This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UbYb49_gkz130DGiZpgUWuoweHM.roa File: UbYb49_gkz130DGiZpgUWuoweHM.roa (raw, json) Hash identifier: s6MQ9TWcKJCIlFFQKwLMQhEXJK68QlekCF+JIvLNka0= Subject key identifier: 51:B6:1B:E3:DF:E0:93:3D:77:D0:31:A2:66:98:14:5A:EA:30:78:73 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797DE5334BB60816A25467DC252732FA Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UbYb49_gkz130DGiZpgUWuoweHM.roa Signing time: Thu 01 Jan 2026 12:17:32 +0000 ROA not before: Thu 01 Jan 2026 12:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23470 IP address blocks: 91.209.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:e5:33:4b:b6:08:16:a2:54:67:dc:25:27:32:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51b61be3dfe0933d77d031a26698145aea307873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d8:6b:0f:15:dc:81:37:d6:20:30:28:cf:cc: c8:68:f7:80:39:54:51:14:33:42:63:f1:4b:6d:9c: 77:d7:87:e3:ca:49:92:b1:20:6c:a0:45:62:46:c1: 51:0b:24:4c:48:c6:42:9c:30:cf:58:92:a5:2b:78: 2f:19:a4:2c:07:33:2a:cf:95:c5:80:d7:b7:0e:e4: c6:65:a0:d4:30:d8:b7:c6:cc:92:bf:84:d5:29:48: c7:94:9f:1b:d0:0e:92:9a:a2:c3:98:f2:76:0b:58: 3b:44:68:11:b4:17:19:dd:d5:5a:81:92:40:63:59: 05:9e:27:7e:8e:18:af:54:27:15:fb:c7:8d:d0:a9: 6e:03:7f:f8:c8:7e:3c:cb:d4:13:83:4c:5f:32:a2: b4:5a:cb:9e:54:4e:9d:2d:cd:37:bb:6e:82:9d:a8: c4:b3:c4:41:a2:00:42:40:c7:1b:79:de:f1:66:97: 8c:13:64:42:e9:7e:28:21:63:83:22:2f:c8:cb:d3: 9b:13:46:5d:56:a2:80:ee:03:b4:9a:8e:d8:d5:38: c0:d2:65:10:21:a9:f5:fe:fe:8d:96:9c:b9:3c:96: d3:3f:8d:7c:42:9f:13:9c:1c:9d:87:0c:17:cc:0e: 59:d7:eb:e5:4b:c5:a4:f7:35:c8:f3:d6:02:a1:31: a5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B6:1B:E3:DF:E0:93:3D:77:D0:31:A2:66:98:14:5A:EA:30:78:73 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UbYb49_gkz130DGiZpgUWuoweHM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.228.0/24 Signature Algorithm: sha256WithRSAEncryption 40:dd:61:f1:b1:0d:af:c0:f7:6d:de:14:21:32:31:14:de:fc: c8:3a:ec:55:ca:91:16:43:d0:5c:7e:f6:21:0d:98:24:1e:2b: b6:ba:50:01:c4:69:a7:b1:6b:7a:11:3c:46:f6:4e:00:2c:3a: f1:68:d9:8f:8d:eb:b3:35:71:55:69:d7:34:b7:14:7c:71:53: 5c:40:bb:56:f9:74:20:2f:9f:e3:66:75:88:ab:64:3a:97:07: ae:67:47:53:5e:d7:c0:5c:a6:78:f3:72:45:4b:10:98:66:a2: f1:f4:50:25:aa:cd:e1:e6:cd:1f:a3:5e:06:09:46:2b:7f:ca: f8:6b:ce:38:38:2a:fc:78:a3:69:96:99:fc:e8:c4:b6:99:64: ae:6a:1c:06:84:18:d6:cc:e2:b7:36:08:37:98:10:4a:b1:53: 76:1c:33:e0:f6:f0:e5:15:6a:07:30:70:d8:83:ff:2a:5f:fb: 7f:03:26:1d:59:c5:00:d8:7c:6d:0b:19:59:ac:00:5e:37:db: 69:7c:08:b6:f3:7a:63:59:41:5c:58:84:0e:3a:b3:fc:10:90: b7:d4:0c:9d:e2:2f:45:82:3e:c2:da:a9:18:97:47:98:f4:68: 76:7c:c8:76:3d:61:68:03:f6:e8:2f:d0:dc:32:22:7e:1a:aa: 20:aa:8b:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5feUzS7YIFqJUZ9wlJzL6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWI2MWJlM2RmZTA5MzNkNzdkMDMxYTI2Njk4MTQ1YWVhMzA3ODczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndhrDxXcgTfWIDAoz8zIaPeAOVRR FDNCY/FLbZx314fjykmSsSBsoEViRsFRCyRMSMZCnDDPWJKlK3gvGaQsBzMqz5XF gNe3DuTGZaDUMNi3xsySv4TVKUjHlJ8b0A6SmqLDmPJ2C1g7RGgRtBcZ3dVagZJA Y1kFnid+jhivVCcV+8eN0KluA3/4yH48y9QTg0xfMqK0WsueVE6dLc03u26CnajE s8RBogBCQMcbed7xZpeME2RC6X4oIWODIi/Iy9ObE0ZdVqKA7gO0mo7Y1TjA0mUQ Ian1/v6Nlpy5PJbTP418Qp8TnBydhwwXzA5Z1+vlS8Wk9zXI89YCoTGlEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFG2G+Pf4JM9d9AxomaYFFrqMHhzMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvVWJZYjQ5X2drejEzMERHaVpwZ1VXdW93ZUhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9HkMA0G CSqGSIb3DQEBCwUAA4IBAQBA3WHxsQ2vwPdt3hQhMjEU3vzIOuxVypEWQ9BcfvYh DZgkHiu2ulABxGmnsWt6ETxG9k4ALDrxaNmPjeuzNXFVadc0txR8cVNcQLtW+XQg L5/jZnWIq2Q6lweuZ0dTXtfAXKZ483JFSxCYZqLx9FAlqs3h5s0fo14GCUYrf8r4 a844OCr8eKNplpn86MS2mWSuahwGhBjWzOK3Ngg3mBBKsVN2HDPg9vDlFWoHMHDY g/8qX/t/AyYdWcUA2HxtCxlZrABeN9tpfAi283pjWUFcWIQOOrP8EJC31Ayd4i9F gj7C2qkYl0eY9Gh2fMh2PWFoA/boL9DcMiJ+Gqogqos/ -----END CERTIFICATE-----Generated at Thu Jan 8 09:23:16 2026 by rpki-client