This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/UBCNB1GJOTTThc41hXR43dVminE.roa File: UBCNB1GJOTTThc41hXR43dVminE.roa (raw, json) Hash identifier: ydmQyJzEs8e+0BDjtx++bNqrwPQumAyQQVdtYVYgT0U= Subject key identifier: 50:10:8D:07:51:89:39:34:D3:85:CE:35:85:74:78:DD:D5:66:8A:71 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019AD3BE318C9A5F82F0714C0FA6F46EA669 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/UBCNB1GJOTTThc41hXR43dVminE.roa Signing time: Sun 30 Nov 2025 07:50:48 +0000 ROA not before: Sun 30 Nov 2025 07:50:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 31898 IP address blocks: 2a0f:b240:11::/48 maxlen: 48 2a0f:b240:5d00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 04:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d3:be:31:8c:9a:5f:82:f0:71:4c:0f:a6:f4:6e:a6:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Nov 30 07:50:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=50108d0751893934d385ce35857478ddd5668a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:41:8e:58:fc:f4:c8:c1:6f:b6:ff:1a:c8:b1: 4c:42:82:c7:40:79:9d:85:2d:40:47:25:46:f1:b9: ad:f5:de:e9:b7:12:ac:28:95:21:df:34:b1:05:d0: c2:44:2d:00:a1:54:c2:64:a0:ef:15:52:fc:91:30: 8e:f1:4c:6b:ad:b5:55:61:32:31:38:cf:45:fb:35: 31:b7:0e:ca:40:1d:83:d7:ee:28:b1:97:c9:ed:02: be:f9:9a:48:f3:77:b4:db:05:21:b6:3a:1b:4f:e1: 96:da:01:fb:1b:7d:57:bc:9a:53:04:22:91:ce:6a: f5:f6:e2:e7:5d:3c:6a:9c:17:d3:d2:68:86:df:3f: 78:18:25:0e:64:c0:10:e6:9e:2f:8b:d3:83:e2:73: 64:ba:1f:63:d6:35:9c:e4:84:60:c7:31:b0:6c:db: 03:79:25:72:0e:42:cd:c7:8e:b8:af:7b:e0:02:bb: 73:92:0b:ef:76:64:2d:77:9b:9e:85:2f:af:2a:8d: 3a:4d:59:ac:70:52:f8:24:01:35:8f:95:ec:03:45: ea:7f:5e:af:7c:42:13:71:2d:64:51:1b:44:f9:d9: a1:83:6e:ff:95:9a:eb:7c:f2:1f:d8:19:fc:2b:cc: 5c:c6:25:17:60:ce:36:72:c8:d9:e2:5c:c6:58:a1: ab:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:10:8D:07:51:89:39:34:D3:85:CE:35:85:74:78:DD:D5:66:8A:71 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/UBCNB1GJOTTThc41hXR43dVminE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:11::/48 2a0f:b240:5d00::/40 Signature Algorithm: sha256WithRSAEncryption 47:bc:31:4a:5b:1c:1e:04:6a:05:4d:95:dd:c9:7a:47:ea:f8: 17:5b:eb:cd:ea:ce:69:48:e1:e8:1d:20:a5:03:8d:40:fe:6c: 49:9f:16:b7:e3:40:fa:f1:3e:4d:80:43:04:1d:e6:b2:af:88: 3b:d8:8a:ab:dc:d7:0c:b2:23:e3:c8:3a:4e:d2:39:8f:2b:79: 36:77:6d:96:01:1b:b3:a0:ac:1a:a6:4c:00:09:52:b5:ee:05: db:44:c7:52:7c:f5:4a:45:1a:1d:d2:ec:a3:89:ed:05:af:f6: 9d:da:54:f0:e4:9e:9d:88:3d:25:f2:3d:bb:4e:85:c0:15:df: b1:55:3b:9a:07:0a:e2:16:e5:0e:31:b5:e5:49:20:ce:78:07: 32:f9:e7:1e:47:2c:a2:f0:86:01:c9:0f:76:c0:26:be:4a:4b: 15:4a:7f:51:5a:35:7a:2d:9b:b3:08:5c:4d:89:4a:91:1a:28: b9:36:d8:dc:5e:2a:11:39:1b:75:4d:cd:e7:e9:29:7b:20:18: f6:87:c3:f9:e4:f9:ab:9f:df:67:f6:3b:47:ed:4f:e6:9c:59: 7b:09:bf:36:ab:d7:2f:e3:ef:ef:17:df:a8:bc:51:40:9c:ca: d4:62:c1:e9:b3:96:09:a8:33:5d:26:a2:7f:00:9e:0d:a8:17: 12:76:2d:f9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZrTvjGMml+C8HFMD6b0bqZpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjUxMTMwMDc1MDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDEwOGQwNzUxODkzOTM0ZDM4NWNlMzU4NTc0NzhkZGQ1NjY4YTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEGOWPz0yMFvtv8ayLFMQoLHQHmd hS1ARyVG8bmt9d7ptxKsKJUh3zSxBdDCRC0AoVTCZKDvFVL8kTCO8UxrrbVVYTIx OM9F+zUxtw7KQB2D1+4osZfJ7QK++ZpI83e02wUhtjobT+GW2gH7G31XvJpTBCKR zmr19uLnXTxqnBfT0miG3z94GCUOZMAQ5p4vi9OD4nNkuh9j1jWc5IRgxzGwbNsD eSVyDkLNx464r3vgArtzkgvvdmQtd5uehS+vKo06TVmscFL4JAE1j5XsA0Xqf16v fEITcS1kURtE+dmhg27/lZrrfPIf2Bn8K8xcxiUXYM42csjZ4lzGWKGrLQIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFFAQjQdRiTk004XONYV0eN3VZopxMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvVUJDTkIxR0pPVFRUaGM0MWhYUjQzZFZtaW5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcAKg+yQAAR AwYAKg+yQF0wDQYJKoZIhvcNAQELBQADggEBAEe8MUpbHB4EagVNld3Jekfq+Bdb 683qzmlI4egdIKUDjUD+bEmfFrfjQPrxPk2AQwQd5rKviDvYiqvc1wyyI+PIOk7S OY8reTZ3bZYBG7OgrBqmTAAJUrXuBdtEx1J89UpFGh3S7KOJ7QWv9p3aVPDknp2I PSXyPbtOhcAV37FVO5oHCuIW5Q4xteVJIM54BzL55x5HLKLwhgHJD3bAJr5KSxVK f1FaNXotm7MIXE2JSpEaKLk22NxeKhE5G3VNzefpKXsgGPaHw/nk+auf32f2O0ft T+acWXsJvzar1y/j7+8X36i8UUCcytRiwemzlgmoM10mon8Ang2oFxJ2Lfk= -----END CERTIFICATE-----Generated at Sun Dec 7 09:40:51 2025 by rpki-client