This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/ublBeG3Dv2dax-qI6ONUnMwIZ0A.roa File: ublBeG3Dv2dax-qI6ONUnMwIZ0A.roa (raw, json) Hash identifier: NVX59SDqnzDr42Kpw57WUClf3jkUfdSkfds/tST6OaQ= Subject key identifier: B9:B9:41:78:6D:C3:BF:67:5A:C7:EA:88:E8:E3:54:9C:CC:08:67:40 Certificate issuer: /CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009 Certificate serial: 019B7AC86BE8D24CB83B7AD579FD961681A9 Authority key identifier: F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/ublBeG3Dv2dax-qI6ONUnMwIZ0A.roa Signing time: Thu 01 Jan 2026 18:18:33 +0000 ROA not before: Thu 01 Jan 2026 18:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35567 IP address blocks: 87.250.96.0/19 maxlen: 24 87.250.96.0/24 maxlen: 24 87.250.97.0/24 maxlen: 24 87.250.98.0/24 maxlen: 24 87.250.99.0/24 maxlen: 24 87.250.101.0/24 maxlen: 24 87.250.102.0/24 maxlen: 24 87.250.103.0/24 maxlen: 24 87.250.104.0/24 maxlen: 24 87.250.105.0/24 maxlen: 24 87.250.106.0/24 maxlen: 24 87.250.107.0/24 maxlen: 24 87.250.108.0/24 maxlen: 24 87.250.109.0/24 maxlen: 24 87.250.112.0/24 maxlen: 24 87.250.113.0/24 maxlen: 24 87.250.114.0/24 maxlen: 24 87.250.115.0/24 maxlen: 24 87.250.117.0/24 maxlen: 24 87.250.118.0/24 maxlen: 24 87.250.119.0/24 maxlen: 24 87.250.120.0/24 maxlen: 24 87.250.121.0/24 maxlen: 24 87.250.122.0/24 maxlen: 24 87.250.123.0/24 maxlen: 24 87.250.124.0/24 maxlen: 24 87.250.125.0/24 maxlen: 24 87.250.127.0/24 maxlen: 24 91.191.0.0/24 maxlen: 24 91.191.1.0/24 maxlen: 24 91.191.2.0/24 maxlen: 24 91.191.3.0/24 maxlen: 24 91.191.4.0/24 maxlen: 24 91.191.5.0/24 maxlen: 24 91.191.6.0/24 maxlen: 24 91.191.7.0/24 maxlen: 24 91.191.8.0/24 maxlen: 24 91.191.9.0/24 maxlen: 24 91.191.10.0/24 maxlen: 24 91.191.11.0/24 maxlen: 24 91.191.12.0/24 maxlen: 24 91.191.13.0/24 maxlen: 24 91.191.14.0/24 maxlen: 24 91.191.15.0/24 maxlen: 24 91.191.16.0/24 maxlen: 24 91.191.17.0/24 maxlen: 24 91.191.18.0/24 maxlen: 24 91.191.19.0/24 maxlen: 24 91.191.20.0/24 maxlen: 24 91.191.21.0/24 maxlen: 24 91.191.22.0/24 maxlen: 24 91.191.23.0/24 maxlen: 24 91.191.24.0/21 maxlen: 24 91.191.24.0/24 maxlen: 24 91.191.26.0/24 maxlen: 24 91.191.27.0/24 maxlen: 24 91.191.29.0/24 maxlen: 24 91.191.30.0/24 maxlen: 24 91.191.31.0/24 maxlen: 24 91.191.32.0/24 maxlen: 24 91.191.33.0/24 maxlen: 24 91.191.34.0/24 maxlen: 24 91.191.35.0/24 maxlen: 24 91.191.36.0/24 maxlen: 24 91.191.37.0/24 maxlen: 24 91.191.38.0/24 maxlen: 24 91.191.39.0/24 maxlen: 24 91.191.40.0/24 maxlen: 24 91.191.41.0/24 maxlen: 24 91.191.42.0/24 maxlen: 24 91.191.43.0/24 maxlen: 24 91.191.44.0/24 maxlen: 24 91.191.45.0/24 maxlen: 24 91.191.46.0/24 maxlen: 24 91.191.47.0/24 maxlen: 24 91.191.48.0/24 maxlen: 24 91.191.49.0/24 maxlen: 24 91.191.50.0/24 maxlen: 24 91.191.51.0/24 maxlen: 24 91.191.52.0/24 maxlen: 24 91.191.53.0/24 maxlen: 24 91.191.54.0/24 maxlen: 24 91.191.55.0/24 maxlen: 24 91.191.56.0/24 maxlen: 24 91.191.57.0/24 maxlen: 24 91.191.58.0/24 maxlen: 24 91.191.59.0/24 maxlen: 24 91.191.60.0/24 maxlen: 24 91.191.61.0/24 maxlen: 24 91.191.62.0/24 maxlen: 24 91.191.63.0/24 maxlen: 24 185.16.12.0/22 maxlen: 24 185.16.14.0/24 maxlen: 24 213.196.112.0/24 maxlen: 24 213.196.113.0/24 maxlen: 24 213.196.114.0/23 maxlen: 23 213.196.114.0/24 maxlen: 24 213.196.115.0/24 maxlen: 24 213.196.116.0/24 maxlen: 24 213.196.117.0/24 maxlen: 24 213.196.118.0/24 maxlen: 24 213.196.119.0/24 maxlen: 24 213.196.120.0/24 maxlen: 24 213.196.121.0/24 maxlen: 24 213.196.122.0/24 maxlen: 24 213.196.123.0/24 maxlen: 24 213.196.124.0/24 maxlen: 24 