This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/ux9t1taenzMzHDc2wmWt_xH_KEM.roa File: ux9t1taenzMzHDc2wmWt_xH_KEM.roa (raw, json) Hash identifier: NpD2C6KlNQ/GY5fAYSdqeCGTMMgpVvFEpoOp4C5rZfQ= Subject key identifier: BB:1F:6D:D6:D6:9E:9F:33:33:1C:37:36:C2:65:AD:FF:11:FF:28:43 Certificate issuer: /CN=4812ff485ffd794a6948078afe4e076afe617635 Certificate serial: 019B7E384745A056049FDE7B32FA0C58CB74 Authority key identifier: 48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/ux9t1taenzMzHDc2wmWt_xH_KEM.roa Signing time: Fri 02 Jan 2026 10:19:36 +0000 ROA not before: Fri 02 Jan 2026 10:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56559 IP address blocks: 147.78.96.0/22 maxlen: 24 167.150.160.0/22 maxlen: 24 185.149.188.0/22 maxlen: 24 2a10:b440::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:47:45:a0:56:04:9f:de:7b:32:fa:0c:58:cb:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4812ff485ffd794a6948078afe4e076afe617635 Validity Not Before: Jan 2 10:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb1f6dd6d69e9f33331c3736c265adff11ff2843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:49:f5:02:99:6a:46:65:66:e7:70:08:c3:c8: aa:29:ba:ad:91:97:2b:ec:26:c4:0d:13:0b:ff:59: 79:2e:0e:46:bb:c6:bd:7f:bb:eb:e4:5d:72:5c:43: e2:68:17:84:6a:3d:23:d4:fd:a7:95:f7:b2:38:0b: d6:3d:9c:b8:29:af:5e:b7:ea:23:dd:55:02:c7:62: dd:ca:39:0e:f7:99:5e:ac:dd:8c:89:32:76:30:77: 1e:55:09:38:fe:9b:c2:67:b8:2e:51:82:82:95:d8: 04:57:ed:bf:00:2b:bd:f2:b0:c2:12:35:db:87:74: 80:01:20:04:9e:1d:8d:5f:ff:75:81:00:b5:ee:df: fe:34:2f:97:54:7e:79:58:44:4c:e1:ab:54:10:1c: 12:62:14:d1:8b:b1:f4:c7:43:14:f2:2a:49:00:6a: fb:50:70:65:3e:ed:6a:e9:27:b5:0c:72:1c:11:35: f5:97:8d:3b:c8:11:86:ee:3d:e9:13:79:e8:53:38: 03:18:05:1c:55:7a:ee:6e:92:4c:07:e3:61:a7:5e: d7:15:17:d3:70:48:c6:47:70:aa:70:b7:2d:4a:93: 0c:a2:34:49:0f:00:c6:00:3a:dd:60:43:a5:cb:df: 23:d5:a0:2f:91:75:d1:f3:ba:61:96:85:42:02:aa: 37:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1F:6D:D6:D6:9E:9F:33:33:1C:37:36:C2:65:AD:FF:11:FF:28:43 X509v3 Authority Key Identifier: keyid:48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/ux9t1taenzMzHDc2wmWt_xH_KEM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.96.0/22 167.150.160.0/22 185.149.188.0/22 IPv6: 2a10:b440::/29 Signature Algorithm: sha256WithRSAEncryption 09:60:98:44:d6:63:4a:b9:d6:7f:cc:26:8e:2c:d4:3a:27:63: 23:b2:05:66:65:41:ac:ea:99:b7:05:17:4e:ec:72:c0:79:2c: 