This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/_umM-ifUYAXN-TkvPlavvAf1aBQ.roa File: _umM-ifUYAXN-TkvPlavvAf1aBQ.roa (raw, json) Hash identifier: sCjPYzBH4hvw7Ts2Tsttu/QAIcVSkFxZGEGfyMRDD0Y= Subject key identifier: FE:E9:8C:FA:27:D4:60:05:CD:F9:39:2F:3E:56:AF:BC:07:F5:68:14 Certificate issuer: /CN=2860f15d278379483aaa0613cbf592e72cc81e48 Certificate serial: 019B79104ABED9C69BE63BCD28039400F6E1 Authority key identifier: 28:60:F1:5D:27:83:79:48:3A:AA:06:13:CB:F5:92:E7:2C:C8:1E:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/_umM-ifUYAXN-TkvPlavvAf1aBQ.roa Signing time: Thu 01 Jan 2026 10:17:49 +0000 ROA not before: Thu 01 Jan 2026 10:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198385 IP address blocks: 193.73.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.crl rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft rsync://rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:4a:be:d9:c6:9b:e6:3b:cd:28:03:94:00:f6:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2860f15d278379483aaa0613cbf592e72cc81e48 Validity Not Before: Jan 1 10:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fee98cfa27d46005cdf9392f3e56afbc07f56814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4d:2b:76:01:d5:26:9d:13:3d:a7:a4:5b:d1: b1:0c:92:51:1b:55:81:ec:02:e7:29:95:5d:95:11: ea:b4:56:2b:59:85:83:0b:a3:41:12:54:87:7a:9e: c8:f8:ac:8c:b4:a5:42:64:cd:d5:bf:f3:a7:22:76: a8:1c:0f:06:21:5d:6f:98:0a:54:9c:6b:e1:2f:81: 62:c6:e1:1d:46:9f:b2:e8:43:34:b7:7a:b8:98:c2: da:99:fa:63:76:e1:38:d8:7e:ac:79:7b:53:a5:90: e4:2a:26:bb:52:b9:56:c7:76:bf:57:86:f5:90:35: 1a:7d:79:82:9b:00:5f:00:69:be:d8:3c:02:e2:85: 91:03:54:c7:37:16:5c:2c:ab:5c:b7:c1:db:cd:b5: 0b:5c:4d:91:8d:d3:81:a2:d4:04:9f:78:84:7c:a9: 63:cb:fc:e2:d0:47:1b:a4:27:bb:52:63:4c:e1:3c: a4:99:25:ba:13:14:d1:85:14:9f:b1:e6:4b:1b:17: 26:28:19:ae:1e:d5:6a:9b:32:45:96:bf:c0:c9:d5: 7e:05:59:6a:88:75:f3:16:a1:cf:fb:d5:8c:31:79: 86:6d:cc:66:2c:07:33:8c:ee:80:39:cd:6b:8f:bf: c5:9b:15:48:62:fd:76:f8:d1:55:ca:db:28:42:9a: 5d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E9:8C:FA:27:D4:60:05:CD:F9:39:2F:3E:56:AF:BC:07:F5:68:14 X509v3 Authority Key Identifier: keyid:28:60:F1:5D:27:83:79:48:3A:AA:06:13:CB:F5:92:E7:2C:C8:1E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/_umM-ifUYAXN-TkvPlavvAf1aBQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.73.122.0/24 Signature Algorithm: sha256WithRSAEncryption b3:90:58:91:7a:a7:92:56:c9:97:28:98:ef:35:1e:11:9f:b8: