This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/umoqQ4OWjalDLab-nmZNzdgtQD0.roa File: umoqQ4OWjalDLab-nmZNzdgtQD0.roa (raw, json) Hash identifier: Qll/wYK6T6G3I7iI09b27aNpYcKkx7J6dC0X+Ha8kzg= Subject key identifier: BA:6A:2A:43:83:96:8D:A9:43:2D:A6:FE:9E:66:4D:CD:D8:2D:40:3D Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA7588E60722419173DFD6DED69CED1 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/umoqQ4OWjalDLab-nmZNzdgtQD0.roa Signing time: Fri 02 Jan 2026 12:20:55 +0000 ROA not before: Fri 02 Jan 2026 12:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8828 IP address blocks: 212.0.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:58:8e:60:72:24:19:17:3d:fd:6d:ed:69:ce:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba6a2a4383968da9432da6fe9e664dcdd82d403d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a3:4d:fe:4a:13:41:78:b6:05:10:32:ed:d0: ce:c9:b3:31:2b:43:a6:c4:30:29:5a:68:f1:21:7d: 84:38:f4:23:4c:7c:0d:5b:f6:53:b4:cb:e8:ce:0b: 28:74:5f:7e:28:47:8e:bb:48:63:c5:a0:0e:17:c1: cf:b4:db:f6:eb:d0:ca:69:4d:4f:e3:0d:16:c5:ae: d6:e8:8d:04:8d:48:50:f4:a3:45:8c:4a:4a:a7:3f: 23:78:2a:63:ee:33:5a:1f:dd:dc:3f:48:55:b1:72: 77:37:59:5a:1a:03:49:42:65:6d:ab:0f:96:81:75: 8e:e9:8f:e7:59:d7:86:65:09:5a:6c:cb:72:24:eb: 29:37:dd:3e:9c:d4:82:4f:7a:87:cf:ee:6b:3e:7c: 28:fe:df:8b:aa:7c:22:61:af:41:67:51:56:6f:a6: 9c:eb:4f:0e:a1:dc:5f:cd:2b:7a:75:ae:1b:5d:8e: be:e2:64:8e:0a:fd:2e:eb:33:ae:69:a2:e8:d7:1d: 2f:fe:53:7c:98:f8:d6:c3:01:96:13:49:b3:af:c2: 76:26:53:6e:fa:01:3f:41:81:34:42:e6:4e:22:cb: 73:d7:6e:d1:32:45:26:11:34:bc:59:7c:cd:e1:4d: 40:92:6b:2d:5c:52:2c:5d:34:60:84:9d:34:54:07: d8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:6A:2A:43:83:96:8D:A9:43:2D:A6:FE:9E:66:4D:CD:D8:2D:40:3D X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/umoqQ4OWjalDLab-nmZNzdgtQD0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.0.64.0/19 Signature Algorithm: sha256WithRSAEncryption 9b:d1:75:0d:c1:78:43:65:f1:36:b4:72:ef:50:5a:dd:ad:0d: 1d:bc:53:23:ef:00:bb:26:f4:5c:0b:df:4b:1b:3c:f3:19:22: ad:3e:d3:77:68:77:0d:0e:14:16:90:2a:98:7c:5c:2f:59:fc: 67:7e:73:b3:95:74:ed:93:21:fc:b4:18:e4:46:c1:35:bd:81: 0f:79:64:5f:00:6b:c2:6e:1f:3a:91:74:0c:14:9c:9e:90:7e: fa:a1:05:2a:5f:b6:ee:58:7b:9b:06:5c:7e:67:cb:e7:d1:e4: bb:00:32:d4:f8:ca:1c:71:32:04:17:c9:a0:3a:4d:ad:5e:34: b1:43:9c:7c:76:1e:ae:10:25:07:45:2c:10:b4:ee:e9:07:8a: eb:76:ed:70:e6:d3:a8:5d:cd:de:c3:9e:a9:c0:1e:47:09:69: a3:7e:5b:78:6b:28:43:87:62:cf:15:aa:26:91:c0:41:38:ce: d3:01:0e:6e:d3:a1:3f:d2:82:6b:a8:2e:4f:8c:ca:2d:a8:eb: 80:d1:2e:90:d0:7a:fc:4b:19:e8:d4:a8:77:e3:99:19:1c:3a: f1:01:ca:8d:a6:60:49:a7:fd:cc:fa:91:69:9b:f0:c0:cf:98: 35:34:69:46:04:15:a4:61:14:e0:d6:35:af:e2:25:4f:8a:95: 08:75:a6:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p1iOYHIkGRc9/W3tac7RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTZhMmE0MzgzOTY4ZGE5NDMyZGE2ZmU5ZTY2NGRjZGQ4MmQ0MDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqNN/koTQXi2BRAy7dDOybMxK0Om xDApWmjxIX2EOPQjTHwNW/ZTtMvozgsodF9+KEeOu0hjxaAOF8HPtNv269DKaU1P 4w0Wxa7W6I0EjUhQ9KNFjEpKpz8jeCpj7jNaH93cP0hVsXJ3N1laGgNJQmVtqw+W gXWO6Y/nWdeGZQlabMtyJOspN90+nNSCT3qHz+5rPnwo/t+LqnwiYa9BZ1FWb6ac 608OodxfzSt6da4bXY6+4mSOCv0u6zOuaaLo1x0v/lN8mPjWwwGWE0mzr8J2JlNu +gE/QYE0QuZOIstz127RMkUmETS8WXzN4U1AkmstXFIsXTRghJ00VAfYuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLpqKkODlo2pQy2m/p5mTc3YLUA9MB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvdW1vcVE0T1dqYWxETGFiLW5tWk56ZGd0UUQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1ABAMA0G CSqGSIb3DQEBCwUAA4IBAQCb0XUNwXhDZfE2tHLvUFrdrQ0dvFMj7wC7JvRcC99L GzzzGSKtPtN3aHcNDhQWkCqYfFwvWfxnfnOzlXTtkyH8tBjkRsE1vYEPeWRfAGvC bh86kXQMFJyekH76oQUqX7buWHubBlx+Z8vn0eS7ADLU+MoccTIEF8mgOk2tXjSx Q5x8dh6uECUHRSwQtO7pB4rrdu1w5tOoXc3ew56pwB5HCWmjflt4ayhDh2LPFaom kcBBOM7TAQ5u06E/0oJrqC5PjMotqOuA0S6Q0Hr8Sxno1Kh345kZHDrxAcqNpmBJ p/3M+pFpm/DAz5g1NGlGBBWkYRTg1jWv4iVPipUIdaas -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:36 2026 by rpki-client