This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/um-Lorhk6tusr5ZZhejZsnrGt8I.roa File: um-Lorhk6tusr5ZZhejZsnrGt8I.roa (raw, json) Hash identifier: DrlD6P/FnEJtBBpWVV2J3o/4TxhGlcEWI7wpBpxOr+U= Subject key identifier: BA:6F:8B:A2:B8:64:EA:DB:AC:AF:96:59:85:E8:D9:B2:7A:C6:B7:C2 Certificate issuer: /CN=5a955ca458468c5776b8d9936dfe9b0b2668731c Certificate serial: 019B7DC9FBB6C21FEC279D215DFEE373648A Authority key identifier: 5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/um-Lorhk6tusr5ZZhejZsnrGt8I.roa Signing time: Fri 02 Jan 2026 08:19:07 +0000 ROA not before: Fri 02 Jan 2026 08:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15557 IP address blocks: 185.197.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:fb:b6:c2:1f:ec:27:9d:21:5d:fe:e3:73:64:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a955ca458468c5776b8d9936dfe9b0b2668731c Validity Not Before: Jan 2 08:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba6f8ba2b864eadbacaf965985e8d9b27ac6b7c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ba:31:fc:96:9b:dc:4d:16:15:c1:9e:0b:79: e4:7f:4c:73:a7:c2:02:04:24:8e:5c:2a:64:12:dd: 46:5e:8b:2c:d1:9a:93:60:a5:28:9a:23:ea:e4:8d: dd:55:f8:6b:5c:78:40:ac:19:ca:a1:76:25:44:31: 2a:98:cd:6c:8d:f3:83:46:28:34:58:55:05:57:8c: 55:b3:13:ed:46:52:34:7a:ab:b9:0e:bf:8e:66:a5: 9e:d4:71:ba:57:0a:cf:0f:4a:42:04:df:4e:34:71: 79:40:b8:cb:cf:2d:83:4c:20:2d:05:34:a6:cd:2d: b4:ce:88:99:be:6f:e2:7c:a0:b8:aa:c6:d7:ea:0d: 09:60:cf:9f:92:d0:a3:3d:5a:2f:90:5c:3d:79:36: c8:87:5c:02:ac:19:91:e9:aa:47:d4:85:1e:18:c5: c7:a8:f4:25:e7:37:38:9a:e1:e8:c0:e6:15:fa:d1: 94:ca:20:72:16:4b:f7:c6:ee:87:24:62:4d:fb:37: cb:28:b2:f9:08:3c:92:36:45:0d:0f:9b:fb:bf:dc: b1:5b:d7:fa:da:be:c7:a8:d2:33:e9:b5:7e:ae:ce: 53:3e:47:2a:3a:d6:0c:d3:86:7e:7f:14:50:8a:6a: dc:2e:66:b3:b7:4f:57:80:e2:66:e4:af:73:9d:b3: cf:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:6F:8B:A2:B8:64:EA:DB:AC:AF:96:59:85:E8:D9:B2:7A:C6:B7:C2 X509v3 Authority Key Identifier: keyid:5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/um-Lorhk6tusr5ZZhejZsnrGt8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.197.101.0/24 Signature Algorithm: sha256WithRSAEncryption 10:de:70:0a:09:e8:d6:85:d5:e6:57:99:f6:b5:ca:41:68:db: 6b:6c:72:2f:d8:f1:11:3d:f8:01:8a:68:dc:a7:b3:26:45:9e: 82:12:3e:4a:aa:6f:81:d8:21:95:1f:35:cd:f6:3c:06:19:d0: