This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/8ubn5uk-Nn0Dg6ou9x8bCYPQbqc.roa File: 8ubn5uk-Nn0Dg6ou9x8bCYPQbqc.roa (raw, json) Hash identifier: 0WUQ+r+hiGXINe9SN2Kz/K2ffPmAOMbSUmJhrABwNlo= Subject key identifier: F2:E6:E7:E6:E9:3E:36:7D:03:83:AA:2E:F7:1F:1B:09:83:D0:6E:A7 Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55 Certificate serial: 019B79104F19A06AE72A21ED6012B610958F Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/8ubn5uk-Nn0Dg6ou9x8bCYPQbqc.roa Signing time: Thu 01 Jan 2026 10:17:50 +0000 ROA not before: Thu 01 Jan 2026 10:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201091 IP address blocks: 217.11.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:4f:19:a0:6a:e7:2a:21:ed:60:12:b6:10:95:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55 Validity Not Before: Jan 1 10:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2e6e7e6e93e367d0383aa2ef71f1b0983d06ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:53:3c:3c:4e:8a:a1:e7:b0:b4:98:c3:4e:5c: b9:80:f8:86:df:f5:55:bc:6a:fb:ec:1f:f3:d6:5c: 67:ef:4f:cd:0c:37:62:6d:a6:74:75:42:af:86:de: 5d:cf:72:f9:d4:4b:58:23:19:07:3b:ed:07:25:5b: 4e:32:06:1f:78:d9:50:bc:36:e4:74:77:15:5f:72: 07:3c:25:64:74:2b:78:ba:b8:17:fb:32:c1:be:ec: 34:72:67:e1:9e:77:7a:55:72:1b:ad:0a:b5:9f:47: c4:32:42:37:94:3a:ca:b0:8e:bf:4e:48:3f:94:5b: 01:32:5c:d6:60:89:27:0c:a9:3a:d3:58:a6:08:3e: 26:d6:e7:9a:91:6e:68:44:10:3d:48:0c:47:59:25: 91:c0:f4:2b:ae:38:c4:74:3c:50:15:d0:ad:23:6a: 25:fb:93:ec:62:53:9a:0b:32:99:41:2e:63:ed:35: 05:33:a3:63:e2:bb:89:7a:4b:09:63:e2:50:96:b5: 56:a2:d2:0f:02:d2:e5:1c:33:b9:38:c9:5e:77:19: e8:bf:c5:15:72:48:2d:03:59:57:62:4b:5b:dc:29: bf:99:23:04:a1:49:00:ff:f8:11:45:db:5e:6b:4c: 4c:2f:97:11:fc:54:a6:fd:97:81:72:51:9b:88:73: 58:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E6:E7:E6:E9:3E:36:7D:03:83:AA:2E:F7:1F:1B:09:83:D0:6E:A7 X509v3 Authority Key Identifier: keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/8ubn5uk-Nn0Dg6ou9x8bCYPQbqc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.11.134.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:44:ba:19:98:72:ae:fa:32:8b:60:86:e4:08:c0:e3:1d:3e: 05:6e:4b:7f:db:40:97:c8:2d:d0:9f:7a:2d:9d:e0:9a:83:5e: 1b:57:93:b9:31:fe:e0:a8:cf:cb:95:89:25:d7:8c:f6:c8:2a: 6e:6c:f8:65:2c:b9:bb:bb:8f:92:ba:21:1e:fc:21:9a:6b:e2: 2e:f8:c1:a6:52:3f:b5:6b:b5:31:82:9f:41:42:2e:85:db:0e: 25:e8:7b:ca:30:d4:7b:be:e2:4c:7d:d5:96:99:fe:e7:17:c9: d7:aa:0d:1d:34:d0:8b:03:9c:df:1f:87:06:ad:37:28:c2:8f: bc:26:9d:f2:87:3a:fb:17:e7:27:b1:ac:df:56:08:8d:46:63: f5:78:85:a6:87:09:34:aa:7a:a6:e0:3b:12:7e:61:87:64:a0: bb:82:03:39:72:ae:eb:ad:99:bd:b6:74:ac:4a:74:55:a6:a7: 16:c0:1c:fa:e1:62:ec:f7:5f:ff:e6:55:52:de:20:99:79:33: 82:83:0c:e0:65:c6:bc:47:43:cb:a3:42:fb:6a:aa:08:2d:48: 47:da:90:8b:ba:cc:44:31:13:ae:37:4a:26:65:72:d5:89:cd: 9d:73:de:a7:63:a1:81:b4:22:73:9c:8d:ea:50:d7:f6:3b:15: 7d:bc:61:cc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EE8ZoGrnKiHtYBK2EJWPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMGExMjMxZDFjMjdhNzU0ZTQ2ZWYxMGU5MmE3MzBhZTE1 ZDBmNTUwHhcNMjYwMTAxMTAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmU2ZTdlNmU5M2UzNjdkMDM4M2FhMmVmNzFmMWIwOTgzZDA2ZWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFM8PE6KoeewtJjDTly5gPiG3/VV vGr77B/z1lxn70/NDDdibaZ0dUKvht5dz3L51EtYIxkHO+0HJVtOMgYfeNlQvDbk dHcVX3IHPCVkdCt4urgX+zLBvuw0cmfhnnd6VXIbrQq1n0fEMkI3lDrKsI6/Tkg/ lFsBMlzWYIknDKk601imCD4m1ueakW5oRBA9SAxHWSWRwPQrrjjEdDxQFdCtI2ol +5PsYlOaCzKZQS5j7TUFM6Nj4ruJeksJY+JQlrVWotIPAtLlHDO5OMledxnov8UV ckgtA1lXYktb3Cm/mSMEoUkA//gRRdtea0xML5cR/FSm/ZeBclGbiHNYmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPLm5+bpPjZ9A4OqLvcfGwmD0G6nMB8GA1UdIwQY MBaAFHAKEjHRwnp1TkbvEOkqcwrhXQ9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgt YWI3OWEzNzg5ZjhmLzEvOHVibjV1ay1ObjBEZzZvdTl4OGJDWVBRYnFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgtYWI3OWEzNzg5Zjhm LzEvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2QuGMA0G CSqGSIb3DQEBCwUAA4IBAQBfRLoZmHKu+jKLYIbkCMDjHT4Fbkt/20CXyC3Qn3ot neCag14bV5O5Mf7gqM/LlYkl14z2yCpubPhlLLm7u4+SuiEe/CGaa+Iu+MGmUj+1 a7Uxgp9BQi6F2w4l6HvKMNR7vuJMfdWWmf7nF8nXqg0dNNCLA5zfH4cGrTcowo+8 Jp3yhzr7F+cnsazfVgiNRmP1eIWmhwk0qnqm4DsSfmGHZKC7ggM5cq7rrZm9tnSs SnRVpqcWwBz64WLs91//5lVS3iCZeTOCgwzgZca8R0PLo0L7aqoILUhH2pCLusxE MROuN0omZXLVic2dc96nY6GBtCJznI3qUNf2OxV9vGHM -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:09 2026 by rpki-client