This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/DB-kubcDSriQvnabeDogJ7LkMfM.roa File: DB-kubcDSriQvnabeDogJ7LkMfM.roa (raw, json) Hash identifier: XGoLRb9s7HKmX6rpBYGsBJA5idHvV3yS22+b7xVn/rY= Subject key identifier: 0C:1F:A4:B9:B7:03:4A:B8:90:BE:76:9B:78:3A:20:27:B2:E4:31:F3 Certificate issuer: /CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8 Certificate serial: 019B7BA447477FAC3B99A3A7C28B79735181 Authority key identifier: 85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/DB-kubcDSriQvnabeDogJ7LkMfM.roa Signing time: Thu 01 Jan 2026 22:18:42 +0000 ROA not before: Thu 01 Jan 2026 22:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25091 IP address blocks: 185.247.196.0/22 maxlen: 24 193.135.156.0/24 maxlen: 24 2a0d:cb80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 15:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:47:47:7f:ac:3b:99:a3:a7:c2:8b:79:73:51:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8 Validity Not Before: Jan 1 22:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c1fa4b9b7034ab890be769b783a2027b2e431f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c2:de:c4:b8:d2:61:88:bc:b7:95:27:c7:8b: 14:00:ba:3f:ad:10:c3:8a:3c:73:62:98:9b:6e:8b: d2:81:4c:a6:4b:72:db:11:b5:3f:7a:82:a0:2c:58: e2:cb:8b:93:aa:21:97:55:ab:63:11:97:79:a7:ff: 47:d3:bf:35:45:4a:9d:66:cd:54:2e:1a:03:f3:f2: 79:51:37:31:ce:79:e0:cc:6c:3d:b5:ec:c9:23:2b: a1:ae:46:31:ff:8e:f5:b7:71:c1:d5:df:b4:af:e4: 73:6d:62:0c:c8:4f:23:a4:b6:6a:7d:56:8c:29:61: eb:50:26:22:b0:c0:2c:fb:c0:53:e6:72:6c:82:76: 2c:03:35:76:2d:c7:33:e1:23:df:30:e5:97:f3:3d: a9:c3:4b:a0:23:c0:e8:46:ab:d8:ac:8e:e3:fe:49: b1:08:35:ee:83:10:45:05:bd:5e:24:df:05:78:f5: dd:9c:a1:3c:38:fa:69:bf:45:79:a0:99:83:f9:a3: 42:fd:d8:d8:3a:7a:f8:fe:76:ff:d0:ee:21:2f:65: 03:08:9d:65:58:34:12:69:60:d9:17:87:08:87:b1: 7f:25:fa:27:47:20:ae:00:5e:8b:bb:26:7c:03:1b: 94:7d:d5:59:25:a1:6c:b9:0d:7c:b1:08:9e:95:e4: 7e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:1F:A4:B9:B7:03:4A:B8:90:BE:76:9B:78:3A:20:27:B2:E4:31:F3 X509v3 Authority Key Identifier: keyid:85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/DB-kubcDSriQvnabeDogJ7LkMfM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.247.196.0/22 193.135.156.0/24 IPv6: 2a0d:cb80::/29 Signature Algorithm: sha256WithRSAEncryption 90:d7:95:53:7a:56:26:0d:c5:b2:f6:e1:ea:58:f0:4e:29:91: 2e:bb:cc:50:02:46:70:61:0f:94:01:92:5e:e2:6a:05:99:83: 