a5:7c:17:ac:49:75:a9:82:3b:c3:c2:4d:f9:fe:14:9a:45:64: 62:97:91:e9:e5:27:aa:be:1d:d4:9a:84:9a:df:2a:84:99:36: 5f:ec:b0:9d:58:6b:0b:b7:86:ce:64:f8:20:f6:e0:61:51:9f: 97:b9:b0:57:32:b4:4d:a1:50:5b:02:50:b8:40:da:21:b2:fc: 72:38:33:a1:b5:89:35:c4:cb:c1:57:36:f0:4b:fa:65:b9:c6: 25:a6:7b:af:ea:8d:93:a0:e6:fc:dd:65:88:b6:68:64:b8:fb: 9b:88:87:4c:a6:4a:e1:c9:f6:7d:6f:65:dd:02:3a:99:44:6f: b9:af:ed:d2:c8:c8:7b:24:a7:4a:f4:b4:92:63:63:35:8f:23: 29:5e:e8:49:b4:da:ee:3e:69:ee:e5:3f:29:64:88:68:a2:fb: 75:1c:01:23:4d:47:eb:05:5f:8c:fc:16:59:0d:8e:39:24:84: 71:74:87:06:a4:35:de:55:04:2b:fa:e6:1c:af:da:c8:ef:e6: c2:47:8e:21:98:d6:61:2c:57:b4:1e:75:89:14:c0:a3:62:b3: e7:f0:c6:bd:e2:77:9b:c9:c3:3b:83:dd:9d:84:aa:9f:5e:aa: bb:13:5b:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EEq+2cab5jvNKAOUAPbhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4NjBmMTVkMjc4Mzc5NDgzYWFhMDYxM2NiZjU5MmU3MmNj ODFlNDgwHhcNMjYwMTAxMTAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWU5OGNmYTI3ZDQ2MDA1Y2RmOTM5MmYzZTU2YWZiYzA3ZjU2ODE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU0rdgHVJp0TPaekW9GxDJJRG1WB 7ALnKZVdlRHqtFYrWYWDC6NBElSHep7I+KyMtKVCZM3Vv/OnInaoHA8GIV1vmApU nGvhL4FixuEdRp+y6EM0t3q4mMLamfpjduE42H6seXtTpZDkKia7UrlWx3a/V4b1 kDUafXmCmwBfAGm+2DwC4oWRA1THNxZcLKtct8HbzbULXE2RjdOBotQEn3iEfKlj y/zi0EcbpCe7UmNM4TykmSW6ExTRhRSfseZLGxcmKBmuHtVqmzJFlr/AydV+BVlq iHXzFqHP+9WMMXmGbcxmLAczjO6AOc1rj7/FmxVIYv12+NFVytsoQppdJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP7pjPon1GAFzfk5Lz5Wr7wH9WgUMB8GA1UdIwQY MBaAFChg8V0ng3lIOqoGE8v1kucsyB5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0dEeFhTZURlVWc2cWdZVHlfV1M1eXpJSGtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xZDFiNzItOGJjZi00NTAwLTkxMjUt MzIxYzE0ZGQ0NjM5LzEvX3VtTS1pZlVZQVhOLVRrdlBsYXZ2QWYxYUJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8xZDFiNzItOGJjZi00NTAwLTkxMjUtMzIxYzE0ZGQ0NjM5 LzEvS0dEeFhTZURlVWc2cWdZVHlfV1M1eXpJSGtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwUl6MA0G CSqGSIb3DQEBCwUAA4IBAQCzkFiReqeSVsmXKJjvNR4Rn7ilfBesSXWpgjvDwk35 /hSaRWRil5Hp5Seqvh3UmoSa3yqEmTZf7LCdWGsLt4bOZPgg9uBhUZ+XubBXMrRN oVBbAlC4QNohsvxyODOhtYk1xMvBVzbwS/plucYlpnuv6o2ToOb83WWItmhkuPub iIdMpkrhyfZ9b2XdAjqZRG+5r+3SyMh7JKdK9LSSY2M1jyMpXuhJtNruPmnu5T8p ZIhoovt1HAEjTUfrBV+M/BZZDY45JIRxdIcGpDXeVQQr+uYcr9rI7+bCR44hmNZh LFe0HnWJFMCjYrPn8Ma94nebycM7g92dhKqfXqq7E1u8 -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:25 2026 by rpki-client