This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/uMqY0qXlyPp23TrUAbSeOyX7f7U.roa File: uMqY0qXlyPp23TrUAbSeOyX7f7U.roa (raw, json) Hash identifier: la2W1GnQzI8//jHlZOAVqQXBm6SRiw9WaHKwnuOzdeE= Subject key identifier: B8:CA:98:D2:A5:E5:C8:FA:76:DD:3A:D4:01:B4:9E:3B:25:FB:7F:B5 Certificate issuer: /CN=78e98dee9aadc86b4dfa9e168d921bd80ba3f3a6 Certificate serial: 019B7DC9DE672BC9FE5F9ECAD7BE6D58FD66 Authority key identifier: 78:E9:8D:EE:9A:AD:C8:6B:4D:FA:9E:16:8D:92:1B:D8:0B:A3:F3:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/uMqY0qXlyPp23TrUAbSeOyX7f7U.roa Signing time: Fri 02 Jan 2026 08:19:00 +0000 ROA not before: Fri 02 Jan 2026 08:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 138.21.37.0/24 maxlen: 24 138.21.47.0/24 maxlen: 24 193.194.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:de:67:2b:c9:fe:5f:9e:ca:d7:be:6d:58:fd:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78e98dee9aadc86b4dfa9e168d921bd80ba3f3a6 Validity Not Before: Jan 2 08:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8ca98d2a5e5c8fa76dd3ad401b49e3b25fb7fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4f:97:ae:35:d5:73:8e:0f:0d:ea:75:d5:6b: fd:82:b3:a4:e9:94:1d:77:82:68:24:6f:b1:56:70: 81:c1:07:6c:6b:29:44:d2:04:8a:3f:4c:4a:ad:6e: 08:a1:ae:fe:e1:65:56:8a:c8:82:61:c3:3d:0f:19: bd:ce:9e:e5:0d:64:50:24:e9:0f:0f:6e:33:d1:2c: ff:d0:9f:ae:50:7f:ba:9c:b9:82:c8:f3:dd:6e:b9: e8:1d:6c:fc:fa:ec:6b:a4:db:03:93:e8:6f:d2:f1: d9:53:c9:68:77:76:60:88:52:cd:7c:9b:dd:1b:1d: 7f:79:0a:2c:0a:4b:bf:db:a5:0d:c4:b5:71:de:d3: ed:ed:82:b9:bc:dd:24:fc:ed:70:3c:f1:b4:bf:de: 58:3c:c0:6e:1b:ce:6f:13:d2:53:6f:e4:ea:db:40: 72:77:83:a6:c6:7e:a9:b5:ed:58:89:be:f2:6c:70: 78:0f:8c:fa:7e:d0:46:0b:76:50:66:13:31:2f:3c: 82:8d:3c:d6:79:72:53:89:d5:0b:53:a3:7a:96:f8: eb:49:12:1c:94:60:76:43:22:a9:12:d6:06:5c:2a: b0:d5:f3:7c:52:ad:93:44:2c:92:39:6d:e7:8f:ab: c6:57:39:91:9a:ed:c0:bf:e3:4b:5e:5b:95:06:66: 3f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:CA:98:D2:A5:E5:C8:FA:76:DD:3A:D4:01:B4:9E:3B:25:FB:7F:B5 X509v3 Authority Key Identifier: keyid:78:E9:8D:EE:9A:AD:C8:6B:4D:FA:9E:16:8D:92:1B:D8:0B:A3:F3:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/uMqY0qXlyPp23TrUAbSeOyX7f7U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.21.37.0/24 138.21.47.0/24 193.194.134.0/24 Signature Algorithm: sha256WithRSAEncryption 35:63:18:e1:d7:52:93:3a:c1:6a:71:b8:45:87:4f:24:42:46: