This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ubPnB4PKZFciw2YuGyPydMFGZ-U.roa File: ubPnB4PKZFciw2YuGyPydMFGZ-U.roa (raw, json) Hash identifier: iJugsfbsORnOo3TefxwEogbSbOIvbBeKh9lA8dSSeqI= Subject key identifier: B9:B3:E7:07:83:CA:64:57:22:C3:66:2E:1B:23:F2:74:C1:46:67:E5 Certificate issuer: /CN=72d8dbea4023d69f47f89bd2082fffb2466dd2a5 Certificate serial: 019B791048DB9708C25F5CFC14DD3DE45991 Authority key identifier: 72:D8:DB:EA:40:23:D6:9F:47:F8:9B:D2:08:2F:FF:B2:46:6D:D2:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ubPnB4PKZFciw2YuGyPydMFGZ-U.roa Signing time: Thu 01 Jan 2026 10:17:48 +0000 ROA not before: Thu 01 Jan 2026 10:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204816 IP address blocks: 217.20.253.0/24 maxlen: 24 2a12:ffc0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.crl rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:48:db:97:08:c2:5f:5c:fc:14:dd:3d:e4:59:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72d8dbea4023d69f47f89bd2082fffb2466dd2a5 Validity Not Before: Jan 1 10:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9b3e70783ca645722c3662e1b23f274c14667e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f0:5d:40:18:dd:20:5a:19:12:c8:3e:92:95: 8a:1e:0f:4f:30:ac:28:5d:d4:7f:09:94:b0:d2:2c: 0e:87:69:8c:99:87:83:3f:48:5f:55:f3:0d:e1:e6: 2c:6b:b8:92:b6:29:43:d2:e3:35:3b:bc:6a:2a:90: 6e:24:ef:2d:30:fd:42:ef:19:be:79:16:18:16:58: 05:af:35:4d:cc:79:0d:39:0a:e7:3b:ec:34:f8:ce: 29:8a:02:45:99:d7:22:b2:3c:9d:4d:42:8b:4b:03: 7a:bf:d9:c1:2f:d5:d5:6e:d3:d3:fc:6c:f8:9e:5d: 35:86:2e:13:f0:a1:48:ea:2d:96:f7:13:98:9e:cf: ac:d4:14:29:54:fc:33:11:88:ad:ab:f4:86:54:4a: eb:f2:06:f5:ce:fd:08:a9:1d:8f:f9:dd:d1:c8:00: 33:7d:30:1c:f3:21:63:b0:23:e1:93:f6:fe:dc:51: a4:1b:3a:65:92:a6:c3:a1:ad:cb:4a:b6:59:63:84: 77:a7:74:d1:ee:87:6a:ec:5f:d1:fa:c6:f0:76:4c: 42:25:c5:2d:cf:1b:64:c1:d5:ac:b2:58:46:50:74: 42:2c:d4:40:78:62:cb:70:9e:21:0b:c9:18:0d:37: 76:78:b6:28:d5:fa:e4:83:46:8f:37:6d:66:0d:26: c5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B3:E7:07:83:CA:64:57:22:C3:66:2E:1B:23:F2:74:C1:46:67:E5 X509v3 Authority Key Identifier: keyid:72:D8:DB:EA:40:23:D6:9F:47:F8:9B:D2:08:2F:FF:B2:46:6D:D2:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ubPnB4PKZFciw2YuGyPydMFGZ-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.20.253.0/24 IPv6: 2a12:ffc0::/29 Signature Algorithm: sha256WithRSAEncryption 8f:f2:3b:f1:ab:97:ee:b0:aa:3f:4b:2c:94:e4:2e:6e:00:5a: 