This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/Ub3tAkijTEomarmcHC-ibZ-_4M8.roa File: Ub3tAkijTEomarmcHC-ibZ-_4M8.roa (raw, json) Hash identifier: hcloHlblwC5XYEC0b+lqycBvnVcEB4S5jMgnNfRAPfE= Subject key identifier: 51:BD:ED:02:48:A3:4C:4A:26:6A:B9:9C:1C:2F:A2:6D:9F:BF:E0:CF Certificate issuer: /CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8 Certificate serial: 019B77C73E5387E48C857535AF6D9F0DC5DD Authority key identifier: 31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/Ub3tAkijTEomarmcHC-ibZ-_4M8.roa Signing time: Thu 01 Jan 2026 04:18:24 +0000 ROA not before: Thu 01 Jan 2026 04:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199837 IP address blocks: 185.44.212.0/22 maxlen: 22 185.128.148.0/22 maxlen: 22 2a04:9f00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3e:53:87:e4:8c:85:75:35:af:6d:9f:0d:c5:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8 Validity Not Before: Jan 1 04:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51bded0248a34c4a266ab99c1c2fa26d9fbfe0cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4c:31:01:a2:e6:c2:f8:14:03:e4:7d:7c:2b: 93:24:9c:4e:cc:e1:0a:d2:9f:a8:8c:28:de:b4:c6: 2b:b7:aa:d6:4e:60:32:05:d0:75:0a:09:88:55:f0: fa:37:ba:1b:33:c1:68:12:9b:07:5f:3e:c7:9b:07: 50:53:cf:c1:57:d6:4f:62:5a:13:90:23:9a:c5:48: 24:38:c0:d4:84:11:88:85:dc:cb:89:9f:28:38:42: 7b:e2:88:b0:92:f1:04:a2:ca:5b:63:d7:55:67:f9: 3d:bd:b0:7d:f6:a4:2b:58:80:09:e7:b8:df:e5:07: 74:a3:b8:af:fc:5a:fc:9d:7b:0c:84:68:b0:9e:ed: 95:9e:b3:6f:43:a0:d4:ac:d2:05:e2:8a:85:17:b1: e0:98:ce:79:2d:82:53:6e:23:fa:ab:13:03:f7:c5: e0:6c:f7:78:f1:70:69:82:ae:50:f1:fd:de:1c:cf: 0f:44:d6:e3:b7:0d:7c:60:da:f2:7d:07:1c:33:25: f1:f8:e5:4d:9e:f0:f8:82:d7:79:51:50:e9:4a:7c: 7a:82:e8:0d:ee:f2:06:37:6e:42:92:56:14:d7:83: 7b:59:8c:20:17:ac:3c:7d:76:6c:36:75:8e:ee:e8: 4c:cc:02:64:d8:75:8b:58:6e:ba:7b:3f:b4:a4:10: 6b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:BD:ED:02:48:A3:4C:4A:26:6A:B9:9C:1C:2F:A2:6D:9F:BF:E0:CF X509v3 Authority Key Identifier: keyid:31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/Ub3tAkijTEomarmcHC-ibZ-_4M8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.44.212.0/22 185.128.148.0/22 IPv6: 2a04:9f00::/29 Signature Algorithm: sha256WithRSAEncryption 9b:6a:32:8d:b7:3e:90:dd:bd:a2:23:f5:f7:4c:40:63:46:1c: 49:ee:f4:1f:b6:88:2a:2d:ff:09:c7:f2:08:c3:d3:cd:8f:b9: