This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/umqGo5i2AYsiLk7r0R_uIeSqz6U.roa File: umqGo5i2AYsiLk7r0R_uIeSqz6U.roa (raw, json) Hash identifier: 2rk2hR71hY5JXFbTbQNYvli+OW1yUTXX6ihJlNq9qQw= Subject key identifier: BA:6A:86:A3:98:B6:01:8B:22:2E:4E:EB:D1:1F:EE:21:E4:AA:CF:A5 Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B7EA756D9AFFBD98664B11EB1E84D8C1C Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/umqGo5i2AYsiLk7r0R_uIeSqz6U.roa Signing time: Fri 02 Jan 2026 12:20:54 +0000 ROA not before: Fri 02 Jan 2026 12:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8764 IP address blocks: 62.122.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:56:d9:af:fb:d9:86:64:b1:1e:b1:e8:4d:8c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Jan 2 12:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba6a86a398b6018b222e4eebd11fee21e4aacfa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:97:f3:47:62:4f:22:e2:5b:96:03:51:a9:55: a2:cb:3c:5c:a6:10:97:5b:42:49:88:79:c9:8c:dd: 03:60:9a:68:d2:a8:5b:4d:15:d8:38:8a:4a:9e:5d: 94:f2:1c:17:e6:90:3e:e1:57:7d:ae:5b:f3:5a:77: 60:3c:0b:70:ae:29:44:7e:10:74:c4:7f:ac:7a:d1: 37:69:5f:da:f2:25:5d:f2:5a:d2:84:4a:ea:10:1c: ef:d7:e0:29:e2:80:fe:ea:e1:e6:b8:6f:31:10:0c: a8:87:dc:52:38:ff:14:fa:8e:e8:31:3b:c3:54:52: ce:60:02:fa:94:6e:d2:9f:70:19:ba:85:c4:81:9c: 10:76:37:78:e6:12:d6:9d:57:05:ca:72:4e:6d:da: 09:9e:b4:74:8a:3d:9f:9e:2d:9c:77:2c:aa:13:10: c3:44:d9:92:14:c7:35:35:70:4d:09:6c:09:63:07: 61:81:31:d3:87:d9:aa:47:4e:d7:1a:5a:5a:0f:34: b1:7e:42:1e:8d:ae:de:6e:c3:9f:d1:40:34:af:20: 91:8b:9c:ba:f3:0a:9a:f8:a7:ec:04:b2:54:59:86: 31:19:fa:0f:8e:68:cc:c0:79:f7:ee:e3:09:57:e6: 5d:9e:82:59:52:c3:67:80:f4:35:31:1c:b7:7c:44: 05:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:6A:86:A3:98:B6:01:8B:22:2E:4E:EB:D1:1F:EE:21:E4:AA:CF:A5 X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/umqGo5i2AYsiLk7r0R_uIeSqz6U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.122.76.0/22 Signature Algorithm: sha256WithRSAEncryption 66:a7:91:cd:61:ba:d4:75:6d:5c:7a:36:fb:3c:f6:9a:59:c8: 45:34:1b:2a:c0:f0:0f:fa:e4:d1:51:24:fc:c6:d8:59:dd:86: e8:40:78:c1:05:8a:cb:d7:a0:93:e9:a7:9f:13:fa:71:76:94: fb:d0:e0:a4:23:94:05:b2:00:6e:3e:c5:26:9e:96:e9:05:03: 10:b4:0a:98:7b:44:46:27:39:b0:4c:2a:b2:93:a4:7f:a5:63: e5:dd:c3:39:25:e0:f4:45:d1:0f:11:7f:c8:3c:a2:ef:58:1f: 7e:11:72:bb:53:2d:cb:b1:3b:2e:02:f3:cc:08:c5:0c:03:45: 39:4a:9b:9c:7c:24:bb:df:bd:b7:b7:22:18:b6:5d:cd:a5:ec: 15:7c:19:b6:09:89:b1:a1:0e:42:83:58:a4:64:02:dc:68:f0: 99:ac:5b:93:24:bf:be:9e:c3:ce:10:0c:b7:ed:f7:08:52:23: 08:ea:f5:f3:f2:97:84:76:71:80:6b:e9:b6:ff:67:f3:7b:39: 7a:7f:a4:85:29:06:3d:93:50:2b:94:f0:34:38:75:e9:f9:aa: 10:21:96:be:df:0d:cf:4a:14:5c:d3:4d:d7:fa:05:17:08:82: 93:35:14:f8:b4:99:3e:7a:25:0c:dd:e7:77:d8:a0:80:00:6c: 8f:be:29:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p1bZr/vZhmSxHrHoTYwcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMTAyMTIyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTZhODZhMzk4YjYwMThiMjIyZTRlZWJkMTFmZWUyMWU0YWFjZmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZfzR2JPIuJblgNRqVWiyzxcphCX W0JJiHnJjN0DYJpo0qhbTRXYOIpKnl2U8hwX5pA+4Vd9rlvzWndgPAtwrilEfhB0 xH+setE3aV/a8iVd8lrShErqEBzv1+Ap4oD+6uHmuG8xEAyoh9xSOP8U+o7oMTvD VFLOYAL6lG7Sn3AZuoXEgZwQdjd45hLWnVcFynJObdoJnrR0ij2fni2cdyyqExDD RNmSFMc1NXBNCWwJYwdhgTHTh9mqR07XGlpaDzSxfkIeja7ebsOf0UA0ryCRi5y6 8wqa+KfsBLJUWYYxGfoPjmjMwHn37uMJV+ZdnoJZUsNngPQ1MRy3fEQFMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLpqhqOYtgGLIi5O69Ef7iHkqs+lMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvdW1xR281aTJBWXNpTGs3cjBSX3VJZVNxejZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPnpMMA0G CSqGSIb3DQEBCwUAA4IBAQBmp5HNYbrUdW1cejb7PPaaWchFNBsqwPAP+uTRUST8 xthZ3YboQHjBBYrL16CT6aefE/pxdpT70OCkI5QFsgBuPsUmnpbpBQMQtAqYe0RG JzmwTCqyk6R/pWPl3cM5JeD0RdEPEX/IPKLvWB9+EXK7Uy3LsTsuAvPMCMUMA0U5 SpucfCS73723tyIYtl3NpewVfBm2CYmxoQ5Cg1ikZALcaPCZrFuTJL++nsPOEAy3 7fcIUiMI6vXz8peEdnGAa+m2/2fzezl6f6SFKQY9k1ArlPA0OHXp+aoQIZa+3w3P ShRc003X+gUXCIKTNRT4tJk+eiUM3ed32KCAAGyPvikZ -----END CERTIFICATE-----Generated at Sat Jan 3 18:58:52 2026 by rpki-client