This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/9UmVBUMs6yDXaaopmSQTJTVm64o.roa File: 9UmVBUMs6yDXaaopmSQTJTVm64o.roa (raw, json) Hash identifier: ipogFa+WFQS0FxW7WxZgSgQFadw8YCDMXaIz/b6qK4I= Subject key identifier: F5:49:95:05:43:2C:EB:20:D7:69:AA:29:99:24:13:25:35:66:EB:8A Certificate issuer: /CN=1ad5d174cbb46aaf86555b80e1773331b870b568 Certificate serial: 019B7FF185B941D271C5A486A598668550CF Authority key identifier: 1A:D5:D1:74:CB:B4:6A:AF:86:55:5B:80:E1:77:33:31:B8:70:B5:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/9UmVBUMs6yDXaaopmSQTJTVm64o.roa Signing time: Fri 02 Jan 2026 18:21:33 +0000 ROA not before: Fri 02 Jan 2026 18:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47303 IP address blocks: 193.203.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.mft rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:85:b9:41:d2:71:c5:a4:86:a5:98:66:85:50:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ad5d174cbb46aaf86555b80e1773331b870b568 Validity Not Before: Jan 2 18:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5499505432ceb20d769aa29992413253566eb8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:99:83:27:47:ef:b4:28:4b:40:45:f2:04:9f: b3:bb:f6:a2:c6:76:a8:63:32:c5:8a:04:f0:8d:3a: ea:ff:e6:04:ae:19:66:4f:6b:f8:e1:30:12:27:f7: 3d:cf:2c:6b:94:8f:b8:0f:86:fb:ce:2f:51:e5:a1: a3:4c:b7:81:31:af:0e:61:23:94:e2:77:46:69:e8: 40:16:85:22:95:bb:28:01:b1:72:e9:24:ad:c0:ea: 7d:b9:f8:59:c3:25:00:f9:3b:40:c1:52:1d:9c:0d: f4:29:ef:c8:6d:9e:8c:aa:f1:4c:5c:fa:e5:b3:6f: 01:c4:d6:ac:05:df:e1:ec:ca:8d:0e:39:00:63:d6: fb:c6:54:5e:6f:ae:6c:7b:c1:6d:76:09:ca:8d:6d: 45:48:98:5c:7b:7a:96:20:41:a3:f4:12:e3:89:d2: 03:8f:34:13:5b:33:01:74:58:42:1f:c8:60:11:36: 9d:c9:67:af:fd:14:d7:c5:1b:e3:48:38:9e:1d:a8: 19:b0:cb:41:cc:ee:3e:1a:0b:96:9f:3a:29:da:d9: dd:06:8b:b7:c5:07:62:d6:2d:4c:f6:e3:1e:70:64: f5:96:16:cf:79:c4:eb:60:28:d7:9c:3d:37:e0:fe: eb:56:f4:7d:c2:4d:f1:2b:20:d8:79:fa:b6:f9:03: 50:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:49:95:05:43:2C:EB:20:D7:69:AA:29:99:24:13:25:35:66:EB:8A X509v3 Authority Key Identifier: keyid:1A:D5:D1:74:CB:B4:6A:AF:86:55:5B:80:E1:77:33:31:B8:70:B5:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/9UmVBUMs6yDXaaopmSQTJTVm64o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.203.99.