This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Uomgw03MuGV8Ai9pacluwc2_ooM.roa
File: Uomgw03MuGV8Ai9pacluwc2_ooM.roa (raw, json)
Hash identifier: 82ZReSnh3DgIewhlSSSnPH/njYDXEdr0PTh2wFT+0LE=
Subject key identifier: 52:89:A0:C3:4D:CC:B8:65:7C:02:2F:69:69:C9:6E:C1:CD:BF:A2:83
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019B7DCB8267682B10E19A5D2F944A25F570
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Uomgw03MuGV8Ai9pacluwc2_ooM.roa
Signing time: Fri 02 Jan 2026 08:20:47 +0000
ROA not before: Fri 02 Jan 2026 08:20:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211192
IP address blocks: 151.240.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Jan 2026 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:82:67:68:2b:10:e1:9a:5d:2f:94:4a:25:f5:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 2 08:20:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5289a0c34dccb8657c022f6969c96ec1cdbfa283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:57:6e:23:f9:1e:f3:d2:96:f5:1a:e1:cb:
32:cf:12:dc:d9:ab:8e:63:d1:ac:c3:55:eb:e3:85:
b1:df:0c:d2:4d:02:16:ac:1f:52:14:83:13:55:9e:
00:1f:2e:60:c1:4c:9e:2c:7f:7e:ab:de:32:7f:98:
6b:39:0e:e3:dc:e8:0b:5d:13:1e:b3:3c:0d:b6:cf:
93:48:9b:ff:1e:ba:ef:c6:75:37:39:82:69:64:42:
54:f4:bf:ee:4c:4e:44:d8:e7:07:e7:e9:d7:e5:8c:
ca:d5:29:44:e7:75:00:5d:83:eb:0f:02:c3:c8:0f:
37:c5:52:0f:59:a4:5b:1a:f5:3e:d6:60:b3:56:4e:
80:95:78:ab:a9:fc:d7:6f:1b:f7:7d:e8:02:42:21:
da:eb:28:fa:bb:dc:b1:36:69:ac:be:f7:5a:b2:9d:
bf:6c:8c:b5:28:65:1b:54:e5:b3:2a:59:ba:5e:8c:
45:3b:70:c2:04:48:5f:42:a6:53:65:84:61:0d:2f:
d5:3a:f4:66:f4:03:5f:4f:7a:72:91:7e:10:b0:f5:
77:29:b8:18:5e:6e:fd:9a:01:f9:d8:d3:a0:dd:83:
a1:c3:9a:94:03:f6:00:15:71:ff:59:40:12:c9:61:
70:06:ae:ff:9d:74:62:a0:12:ef:9c:0b:82:19:7d:
bd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:89:A0:C3:4D:CC:B8:65:7C:02:2F:69:69:C9:6E:C1:CD:BF:A2:83
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Uomgw03MuGV8Ai9pacluwc2_ooM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.248.0/24
Signature Algorithm: sha256WithRSAEncryption
63:f2:61:f5:16:33:78:77:26:e5:81:a1:75:2d:f2:9e:30:cd:
f4:14:2a:fb:58:a2:e6:98:e8:7e:ae:61:44:fb:f2:de:15:1d:
ec:23:90:4d:ee:57:51:52:0a:7f:dd:4a:2e:06:64:c5:73:87:
8e:9c:33:1b:ab:68:5c:4b:37:69:08:6f:0c:82:e4:c1:13:76:
bc:d4:55:61:62:c8:4b:5e:aa:58:2a:28:65:d3:c1:13:44:67:
ee:4b:33:c7:e3:0b:75:ba:a3:6b:c9:be:be:f6:23:f4:8f:6e:
f3:b9:6f:61:ee:54:b0:27:04:48:ee:bd:d0:ee:65:90:1f:2d:
16:98:4a:fc:ee:52:7d:70:e3:79:25:4a:70:45:80:1f:b3:b1:
de:c1:4a:59:9c:e7:1b:98:a2:40:33:38:93:19:30:a5:eb:b5:
de:a1:c7:48:e9:03:dc:e4:0a:b8:ea:a3:87:32:2e:38:2c:34:
33:0d:7f:37:74:87:3e:67:a2:bd:b5:05:65:ae:e2:ee:66:00:
97:5a:47:c5:e8:5f:75:80:a4:52:9f:35:15:14:e0:24:05:7c:
46:30:a4:9d:be:2e:b5:85:35:5d:67:f2:45:6e:d9:9b:c5:5e:
4b:c2:42:82:cb:79:97:bf:76:44:bd:24:a0:f0:e0:f9:41:8a:
88:c9:3e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 06:27:41 2026 by rpki-client