0A:3D Certificate issuer: /CN=1120a0ce013e2d52a6ff354a270894bb998e4547 Certificate serial: 019B7AC8A1BDC631D48894A7F78353F1920E Authority key identifier: 11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/uMoLLTIIp3goMEn7y4z_relYCj0.roa Signing time: Thu 01 Jan 2026 18:18:47 +0000 ROA not before: Thu 01 Jan 2026 18:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35163 IP address blocks: 193.17.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a1:bd:c6:31:d4:88:94:a7:f7:83:53:f1:92:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1120a0ce013e2d52a6ff354a270894bb998e4547 Validity Not Before: Jan 1 18:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8ca0b2d3208a778283049fbcb8cffade9580a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e5:b2:73:d9:dd:b6:e1:c0:0f:44:5a:cb:f3: e7:e4:0d:d9:58:d3:79:05:27:53:94:5b:4e:ea:19: 4a:48:9b:62:19:ad:e3:f5:7e:5a:f3:5d:c1:68:aa: dc:4c:e2:d4:c5:60:51:71:2d:91:29:61:95:98:21: 8b:c0:87:36:7d:fa:11:fe:c2:4a:6a:ad:37:16:b1: 20:d8:26:3c:76:b9:e0:c9:35:c2:a9:c9:38:16:16: 69:f1:e5:25:8b:d1:90:02:ff:ba:84:23:c6:42:b5: 89:0f:77:77:1f:b9:7b:7b:dc:5b:24:86:07:46:93: fb:51:7a:d3:79:ec:6d:e3:62:43:84:1e:82:a1:ea: 6c:5e:77:8f:90:08:71:34:d3:02:4e:67:65:dd:fe: 6d:c9:64:88:92:d9:bd:0d:22:9d:8c:39:d4:d3:17: 59:f6:97:1c:46:2d:82:aa:40:ff:8b:ff:64:ee:ad: 52:0a:35:0f:e4:22:84:56:23:87:4d:8d:45:26:20: 91:9b:d3:f9:73:e6:f5:cc:f7:fa:a9:44:1b:58:90: 0a:9d:c0:0c:a0:56:82:1b:e3:81:03:89:e1:4b:2e: c6:e2:33:6e:d5:9d:ab:a2:d9:b8:a4:f1:03:f1:23: 46:c9:e7:60:17:6c:6c:92:15:04:1e:7c:a9:58:48: 82:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:CA:0B:2D:32:08:A7:78:28:30:49:FB:CB:8C:FF:AD:E9:58:0A:3D X509v3 Authority Key Identifier: keyid:11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/uMoLLTIIp3goMEn7y4z_relYCj0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.96.0/21 Signature Algorithm: sha256WithRSAEncryption b3:4f:02:e4:d8:31:0e:f5:1c:bc:ba:39:f3:5b:63:cc:f5:0e: 7b:a7:d5:ee:c2:40:5b:ae:07:59:55:f9:5c:61:d8:39:4e:00: d1:5d:a2:e3:a9:25:53:81:3b:6d:18:e7:98:c1:55:77:aa:32: 5c:a5:3e:a8:f4:0d:a4:c3:d8:15:33:28:08:9f:0b:70:39:08: e2:d0:29:2e:76:76:30:2b:ff:19:3a:05:d5:c9:e9:5a:ed:9a: 36:f8:97:57:8d:01:0c:eb:52:f9:23:40:fc:d8:ee:29:bf:f5: 9c:5b:cd:a4:4e:2b:74:86:1b:35:51:dc:44:64:7d:35:d6:1a: eb:5e:04:cc:83:b4:3d:3b:60:92:f4:2a:d5:34:24:51:71:f6: 77:72:cb:4c:14:0b:51:81:0e:fc:5d:55:5e:ec:45:68:ca:45: 73:7b:b2:91:ee:d8:a3:6c:3e:b8:ff:3f:3f:3b:ed:29:0f:66: 21:4f:c0:24:a9:72:5c:8d:2e:38:41:b8:e7:b1:73:9a:c0:63: ae:b9:3d:38:55:42:6c:37:c6:8a:8a:ae:eb:98:37:f4:71:8a: a8:8f:2f:f2:14:d4:c8:c8:9d:c7:1d:24:b2:8d:40:9b:33:d0: 97:c7:ce:93:e1:e4:25:2a:35:ee:7a:8b:98:a5:63:4b:3a:4e: 25:93:98:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yKG9xjHUiJSn94NT8ZIOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMjBhMGNlMDEzZTJkNTJhNmZmMzU0YTI3MDg5NGJiOTk4 ZTQ1NDcwHhcNMjYwMTAxMTgxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGNhMGIyZDMyMDhhNzc4MjgzMDQ5ZmJjYjhjZmZhZGU5NTgwYTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeWyc9ndtuHAD0Ray/Pn5A3ZWNN5 BSdTlFtO6hlKSJtiGa3j9X5a813BaKrcTOLUxWBRcS2RKWGVmCGLwIc2ffoR/sJK aq03FrEg2CY8drngyTXCqck4FhZp8eUli9GQAv+6hCPGQrWJD3d3H7l7e9xbJIYH RpP7UXrTeext42JDhB6CoepsXnePkAhxNNMCTmdl3f5tyWSIktm9DSKdjDnU0xdZ 9pccRi2CqkD/i/9k7q1SCjUP5CKEViOHTY1FJiCRm9P5c+b1zPf6qUQbWJAKncAM oFaCG+OBA4nhSy7G4jNu1Z2rotm4pPED8SNGyedgF2xskhUEHnypWEiCVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLjKCy0yCKd4KDBJ+8uM/63pWAo9MB8GA1UdIwQY MBaAFBEgoM4BPi1Spv81SicIlLuZjkVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVNDZ3pnRS1MVkttX3pWS0p3aVV1NW1PUlVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MjE0OTgtMjhkMy00Mzc2LWI2MjUt MzFhZjNlMjk0NjcxLzEvdU1vTExUSUlwM2dvTUVuN3k0el9yZWxZQ2owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MjE0OTgtMjhkMy00Mzc2LWI2MjUtMzFhZjNlMjk0Njcx LzEvRVNDZ3pnRS1MVkttX3pWS0p3aVV1NW1PUlVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwRFgMA0G CSqGSIb3DQEBCwUAA4IBAQCzTwLk2DEO9Ry8ujnzW2PM9Q57p9XuwkBbrgdZVflc Ydg5TgDRXaLjqSVTgTttGOeYwVV3qjJcpT6o9A2kw9gVMygInwtwOQji0CkudnYw K/8ZOgXVyela7Zo2+JdXjQEM61L5I0D82O4pv/WcW82kTit0hhs1UdxEZH011hrr XgTMg7Q9O2CS9CrVNCRRcfZ3cstMFAtRgQ78XVVe7EVoykVze7KR7tijbD64/z8/ O+0pD2YhT8AkqXJcjS44QbjnsXOawGOuuT04VUJsN8aKiq7rmDf0cYqojy/yFNTI yJ3HHSSyjUCbM9CXx86T4eQlKjXueouYpWNLOk4lk5jd -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:33 2026 by rpki-client