This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/8umYqKkmet5xd-0fIbeiYVgQ7FA.roa File: 8umYqKkmet5xd-0fIbeiYVgQ7FA.roa (raw, json) Hash identifier: v/CUAHtjhSU0aoLwfnOz3uF4/xB1kAd8kz1X1QEYG8w= Subject key identifier: F2:E9:98:A8:A9:26:7A:DE:71:77:ED:1F:21:B7:A2:61:58:10:EC:50 Certificate issuer: /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b Certificate serial: 019B7F15E07A131AA32B1A44B447A6825383 Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/8umYqKkmet5xd-0fIbeiYVgQ7FA.roa Signing time: Fri 02 Jan 2026 14:21:38 +0000 ROA not before: Fri 02 Jan 2026 14:21:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42369 IP address blocks: 91.250.253.0/24 maxlen: 24 94.176.160.0/23 maxlen: 23 94.176.160.0/24 maxlen: 24 94.176.161.0/24 maxlen: 24 185.235.147.0/24 maxlen: 24 188.240.51.0/24 maxlen: 24 194.33.191.0/24 maxlen: 24 2a10:8b40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e0:7a:13:1a:a3:2b:1a:44:b4:47:a6:82:53:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b Validity Not Before: Jan 2 14:21:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2e998a8a9267ade7177ed1f21b7a2615810ec50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:74:7b:3d:84:50:20:b1:20:56:e0:1e:4a:96: 83:bc:23:26:d9:7f:55:50:5a:77:23:74:25:72:06: f0:13:09:31:60:5d:df:f3:e6:1e:be:a1:81:d3:35: 49:4f:9c:45:b7:5e:ea:89:c1:9f:62:b1:96:7e:08: af:75:ec:d7:cb:b2:81:26:64:21:43:83:80:6e:81: d6:23:50:61:20:da:52:24:06:9d:3d:74:21:0f:d3: 52:fd:62:82:9d:c9:34:3c:91:8e:4d:d8:6d:c0:81: a9:ab:60:43:a1:af:f1:07:c0:07:d1:b6:44:b5:b5: 4d:a9:2d:06:f7:18:be:42:47:cd:f2:ac:a0:b0:3e: 9c:99:da:64:c8:49:ad:f7:4c:3f:63:3d:31:b6:3b: c5:c0:94:fd:f2:3a:95:5e:e3:73:d9:82:d0:e8:72: aa:41:16:71:bc:2d:02:b9:96:b4:f4:cb:33:a6:b1: bb:d9:4b:a7:4b:62:55:42:da:a9:18:6d:d8:6f:fb: e3:fb:45:c7:fb:80:63:6b:be:1b:e8:1e:11:02:07: f8:b6:8c:b8:e2:eb:57:a4:ee:9f:7d:a2:5b:d2:f1: 52:36:c4:a5:aa:5d:e7:9a:a4:c9:a2:da:7d:e7:b5: 0b:c3:50:d6:3f:5f:2c:ce:17:ce:fb:f7:d1:15:6e: c9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E9:98:A8:A9:26:7A:DE:71:77:ED:1F:21:B7:A2:61:58:10:EC:50 X509v3 Authority Key Identifier: keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/8umYqKkmet5xd-0fIbeiYVgQ7FA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.250.253.0/24 94.176.160.0/23 185.235.147.0/24 188.240.51.0/24 194.33.191.0/24 IPv6: 2a10:8b40::/32 Signature Algorithm: sha256WithRSAEncryption 6a:37:22:cb:c9:24:48:e1:f8:97:5f:61:4c:82:15:29:ec:6d: b5:3d:a9:c7:1a:85:86:82:85:7a:f8:dc:22:96:d3:d4:ef:22: 