4b:50:0c:5d:55:5d:d5:70:1e:3d:c2:8c:7d:a7:bf:c9:70:c1: 5a:78:00:89:6d:34:4e:b4:f3:72:c2:04:10:09:4f:7b:76:a3: 54:e6:94:3e:45:26:da:72:38:d4:fb:8b:b2:06:f1:5c:55:89: 7a:57:60:d5:6d:99:68:13:f6:17:ef:3b:71:8b:42:31:e6:21: 68:81:6b:c8:4b:52:84:d7:9c:b4:c1:e5:e1:16:15:eb:7d:91: 5e:9b:f3:97:e5:3e:5d:bc:90:f3:22:aa:4b:e9:14:75:55:5e: e6:d5:6b:90:ec:3c:87:8d:13:f9:f8:4a:af:a6:0a:e1:3f:70: 80:b6:ac:00:4f:e3:05:d1:d4:9f:37:8a:f7:3b:4d:c5:8d:37: 2f:1a:e9:23:b8:7e:b0:e6:ab:27:6c:63:eb:d7:ee:b0:ac:87: 46:ed:8c:57:c2:38:38:a7:75:55:b3:c6:46:dc:10:09:ab:7c: 35:90:dc:a7:9c:e9:6d:48:bf:8d:9e:14:1d:33:a9:ce:d0:89: 05:5d:a1:ef:c8:45:5d:0c:77:1e:73:65:83:7b:0e:3e:ac:d9: 2f:6b:b4:6d:35:e6:22:10:9b:39:b8:6d:f0:80:51:2c:2e:ac: d5:f4:40:65 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EEjblwjCX1z8FN095FmRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZDhkYmVhNDAyM2Q2OWY0N2Y4OWJkMjA4MmZmZmIyNDY2 ZGQyYTUwHhcNMjYwMTAxMTAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWIzZTcwNzgzY2E2NDU3MjJjMzY2MmUxYjIzZjI3NGMxNDY2N2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfBdQBjdIFoZEsg+kpWKHg9PMKwo XdR/CZSw0iwOh2mMmYeDP0hfVfMN4eYsa7iStilD0uM1O7xqKpBuJO8tMP1C7xm+ eRYYFlgFrzVNzHkNOQrnO+w0+M4pigJFmdcisjydTUKLSwN6v9nBL9XVbtPT/Gz4 nl01hi4T8KFI6i2W9xOYns+s1BQpVPwzEYitq/SGVErr8gb1zv0IqR2P+d3RyAAz fTAc8yFjsCPhk/b+3FGkGzplkqbDoa3LSrZZY4R3p3TR7odq7F/R+sbwdkxCJcUt zxtkwdWsslhGUHRCLNRAeGLLcJ4hC8kYDTd2eLYo1frkg0aPN21mDSbFaQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLmz5weDymRXIsNmLhsj8nTBRmflMB8GA1UdIwQY MBaAFHLY2+pAI9afR/ib0ggv/7JGbdKlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3RqYjZrQWoxcDlILUp2U0NDX19za1p0MHFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hOTA5MWYtMjdhMi00MmEzLTk1MmIt OWVkMTgwNGYzMjgyLzEvdWJQbkI0UEtaRmNpdzJZdUd5UHlkTUZHWi1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9hOTA5MWYtMjdhMi00MmEzLTk1MmItOWVkMTgwNGYzMjgy LzEvY3RqYjZrQWoxcDlILUp2U0NDX19za1p0MHFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA2RT9MA0E AgACMAcDBQMqEv/AMA0GCSqGSIb3DQEBCwUAA4IBAQCP8jvxq5fusKo/SyyU5C5u AFpLUAxdVV3VcB49wox9p7/JcMFaeACJbTROtPNywgQQCU97dqNU5pQ+RSbacjjU +4uyBvFcVYl6V2DVbZloE/YX7ztxi0Ix5iFogWvIS1KE15y0weXhFhXrfZFem/OX 5T5dvJDzIqpL6RR1VV7m1WuQ7DyHjRP5+EqvpgrhP3CAtqwAT+MF0dSfN4r3O03F jTcvGukjuH6w5qsnbGPr1+6wrIdG7YxXwjg4p3VVs8ZG3BAJq3w1kNynnOltSL+N nhQdM6nO0IkFXaHvyEVdDHcec2WDew4+rNkva7RtNeYiEJs5uG3wgFEsLqzV9EBl -----END CERTIFICATE-----Generated at Mon Feb 9 22:57:45 2026 by rpki-client