This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/_UbLea1_mJbeMGYUrAtQEWEmx0o.roa File: _UbLea1_mJbeMGYUrAtQEWEmx0o.roa (raw, json) Hash identifier: oDLkgHR7D4svp0n2SJME5J8/BsG0J/1KFdL6DGkGrAA= Subject key identifier: FD:46:CB:79:AD:7F:98:96:DE:30:66:14:AC:0B:50:11:61:26:C7:4A Certificate issuer: /CN=15bd7f78b7a044ae134c88b624e831a761143b79 Certificate serial: 019B7BA519F9565F85A37B3DFE1140407DBD Authority key identifier: 15:BD:7F:78:B7:A0:44:AE:13:4C:88:B6:24:E8:31:A7:61:14:3B:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fb1_eLegRK4TTIi2JOgxp2EUO3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/_UbLea1_mJbeMGYUrAtQEWEmx0o.roa Signing time: Thu 01 Jan 2026 22:19:36 +0000 ROA not before: Thu 01 Jan 2026 22:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201522 IP address blocks: 185.71.172.0/22 maxlen: 22 185.71.172.0/24 maxlen: 24 185.71.173.0/24 maxlen: 24 185.71.174.0/24 maxlen: 24 185.71.175.0/24 maxlen: 24 2a05:33c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/Fb1_eLegRK4TTIi2JOgxp2EUO3k.crl rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/Fb1_eLegRK4TTIi2JOgxp2EUO3k.mft rsync://rpki.ripe.net/repository/DEFAULT/Fb1_eLegRK4TTIi2JOgxp2EUO3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:19:f9:56:5f:85:a3:7b:3d:fe:11:40:40:7d:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15bd7f78b7a044ae134c88b624e831a761143b79 Validity Not Before: Jan 1 22:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd46cb79ad7f9896de306614ac0b50116126c74a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:83:5c:bd:17:96:d8:f9:7d:f0:88:2b:bd:c5: 12:2a:3d:88:ce:6c:15:57:d2:80:5e:5e:98:52:99: 10:c7:f3:5e:ed:e2:7a:d9:ae:57:ec:89:c2:b2:e0: fe:f7:17:3a:d1:52:3e:57:6f:da:d5:86:0e:b9:d0: 87:c8:d2:a8:f8:32:37:53:3e:1f:cb:87:6e:4e:09: 62:16:bb:d8:05:1d:29:c2:2e:28:14:c0:f1:e7:de: e1:58:ba:05:8c:a7:69:1f:de:49:5b:37:b7:fa:6e: 46:36:0a:b1:e3:a7:93:0b:75:b4:43:ca:4b:75:8e: 39:bc:f0:4b:eb:55:fc:c9:8d:21:aa:4c:62:fd:f8: 4e:2f:87:40:b1:08:05:1c:dd:72:15:d1:08:cc:7a: 00:ed:88:ac:e0:8e:ff:f7:b6:87:5d:38:80:55:a9: e8:ae:87:dd:c7:d7:d2:62:3d:3d:c5:a2:12:b2:17: 00:32:bb:03:66:b4:fe:96:77:42:51:b7:34:85:a0: e1:00:fe:a9:2e:05:1b:5d:dd:8c:dc:43:92:00:54: d7:e3:45:69:3c:b5:54:e1:95:f5:76:f6:6e:75:4c: 36:61:df:bf:db:37:fd:f8:12:18:8a:d6:08:bc:9b: 1f:b5:ad:dc:5f:eb:08:a9:8c:c0:70:8b:fa:bc:1e: 81:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:46:CB:79:AD:7F:98:96:DE:30:66:14:AC:0B:50:11:61:26:C7:4A X509v3 Authority Key Identifier: keyid:15:BD:7F:78:B7:A0:44:AE:13:4C:88:B6:24:E8:31:A7:61:14:3B:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fb1_eLegRK4TTIi2JOgxp2EUO3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/_UbLea1_mJbeMGYUrAtQEWEmx0o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/Fb1_eLegRK4TTIi2JOgxp2EUO3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.71.172.0/22 