8c:ce:92:d0:ce:e5:0a:c7:d5:bd:e9:84:b1:7c:1e:00:bf:d6: 69:9e:ba:91:b2:47:81:50:42:3d:f3:66:05:5f:b8:59:24:7b: 1f:fe:a1:7f:24:ac:17:27:31:b5:56:b3:7c:6d:34:e6:56:3f: c2:93:00:2b:7b:96:e2:43:d2:78:1f:ce:98:af:22:34:98:31: dd:03:8f:05:09:d6:b1:32:72:4a:4c:6f:ef:a5:ff:9d:ab:8a: 50:c7:30:c6:49:50:23:98:32:87:d8:4c:4d:c3:2a:3d:c7:3f: 2d:6b:a2:02:00:d0:6f:84:f4:06:4c:95:78:0d:0e:05:46:8b: 90:f0:31:6e:77:c3:fb:b2:cf:88:27:21:f1:b9:1b:f1:68:98: f1:c2:44:07:3d:07:94:b6:4b:6e:43:f9:03:cb:6b:a9:62:54: 9c:a9:ba:0d:28:f0:5c:bf:f9:fb:0e:64:67:ed:37:0f:fc:ad: bf:fa:07:7c:60:8a:a2:e9:7f:d5:8b:98:2e:47:65:66:71:47: d3:9f:cc:00:1f:12:6b:54:a5:a5:6e:b1:f7:1d:79:21:8d:cd: 49:5a:be:f6 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt+OEdFoFYEn957MvoMWMt0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MTJmZjQ4NWZmZDc5NGE2OTQ4MDc4YWZlNGUwNzZhZmU2 MTc2MzUwHhcNMjYwMTAyMTAxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjFmNmRkNmQ2OWU5ZjMzMzMxYzM3MzZjMjY1YWRmZjExZmYyODQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEn1AplqRmVm53AIw8iqKbqtkZcr 7CbEDRML/1l5Lg5Gu8a9f7vr5F1yXEPiaBeEaj0j1P2nlfeyOAvWPZy4Ka9et+oj 3VUCx2LdyjkO95lerN2MiTJ2MHceVQk4/pvCZ7guUYKCldgEV+2/ACu98rDCEjXb h3SAASAEnh2NX/91gQC17t/+NC+XVH55WERM4atUEBwSYhTRi7H0x0MU8ipJAGr7 UHBlPu1q6Se1DHIcETX1l407yBGG7j3pE3noUzgDGAUcVXrubpJMB+Nhp17XFRfT cEjGR3CqcLctSpMMojRJDwDGADrdYEOly98j1aAvkXXR87phloVCAqo3BQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFLsfbdbWnp8zMxw3NsJlrf8R/yhDMB8GA1UdIwQY MBaAFEgS/0hf/XlKaUgHiv5OB2r+YXY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0JMX1NGXzllVXBwU0FlS19rNEhhdjVoZGpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85YzEzNjItNDZmZC00ODlhLWJiOTUt NjY5YThmZWI3MTQ3LzEvdXg5dDF0YWVuek16SERjMndtV3RfeEhfS0VNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS85YzEzNjItNDZmZC00ODlhLWJiOTUtNjY5YThmZWI3MTQ3 LzEvU0JMX1NGXzllVXBwU0FlS19rNEhhdjVoZGpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCk05gAwQC p5agAwQCuZW8MA0EAgACMAcDBQMqELRAMA0GCSqGSIb3DQEBCwUAA4IBAQAJYJhE 1mNKudZ/zCaOLNQ6J2MjsgVmZUGs6pm3BRdO7HLAeSyMzpLQzuUKx9W96YSxfB4A v9ZpnrqRskeBUEI982YFX7hZJHsf/qF/JKwXJzG1VrN8bTTmVj/CkwAre5biQ9J4 H86YryI0mDHdA48FCdaxMnJKTG/vpf+dq4pQxzDGSVAjmDKH2ExNwyo9xz8ta6IC ANBvhPQGTJV4DQ4FRouQ8DFud8P7ss+IJyHxuRvxaJjxwkQHPQeUtktuQ/kDy2up YlScqboNKPBcv/n7DmRn7TcP/K2/+gd8YIqi6X/Vi5guR2VmcUfTn8wAHxJrVKWl brH3HXkhjc1JWr72 -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:07 2026 by rpki-client