This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/nUmvBNvDTQXxBOq0CjmJmn5Dtmc.roa File: nUmvBNvDTQXxBOq0CjmJmn5Dtmc.roa (raw, json) Hash identifier: edmkHUr1mlIvRQnZS+9H+p7B//zDt6WSlQ6S+qA/Trg= Subject key identifier: 9D:49:AF:04:DB:C3:4D:05:F1:04:EA:B4:0A:39:89:9A:7E:43:B6:67 Certificate issuer: /CN=19b105d148de996036fdf21cb208a338a158ceda Certificate serial: 019B7AC78675EC3FB93F589244532AAA7CF2 Authority key identifier: 19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/nUmvBNvDTQXxBOq0CjmJmn5Dtmc.roa Signing time: Thu 01 Jan 2026 18:17:34 +0000 ROA not before: Thu 01 Jan 2026 18:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.138.242.0/24 maxlen: 24 2a07:10c0:c57::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:86:75:ec:3f:b9:3f:58:92:44:53:2a:aa:7c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19b105d148de996036fdf21cb208a338a158ceda Validity Not Before: Jan 1 18:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d49af04dbc34d05f104eab40a39899a7e43b667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:64:36:ff:3c:c0:4b:a9:9e:54:e0:eb:9e:94: 83:a8:ad:7f:1d:89:6f:a6:1d:01:12:6c:0f:2c:b5: ee:11:65:95:01:16:67:f1:55:3e:7d:e0:b6:d4:a5: 6f:ef:f9:57:92:2c:73:67:32:b8:89:f5:86:43:18: de:43:ae:d9:31:0f:8c:d1:79:7e:8b:7b:2c:77:cf: ca:d2:58:fa:c1:f2:88:36:6a:01:87:01:85:e8:82: 1c:15:d8:4c:9e:8c:5f:86:c8:c1:5f:13:71:51:20: f9:3f:66:b8:7e:9c:7b:d8:4f:cd:f7:49:f7:47:86: aa:11:63:19:8f:04:63:a7:6d:8d:d9:38:6c:71:1a: 5d:a8:03:3d:73:a3:00:87:ad:34:99:06:02:c9:78: 80:1f:b5:d6:b3:bc:a6:a8:49:6f:4e:d0:f6:3f:d9: 1d:9c:44:a2:90:bb:80:e2:a9:70:c4:2d:4f:25:e8: 8e:a5:1f:c3:5e:ef:6e:f4:53:fd:6d:8d:a3:75:4d: e8:61:9b:6c:18:a5:00:84:3a:b4:84:d3:52:bd:6c: 93:37:6d:a3:f9:2f:c3:a2:bb:68:22:c5:7d:01:49: 4d:a2:ec:54:f9:1e:1a:5b:bc:ab:30:d3:fb:81:b0: 2b:e1:5f:11:c6:18:3d:e7:55:b2:f7:2f:c1:22:f3: 88:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:49:AF:04:DB:C3:4D:05:F1:04:EA:B4:0A:39:89:9A:7E:43:B6:67 X509v3 Authority Key Identifier: keyid:19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/nUmvBNvDTQXxBOq0CjmJmn5Dtmc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.138.242.0/24 IPv6: 2a07:10c0:c57::/48 Signature Algorithm: sha256WithRSAEncryption 3f:9b:c3:60:3a:16:98:22:51:66:3d:48:37:72:91:f9:6a:68: 00:2c:47:6b:0b:92:d6:c1:c0:16:3a:c8:30:c2:a5:e7:4a:37: 38:9c:21:fd:13:ab:6e:e8:97:4a:9d:bc:32:8e:5c:23:ce:36: 