This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/UmkRAft8ZFjVt1YbFPJ5-y0KWQM.roa File: UmkRAft8ZFjVt1YbFPJ5-y0KWQM.roa (raw, json) Hash identifier: uTu+zO14EyTexS5Ue5g4wgMw72lritw2nGNuY8HgqWQ= Subject key identifier: 52:69:11:01:FB:7C:64:58:D5:B7:56:1B:14:F2:79:FB:2D:0A:59:03 Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5 Certificate serial: 019B7BA3D9E6C58CA4C93B84883392D0BF0B Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/UmkRAft8ZFjVt1YbFPJ5-y0KWQM.roa Signing time: Thu 01 Jan 2026 22:18:14 +0000 ROA not before: Thu 01 Jan 2026 22:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47872 IP address blocks: 109.121.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.mft rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d9:e6:c5:8c:a4:c9:3b:84:88:33:92:d0:bf:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5 Validity Not Before: Jan 1 22:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52691101fb7c6458d5b7561b14f279fb2d0a5903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:09:ef:bd:ed:b3:22:b9:1d:0f:ff:a7:70:c2: 96:41:1e:1e:d2:b7:3c:8a:63:ea:f6:20:40:9e:83: 94:88:3a:92:0e:50:9c:e0:85:ee:9c:84:f1:d7:7a: 2f:e6:c5:4b:2f:63:88:f1:df:17:4f:9d:51:85:9e: 52:7a:e3:89:bb:bd:13:cf:fa:e2:a3:b6:a4:a5:a4: cd:a1:79:18:f4:c4:cf:1c:94:75:f5:1e:81:46:4d: ec:1b:a8:ae:5f:bb:5b:0e:e4:ba:ff:4b:5c:a6:42: 00:07:49:18:de:37:ea:67:25:de:4f:bd:e9:5e:23: 14:03:83:54:cd:0d:95:6a:2d:3c:de:ca:74:ab:09: f3:70:56:6e:3d:1b:71:4f:b2:23:48:4a:1e:ce:93: 1f:67:5e:3c:cd:81:14:e2:67:a4:a7:42:c9:64:6b: f7:1c:e5:0e:6c:c8:b1:5d:4b:96:93:f8:71:cc:42: a2:f0:2d:50:1d:ce:f8:02:87:ab:13:54:7c:dc:f9: cd:d7:08:a0:eb:17:95:49:57:f3:77:80:92:9e:59: 81:24:eb:a7:dd:0d:70:8a:69:d6:61:db:5f:b6:b9: 83:bd:43:58:58:12:a0:33:72:4d:03:3e:53:b4:fd: fe:e4:a6:11:01:91:5b:c1:29:8d:6f:d9:e2:6a:f2: 79:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:69:11:01:FB:7C:64:58:D5:B7:56:1B:14:F2:79:FB:2D:0A:59:03 X509v3 Authority Key Identifier: keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/UmkRAft8ZFjVt1YbFPJ5-y0KWQM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.121.152.0/24 Signature Algorithm: sha256WithRSAEncryption 81:27:6e:76:be:e2:a0:e1:47:06:05:50:29:c2:b4:a6:b0:29: 3e:c5:1b:80:03:c7:f0:8f:a2:f5:31:00:a6:78:45:1a:80:b3: d1:1a:cc:99:a7:55:6c:ae:79:99:26:e2:06:32:97:99:cf:a2: 73:66:24:fe:a3:30:07:50:67:c7:f2:90:57:4c:76:c7:59:fa: 3e:f9:7e:33:5c:6f:7f:52:53:37:2c:df:8b:73:79:88:08:46: 5f:e0:1e:eb:85:0c:84:86:ff:6c:4a:7c:9f:27:6c:57:2d:7c: 29:ef:ed:d8:ce:fb:a2:6c:18:53:4c:d4:52:88:44:5c:36:54: 8d:bb:3a:8e:45:85:80:3e:0d:bf:83:3e:b5:49:39:8b:8f:d5: 57:31:5e:88:66:b3:41:64:2e:42:aa:73:17:f8:06:a6:40:f5: c6:3f:19:ab:0e:e0:68:c2:07:80:e2:e5:0f:6b:45:32:55:7f: 9b:9a:5d:04:f3:c6:4e:b2:93:58:46:1f:c1:51:bc:e6:ff:04: 71:42:c7:25:45:2e:0e:9b:61:08:c0:19:83:f5:56:18:08:f8: 55:3b:2a:31:35:1f:36:7c:71:f1:75:87:83:b2:98:da:fa:cd: 50:9e:f6:3d:45:1b:97:fa:74:56:e9:66:1e:c8:73:17:06:29: 59:d6:c4:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o9nmxYykyTuEiDOS0L8LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZWY5ZTQ5ZmVjZjI1MDllYjY3NjllZWUyY2RkNGE1MjUz YjcxYzUwHhcNMjYwMTAxMjIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjY5MTEwMWZiN2M2NDU4ZDViNzU2MWIxNGYyNzlmYjJkMGE1OTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wnvve2zIrkdD/+ncMKWQR4e0rc8 imPq9iBAnoOUiDqSDlCc4IXunITx13ov5sVLL2OI8d8XT51RhZ5SeuOJu70Tz/ri o7akpaTNoXkY9MTPHJR19R6BRk3sG6iuX7tbDuS6/0tcpkIAB0kY3jfqZyXeT73p XiMUA4NUzQ2Vai083sp0qwnzcFZuPRtxT7IjSEoezpMfZ148zYEU4mekp0LJZGv3 HOUObMixXUuWk/hxzEKi8C1QHc74AoerE1R83PnN1wig6xeVSVfzd4CSnlmBJOun 3Q1wimnWYdtftrmDvUNYWBKgM3JNAz5TtP3+5KYRAZFbwSmNb9niavJ5WQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFJpEQH7fGRY1bdWGxTyefstClkDMB8GA1UdIwQY MBaAFBLvnkn+zyUJ62dp7uLN1KUlO3HFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTIt MWQ1ZDk0NWEwNWEzLzEvVW1rUkFmdDhaRmpWdDFZYkZQSjUteTBLV1FNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTItMWQ1ZDk0NWEwNWEz LzEvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXmYMA0G CSqGSIb3DQEBCwUAA4IBAQCBJ252vuKg4UcGBVApwrSmsCk+xRuAA8fwj6L1MQCm eEUagLPRGsyZp1VsrnmZJuIGMpeZz6JzZiT+ozAHUGfH8pBXTHbHWfo++X4zXG9/ UlM3LN+Lc3mICEZf4B7rhQyEhv9sSnyfJ2xXLXwp7+3YzvuibBhTTNRSiERcNlSN uzqORYWAPg2/gz61STmLj9VXMV6IZrNBZC5CqnMX+AamQPXGPxmrDuBowgeA4uUP a0UyVX+bml0E88ZOspNYRh/BUbzm/wRxQsclRS4Om2EIwBmD9VYYCPhVOyoxNR82 fHHxdYeDspja+s1QnvY9RRuX+nRW6WYeyHMXBilZ1sTP -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:21 2026 by rpki-client