This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/UBGkKBFV2Aa7JBw4pAiIxve4fn0.roa File: UBGkKBFV2Aa7JBw4pAiIxve4fn0.roa (raw, json) Hash identifier: 9cBrWgFQDzVn82NDm23DCCjfy/yynDnSQwWNQi58HvU= Subject key identifier: 50:11:A4:28:11:55:D8:06:BB:24:1C:38:A4:08:88:C6:F7:B8:7E:7D Certificate issuer: /CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a Certificate serial: 019B7C7FD45C3BEDE70A317675B9A1A010AF Authority key identifier: FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/UBGkKBFV2Aa7JBw4pAiIxve4fn0.roa Signing time: Fri 02 Jan 2026 02:18:30 +0000 ROA not before: Fri 02 Jan 2026 02:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212559 IP address blocks: 5.1.42.0/24 maxlen: 24 91.243.118.0/24 maxlen: 24 193.107.15.0/24 maxlen: 24 2a10:78c0::/29 maxlen: 32 2a10:ef40::/29 maxlen: 32 2a11:2900::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.crl rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:d4:5c:3b:ed:e7:0a:31:76:75:b9:a1:a0:10:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a Validity Not Before: Jan 2 02:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5011a4281155d806bb241c38a40888c6f7b87e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:19:10:ba:ea:14:74:e4:a0:bc:5e:3c:54:88: b0:1b:0e:4b:36:46:f3:fd:22:f1:1b:d5:8c:3e:cb: 5c:ea:ae:4d:39:2d:0f:0d:fa:ce:64:68:b9:3a:a2: d3:6c:9a:29:4f:d9:ae:5b:5b:27:31:9e:d6:80:11: 82:d9:79:fb:44:26:01:64:f0:55:ca:b6:ca:ba:4f: 87:d6:57:5d:4d:08:ca:93:61:e5:9a:18:23:45:df: f5:d5:db:24:25:38:36:92:1a:22:ad:bf:85:ff:af: fe:81:66:5d:66:49:38:0d:54:b8:8a:b9:17:02:bd: 48:71:dd:d5:12:f7:2a:ae:65:b1:ef:fa:05:3f:bd: 6e:90:ec:33:bb:dc:63:ce:cf:35:7c:17:41:04:ec: 08:5a:b7:db:c2:41:f4:03:6f:eb:83:7e:fc:2b:1a: fb:56:97:b3:aa:59:e6:77:bd:58:96:94:cd:5b:b6: 14:62:57:1b:df:96:c8:0a:0f:f4:f8:c3:61:d2:f6: e2:3d:33:c5:99:aa:6b:2a:98:78:96:8b:81:58:32: 90:9b:bf:52:db:60:25:b8:1b:09:a3:92:91:1d:1b: c6:ac:8a:a4:1c:fc:91:bd:51:de:a0:57:db:66:ee: 74:56:a8:72:fb:72:4f:ba:09:75:82:cf:58:e3:97: 75:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:11:A4:28:11:55:D8:06:BB:24:1C:38:A4:08:88:C6:F7:B8:7E:7D X509v3 Authority Key Identifier: keyid:FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/UBGkKBFV2Aa7JBw4pAiIxve4fn0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.42.0/24 91.243.118.0/24 193.107.15.0/24 IPv6: 2a10:78c0::/29 2a10:ef40::/29 2a11:2900::/29 Signature Algorithm: sha256WithRSAEncryption 0c:54:b1:d0:d9:d1:f9:89:39:23:fc:4c:99:16:ea:68:0c:36: 