This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/ub7YR9axa9vWtz1X_qFq5fbsHkk.roa File: ub7YR9axa9vWtz1X_qFq5fbsHkk.roa (raw, json) Hash identifier: JE4qOMRm4xEBU/PFIJ8QsUIFvLyYeHz3Zc+xrGXyYyQ= Subject key identifier: B9:BE:D8:47:D6:B1:6B:DB:D6:B7:3D:57:FE:A1:6A:E5:F6:EC:1E:49 Certificate issuer: /CN=c53e2aba0515ec90d10911060fcf29236d76dddf Certificate serial: 019B7C12E50C59CB54DB67A05759186C9E2B Authority key identifier: C5:3E:2A:BA:05:15:EC:90:D1:09:11:06:0F:CF:29:23:6D:76:DD:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/ub7YR9axa9vWtz1X_qFq5fbsHkk.roa Signing time: Fri 02 Jan 2026 00:19:31 +0000 ROA not before: Fri 02 Jan 2026 00:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205316 IP address blocks: 185.222.108.0/22 maxlen: 22 2a0c:2800::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:e5:0c:59:cb:54:db:67:a0:57:59:18:6c:9e:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c53e2aba0515ec90d10911060fcf29236d76dddf Validity Not Before: Jan 2 00:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9bed847d6b16bdbd6b73d57fea16ae5f6ec1e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:84:e4:00:25:23:e3:82:4b:f4:f7:15:8e:8e: 3a:44:f9:e5:de:44:47:5f:5c:97:66:ec:81:b6:63: 43:c7:26:e6:19:c7:7a:f7:5a:cb:c0:32:1d:35:ac: b6:03:55:0f:cf:f6:64:10:12:a1:56:15:24:b7:d2: 91:64:8c:52:28:69:3e:22:c2:49:2a:2d:6c:29:7f: d9:ab:79:91:2c:fe:68:40:7c:ef:a4:9f:6e:15:08: 48:6e:15:1a:ef:f7:2e:fd:c6:e5:a1:52:5d:f1:a8: 01:b5:3d:44:24:12:ff:4e:c8:20:88:7b:df:24:23: 77:df:4f:26:c5:b5:e7:fa:8a:fb:be:03:1f:14:26: 51:38:bc:7e:9c:2b:18:ea:27:14:2c:8f:f0:94:8f: 17:c0:53:93:9c:59:fb:59:12:e2:9f:da:ba:7e:fc: ac:ca:a1:45:36:8f:8d:31:cd:04:a5:7e:8a:2f:90: 32:5d:39:71:3f:a2:e2:3b:f0:5c:96:4b:27:1d:d8: 12:76:ff:81:76:f3:2a:91:5c:3d:2c:6b:d8:b7:b5: 89:20:c5:d8:93:e1:53:02:39:76:5d:d1:f2:81:52: d7:22:ff:48:72:1b:91:d2:8f:54:2a:42:1c:a4:8d: 25:33:d2:0f:58:c7:f2:0a:4a:2b:bd:b8:7f:8c:7d: aa:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:BE:D8:47:D6:B1:6B:DB:D6:B7:3D:57:FE:A1:6A:E5:F6:EC:1E:49 X509v3 Authority Key Identifier: keyid:C5:3E:2A:BA:05:15:EC:90:D1:09:11:06:0F:CF:29:23:6D:76:DD:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/ub7YR9axa9vWtz1X_qFq5fbsHkk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.222.108.0/22 IPv6: 2a0c:2800::/32 Signature Algorithm: sha256WithRSAEncryption 46:5c:ee:b3:5f:68:1e:56:b3:96:5a:16:87:55:f8:8b:43:94: