This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/UbKp8SZhnSoZXvXI5ekDZVISvJ0.roa File: UbKp8SZhnSoZXvXI5ekDZVISvJ0.roa (raw, json) Hash identifier: Qzbo1YF+7OuM7vfSmLC+YBsyPpRh0JaNoTJmEXBDYdI= Subject key identifier: 51:B2:A9:F1:26:61:9D:2A:19:5E:F5:C8:E5:E9:03:65:52:12:BC:9D Certificate issuer: /CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7 Certificate serial: 019B7B35B163DF3FE24E16728BE0E09A16E8 Authority key identifier: D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/UbKp8SZhnSoZXvXI5ekDZVISvJ0.roa Signing time: Thu 01 Jan 2026 20:17:54 +0000 ROA not before: Thu 01 Jan 2026 20:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210789 IP address blocks: 212.6.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:b1:63:df:3f:e2:4e:16:72:8b:e0:e0:9a:16:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7 Validity Not Before: Jan 1 20:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51b2a9f126619d2a195ef5c8e5e903655212bc9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f7:a4:70:06:38:db:6c:cb:45:7f:43:b1:7e: b8:95:c2:54:50:d8:b2:b3:6e:ce:3a:eb:c2:3f:4e: 85:d9:9f:41:eb:77:06:74:d6:db:f1:67:78:b9:4b: 4e:23:d7:2a:de:33:e6:06:61:56:eb:17:d8:12:f4: 65:6e:86:1f:33:5a:be:a4:7d:91:24:b7:27:21:7a: 10:4e:29:74:8d:fa:fb:d8:d5:59:c2:0d:b9:23:d1: cb:5d:26:19:ad:1b:46:ba:75:ed:76:03:25:3d:1a: b4:e6:e3:6f:24:09:0e:65:6e:83:a1:18:12:54:a3: 2e:85:1f:d3:b6:4d:59:23:e5:6c:81:08:fe:a5:0b: c5:2f:29:c5:85:42:75:0e:8b:8b:18:d1:cb:c6:bc: 8f:21:eb:8f:2d:8f:5e:29:65:70:a0:52:75:ff:69: 57:d4:f4:94:fc:92:2b:46:0b:06:5b:95:ae:58:4a: 92:20:3a:97:c8:35:87:f4:68:2a:60:e7:24:35:aa: 14:6c:c2:2f:98:00:01:07:79:c3:e2:26:2f:3e:34: e2:89:6d:4f:f7:c4:90:f1:ae:c8:bf:7c:fc:d5:1a: 84:31:fd:75:5b:ac:58:b8:30:82:27:71:0c:56:52: de:3e:78:48:ed:c5:a1:ec:e1:55:5a:0c:09:82:71: e6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B2:A9:F1:26:61:9D:2A:19:5E:F5:C8:E5:E9:03:65:52:12:BC:9D X509v3 Authority Key Identifier: keyid:D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/UbKp8SZhnSoZXvXI5ekDZVISvJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.6.58.0/24 Signature Algorithm: sha256WithRSAEncryption 93:89:ae:dd:ba:8e:fa:99:d7:ee:1b:01:49:2a:93:e3:40:7c: 3e:4b:da:47:17:42:25:7b:e6:ce:dd:cf:29:e1:2a:9e:6d:62: 43:b9:2e:9f:d3:29:32:55:d5:08:6e:ac:f7:92:d1:41:c6:2b: 8d:17:5f:5e:fe:1b:84:5d:8f:03:2d:e7:d6:75:75:4c:ce:c7: d5:31:bb:cc:cf:fe:df:34:ef:00:55:85:63:9a:72:10:9b:ea: 07:ea:6c:d2:b6:bd:06:71:6c:f1:88:e9:98:ed:65:e2:e4:94: 22:73:3a:4b:b2:7a:1a:f2:f1:be:a5:cb:d5:cf:27:d0:d0:ab: 85:a7:01:6e:34:78:6b:35:ae:ed:a6:1e:35:22:56:85:76:c8: e9:4b:79:b5:3f:26:c8:60:30:52:22:cd:88:1a:c7:90:dd:27: 56:3c:ed:4b:b1:aa:7a:4d:1c:9e:7b:a2:ec:c1:ec:18:10:ba: da:59:f9:84:51:bd:bd:01:a5:f8:73:8b:37:b2:1f:d8:65:84: 2f:d8:a0:b0:0b:91:87:96:45:21:f4:95:93:1f:01:89:8f:c6: 39:c3:28:bb:12:60:4c:8a:07:b1:7e:ee:c7:23:b5:83:79:5e: 0a:dd:b2:c9:c0:a5:92:19:8c:94:92:fc:4e:56:bd:2f:cf:06: 93:39:93:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NbFj3z/iThZyi+DgmhboMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5OWQ4NmEzNTIzOGQ0ZjJlYjYwY2JkMjE0OTVmODFhMzU3 N2MxYTcwHhcNMjYwMTAxMjAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWIyYTlmMTI2NjE5ZDJhMTk1ZWY1YzhlNWU5MDM2NTUyMTJiYzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PekcAY422zLRX9DsX64lcJUUNiy s27OOuvCP06F2Z9B63cGdNbb8Wd4uUtOI9cq3jPmBmFW6xfYEvRlboYfM1q+pH2R JLcnIXoQTil0jfr72NVZwg25I9HLXSYZrRtGunXtdgMlPRq05uNvJAkOZW6DoRgS VKMuhR/Ttk1ZI+VsgQj+pQvFLynFhUJ1DouLGNHLxryPIeuPLY9eKWVwoFJ1/2lX 1PSU/JIrRgsGW5WuWEqSIDqXyDWH9GgqYOckNaoUbMIvmAABB3nD4iYvPjTiiW1P 98SQ8a7Iv3z81RqEMf11W6xYuDCCJ3EMVlLePnhI7cWh7OFVWgwJgnHmTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFGyqfEmYZ0qGV71yOXpA2VSErydMB8GA1UdIwQY MBaAFNmdhqNSONTy62DL0hSV+Bo1d8GnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMloyR28xSTQxUExyWU12U0ZKWDRHalYzd2FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iNTBjMjgtYTRhNS00Yzk0LWFmYmEt Mzc1N2QxMGQ4ODllLzEvVWJLcDhTWmhuU29aWHZYSTVla0RaVklTdkowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9iNTBjMjgtYTRhNS00Yzk0LWFmYmEtMzc1N2QxMGQ4ODll LzEvMloyR28xSTQxUExyWU12U0ZKWDRHalYzd2FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1AY6MA0G CSqGSIb3DQEBCwUAA4IBAQCTia7duo76mdfuGwFJKpPjQHw+S9pHF0Ile+bO3c8p 4SqebWJDuS6f0ykyVdUIbqz3ktFBxiuNF19e/huEXY8DLefWdXVMzsfVMbvMz/7f NO8AVYVjmnIQm+oH6mzStr0GcWzxiOmY7WXi5JQiczpLsnoa8vG+pcvVzyfQ0KuF pwFuNHhrNa7tph41IlaFdsjpS3m1PybIYDBSIs2IGseQ3SdWPO1Lsap6TRyee6Ls wewYELraWfmEUb29AaX4c4s3sh/YZYQv2KCwC5GHlkUh9JWTHwGJj8Y5wyi7EmBM igexfu7HI7WDeV4K3bLJwKWSGYyUkvxOVr0vzwaTOZMe -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:50 2026 by rpki-client