53:f2:d8:c7:95:3d:59:0b:d8:be:f2:c8:83:c2:33:a7:b6:90: 17:2b:95:5d:46:e2:ad:2e:ce:e1:87:15:0b:c7:14:e8:d2:12: 48:e0:d1:c9:a4:24:f2:c1:d3:3d:78:74:be:d5:1e:f3:d8:58: 59:dc:96:74:2c:0c:dd:7c:a2:19:6d:cd:a3:2f:06:60:36:80: 7f:95:78:11:32:50:4a:5c:0a:53:7e:94:a9:bf:f2:71:da:37: 38:c3:8a:92:f0:38:66:43:52:14:bb:5b:9e:d6:e4:8d:57:71: d0:f3:e0:ce:2a:39:49:fb:4f:ef:ed:56:1e:2b:d5:ec:a0:03: 4f:62:6c:40:c6:fb:9f:57:0c:39:70:76:d6:4c:6e:53:b0:3c: 38:eb:db:3b:be:60:05:37:64:74:2d:0b:2f:b4:9c:63:35:3a: b2:88:d6:9e:9c:90:50:ac:14:d0:95:98:67:c0:5b:bf:8c:99: ba:1f:3b:2f:cd:f2:e8:07:25:0e:b4:8a:40:40:c5:c8:91:69: 88:fc:eb:a6:bd:1f:62:51:a5:81:e8:1b:65:fe:d5:5a:f0:b5: ab:95:1f:21:ab:95:3a:b7:32:aa:43:b3:81:e8:6b:5d:a4:03: 0b:eb:8a:d2 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt8f9RcO+3nCjF2dbmhoBCvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlOTJlZjM1MzIxYmY4ZjcyMjczNGJmZjlkZmE2M2ZiZDBm MDY5MGEwHhcNMjYwMTAyMDIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDExYTQyODExNTVkODA2YmIyNDFjMzhhNDA4ODhjNmY3Yjg3ZTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBkQuuoUdOSgvF48VIiwGw5LNkbz /SLxG9WMPstc6q5NOS0PDfrOZGi5OqLTbJopT9muW1snMZ7WgBGC2Xn7RCYBZPBV yrbKuk+H1lddTQjKk2HlmhgjRd/11dskJTg2khoirb+F/6/+gWZdZkk4DVS4irkX Ar1Icd3VEvcqrmWx7/oFP71ukOwzu9xjzs81fBdBBOwIWrfbwkH0A2/rg378Kxr7 Vpezqlnmd71YlpTNW7YUYlcb35bICg/0+MNh0vbiPTPFmaprKph4louBWDKQm79S 22AluBsJo5KRHRvGrIqkHPyRvVHeoFfbZu50Vqhy+3JPugl1gs9Y45d1nwIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFFARpCgRVdgGuyQcOKQIiMb3uH59MB8GA1UdIwQY MBaAFP6S7zUyG/j3InNL/536Y/vQ8GkKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3BMdk5USWItUGNpYzB2X25mcGotOUR3YVFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kMjcyNWQtODAwMS00MWYxLTgwZTUt YTllZWYyOTRhYzM0LzEvVUJHa0tCRlYyQWE3SkJ3NHBBaUl4dmU0Zm4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9kMjcyNWQtODAwMS00MWYxLTgwZTUtYTllZWYyOTRhYzM0 LzEvX3BMdk5USWItUGNpYzB2X25mcGotOUR3YVFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAYBAIAATASAwQABQEqAwQA W/N2AwQAwWsPMBsEAgACMBUDBQMqEHjAAwUDKhDvQAMFAyoRKQAwDQYJKoZIhvcN AQELBQADggEBAAxUsdDZ0fmJOSP8TJkW6mgMNlPy2MeVPVkL2L7yyIPCM6e2kBcr lV1G4q0uzuGHFQvHFOjSEkjg0cmkJPLB0z14dL7VHvPYWFnclnQsDN18ohltzaMv BmA2gH+VeBEyUEpcClN+lKm/8nHaNzjDipLwOGZDUhS7W57W5I1XcdDz4M4qOUn7 T+/tVh4r1eygA09ibEDG+59XDDlwdtZMblOwPDjr2zu+YAU3ZHQtCy+0nGM1OrKI 1p6ckFCsFNCVmGfAW7+MmbofOy/N8ugHJQ60ikBAxciRaYj866a9H2JRpYHoG2X+ 1VrwtauVHyGrlTq3MqpDs4Hoa12kAwvritI= -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:40 2026 by rpki-client