This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/vKZmJ0jDQuc8fHx1GoSSQ_umesg.roa File: vKZmJ0jDQuc8fHx1GoSSQ_umesg.roa (raw, json) Hash identifier: aKqfhdTXupMXPlpBmxeTWXojTlpX9o9GLhhsywcjHYI= Subject key identifier: BC:A6:66:27:48:C3:42:E7:3C:7C:7C:75:1A:84:92:43:FB:A6:7A:C8 Certificate issuer: /CN=97242dba26ed882b380dabebab3c5f3942006ecc Certificate serial: 019B7E383A6C9E0FFBC9AB07BA17A398DF48 Authority key identifier: 97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/vKZmJ0jDQuc8fHx1GoSSQ_umesg.roa Signing time: Fri 02 Jan 2026 10:19:32 +0000 ROA not before: Fri 02 Jan 2026 10:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49283 IP address blocks: 46.182.160.0/21 maxlen: 21 89.18.224.0/19 maxlen: 19 109.68.248.0/21 maxlen: 21 178.21.192.0/21 maxlen: 21 2a00:17b8::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:3a:6c:9e:0f:fb:c9:ab:07:ba:17:a3:98:df:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97242dba26ed882b380dabebab3c5f3942006ecc Validity Not Before: Jan 2 10:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bca6662748c342e73c7c7c751a849243fba67ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:6c:b9:e0:c1:70:fc:6e:6d:10:bf:00:46:e1: 15:30:93:3e:3a:4b:cb:09:eb:7e:fc:24:5a:db:06: 18:c5:90:04:0a:8a:85:3d:07:ad:ee:45:4c:6e:a8: 5b:aa:aa:b4:e5:80:82:fc:19:aa:c2:4b:ac:65:7d: 2e:f9:bd:f3:52:cf:00:4f:f7:d8:2c:8b:5a:ef:f5: fe:72:a7:b0:43:8f:5c:58:d9:7e:f1:ec:a5:72:1c: e9:82:20:02:35:21:e6:39:db:28:14:88:21:b5:6f: 0d:69:f5:6d:11:a6:a8:9f:9e:e4:e2:25:2c:bb:43: 86:a3:c5:25:10:9f:71:27:28:df:09:d6:34:79:d9: 23:b5:70:17:e5:bb:57:cc:61:e3:13:d4:17:dc:e1: c2:a7:2b:fb:83:cb:76:f1:5a:0b:72:7b:80:c3:4a: 33:41:d2:87:3c:4b:71:ea:84:51:8f:e9:99:03:a7: 9f:1f:8c:39:d8:9d:0f:f3:cf:fe:bd:70:bb:ac:5f: 1f:5b:4e:d7:cd:9a:c5:42:1d:92:04:c2:81:fb:4b: 4c:1a:95:91:53:f4:91:43:95:da:dd:04:5f:1c:ed: 1a:4f:e3:ef:fa:bb:20:13:a8:96:18:eb:1f:62:85: 9e:0c:fb:a4:6a:f0:c1:67:cd:a6:3c:ac:f1:9d:6d: 4c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A6:66:27:48:C3:42:E7:3C:7C:7C:75:1A:84:92:43:FB:A6:7A:C8 X509v3 Authority Key Identifier: keyid:97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/vKZmJ0jDQuc8fHx1GoSSQ_umesg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.182.160.0/21 89.18.224.0/19 109.68.248.0/21 178.21.192.0/21 IPv6: 2a00:17b8::/29 Signature Algorithm: sha256WithRSAEncryption 1d:1a:6c:67:ac:f8:ec:e5:bf:4a:e7:e5:86:5c:69:f2:f1:91: 1b:b9:6b:70:9c:51:da:2f:11:80:d2:6f:a4:8c:ae:5d:f6:92: 