eb:3e:a3:6a:28:9d:7b:96:60:47:e0:e0:d1:9a:61:fb:19:d9: 73:96:07:d9:8b:70:83:2f:7d:28:58:f0:ca:4b:6c:17:b4:80: d9:32:c0:3f:5d:1c:b3:37:fb:9e:da:4c:4c:73:c3:b7:f0:ba: f2:f2:0c:0d:0f:2a:c4:75:44:05:90:8b:9c:08:ef:48:bb:fb: 39:af:b3:d1:17:d8:45:84:c6:6a:a7:1a:ab:ab:d3:59:d2:a5: 7d:18:03:a7:90:da:8b:20:b3:ae:89:78:46:10:3e:eb:a9:36: b1:16:8e:97:8e:6e:ff:e5:d0:31:ff:8a:43:e7:4f:50:7f:7c: 51:f0:98:f9:8d:1a:7a:6b:88:fe:06:5c:45:76:60:e0:f9:ca: c8:67:31:c8:fa:2f:56:4b:a3:5c:85:94:0a:86:c0:5b:18:bc: a5:83:01:d3:8d:d0:98:b5:f3:94:c1:c5:62:5d:7e:bc:a8:92: f2:c6:cc:b5:22:e2:71:c4:02:7d:8e:9d:fa:dd:6d:37:0d:f5: fb:be:50:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yfu2wh/sJ50hXf7jc2SKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTU1Y2E0NTg0NjhjNTc3NmI4ZDk5MzZkZmU5YjBiMjY2 ODczMWMwHhcNMjYwMTAyMDgxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTZmOGJhMmI4NjRlYWRiYWNhZjk2NTk4NWU4ZDliMjdhYzZiN2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7ox/Jab3E0WFcGeC3nkf0xzp8IC BCSOXCpkEt1GXoss0ZqTYKUomiPq5I3dVfhrXHhArBnKoXYlRDEqmM1sjfODRig0 WFUFV4xVsxPtRlI0equ5Dr+OZqWe1HG6VwrPD0pCBN9ONHF5QLjLzy2DTCAtBTSm zS20zoiZvm/ifKC4qsbX6g0JYM+fktCjPVovkFw9eTbIh1wCrBmR6apH1IUeGMXH qPQl5zc4muHowOYV+tGUyiByFkv3xu6HJGJN+zfLKLL5CDySNkUND5v7v9yxW9f6 2r7HqNIz6bV+rs5TPkcqOtYM04Z+fxRQimrcLmazt09XgOJm5K9znbPP1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLpvi6K4ZOrbrK+WWYXo2bJ6xrfCMB8GA1UdIwQY MBaAFFqVXKRYRoxXdrjZk23+mwsmaHMcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BWY3BGaEdqRmQydU5tVGJmNmJDeVpvY3h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9iZTlhMDAtZTBiMS00NTQxLTljMGYt MTM4NThkYTg1ZjUzLzEvdW0tTG9yaGs2dHVzcjVaWmhlalpzbnJHdDhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9iZTlhMDAtZTBiMS00NTQxLTljMGYtMTM4NThkYTg1ZjUz LzEvV3BWY3BGaEdqRmQydU5tVGJmNmJDeVpvY3h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucVlMA0G CSqGSIb3DQEBCwUAA4IBAQAQ3nAKCejWhdXmV5n2tcpBaNtrbHIv2PERPfgBimjc p7MmRZ6CEj5Kqm+B2CGVHzXN9jwGGdDrPqNqKJ17lmBH4ODRmmH7GdlzlgfZi3CD L30oWPDKS2wXtIDZMsA/XRyzN/ue2kxMc8O38Lry8gwNDyrEdUQFkIucCO9Iu/s5 r7PRF9hFhMZqpxqrq9NZ0qV9GAOnkNqLILOuiXhGED7rqTaxFo6Xjm7/5dAx/4pD 509Qf3xR8Jj5jRp6a4j+BlxFdmDg+crIZzHI+i9WS6NchZQKhsBbGLylgwHTjdCY tfOUwcViXX68qJLyxsy1IuJxxAJ9jp363W03DfX7vlA6 -----END CERTIFICATE-----Generated at Wed Jan 21 06:07:47 2026 by rpki-client