f1:c1:a9:84:10:ea:54:c7:23:91:18:d9:0d:de:e7:6f:1a:f5: 0d:fa:c9:53:2a:96:24:97:a6:99:d7:94:8c:49:ad:7a:f3:6a: f7:ac:a2:1b:a4:1e:4d:84:a9:35:18:87:f5:e6:e4:f5:5e:79: ab:80:7f:03:dd:d7:97:25:19:3e:48:a2:a2:8d:f3:ea:4d:86: 3b:c3:ee:46:b8:5f:cb:44:aa:57:8e:80:a4:78:b5:2f:9c:7b: 14:58:79:5d:2e:29:ad:9f:9f:fb:26:b9:a2:86:93:e5:02:93: 17:c1:09:70:4f:d6:83:7c:3b:fb:66:7b:e5:55:b3:50:ef:95: 60:a0:43:5a:81:90:f1:e4:2d:7f:7e:33:df:b3:3b:14:de:68: f0:20:9f:b5:3b:c5:39:9d:82:c1:81:31:10:de:ab:35:dc:39: c1:ed:7f:29:9a:ee:de:9a:71:f8:00:14:57:c7:e7:ec:5a:44: 5c:61:97:ad:d7:c2:fb:1c:fc:ce:b8:df:b0:13:f7:e8:af:61: 52:a2:23:7c:58:77:32:90:4d:f9:6a:03:3e:c0:c7:ae:d7:54: ef:39:a0:43 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3xz5Th+SMhXU1r22fDcXdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxYjBmNjRjNjlkMzMwYjY2ZWJjZDAzYTliZjBmZGMxOWYz MTQ3ZDgwHhcNMjYwMTAxMDQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWJkZWQwMjQ4YTM0YzRhMjY2YWI5OWMxYzJmYTI2ZDlmYmZlMGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEwxAaLmwvgUA+R9fCuTJJxOzOEK 0p+ojCjetMYrt6rWTmAyBdB1CgmIVfD6N7obM8FoEpsHXz7HmwdQU8/BV9ZPYloT kCOaxUgkOMDUhBGIhdzLiZ8oOEJ74oiwkvEEospbY9dVZ/k9vbB99qQrWIAJ57jf 5Qd0o7iv/Fr8nXsMhGiwnu2VnrNvQ6DUrNIF4oqFF7HgmM55LYJTbiP6qxMD98Xg bPd48XBpgq5Q8f3eHM8PRNbjtw18YNryfQccMyXx+OVNnvD4gtd5UVDpSnx6gugN 7vIGN25CklYU14N7WYwgF6w8fXZsNnWO7uhMzAJk2HWLWG66ez+0pBBrywIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFG97QJIo0xKJmq5nBwvom2fv+DPMB8GA1UdIwQY MBaAFDGw9kxp0zC2brzQOpvw/cGfMUfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWJEMlRHblRNTFp1dk5BNm1fRDl3Wjh4UjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yZmI0NzMtOGU2Yi00ZjBkLWFkMzAt ZDQ5MzQ0OTNhNjc5LzEvVWIzdEFraWpURW9tYXJtY0hDLWliWi1fNE04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8yZmI0NzMtOGU2Yi00ZjBkLWFkMzAtZDQ5MzQ0OTNhNjc5 LzEvTWJEMlRHblRNTFp1dk5BNm1fRDl3Wjh4UjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuSzUAwQC uYCUMA0EAgACMAcDBQMqBJ8AMA0GCSqGSIb3DQEBCwUAA4IBAQCbajKNtz6Q3b2i I/X3TEBjRhxJ7vQftogqLf8Jx/IIw9PNj7nxwamEEOpUxyORGNkN3udvGvUN+slT KpYkl6aZ15SMSa1682r3rKIbpB5NhKk1GIf15uT1XnmrgH8D3deXJRk+SKKijfPq TYY7w+5GuF/LRKpXjoCkeLUvnHsUWHldLimtn5/7JrmihpPlApMXwQlwT9aDfDv7 ZnvlVbNQ75VgoENagZDx5C1/fjPfszsU3mjwIJ+1O8U5nYLBgTEQ3qs13DnB7X8p mu7emnH4ABRXx+fsWkRcYZet18L7HPzOuN+wE/for2FSoiN8WHcykE35agM+wMeu 11TvOaBD -----END CERTIFICATE-----Generated at Tue Feb 10 00:28:48 2026 by rpki-client