10:0e:58:22:58:90:72:4e:6d:3c:1b:26:c9:ce:3b:19:02:8f: 55:30:bb:cc:88:e6:39:b4:05:4c:83:94:a4:e6:a2:57:bf:16: 50:4a:24:35:54:ff:ea:58:25:fc:f3:f2:d4:89:98:61:3c:4c: 2f:55:d9:8d:54:15:c2:71:d8:68:73:28:d2:38:af:96:9c:bf: fb:4c:4a:b0:fd:6e:19:df:cb:42:99:ed:1a:38:54:54:15:d0: b5:87:c8:04:4a:61:a0:81:1d:e4:98:fd:ea:c8:be:7f:0a:c4: 55:c5:86:5c:e4:ad:bd:7d:3d:1b:90:57:a5:40:0f:a8:e4:91: 74:58:37:ae:92:fa:1b:86:0e:a2:0f:92:56:ed:4c:67:e8:9b: 48:e2:99:b4:3d:b3:18:c2:4c:f8:2c:98:72:bf:22:a0:fe:22: 55:74:bd:5e:1a:83:b8:5f:10:d8:84:12:e5:c3:ec:1e:d8:5b: 37:e2:30:4c:d0:7a:0c:a1:fa:85:d0:40:aa:cc:7d:bf:9d:cc: 7b:87:93:c0 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6x4Z17D+5P1iSRFMqqnzyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YjEwNWQxNDhkZTk5NjAzNmZkZjIxY2IyMDhhMzM4YTE1 OGNlZGEwHhcNMjYwMTAxMTgxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDQ5YWYwNGRiYzM0ZDA1ZjEwNGVhYjQwYTM5ODk5YTdlNDNiNjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2Q2/zzAS6meVODrnpSDqK1/HYlv ph0BEmwPLLXuEWWVARZn8VU+feC21KVv7/lXkixzZzK4ifWGQxjeQ67ZMQ+M0Xl+ i3ssd8/K0lj6wfKINmoBhwGF6IIcFdhMnoxfhsjBXxNxUSD5P2a4fpx72E/N90n3 R4aqEWMZjwRjp22N2ThscRpdqAM9c6MAh600mQYCyXiAH7XWs7ymqElvTtD2P9kd nESikLuA4qlwxC1PJeiOpR/DXu9u9FP9bY2jdU3oYZtsGKUAhDq0hNNSvWyTN22j +S/DortoIsV9AUlNouxU+R4aW7yrMNP7gbAr4V8Rxhg951Wy9y/BIvOIXQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJ1JrwTbw00F8QTqtAo5iZp+Q7ZnMB8GA1UdIwQY MBaAFBmxBdFI3plgNv3yHLIIozihWM7aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2JFRjBVamVtV0EyX2ZJY3NnaWpPS0ZZenRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi81MmNiOGQtMTFkNC00ZjljLThmOTIt MjZlNjRkNzhiMGM2LzEvblVtdkJOdkRUUVh4Qk9xMENqbUptbjVEdG1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi81MmNiOGQtMTFkNC00ZjljLThmOTItMjZlNjRkNzhiMGM2 LzEvR2JFRjBVamVtV0EyX2ZJY3NnaWpPS0ZZenRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuYryMA8E AgACMAkDBwAqBxDADFcwDQYJKoZIhvcNAQELBQADggEBAD+bw2A6FpgiUWY9SDdy kflqaAAsR2sLktbBwBY6yDDCpedKNzicIf0Tq27ol0qdvDKOXCPONhAOWCJYkHJO bTwbJsnOOxkCj1Uwu8yI5jm0BUyDlKTmole/FlBKJDVU/+pYJfzz8tSJmGE8TC9V 2Y1UFcJx2GhzKNI4r5acv/tMSrD9bhnfy0KZ7Ro4VFQV0LWHyARKYaCBHeSY/erI vn8KxFXFhlzkrb19PRuQV6VAD6jkkXRYN66S+huGDqIPklbtTGfom0jimbQ9sxjC TPgsmHK/IqD+IlV0vV4ag7hfENiEEuXD7B7YWzfiMEzQegyh+oXQQKrMfb+dzHuH k8A= -----END CERTIFICATE-----Generated at Fri Jan 2 11:03:59 2026 by rpki-client