This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/UMRm0dtRz3FJANd_M4r6isxg5pc.roa File: UMRm0dtRz3FJANd_M4r6isxg5pc.roa (raw, json) Hash identifier: hL7WSRr8WKYlMsBe+yWHzd7U1Dc511hpxbpyKw8/AI8= Subject key identifier: 50:C4:66:D1:DB:51:CF:71:49:00:D7:7F:33:8A:FA:8A:CC:60:E6:97 Certificate issuer: /CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd Certificate serial: 019B7BA4F6B129A5F6F2CB9388B7711A83CD Authority key identifier: 9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/UMRm0dtRz3FJANd_M4r6isxg5pc.roa Signing time: Thu 01 Jan 2026 22:19:27 +0000 ROA not before: Thu 01 Jan 2026 22:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205547 IP address blocks: 185.207.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:f6:b1:29:a5:f6:f2:cb:93:88:b7:71:1a:83:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd Validity Not Before: Jan 1 22:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50c466d1db51cf714900d77f338afa8acc60e697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:97:c3:0f:c5:74:a9:5f:52:55:7d:52:45:5f: 49:0f:53:d8:71:76:d8:d0:68:9a:db:3b:f0:30:ce: c1:2b:f1:56:76:30:00:3c:b5:45:fa:ce:18:d5:ca: 3e:88:7b:c9:14:40:38:f9:a8:b6:84:bd:35:4e:f0: d0:84:73:29:c0:be:00:43:fe:29:28:19:bd:66:1e: 95:48:19:80:50:50:82:c4:70:83:f6:8c:a6:bf:4c: ca:c0:39:c9:fa:60:32:41:9f:0f:6d:fc:79:18:72: 55:c6:9b:3a:e3:7c:58:b3:b8:ba:39:21:23:eb:dc: 32:25:0f:ea:66:63:9e:07:5d:e0:46:fe:1f:03:d8: cb:b6:7f:0b:53:b1:51:be:69:9f:b5:7b:ff:18:c0: 39:c4:59:40:98:4d:6f:f0:03:a7:62:93:85:0f:46: ee:fc:fb:f1:fc:44:13:d2:36:a9:ed:2b:d5:09:7a: 62:1b:1a:4d:68:72:6f:49:03:d6:5e:4b:15:00:6e: a6:a5:11:e4:35:01:73:51:fb:ea:d2:2d:c8:f6:95: 38:fc:82:92:9b:bc:38:ff:05:5f:2e:59:f1:f9:24: 66:bf:b8:d1:e0:76:1d:df:00:75:9d:7b:96:52:f6: f5:97:ec:76:da:3a:40:ce:ea:97:b7:23:62:55:9f: df:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C4:66:D1:DB:51:CF:71:49:00:D7:7F:33:8A:FA:8A:CC:60:E6:97 X509v3 Authority Key Identifier: keyid:9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/UMRm0dtRz3FJANd_M4r6isxg5pc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.207.34.0/24 Signature Algorithm: sha256WithRSAEncryption 11:fe:9e:36:7c:85:60:37:55:fe:a5:35:1e:d8:8b:1a:53:bb: 4f:9e:27:2a:3d:c7:0c:b1:89:c8:c3:a4:0b:1b:38:64:22:8a: dd:cb:b3:a4:c1:65:33:af:54:1b:9d:f6:41:52:9c:33:6b:76: a7:b3:ab:7e:72:38:12:7a:64:eb:e6:d1:83:27:c0:83:fa:fc: 14:f2:ef:14:2f:00:75:60:71:94:04:e6:10:6b:1c:b0:b4:21: 5e:e6:47:c8:15:3e:c6:d1:1c:00:9d:13:37:75:7c:ab:51:08: d9:d3:ce:15:29:57:e0:18:61:db:ef:4c:8d:d5:d3:e3:54:3e: 00:23:b6:10:4a:cd:be:7a:02:0e:72:80:36:6c:4b:aa:4b:79: ed:01:ab:23:17:7c:78:4a:52:23:27:1b:35:e2:01:3a:da:21: 88:c1:26:41:00:a4:50:58:c3:17:ef:e7:9a:5b:07:90:27:2c: cb:52:e6:b4:f7:3c:c7:bd:c0:99:c3:5a:16:3e:48:25:87:be: d7:07:77:b0:b2:a2:de:eb:2b:13:7f:01:08:64:23:74:3f:62: 15:bc:5b:f6:e4:58:2a:96:10:95:3e:82:e2:2d:a3:34:7d:5b: 31:ce:bd:61:57:8d:c8:6e:5e:50:fc:4d:3c:4f:b1:e0:39:92: 4b:7f:71:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pPaxKaX28suTiLdxGoPNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOWEwYzg0YjMwNzIwZjRkNGNlNGJkYmEwMWRkMDU0NGQw MjhlY2QwHhcNMjYwMTAxMjIxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGM0NjZkMWRiNTFjZjcxNDkwMGQ3N2YzMzhhZmE4YWNjNjBlNjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZfDD8V0qV9SVX1SRV9JD1PYcXbY 0Gia2zvwMM7BK/FWdjAAPLVF+s4Y1co+iHvJFEA4+ai2hL01TvDQhHMpwL4AQ/4p KBm9Zh6VSBmAUFCCxHCD9oymv0zKwDnJ+mAyQZ8Pbfx5GHJVxps643xYs7i6OSEj 69wyJQ/qZmOeB13gRv4fA9jLtn8LU7FRvmmftXv/GMA5xFlAmE1v8AOnYpOFD0bu /Pvx/EQT0jap7SvVCXpiGxpNaHJvSQPWXksVAG6mpRHkNQFzUfvq0i3I9pU4/IKS m7w4/wVfLlnx+SRmv7jR4HYd3wB1nXuWUvb1l+x22jpAzuqXtyNiVZ/fYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFDEZtHbUc9xSQDXfzOK+orMYOaXMB8GA1UdIwQY MBaAFJ2aDISzByD01M5L26Ad0FRNAo7NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xZThkNGQtNTNiZi00YWNiLWJjMGMt NTJjYWQ2Njc1ZmM2LzEvVU1SbTBkdFJ6M0ZKQU5kX000cjZpc3hnNXBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8xZThkNGQtNTNiZi00YWNiLWJjMGMtNTJjYWQ2Njc1ZmM2 LzEvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc8iMA0G CSqGSIb3DQEBCwUAA4IBAQAR/p42fIVgN1X+pTUe2IsaU7tPnicqPccMsYnIw6QL GzhkIordy7OkwWUzr1QbnfZBUpwza3ans6t+cjgSemTr5tGDJ8CD+vwU8u8ULwB1 YHGUBOYQaxywtCFe5kfIFT7G0RwAnRM3dXyrUQjZ084VKVfgGGHb70yN1dPjVD4A I7YQSs2+egIOcoA2bEuqS3ntAasjF3x4SlIjJxs14gE62iGIwSZBAKRQWMMX7+ea WweQJyzLUua09zzHvcCZw1oWPkglh77XB3ewsqLe6ysTfwEIZCN0P2IVvFv25Fgq lhCVPoLiLaM0fVsxzr1hV43Ibl5Q/E08T7HgOZJLf3G6 -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:37 2026 by rpki-client