09:0d:17:bb:cd:26:9d:2a:56:dc:80:fb:ff:be:26:0e:09:63: c9:98:d0:e8:9d:65:d3:70:3d:82:d8:5d:6f:a9:45:ad:5f:c0: e5:0c:53:7e:8c:e5:65:f8:ee:40:49:8a:01:d7:11:ce:0f:c5: 8e:40:ad:ff:fe:e7:0f:07:9e:fe:f1:1f:46:d6:d8:d4:41:30: 21:6d:10:83:41:d1:21:d6:8f:be:51:ba:83:28:3f:be:ca:11: f9:79:7b:c6:c6:4c:c6:fe:19:5e:b1:09:d7:11:63:2e:d2:3c: 40:67:2b:82:94:b6:ae:25:91:0b:0e:c0:05:c4:70:47:30:3b: 64:6c:32:74:db:a1:44:86:d6:dd:07:b3:72:be:30:ac:64:77: 48:89:b6:a9:97:28:f1:f5:e7:82:6e:0a:67:94:49:45:a4:a1: 38:c1:97:59:d4:cb:16:96:29:6a:95:56:88:3e:c5:af:bf:f2: 86:9f:f3:aa:a7:76:f8:15:50:6d:b9:ca:2b:8d:98:82:dc:ac: 6b:bf:6b:23:4e:7b:88:23:96:4a:04:ac:0c:74:70:25:21:96: b4:95:ee:bd -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt/FeB6ExqjKxpEtEemglODMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MGUwMTdjZjE3MTE1MTliMGZmOWY2NTg1OGM0OTFiMmZh NWQ0MGIwHhcNMjYwMTAyMTQyMTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmU5OThhOGE5MjY3YWRlNzE3N2VkMWYyMWI3YTI2MTU4MTBlYzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXR7PYRQILEgVuAeSpaDvCMm2X9V UFp3I3QlcgbwEwkxYF3f8+YevqGB0zVJT5xFt17qicGfYrGWfgivdezXy7KBJmQh Q4OAboHWI1BhINpSJAadPXQhD9NS/WKCnck0PJGOTdhtwIGpq2BDoa/xB8AH0bZE tbVNqS0G9xi+QkfN8qygsD6cmdpkyEmt90w/Yz0xtjvFwJT98jqVXuNz2YLQ6HKq QRZxvC0CuZa09MszprG72UunS2JVQtqpGG3Yb/vj+0XH+4Bja74b6B4RAgf4toy4 4utXpO6ffaJb0vFSNsSlql3nmqTJotp957ULw1DWP18szhfO+/fRFW7JKQIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFPLpmKipJnrecXftHyG3omFYEOxQMB8GA1UdIwQY MBaAFPgOAXzxcRUZsP+fZYWMSRsvpdQLMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1BNEJmUEZ4RlJtd181OWxoWXhKR3ktbDFBcy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvMmRjMTM2LTQwMGQtNDBlNy1hZDg2 LThjZTYwYTVjOGIxZi8xLzh1bVlxS2ttZXQ1eGQtMGZJYmVpWVZnUTdGQS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODcvMmRjMTM2LTQwMGQtNDBlNy1hZDg2LThjZTYwYTVjOGIx Zi8xLzEtQTRCZlBGeEZSbXdfNTlsaFl4Skd5LWwxQXMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwRgYIKwYBBQUHAQcBAf8ENzA1MCQEAgABMB4DBABb+v0D BAFesKADBAC565MDBAC88DMDBADCIb8wDQQCAAIwBwMFACoQi0AwDQYJKoZIhvcN AQELBQADggEBAGo3IsvJJEjh+JdfYUyCFSnsbbU9qccahYaChXr43CKW09TvIgkN F7vNJp0qVtyA+/++Jg4JY8mY0OidZdNwPYLYXW+pRa1fwOUMU36M5WX47kBJigHX Ec4PxY5Arf/+5w8Hnv7xH0bW2NRBMCFtEINB0SHWj75RuoMoP77KEfl5e8bGTMb+ GV6xCdcRYy7SPEBnK4KUtq4lkQsOwAXEcEcwO2RsMnTboUSG1t0Hs3K+MKxkd0iJ tqmXKPH154JuCmeUSUWkoTjBl1nUyxaWKWqVVog+xa+/8oaf86qndvgVUG25yiuN mILcrGu/ayNOe4gjlkoErAx0cCUhlrSV7r0= -----END CERTIFICATE-----Generated at Mon Jan 26 02:24:41 2026 by rpki-client