This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/UMfLn4hPH5R_1hQD4UOLCtDtmiU.roa File: UMfLn4hPH5R_1hQD4UOLCtDtmiU.roa (raw, json) Hash identifier: gXIOBSbjWI6IVjh8IXmjFidTPNW2xP/m42MptHiY2Wk= Subject key identifier: 50:C7:CB:9F:88:4F:1F:94:7F:D6:14:03:E1:43:8B:0A:D0:ED:9A:25 Certificate issuer: /CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2 Certificate serial: 019B7BA38E3E9C10438811226604A1A04523 Authority key identifier: AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/UMfLn4hPH5R_1hQD4UOLCtDtmiU.roa Signing time: Thu 01 Jan 2026 22:17:54 +0000 ROA not before: Thu 01 Jan 2026 22:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214805 IP address blocks: 193.186.215.0/24 maxlen: 24 2a14:52c0:f404::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:8e:3e:9c:10:43:88:11:22:66:04:a1:a0:45:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2 Validity Not Before: Jan 1 22:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50c7cb9f884f1f947fd61403e1438b0ad0ed9a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5d:98:b8:45:0b:ec:4b:05:34:8c:8d:f1:62: 8e:90:1e:d4:af:5b:0b:38:a4:32:70:c4:63:aa:d4: 01:fd:f7:4d:91:2c:87:4c:e6:6f:5f:0a:e6:56:78: c0:07:9a:d6:7f:1d:06:33:a3:3f:67:66:f9:31:ef: 30:19:37:69:7f:96:b1:d5:13:71:0a:d5:80:cf:dc: a5:b9:3a:4d:a3:e1:91:89:ce:ca:ce:f3:a3:30:1f: 9b:dc:3e:95:93:76:89:a6:d6:8e:b0:a9:7b:bb:6b: 34:b9:db:5f:02:fb:1d:57:87:8b:6c:60:d5:b9:41: 2f:18:75:41:7f:8b:ae:c6:ab:71:12:1e:81:3a:41: 8c:91:78:ab:6f:57:35:78:fa:34:37:99:ef:e8:22: 6c:24:0e:ef:36:f2:97:92:7c:17:46:9a:57:e6:83: 55:02:77:0d:95:94:63:0f:e0:28:de:3f:67:c2:0c: 93:65:e4:fb:6e:63:88:93:bf:dc:99:9a:75:af:a9: 4b:1f:fa:30:78:72:e7:84:e7:e4:8f:86:45:de:da: c6:3b:2a:9c:fe:c2:03:b5:3c:08:95:e1:b1:8b:75: 71:d1:d3:3c:16:47:3a:25:44:bd:0b:84:71:c3:22: e1:6b:bc:59:a5:4e:bb:df:67:c3:11:f5:a8:ec:c7: a9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C7:CB:9F:88:4F:1F:94:7F:D6:14:03:E1:43:8B:0A:D0:ED:9A:25 X509v3 Authority Key Identifier: keyid:AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/UMfLn4hPH5R_1hQD4UOLCtDtmiU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.186.215.0/24 IPv6: 2a14:52c0:f404::/48 Signature Algorithm: sha256WithRSAEncryption 0c:ba:59:26:7e:00:85:9b:88:3c:58:e0:13:d4:35:f6:01:57: e7:1a:b5:0b:00:19:3f:c0:e5:a4:a8:85:b7:59:e3:82:9b:01: c9:f3:34:ce:d9:87:ef:75:6c:4c:72:1e:c5:5c:eb:da:ec:e9: 09:fe:c2:e2:38:18:c9:5d:d7:a3:b6:29:ae:cb:50:52:d3:02: dc:0c:b5:2e:b5:e6:ef:19:2b:3a:5d:80:d4:dc:61:8b:f2:fe: cb:43:b8:a8:86:f7:3a:6e:59:a0:d1:82:ed:99:b3:7f:60:02: b8:98:85:95:54:c1:2b:0c:0d:d5:34:50:79:27:78:99:11:8a: 9f:46:26:fe:6a:19:01:97:64:b0:05:94:96:43:5c:9a:7d:90: 1c:f8:0a:42:ff:4f:95:81:0e:8b:0c:04:db:b1:8a:b4:d6:e6: d2:3a:f1:2e:9a:f8:77:d1:e9:35:df:af:41:e9:51:d9:94:a7: 28:66:57:5d:11:00:c6:76:a7:4c:17:cc:44:ea:40:a9:d1:14: e8:51:d8:e4:09:16:b8:3a:4c:b8:af:7f:50:87:d4:a1:33:5f: d3:5d:a3:2a:c3:1d:95:71:20:f3:e7:9b:71:88:ad:73:af:3c: b6:40:cc:b9:3c:15:23:c5:e1:20:22:16:78:63:bf:60:75:cb: 84:20:63:3e -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7o44+nBBDiBEiZgShoEUjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzE5MThjMWY0NWU2ZWMxN2RhY2E2N2E3YWQxOTNjYWYw NGI3YjIwHhcNMjYwMTAxMjIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGM3Y2I5Zjg4NGYxZjk0N2ZkNjE0MDNlMTQzOGIwYWQwZWQ5YTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3V2YuEUL7EsFNIyN8WKOkB7Ur1sL OKQycMRjqtQB/fdNkSyHTOZvXwrmVnjAB5rWfx0GM6M/Z2b5Me8wGTdpf5ax1RNx CtWAz9yluTpNo+GRic7KzvOjMB+b3D6Vk3aJptaOsKl7u2s0udtfAvsdV4eLbGDV uUEvGHVBf4uuxqtxEh6BOkGMkXirb1c1ePo0N5nv6CJsJA7vNvKXknwXRppX5oNV AncNlZRjD+Ao3j9nwgyTZeT7bmOIk7/cmZp1r6lLH/oweHLnhOfkj4ZF3trGOyqc /sIDtTwIleGxi3Vx0dM8Fkc6JUS9C4RxwyLha7xZpU6732fDEfWo7MepNQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFDHy5+ITx+Uf9YUA+FDiwrQ7ZolMB8GA1UdIwQY MBaAFKvBkYwfRebsF9rKZ6etGTyvBLeyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84Zjg4ZGUtZGFlZC00OGQyLWI3MDEt NmJiNWZlNjY1NzUwLzEvVU1mTG40aFBINVJfMWhRRDRVT0xDdER0bWlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84Zjg4ZGUtZGFlZC00OGQyLWI3MDEtNmJiNWZlNjY1NzUw LzEvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwbrXMA8E AgACMAkDBwAqFFLA9AQwDQYJKoZIhvcNAQELBQADggEBAAy6WSZ+AIWbiDxY4BPU NfYBV+catQsAGT/A5aSohbdZ44KbAcnzNM7Zh+91bExyHsVc69rs6Qn+wuI4GMld 16O2Ka7LUFLTAtwMtS615u8ZKzpdgNTcYYvy/stDuKiG9zpuWaDRgu2Zs39gAriY hZVUwSsMDdU0UHkneJkRip9GJv5qGQGXZLAFlJZDXJp9kBz4CkL/T5WBDosMBNux irTW5tI68S6a+HfR6TXfr0HpUdmUpyhmV10RAMZ2p0wXzETqQKnRFOhR2OQJFrg6 TLivf1CH1KEzX9NdoyrDHZVxIPPnm3GIrXOvPLZAzLk8FSPF4SAiFnhjv2B1y4Qg Yz4= -----END CERTIFICATE-----Generated at Mon Jan 26 05:54:05 2026 by rpki-client