IPv6: 2a05:33c0::/48 Signature Algorithm: sha256WithRSAEncryption c2:a3:39:39:55:20:c5:8e:e9:03:f6:de:03:ba:2a:5e:08:9c: 68:62:09:d7:70:8c:be:20:78:68:1b:c8:c0:82:3e:ab:e3:95: b6:83:54:95:5c:b3:9f:e3:04:09:e1:81:ef:53:7d:31:d5:cf: 89:7c:83:c2:f5:70:66:e9:9b:2a:ae:20:87:ac:61:6c:95:d6: 26:c7:f6:17:f3:af:76:2f:eb:17:c2:b1:6c:59:9b:ac:9a:b9: bb:48:ba:b1:f5:43:42:c9:46:70:61:7b:43:48:46:3a:c1:78: e7:69:62:5f:86:93:93:77:a3:8f:f1:17:f8:90:3c:61:9e:9c: cc:a1:fa:f2:bc:71:f0:9b:82:0b:a2:6c:20:37:e9:b8:50:ff: 03:2d:72:0f:58:41:8c:44:61:02:5c:f0:3e:d9:b0:29:ec:96: 13:5e:28:69:62:b6:bd:66:7b:8f:b8:a9:a6:6c:2f:65:39:4c: 96:43:38:f5:ed:2b:90:0f:34:c6:df:3d:f6:16:f6:64:1c:98: a6:82:84:ba:8b:e6:3c:cc:ea:28:97:92:7e:fd:43:d6:f0:6f: 42:9f:d2:a4:9d:98:f2:59:4e:04:31:53:91:e3:af:26:31:81: ca:8d:79:0b:3b:80:c3:fb:13:8e:21:44:44:04:a9:ff:99:03: f3:b5:a9:e6 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7pRn5Vl+Fo3s9/hFAQH29MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1YmQ3Zjc4YjdhMDQ0YWUxMzRjODhiNjI0ZTgzMWE3NjEx NDNiNzkwHhcNMjYwMTAxMjIxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDQ2Y2I3OWFkN2Y5ODk2ZGUzMDY2MTRhYzBiNTAxMTYxMjZjNzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4NcvReW2Pl98IgrvcUSKj2IzmwV V9KAXl6YUpkQx/Ne7eJ62a5X7InCsuD+9xc60VI+V2/a1YYOudCHyNKo+DI3Uz4f y4duTgliFrvYBR0pwi4oFMDx597hWLoFjKdpH95JWze3+m5GNgqx46eTC3W0Q8pL dY45vPBL61X8yY0hqkxi/fhOL4dAsQgFHN1yFdEIzHoA7Yis4I7/97aHXTiAVano rofdx9fSYj09xaISshcAMrsDZrT+lndCUbc0haDhAP6pLgUbXd2M3EOSAFTX40Vp PLVU4ZX1dvZudUw2Yd+/2zf9+BIYitYIvJsfta3cX+sIqYzAcIv6vB6BvwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFP1Gy3mtf5iW3jBmFKwLUBFhJsdKMB8GA1UdIwQY MBaAFBW9f3i3oESuE0yItiToMadhFDt5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmIxX2VMZWdSSzRUVElpMkpPZ3hwMkVVTzNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jNmViOTctNDhlOC00ZTViLTk3Y2Qt ZDVkOGUwNGU1OTc1LzEvX1ViTGVhMV9tSmJlTUdZVXJBdFFFV0VteDBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9jNmViOTctNDhlOC00ZTViLTk3Y2QtZDVkOGUwNGU1OTc1 LzEvRmIxX2VMZWdSSzRUVElpMkpPZ3hwMkVVTzNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCuUesMA8E AgACMAkDBwAqBTPAAAAwDQYJKoZIhvcNAQELBQADggEBAMKjOTlVIMWO6QP23gO6 Kl4InGhiCddwjL4geGgbyMCCPqvjlbaDVJVcs5/jBAnhge9TfTHVz4l8g8L1cGbp myquIIesYWyV1ibH9hfzr3Yv6xfCsWxZm6yaubtIurH1Q0LJRnBhe0NIRjrBeOdp Yl+Gk5N3o4/xF/iQPGGenMyh+vK8cfCbgguibCA36bhQ/wMtcg9YQYxEYQJc8D7Z sCnslhNeKGlitr1me4+4qaZsL2U5TJZDOPXtK5APNMbfPfYW9mQcmKaChLqL5jzM 6iiXkn79Q9bwb0Kf0qSdmPJZTgQxU5HjryYxgcqNeQs7gMP7E44hREQEqf+ZA/O1 qeY= -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:52 2026 by rpki-client