a0:20:af:01:71:d1:5c:06:97:26:43:30:ff:07:c0:57:35:42: d1:3f:c1:b7:04:67:e9:15:7d:01:a9:58:2e:67:1d:90:04:04: ae:20:27:43:f1:a0:b2:7c:72:a6:8b:7c:44:4b:c4:55:6d:9a: 5f:8e:95:c9:fc:28:13:de:0d:7a:d1:92:3d:d2:96:9d:15:43: 01:99:f3:25:50:e3:8c:a8:15:29:9b:73:7e:c0:51:c8:47:40: 5f:e1:3f:a7:16:28:c8:64:73:9c:52:54:85:54:b3:9c:29:54: ef:d3:cc:b5:ee:92:d9:50:d8:8d:b9:2b:37:2e:26:3d:d1:b8: 92:b4:0c:f6:64:53:c1:8d:be:b9:14:05:dc:4a:a9:89:3d:f6: d9:4d:c0:0a:80:c1:be:1a:c5:d2:20:94:58:70:fc:7a:62:89: 63:68:5c:8b:fd:d0:ba:d3:36:5a:03:32:a5:52:dc:ff:ba:5e: 26:ba:1b:f0:55:63:5e:bf:1e:c7:b9:ea:86:2d:35:f5:19:18: 40:b4:83:c0:13:a0:37:7f:b1:76:58:fc:e3:37:36:15:cf:79: a6:f3:93:f2:0c:d5:47:a6:94:1c:b1:0d:51:61:29:e8:af:a5: 97:79:ca:14 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9yd5nK8n+X57K175tWP1mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZTk4ZGVlOWFhZGM4NmI0ZGZhOWUxNjhkOTIxYmQ4MGJh M2YzYTYwHhcNMjYwMTAyMDgxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGNhOThkMmE1ZTVjOGZhNzZkZDNhZDQwMWI0OWUzYjI1ZmI3ZmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU+XrjXVc44PDep11Wv9grOk6ZQd d4JoJG+xVnCBwQdsaylE0gSKP0xKrW4Ioa7+4WVWisiCYcM9Dxm9zp7lDWRQJOkP D24z0Sz/0J+uUH+6nLmCyPPdbrnoHWz8+uxrpNsDk+hv0vHZU8lod3ZgiFLNfJvd Gx1/eQosCku/26UNxLVx3tPt7YK5vN0k/O1wPPG0v95YPMBuG85vE9JTb+Tq20By d4Omxn6pte1Yib7ybHB4D4z6ftBGC3ZQZhMxLzyCjTzWeXJTidULU6N6lvjrSRIc lGB2QyKpEtYGXCqw1fN8Uq2TRCySOW3nj6vGVzmRmu3Av+NLXluVBmY/bwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLjKmNKl5cj6dt061AG0njsl+3+1MB8GA1UdIwQY MBaAFHjpje6archrTfqeFo2SG9gLo/OmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU9tTjdwcXR5R3ROLXA0V2paSWIyQXVqODZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jMWNjOTUtNzUyOS00MjcwLWE2ZWMt NWM3MTk1NmE1Mzc3LzEvdU1xWTBxWGx5UHAyM1RyVUFiU2VPeVg3ZjdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9jMWNjOTUtNzUyOS00MjcwLWE2ZWMtNWM3MTk1NmE1Mzc3 LzEvZU9tTjdwcXR5R3ROLXA0V2paSWIyQXVqODZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAihUlAwQA ihUvAwQAwcKGMA0GCSqGSIb3DQEBCwUAA4IBAQA1Yxjh11KTOsFqcbhFh08kQkag IK8BcdFcBpcmQzD/B8BXNULRP8G3BGfpFX0BqVguZx2QBASuICdD8aCyfHKmi3xE S8RVbZpfjpXJ/CgT3g160ZI90padFUMBmfMlUOOMqBUpm3N+wFHIR0Bf4T+nFijI ZHOcUlSFVLOcKVTv08y17pLZUNiNuSs3LiY90biStAz2ZFPBjb65FAXcSqmJPfbZ TcAKgMG+GsXSIJRYcPx6YoljaFyL/dC60zZaAzKlUtz/ul4muhvwVWNevx7HueqG LTX1GRhAtIPAE6A3f7F2WPzjNzYVz3mm85PyDNVHppQcsQ1RYSnor6WXecoU -----END CERTIFICATE-----Generated at Fri Jan 9 06:22:17 2026 by rpki-client