This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/UmkrjjPaHaPikKI8Z3Nj8SyWcLk.roa File: UmkrjjPaHaPikKI8Z3Nj8SyWcLk.roa (raw, json) Hash identifier: TvN33x275X/FmjCbENZwqGJ9bae0mAfGge9ECd0RS+w= Subject key identifier: 52:69:2B:8E:33:DA:1D:A3:E2:90:A2:3C:67:73:63:F1:2C:96:70:B9 Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce Certificate serial: 019B7CEDF333AA2044FF23043853A65A9AA8 Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/UmkrjjPaHaPikKI8Z3Nj8SyWcLk.roa Signing time: Fri 02 Jan 2026 04:18:47 +0000 ROA not before: Fri 02 Jan 2026 04:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210842 IP address blocks: 2a0d:2681::/32 maxlen: 48 2a0d:2684::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:f3:33:aa:20:44:ff:23:04:38:53:a6:5a:9a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce Validity Not Before: Jan 2 04:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52692b8e33da1da3e290a23c677363f12c9670b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:67:cf:ce:b2:78:ef:f9:7a:01:2b:a9:1a:2d: c9:56:3b:6c:10:81:18:33:03:7b:70:41:9f:45:62: 9b:47:bc:6f:ac:85:16:c3:41:0c:7f:c4:34:71:f4: 2f:13:85:3e:d0:ac:11:01:e5:f9:54:99:4d:71:95: 66:76:21:81:1f:f8:72:b5:b4:b3:1d:19:b6:4a:14: 5e:a5:1e:9e:1e:87:f6:0a:0b:53:2f:a1:5b:e7:e2: 01:9b:b2:9b:d7:95:91:a4:92:08:14:de:81:c4:6f: a5:2c:44:50:a8:5b:ad:4b:4b:27:1f:15:d0:a8:52: c3:1b:b7:d5:9c:f9:3b:08:5a:1c:30:74:8c:52:14: fd:64:04:f7:29:54:f9:0b:d0:c3:d4:fe:5d:74:37: 23:8e:81:af:cd:31:f5:bd:0c:7d:08:96:77:17:6d: 78:3e:49:e3:a9:ea:05:6d:38:77:1f:10:8b:75:97: 25:35:75:ac:5b:78:29:5d:90:86:9c:74:ac:da:94: ce:ba:dc:4a:ad:94:72:4f:87:7c:04:2f:b4:2f:b3: c0:a4:15:a5:00:c4:33:65:20:41:67:33:ce:3c:7a: 1f:2d:ec:00:b8:3d:99:1e:6f:d9:85:3b:2b:9b:56: 20:c8:0d:b1:80:ec:e6:2a:74:52:5e:fa:1b:41:75: 7b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:69:2B:8E:33:DA:1D:A3:E2:90:A2:3C:67:73:63:F1:2C:96:70:B9 X509v3 Authority Key Identifier: keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/UmkrjjPaHaPikKI8Z3Nj8SyWcLk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:2681::/32 2a0d:2684::/32 Signature Algorithm: sha256WithRSAEncryption 77:87:4a:ca:45:f3:5d:d9:8d:9f:99:87:d3:e3:d3:2e:dc:bc: 2c:1c:85:e1:02:34:90:82:83:61:46:9c:ea:98:78:77:6b:d8: 7c:7c:f0:6d:1c:76:e7:08:78:f6:d6:24:67:5b:ff:82:c3:b4: dd:46:d1:ca:46:ea:fa:57:17:93:84:27:da:37:03:2b:62:dc: fb:24:33:66:3c:f2:7b:c4:dd:e9:2e:53:df:1a:a8:eb:75:98: 7e:44:b1:60:d9:3f:86:04:38:d0:ec:5f:ab:ff:97:db:aa:d5: d7:56:92:3e:69:fd:48:9c:dc:ba:f9:5b:1a:6c:c8:37:bb:47: 8b:e9:37:c5:3a:51:b8:7c:83:aa:a9:31:43:6b:f9:3a:fa:8c: 59:30:b5:9d:e3:5a:1d:1c:8a:a5:ee:a6:a9:a0:ba:61:e8:95: a3:27:36:5d:fa:17:aa:3a:af:f7:a5:01:1f:ab:47:be:0f:69: 8f:04:9f:ef:e7:b2:ba:19:25:f0:67:67:8b:64:99:8e:ce:e4: a8:0e:49:f1:42:6a:84:85:6e:f8:fd:cc:af:49:9f:36:f5:93: 80:8f:4d:d4:da:2f:e5:9f:44:ac:a3:62:9f:c3:6a:9b:c0:98: 4a:81:a8:0d:a1:18:38:42:19:7a:af:b7:57:18:cd:9e:7c:88: e6:d3:bb:c5 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt87fMzqiBE/yMEOFOmWpqoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYzY5ZDA0NTgzNTAwYzVlZjgxMTM2ODMxMjM3NTkzZTBi Yjg2Y2UwHhcNMjYwMTAyMDQxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjY5MmI4ZTMzZGExZGEzZTI5MGEyM2M2NzczNjNmMTJjOTY3MGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWfPzrJ47/l6ASupGi3JVjtsEIEY MwN7cEGfRWKbR7xvrIUWw0EMf8Q0cfQvE4U+0KwRAeX5VJlNcZVmdiGBH/hytbSz HRm2ShRepR6eHof2CgtTL6Fb5+IBm7Kb15WRpJIIFN6BxG+lLERQqFutS0snHxXQ qFLDG7fVnPk7CFocMHSMUhT9ZAT3KVT5C9DD1P5ddDcjjoGvzTH1vQx9CJZ3F214 PknjqeoFbTh3HxCLdZclNXWsW3gpXZCGnHSs2pTOutxKrZRyT4d8BC+0L7PApBWl AMQzZSBBZzPOPHofLewAuD2ZHm/ZhTsrm1YgyA2xgOzmKnRSXvobQXV7UwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFFJpK44z2h2j4pCiPGdzY/EslnC5MB8GA1UdIwQY MBaAFHPGnQRYNQDF74ETaDEjdZPgu4bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQt ZjljYjBhN2IyMDZjLzEvVW1rcmpqUGFIYVBpa0tJOFozTmo4U3lXY0xrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQtZjljYjBhN2IyMDZj LzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKg0mgQMF ACoNJoQwDQYJKoZIhvcNAQELBQADggEBAHeHSspF813ZjZ+Zh9Pj0y7cvCwcheEC NJCCg2FGnOqYeHdr2Hx88G0cducIePbWJGdb/4LDtN1G0cpG6vpXF5OEJ9o3Ayti 3PskM2Y88nvE3ekuU98aqOt1mH5EsWDZP4YEONDsX6v/l9uq1ddWkj5p/Uic3Lr5 WxpsyDe7R4vpN8U6Ubh8g6qpMUNr+Tr6jFkwtZ3jWh0ciqXupqmgumHolaMnNl36 F6o6r/elAR+rR74PaY8En+/nsroZJfBnZ4tkmY7O5KgOSfFCaoSFbvj9zK9Jnzb1 k4CPTdTaL+WfRKyjYp/DapvAmEqBqA2hGDhCGXqvt1cYzZ58iObTu8U= -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:55 2026 by rpki-client