This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/Um3rCN-q-gYBIcgEg82jFZfS59k.roa File: Um3rCN-q-gYBIcgEg82jFZfS59k.roa (raw, json) Hash identifier: 0rUOvsuwwsb08uI/Y1cwX6bj3C7aQudL+7nOqE0Zl9c= Subject key identifier: 52:6D:EB:08:DF:AA:FA:06:01:21:C8:04:83:CD:A3:15:97:D2:E7:D9 Certificate issuer: /CN=93db7a342cd9392efa5cd33894741ca8a5b4f42b Certificate serial: 019B7D5C50F7FCB7A8B0666D6C5B1AC547F7 Authority key identifier: 93:DB:7A:34:2C:D9:39:2E:FA:5C:D3:38:94:74:1C:A8:A5:B4:F4:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/Um3rCN-q-gYBIcgEg82jFZfS59k.roa Signing time: Fri 02 Jan 2026 06:19:20 +0000 ROA not before: Fri 02 Jan 2026 06:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210321 IP address blocks: 185.242.248.0/22 maxlen: 24 185.242.248.0/24 maxlen: 24 185.242.249.0/24 maxlen: 24 185.242.250.0/24 maxlen: 24 185.242.251.0/24 maxlen: 24 2a0c:f780::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:50:f7:fc:b7:a8:b0:66:6d:6c:5b:1a:c5:47:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93db7a342cd9392efa5cd33894741ca8a5b4f42b Validity Not Before: Jan 2 06:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=526deb08dfaafa060121c80483cda31597d2e7d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ea:54:92:5b:54:f5:c1:cc:a9:0b:92:09:68: 53:37:d5:3a:cf:45:7f:c5:13:b9:ea:23:74:a0:4d: 2c:39:6d:53:06:8e:28:8f:ca:b3:76:2e:b5:24:02: 8e:63:ab:fa:93:df:98:89:3d:8f:6d:a3:77:fa:4b: 33:ab:4e:dd:91:95:96:3c:d7:77:62:65:26:32:a1: 04:71:09:7a:69:a0:bc:fc:b5:86:4b:74:b6:d3:e4: 62:42:e6:49:06:ea:c7:e8:d5:af:20:4a:25:77:81: 4f:8f:7e:04:c4:fb:66:a4:01:f5:4d:77:dd:23:3b: 9e:5f:d8:7c:d3:4f:f7:94:c8:b8:55:24:a9:bb:18: 33:2e:71:0c:2a:71:54:f5:ef:0f:62:88:45:96:fe: 73:5e:5c:f2:01:69:8d:42:0c:33:38:41:2b:38:f8: 66:a5:f5:b6:df:7f:8e:4c:13:13:d1:bd:c0:d0:9d: e1:1c:78:ac:ba:89:22:1a:f9:e8:54:7c:46:33:f3: 9f:28:f6:af:83:bc:26:8c:d8:16:72:3b:8e:38:18: 16:cf:16:b8:3c:cd:06:06:99:0c:28:e6:56:39:93: 18:60:3b:ca:b1:43:1f:74:b2:cc:24:3a:45:8d:63: 1c:97:ec:3c:d4:e1:78:d0:53:94:86:c9:7d:cc:87: 7d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:6D:EB:08:DF:AA:FA:06:01:21:C8:04:83:CD:A3:15:97:D2:E7:D9 X509v3 Authority Key Identifier: keyid:93:DB:7A:34:2C:D9:39:2E:FA:5C:D3:38:94:74:1C:A8:A5:B4:F4:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/Um3rCN-q-gYBIcgEg82jFZfS59k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.248.0/22 IPv6: 2a0c:f780::/29 Signature Algorithm: sha256WithRSAEncryption 