bb:49:3f:5b:c1:ec:18:f1:9a:c1:e0:35:46:57:4f:ed:04:67: 1a:e3:37:67:bf:78:84:af:4f:bf:56:07:d9:cb:c9:46:1d:48: 41:07:0d:84:f1:42:0a:c0:15:82:09:2d:06:da:24:dd:ed:cc: dc:b7:7f:c3:df:61:ad:e7:48:63:48:61:64:29:73:e7:e2:44: 9f:de:da:0b:b2:09:1a:b4:84:46:e8:40:37:0e:02:7c:70:20: f0:24:e9:ce:b0:81:fa:56:a1:fe:bc:fd:66:70:a3:6f:23:bb: c7:b8:44:75:53:7e:12:8d:72:84:0e:8b:95:6a:e5:4b:e6:09: 01:2f:09:4e:3d:e6:9f:0a:f0:e5:9e:5e:ef:6f:4a:4c:ab:ff: 72:2d:03:bd:dc:19:7d:28:2b:a9:93:f4:90:7e:4f:36:97:41: 7d:95:a8:05:05:13:c1:a8:4e:f7:bf:c6:18:93:f0:a6:bf:c2: 50:38:7b:65:1e:83:91:fd:f9:ca:87:40:2a:64:69:6c:5a:79: 9e:62:a4:1b:76:2c:9b:14:2e:c0:4b:1b:54:cf:bf:50:64:cf: 73:0b:08:68:a2:26:9e:60:8d:33:1c:4a:48:82:2b:17:b0:63: 06:be:1b:7a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8EuUMWctU22egV1kYbJ4rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1M2UyYWJhMDUxNWVjOTBkMTA5MTEwNjBmY2YyOTIzNmQ3 NmRkZGYwHhcNMjYwMTAyMDAxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWJlZDg0N2Q2YjE2YmRiZDZiNzNkNTdmZWExNmFlNWY2ZWMxZTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9oTkACUj44JL9PcVjo46RPnl3kRH X1yXZuyBtmNDxybmGcd691rLwDIdNay2A1UPz/ZkEBKhVhUkt9KRZIxSKGk+IsJJ Ki1sKX/Zq3mRLP5oQHzvpJ9uFQhIbhUa7/cu/cbloVJd8agBtT1EJBL/TsggiHvf JCN3308mxbXn+or7vgMfFCZROLx+nCsY6icULI/wlI8XwFOTnFn7WRLin9q6fvys yqFFNo+NMc0EpX6KL5AyXTlxP6LiO/BclksnHdgSdv+BdvMqkVw9LGvYt7WJIMXY k+FTAjl2XdHygVLXIv9IchuR0o9UKkIcpI0lM9IPWMfyCkorvbh/jH2q6wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLm+2EfWsWvb1rc9V/6hauX27B5JMB8GA1UdIwQY MBaAFMU+KroFFeyQ0QkRBg/PKSNtdt3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFQ0cXVnVVY3SkRSQ1JFR0Q4OHBJMjEyM2Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85MDhhNjItZjRlMC00OTg1LTllMzQt MTIwNTNhZGU5ZmFmLzEvdWI3WVI5YXhhOXZXdHoxWF9xRnE1ZmJzSGtrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85MDhhNjItZjRlMC00OTg1LTllMzQtMTIwNTNhZGU5ZmFm LzEveFQ0cXVnVVY3SkRSQ1JFR0Q4OHBJMjEyM2Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCud5sMA0E AgACMAcDBQAqDCgAMA0GCSqGSIb3DQEBCwUAA4IBAQBGXO6zX2geVrOWWhaHVfiL Q5S7ST9bwewY8ZrB4DVGV0/tBGca4zdnv3iEr0+/VgfZy8lGHUhBBw2E8UIKwBWC CS0G2iTd7czct3/D32Gt50hjSGFkKXPn4kSf3toLsgkatIRG6EA3DgJ8cCDwJOnO sIH6VqH+vP1mcKNvI7vHuER1U34SjXKEDouVauVL5gkBLwlOPeafCvDlnl7vb0pM q/9yLQO93Bl9KCupk/SQfk82l0F9lagFBRPBqE73v8YYk/Cmv8JQOHtlHoOR/fnK h0AqZGlsWnmeYqQbdiybFC7ASxtUz79QZM9zCwhooiaeYI0zHEpIgisXsGMGvht6 -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:47 2026 by rpki-client