62:a0:01:99:7a:0f:36:b7:51:f4:c8:8e:1c:df:7c:6a:b2:eb: 2b:a4:e2:64:41:b6:de:2b:52:03:26:9d:5b:25:c5:52:89:c3: 3e:ee:64:04:14:57:f9:79:db:ea:4a:7c:96:e9:e5:43:b0:28: 29:a1:1e:b6:ff:28:06:ca:d0:98:c1:f7:48:3c:cd:3e:c4:17: 1e:9b:b0:1e:d0:44:ee:4c:55:b8:17:bb:ef:f6:c2:a0:7c:a9: d4:1e:5a:e3:cf:d2:6f:37:1a:0f:7b:a4:67:5a:de:13:2a:5b: 5f:81:09:3f:c1:c5:fe:a4:99:60:43:df:bb:2d:f2:f4:c6:b8: b2:0a:2d:d3:9d:4e:48:58:17:ee:bf:10:39:16:c3:cd:b7:9c: 72:8b:1c:87:be:26:eb:c2:81:0e:a0:45:a2:2b:80:68:96:e3: 3e:a9:2b:f3:a9:72:29:b1:fb:6e:d5:e7:a9:f9:22:13:ac:e1: 5f:05:67:18:44:46:b7:73:71:67:11:c0:21:47:bf:ec:bf:8e: 53:d7:02:b6:db:3e:76:05:70:70:6b:3f:1f:4b:da:e8:ad:41: a4:af:d5:9a -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt+ODpsng/7yasHuhejmN9IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MjQyZGJhMjZlZDg4MmIzODBkYWJlYmFiM2M1ZjM5NDIw MDZlY2MwHhcNMjYwMTAyMTAxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2E2NjYyNzQ4YzM0MmU3M2M3YzdjNzUxYTg0OTI0M2ZiYTY3YWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Wy54MFw/G5tEL8ARuEVMJM+OkvL Cet+/CRa2wYYxZAECoqFPQet7kVMbqhbqqq05YCC/BmqwkusZX0u+b3zUs8AT/fY LIta7/X+cqewQ49cWNl+8eylchzpgiACNSHmOdsoFIghtW8NafVtEaaon57k4iUs u0OGo8UlEJ9xJyjfCdY0edkjtXAX5btXzGHjE9QX3OHCpyv7g8t28VoLcnuAw0oz QdKHPEtx6oRRj+mZA6efH4w52J0P88/+vXC7rF8fW07XzZrFQh2SBMKB+0tMGpWR U/SRQ5Xa3QRfHO0aT+Pv+rsgE6iWGOsfYoWeDPukavDBZ82mPKzxnW1MQQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFLymZidIw0LnPHx8dRqEkkP7pnrIMB8GA1UdIwQY MBaAFJckLbom7YgrOA2r66s8XzlCAG7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHlRdHVpYnRpQ3M0RGF2cnF6eGZPVUlBYnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy80Y2I2ODctODdmZC00YWYwLWEzNmIt NjA3MjcyZDczN2NiLzEvdktabUowakRRdWM4Zkh4MUdvU1NRX3VtZXNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy80Y2I2ODctODdmZC00YWYwLWEzNmItNjA3MjcyZDczN2Ni LzEvbHlRdHVpYnRpQ3M0RGF2cnF6eGZPVUlBYnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDLragAwQF WRLgAwQDbUT4AwQDshXAMA0EAgACMAcDBQMqABe4MA0GCSqGSIb3DQEBCwUAA4IB AQAdGmxnrPjs5b9K5+WGXGny8ZEbuWtwnFHaLxGA0m+kjK5d9pJioAGZeg82t1H0 yI4c33xqsusrpOJkQbbeK1IDJp1bJcVSicM+7mQEFFf5edvqSnyW6eVDsCgpoR62 /ygGytCYwfdIPM0+xBcem7Ae0ETuTFW4F7vv9sKgfKnUHlrjz9JvNxoPe6RnWt4T KltfgQk/wcX+pJlgQ9+7LfL0xriyCi3TnU5IWBfuvxA5FsPNt5xyixyHvibrwoEO oEWiK4BoluM+qSvzqXIpsftu1eep+SITrOFfBWcYREa3c3FnEcAhR7/sv45T1wK2 2z52BXBwaz8fS9rorUGkr9Wa -----END CERTIFICATE-----Generated at Sun Jan 25 15:06:28 2026 by rpki-client