This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/2um_rS6WPk2IN6s5x2XbXkQen_M.roa File: 2um_rS6WPk2IN6s5x2XbXkQen_M.roa (raw, json) Hash identifier: B3h5JybIRNgVZgqeJwphCEgik9Z267VqHxwbsqTyFKg= Subject key identifier: DA:E9:BF:AD:2E:96:3E:4D:88:37:AB:39:C7:65:DB:5E:44:1E:9F:F3 Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5 Certificate serial: 019B79ECBDAE9594D3DF56E8E8BB35BEB4AF Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/2um_rS6WPk2IN6s5x2XbXkQen_M.roa Signing time: Thu 01 Jan 2026 14:18:36 +0000 ROA not before: Thu 01 Jan 2026 14:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47583 IP address blocks: 46.28.40.0/22 maxlen: 24 46.28.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:bd:ae:95:94:d3:df:56:e8:e8:bb:35:be:b4:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5 Validity Not Before: Jan 1 14:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dae9bfad2e963e4d8837ab39c765db5e441e9ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fb:36:fe:c4:87:bd:98:56:73:9d:94:88:df: d1:6c:f8:27:de:63:0e:cf:79:c3:5e:57:22:b6:5f: df:e8:43:46:0b:e1:2e:5c:d0:4c:27:c5:b5:4e:04: 7a:e4:a3:fb:d9:99:aa:ef:f9:f6:28:ea:59:4b:a5: d6:64:9b:40:92:c3:35:1d:fb:ee:db:0a:6b:1f:4a: d3:5f:0b:1c:7e:d6:c3:1d:d2:a9:58:a6:41:b6:c0: f7:92:3f:97:21:d4:08:0d:41:26:4b:5d:b2:82:9a: 36:bf:47:77:87:8d:b3:42:8c:3c:66:42:ef:21:de: ee:b6:fb:66:b0:ae:2a:30:ff:e2:05:8b:b5:1c:24: d1:0a:1b:be:ca:83:d7:48:36:54:8c:ca:e2:25:15: 8b:6d:2b:2a:e7:8f:7e:ae:13:76:27:b4:f3:b1:10: 84:02:86:6f:31:9f:93:7c:53:73:4a:50:e8:ae:64: a6:48:89:fb:8c:aa:84:52:5c:9c:ab:e0:47:18:de: 41:22:e3:5c:f0:77:15:10:e7:04:52:7a:8a:ca:4a: 32:0d:a9:38:69:08:01:fe:22:27:96:07:68:3f:1c: 21:1c:48:43:37:f1:c5:e9:89:57:f7:45:18:1f:8f: b0:bf:35:9f:53:c9:37:ac:a8:f0:15:bd:ed:fd:fb: 0e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E9:BF:AD:2E:96:3E:4D:88:37:AB:39:C7:65:DB:5E:44:1E:9F:F3 X509v3 Authority Key Identifier: keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/2um_rS6WPk2IN6s5x2XbXkQen_M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.28.40.0/21 Signature Algorithm: sha256WithRSAEncryption 94:1b:a2:59:d7:09:57:ab:71:96:83:15:c1:ac:ef:2e:b8:82: 7b:c8:ee:fe:a4:65:91:02:98:a3:d7:2b:48:45:9d:59:67:94: cf:9b:26:b3:f7:a0:dc:c5:2f:6c:10:14:0a:5f:2f:bf:90:f2: c0:d7:f2:38:4b:3c:eb:32:8f:a4:6a:dc:a8:70:4d:54:c2:6e: 32:cd:c3:cb:34:ca:a2:96:80:8e:5d:25:24:fa:cd:3d:27:1b: 8e:95:eb:8f:b8:e5:ad:c1:4c:89:af:58:ea:84:80:10:d7:0a: c6:00:da:2a:c1:37:9b:98:ea:36:ee:8e:b0:45:c6:0d:2d:11: 8e:d4:bc:c0:52:9c:79:a8:72:b7:a5:01:b7:c3:6c:61:d0:39: 87:32:43:ec:e1:f7:02:73:cc:c9:9d:cf:10:b3:d4:c8:8e:d3: 8d:72:62:5e:04:a9:11:b8:3d:88:72:f7:19:99:db:35:ce:3e: 1b:a7:79:9f:01:7d:48:da:05:0e:94:33:e4:2c:19:14:2d:28: ea:e2:ba:be:fb:bb:a9:72:7c:70:cf:4c:b0:e8:e4:3b:48:5b: c2:9e:31:e3:51:f6:a0:80:e6:ca:4f:18:7e:8b:db:bf:6a:bd: 11:65:0b:cf:ea:f9:6e:ce:40:82:26:c4:54:54:24:94:85:be: 51:c2:e2:b7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57L2ulZTT31bo6Ls1vrSvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNjM2M2Q0MjhiNzkxNWMxMDg4MjVmMDk3MDYwMDRiOGVh M2Q0YjUwHhcNMjYwMTAxMTQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWU5YmZhZDJlOTYzZTRkODgzN2FiMzljNzY1ZGI1ZTQ0MWU5ZmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ps2/sSHvZhWc52UiN/RbPgn3mMO z3nDXlcitl/f6ENGC+EuXNBMJ8W1TgR65KP72Zmq7/n2KOpZS6XWZJtAksM1Hfvu 2wprH0rTXwscftbDHdKpWKZBtsD3kj+XIdQIDUEmS12ygpo2v0d3h42zQow8ZkLv Id7utvtmsK4qMP/iBYu1HCTRChu+yoPXSDZUjMriJRWLbSsq549+rhN2J7TzsRCE AoZvMZ+TfFNzSlDormSmSIn7jKqEUlycq+BHGN5BIuNc8HcVEOcEUnqKykoyDak4 aQgB/iInlgdoPxwhHEhDN/HF6YlX90UYH4+wvzWfU8k3rKjwFb3t/fsOeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNrpv60ulj5NiDerOcdl215EHp/zMB8GA1UdIwQY MBaAFA9jY9Qot5FcEIgl8JcGAEuOo9S1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEt MmUxYzBhZjRmYWE0LzEvMnVtX3JTNldQazJJTjZzNXgyWGJYa1Flbl9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEtMmUxYzBhZjRmYWE0 LzEvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLhwoMA0G CSqGSIb3DQEBCwUAA4IBAQCUG6JZ1wlXq3GWgxXBrO8uuIJ7yO7+pGWRApij1ytI RZ1ZZ5TPmyaz96DcxS9sEBQKXy+/kPLA1/I4SzzrMo+katyocE1Uwm4yzcPLNMqi loCOXSUk+s09JxuOleuPuOWtwUyJr1jqhIAQ1wrGANoqwTebmOo27o6wRcYNLRGO 1LzAUpx5qHK3pQG3w2xh0DmHMkPs4fcCc8zJnc8Qs9TIjtONcmJeBKkRuD2IcvcZ mds1zj4bp3mfAX1I2gUOlDPkLBkULSjq4rq++7upcnxwz0yw6OQ7SFvCnjHjUfag gObKTxh+i9u/ar0RZQvP6vluzkCCJsRUVCSUhb5RwuK3 -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:57 2026 by rpki-client