This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/ubq_xBKrBDVmoRiicjeCjxM9yfM.roa
File: ubq_xBKrBDVmoRiicjeCjxM9yfM.roa (raw, json)
Hash identifier: 0xkkVTV2725zH3I8++A4kA66tUTB4Kd5cJoEJ4T50Pg=
Subject key identifier: B9:BA:BF:C4:12:AB:04:35:66:A1:18:A2:72:37:82:8F:13:3D:C9:F3
Certificate issuer: /CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Certificate serial: 019B7FF297F1D4E9A540D770A5CDCC513BBA
Authority key identifier: D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/ubq_xBKrBDVmoRiicjeCjxM9yfM.roa
Signing time: Fri 02 Jan 2026 18:22:43 +0000
ROA not before: Fri 02 Jan 2026 18:22:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207354
IP address blocks: 185.108.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f2:97:f1:d4:e9:a5:40:d7:70:a5:cd:cc:51:3b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Validity
Not Before: Jan 2 18:22:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9babfc412ab043566a118a27237828f133dc9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:09:d6:7b:29:b0:b0:c1:e5:d7:a5:c0:e9:31:
ad:a0:53:53:c2:4a:e7:53:cd:cb:7f:dc:a9:67:6c:
ab:a1:b5:78:71:e5:ec:c9:39:a4:b0:02:51:8c:94:
1b:e0:1b:29:56:9c:55:91:db:ec:ca:36:3d:e2:b1:
eb:82:fc:8d:d9:17:56:b2:f4:10:7c:fc:d1:a3:34:
f3:81:c5:25:60:5c:b5:de:34:5f:96:91:90:10:36:
61:20:48:5d:4a:88:64:d6:7e:75:af:39:0d:22:bb:
f1:28:b4:70:98:14:a1:13:28:90:11:0e:46:94:af:
73:2c:30:23:27:8e:16:5b:0d:3a:be:ee:e0:85:a2:
db:7d:93:ba:1b:2b:f8:13:05:3a:07:98:47:31:8d:
e1:cf:61:af:d2:aa:5c:46:07:34:ee:99:7e:99:19:
7b:7e:91:7c:f9:fa:b6:90:09:0d:4c:2f:8c:8c:70:
9d:4a:ac:09:07:e4:2b:df:f0:2e:5d:cf:82:bf:de:
08:4a:82:c4:0a:dd:1f:3a:99:bc:aa:90:17:70:e3:
01:e6:bf:24:70:d1:d6:a5:0e:26:31:5d:6b:a6:ea:
f2:d3:16:ce:b6:e2:6e:81:f6:3d:fe:ca:6a:af:5b:
21:14:02:d0:42:78:7a:a9:66:b6:4a:e9:d4:dd:9b:
45:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BA:BF:C4:12:AB:04:35:66:A1:18:A2:72:37:82:8F:13:3D:C9:F3
X509v3 Authority Key Identifier:
keyid:D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/ubq_xBKrBDVmoRiicjeCjxM9yfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.126.0/24
Signature Algorithm: sha256WithRSAEncryption
83:3b:93:ce:9f:e9:8a:5d:0b:70:ad:23:c7:26:b5:d4:e3:46:
f7:7a:52:c5:31:35:4b:be:9a:55:14:55:f9:fb:e6:b8:3d:fd:
dc:24:09:32:e2:b2:1c:86:a9:ce:82:70:9e:ba:df:d5:42:a9:
24:5f:78:e0:bc:24:32:5c:7c:07:64:22:c3:49:e2:41:de:97:
24:22:7f:52:c0:53:d0:9d:40:4e:2d:fb:61:cf:d8:b1:da:6f:
f8:8a:00:d7:3b:71:e4:61:08:e5:1a:50:bd:2e:d0:2d:5b:55:
30:56:5a:33:f9:69:e3:0a:6f:25:92:39:d7:c0:95:3e:96:83:
3c:0d:07:05:f1:74:94:0f:7a:66:d6:0e:ca:26:1e:ea:50:e0:
e9:46:fd:85:09:1a:a5:86:ec:b5:c7:15:08:22:9f:22:79:50:
3f:bd:85:98:ed:d0:1b:1a:c0:28:eb:b9:2d:d3:a5:4a:5a:f6:
e6:db:48:55:f5:c3:87:df:73:32:5b:a6:a1:c1:4a:0f:e1:52:
bd:ad:01:0b:97:a0:3c:10:a5:15:8b:d4:21:05:a6:b6:de:ad:
fb:96:ab:55:7e:a1:7a:7c:37:7e:7b:28:fc:35:3f:3c:ec:cf:
67:6a:ec:df:61:11:9a:db:c7:fa:94:c2:f1:87:d5:69:9c:29:
37:fd:39:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:13:56 2026 by rpki-client