87:43:ff:23:c4:af:15:08:dd:59:02:b6:46:0a:8a:63:f6:40: 51:ce:e3:d0:0e:e5:63:98:c1:fd:f7:4e:24:49:22:3f:d4:c5: c3:1c:30:d7:fe:b6:46:23:a1:9b:e9:40:2e:d8:4f:16:5d:d8: 6c:30:3e:f3:7f:aa:42:9c:f7:95:be:13:8f:55:5d:ea:a5:9a: 63:72:4e:59:a4:fe:e9:a1:50:0d:82:2b:bd:11:b9:a7:d9:41: f8:5b:b7:89:dc:f1:78:49:a6:4b:3b:a6:d5:27:74:14:60:34: dd:3a:2c:f5:83:28:26:5c:be:e9:d6:52:a7:15:32:23:01:f0: 1c:72:90:08:c6:74:65:f0:2d:88:f1:2e:94:ef:18:13:4c:01: d5:1d:99:fd:e9:19:de:f6:f2:0f:73:24:60:e1:d0:cd:ab:ec: 4b:43:86:1d:05:d7:a4:e2:0e:7b:1c:b9:27:d3:f6:f3:e0:4a: 2f:e2:a5:65:bd:bf:11:80:28:0b:bf:7c:34:70:69:cb:88:34: 7e:18:a7:01:68:51:aa:25:d3:b8:d6:d5:12:cb:07:a6:a3:ff: 6e:3e:d8:db:7c:71:bc:d7:ec:7e:c0:11:6d:73:f0:b8:b6:8e: dc:07:61:20:15:26:9b:1b:73:a3:33:84:7e:56:68:dd:75:51: a3:4f:63:68 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XFD3/LeosGZtbFsaxUf3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZGI3YTM0MmNkOTM5MmVmYTVjZDMzODk0NzQxY2E4YTVi NGY0MmIwHhcNMjYwMTAyMDYxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjZkZWIwOGRmYWFmYTA2MDEyMWM4MDQ4M2NkYTMxNTk3ZDJlN2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+pUkltU9cHMqQuSCWhTN9U6z0V/ xRO56iN0oE0sOW1TBo4oj8qzdi61JAKOY6v6k9+YiT2PbaN3+kszq07dkZWWPNd3 YmUmMqEEcQl6aaC8/LWGS3S20+RiQuZJBurH6NWvIEold4FPj34ExPtmpAH1TXfd IzueX9h800/3lMi4VSSpuxgzLnEMKnFU9e8PYohFlv5zXlzyAWmNQgwzOEErOPhm pfW233+OTBMT0b3A0J3hHHisuokiGvnoVHxGM/OfKPavg7wmjNgWcjuOOBgWzxa4 PM0GBpkMKOZWOZMYYDvKsUMfdLLMJDpFjWMcl+w81OF40FOUhsl9zId9HQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFJt6wjfqvoGASHIBIPNoxWX0ufZMB8GA1UdIwQY MBaAFJPbejQs2Tku+lzTOJR0HKiltPQrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazl0Nk5DelpPUzc2WE5NNGxIUWNxS1cwOUNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zMDhmNTMtOGJmZi00OTkwLThkN2It ZTcxODVjZGVjY2QzLzEvVW0zckNOLXEtZ1lCSWNnRWc4MmpGWmZTNTlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8zMDhmNTMtOGJmZi00OTkwLThkN2ItZTcxODVjZGVjY2Qz LzEvazl0Nk5DelpPUzc2WE5NNGxIUWNxS1cwOUNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufL4MA0E AgACMAcDBQMqDPeAMA0GCSqGSIb3DQEBCwUAA4IBAQCHQ/8jxK8VCN1ZArZGCopj 9kBRzuPQDuVjmMH9904kSSI/1MXDHDDX/rZGI6Gb6UAu2E8WXdhsMD7zf6pCnPeV vhOPVV3qpZpjck5ZpP7poVANgiu9Ebmn2UH4W7eJ3PF4SaZLO6bVJ3QUYDTdOiz1 gygmXL7p1lKnFTIjAfAccpAIxnRl8C2I8S6U7xgTTAHVHZn96Rne9vIPcyRg4dDN q+xLQ4YdBdek4g57HLkn0/bz4Eov4qVlvb8RgCgLv3w0cGnLiDR+GKcBaFGqJdO4 1tUSywemo/9uPtjbfHG81+x+wBFtc/C4to7cB2EgFSabG3OjM4R+VmjddVGjT2No -----END CERTIFICATE-----Generated at Tue Feb 10 07:29:48 2026 by rpki-client