23:f6:2c:9a:40:d5:fd:84:25:97:ce:c1:41:7c:0a:fb:3f:53: fc:76:6a:0b:c9:4c:35:c7:cc:26:84:7c:7b:e7:e8:d8:68:f7: 90:43:84:19:e4:ca:49:3d:d2:1b:73:d9:9b:1d:b4:ce:4b:67: 16:d0:a2:c5:40:01:6a:8c:7e:91:78:b4:c8:01:50:0e:58:58: e7:52:9d:15:6f:7c:86:27:5e:3c:31:ea:36:b9:73:c3:be:f6: ad:32:6d:34:31:29:9e:e1:69:f4:60:72:65:59:91:b4:19:23: 07:62:83:aa:4d:4a:47:53:10:85:7c:b0:be:18:e5:b2:8e:d8: 94:a1:4c:82:20:72:da:e9:f6:da:d1:b2:4c:95:55:78:ed:79: 17:19:8f:cd:79:e6:0a:6a:65:e2:77:93:f3:48:d4:5c:57:89: a1:62:36:68:b6:02:b6:2d:4b:ea:16:44:04:61:51:ab:0c:38: ac:ca:a0:d1:e8:dc:cc:ea:ec:09:23:9c:38:94:94:84:7f:0f: 2a:7a:14:2f:9c:91:92:79:9f:8d:da:0a:48:1f:94:91:f8:b1: 7f:9b:09:0e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7pEdHf6w7maOnwot5c1GBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NGMwZGIwMDY1ODQ0ZDk1OTRkZmU4ZGQ4ZWZkNzdlZDFl NDkzZjgwHhcNMjYwMTAxMjIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzFmYTRiOWI3MDM0YWI4OTBiZTc2OWI3ODNhMjAyN2IyZTQzMWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MLexLjSYYi8t5Unx4sUALo/rRDD ijxzYpibbovSgUymS3LbEbU/eoKgLFjiy4uTqiGXVatjEZd5p/9H0781RUqdZs1U LhoD8/J5UTcxznngzGw9tezJIyuhrkYx/471t3HB1d+0r+RzbWIMyE8jpLZqfVaM KWHrUCYisMAs+8BT5nJsgnYsAzV2Lccz4SPfMOWX8z2pw0ugI8DoRqvYrI7j/kmx CDXugxBFBb1eJN8FePXdnKE8OPppv0V5oJmD+aNC/djYOnr4/nb/0O4hL2UDCJ1l WDQSaWDZF4cIh7F/JfonRyCuAF6LuyZ8AxuUfdVZJaFsuQ18sQieleR+SQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAwfpLm3A0q4kL52m3g6ICey5DHzMB8GA1UdIwQY MBaAFIVMDbAGWETZWU3+jdjv137R5JP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFV3TnNBWllSTmxaVGY2TjJPX1hmdEhra19nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lYzY3ZGItYzdhMS00OGE2LWFiOTQt NjBiOTM1OTViYWM5LzEvREIta3ViY0RTcmlRdm5hYmVEb2dKN0xrTWZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9lYzY3ZGItYzdhMS00OGE2LWFiOTQtNjBiOTM1OTViYWM5 LzEvaFV3TnNBWllSTmxaVGY2TjJPX1hmdEhra19nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuffEAwQA wYecMA0EAgACMAcDBQMqDcuAMA0GCSqGSIb3DQEBCwUAA4IBAQCQ15VTelYmDcWy 9uHqWPBOKZEuu8xQAkZwYQ+UAZJe4moFmYMj9iyaQNX9hCWXzsFBfAr7P1P8dmoL yUw1x8wmhHx75+jYaPeQQ4QZ5MpJPdIbc9mbHbTOS2cW0KLFQAFqjH6ReLTIAVAO WFjnUp0Vb3yGJ148Meo2uXPDvvatMm00MSme4Wn0YHJlWZG0GSMHYoOqTUpHUxCF fLC+GOWyjtiUoUyCIHLa6fba0bJMlVV47XkXGY/NeeYKamXid5PzSNRcV4mhYjZo tgK2LUvqFkQEYVGrDDisyqDR6NzM6uwJI5w4lJSEfw8qehQvnJGSeZ+N2gpIH5SR +LF/mwkO -----END CERTIFICATE-----Generated at Sun Jan 18 20:54:31 2026 by rpki-client