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:7a:f0:6c:83:30:06:13:03:97:f6:11:77:dd:c8:5b:3d:2b: 6c:64:49:76:fc:30:d9:bc:b3:c5:f0:4a:1e:b3:d5:ae:c7:04: 1b:e8:3c:ae:b9:1f:01:cf:4b:be:eb:e4:93:c5:76:1e:d0:e8: 2d:e3:cf:a1:a5:1a:19:f8:26:13:95:2d:4a:cc:de:91:f5:ba: f1:c8:a0:05:4a:7d:b4:80:af:70:24:be:9f:a9:a1:ad:7d:69: 05:57:a0:17:30:bb:f8:73:02:0a:4f:6e:e0:cc:21:f7:47:df: ea:ac:9a:58:16:9c:1d:78:de:69:ab:fc:b8:62:54:70:92:54: a4:81:95:3e:5b:c8:04:71:56:6c:b6:b6:1a:92:1e:5b:da:ba: 46:fd:76:07:85:3a:09:32:fa:ab:1a:47:0c:9b:70:0b:33:84: 04:00:30:41:77:0e:01:90:37:b5:d2:59:2f:ed:52:58:56:10: cf:56:9e:09:fd:b6:3a:a4:4b:4b:0d:6c:b5:d2:92:dc:d7:f5: 3a:21:fa:3f:2b:b9:6f:2b:e8:84:de:6d:c6:43:92:0c:98:ce: ae:a6:72:c9:cb:4c:34:46:63:ee:60:8a:82:b2:43:59:2b:4b: 44:a4:a0:3f:b7:05:1a:c8:c7:ee:e5:52:74:f4:92:94:49:80: fd:95:96:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8YW5QdJxxaSGpZhmhVDPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZDVkMTc0Y2JiNDZhYWY4NjU1NWI4MGUxNzczMzMxYjg3 MGI1NjgwHhcNMjYwMTAyMTgyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTQ5OTUwNTQzMmNlYjIwZDc2OWFhMjk5OTI0MTMyNTM1NjZlYjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspmDJ0fvtChLQEXyBJ+zu/aixnao YzLFigTwjTrq/+YErhlmT2v44TASJ/c9zyxrlI+4D4b7zi9R5aGjTLeBMa8OYSOU 4ndGaehAFoUilbsoAbFy6SStwOp9ufhZwyUA+TtAwVIdnA30Ke/IbZ6MqvFMXPrl s28BxNasBd/h7MqNDjkAY9b7xlReb65se8FtdgnKjW1FSJhce3qWIEGj9BLjidID jzQTWzMBdFhCH8hgETadyWev/RTXxRvjSDieHagZsMtBzO4+GguWnzop2tndBou3 xQdi1i1M9uMecGT1lhbPecTrYCjXnD034P7rVvR9wk3xKyDYefq2+QNQlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPVJlQVDLOsg12mqKZkkEyU1ZuuKMB8GA1UdIwQY MBaAFBrV0XTLtGqvhlVbgOF3MzG4cLVoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3RYUmRNdTBhcS1HVlZ1QTRYY3pNYmh3dFdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jNmI5MDYtOTE1MC00NDNkLWJhMzAt NzM5YzE5OGM1MTNmLzEvOVVtVkJVTXM2eURYYWFvcG1TUVRKVFZtNjRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9jNmI5MDYtOTE1MC00NDNkLWJhMzAtNzM5YzE5OGM1MTNm LzEvR3RYUmRNdTBhcS1HVlZ1QTRYY3pNYmh3dFdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwctjMA0G CSqGSIb3DQEBCwUAA4IBAQBeevBsgzAGEwOX9hF33chbPStsZEl2/DDZvLPF8Eoe s9WuxwQb6DyuuR8Bz0u+6+STxXYe0Ogt48+hpRoZ+CYTlS1KzN6R9brxyKAFSn20 gK9wJL6fqaGtfWkFV6AXMLv4cwIKT27gzCH3R9/qrJpYFpwdeN5pq/y4YlRwklSk gZU+W8gEcVZstrYakh5b2rpG/XYHhToJMvqrGkcMm3ALM4QEADBBdw4BkDe10lkv 7VJYVhDPVp4J/bY6pEtLDWy10pLc1/U6Ifo/K7lvK+iE3m3GQ5IMmM6upnLJy0w0 RmPuYIqCskNZK0tEpKA/twUayMfu5VJ09JKUSYD9lZaO -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:42 2026 by rpki-client