213.196.125.0/24 maxlen: 24 213.196.126.0/24 maxlen: 24 213.196.127.0/24 maxlen: 24 2a02:17a8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:6b:e8:d2:4c:b8:3b:7a:d5:79:fd:96:16:81:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009 Validity Not Before: Jan 1 18:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9b941786dc3bf675ac7ea88e8e3549ccc086740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9b:87:04:cd:fa:de:21:ea:14:29:3e:4a:a4: e7:18:6c:5c:e8:95:0e:df:44:e8:d3:2d:b3:a8:7f: 04:18:15:fe:71:e3:58:41:d5:b0:02:4f:f9:9c:e7: a6:87:97:30:c8:57:27:6e:a6:ce:d5:ec:1e:f0:00: 8e:e8:07:aa:ce:0c:85:a7:8a:89:c4:87:6f:54:7d: dd:b9:95:16:71:1f:64:94:96:68:fd:ad:fd:af:8b: 4e:0d:ed:aa:ae:c3:06:06:0e:43:c2:e0:70:4b:5a: 43:61:9c:17:2c:31:3b:c0:8f:43:1c:6b:63:99:50: cc:26:2f:06:1d:ca:e8:3a:15:59:79:95:0c:66:ae: 88:41:ff:22:1e:92:a1:be:5c:7e:85:d2:c7:f1:21: 50:ef:ee:5e:bb:8f:f8:31:cb:a0:f7:37:b0:22:a9: 0a:e8:8c:d0:ce:fc:5a:3d:e6:13:b6:50:fd:ac:19: e0:9b:89:b7:64:84:d4:f8:0f:6e:c2:18:24:58:ef: 28:92:8f:52:14:e9:14:20:16:b7:82:6a:79:8a:f6: c4:03:c1:90:94:0b:28:d5:01:1e:24:67:0f:b6:1c: f3:fb:be:cf:18:86:8f:5d:6b:7f:ea:bf:98:9b:d4: e5:64:c2:fc:54:ec:b8:18:78:0a:b6:74:b4:f7:fc: 16:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B9:41:78:6D:C3:BF:67:5A:C7:EA:88:E8:E3:54:9C:CC:08:67:40 X509v3 Authority Key Identifier: keyid:F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/ublBeG3Dv2dax-qI6ONUnMwIZ0A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.250.96.0/19 91.191.0.0/18 185.16.12.0/22 213.196.112.0/20 IPv6: 2a02:17a8::/32 Signature Algorithm: sha256WithRSAEncryption a1:40:04:da:eb:d2:d0:4e:6e:af:e1:e9:e5:e7:6d:d9:17:ad: f4:6b:d6:db:ee:d8:15:ff:81:d8:99:7b:6f:2c:39:19:c2:bf: 57:aa:58:df:b8:d8:05:01:c8:fb:df:a1:0a:cc:d0:1f:56:b6: 8c:48:79:ec:1a:0b:a8:9a:3d:04:cd:b3:a4:ec:28:c6:86:79: a1:92:25:70:f6:15:71:72:04:6d:11:62:b8:0d:a3:52:d6:06: ac:79:76:f1:45:43:67:d5:1f:24:13:7e:8f:65:8a:bd:b5:b6: c4:5b:fe:01:70:03:80:96:d4:5b:61:60:95:1e:cd:e1:41:45: 6b:70:b2:07:e3:09:fe:13:14:82:a7:30:62:f7:a9:73:76:1c: 55:76:e0:71:65:5f:e2:57:fe:0a:7b:8d:d0:06:e6:ba:19:15: 06:8f:ab:2b:f2:35:09:07:f2:9f:94:37:93:2e:f1:39:f8:5b: c1:ad:93:5e:9c:bb:22:fc:5e:bf:82:46:c7:e0:df:1a:ea:52: d2:5e:fe:f7:82:e4:1a:69:36:42:c5:02:fa:7b:88:cf:5b:27: fa:4e:5d:b2:73:93:9f:e9:a4:af:e0:7d:cb:78:3c:0a:36:cf: 6f:d2:32:98:bb:96:88:46:31:29:21:95:87:c5:de:67:f1:73: 73:ba:4e:b8 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt6yGvo0ky4O3rVef2WFoGpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYWNlM2NhZmI5ZTI2YzFhNjA1NjRmNzBkMmFjZWI0NTdi ZjUwMDkwHhcNMjYwMTAxMTgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWI5NDE3ODZkYzNiZjY3NWFjN2VhODhlOGUzNTQ5Y2NjMDg2NzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZuHBM363iHqFCk+SqTnGGxc6JUO 30To0y2zqH8EGBX+ceNYQdWwAk/5nOemh5cwyFcnbqbO1ewe8ACO6AeqzgyFp4qJ xIdvVH3duZUWcR9klJZo/a39r4tODe2qrsMGBg5DwuBwS1pDYZwXLDE7wI9DHGtj mVDMJi8GHcroOhVZeZUMZq6IQf8iHpKhvlx+hdLH8SFQ7+5eu4/4Mcug9zewIqkK 6IzQzvxaPeYTtlD9rBngm4m3ZITU+A9uwhgkWO8oko9SFOkUIBa3gmp5ivbEA8GQ lAso1QEeJGcPthzz+77PGIaPXWt/6r+Ym9TlZML8VOy4GHgKtnS09/wWbQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFLm5QXhtw79nWsfqiOjjVJzMCGdAMB8GA1UdIwQY MBaAFPOs48r7nibBpgVk9w0qzrRXv1AJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODZ6anl2dWVKc0dtQldUM0RTck90RmVfVUFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lYjIyZmEtZmJhNC00N2E5LWFiNTMt MzYzZTJkNjY0M2YyLzEvdWJsQmVHM0R2MmRheC1xSTZPTlVuTXdJWjBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9lYjIyZmEtZmJhNC00N2E5LWFiNTMtMzYzZTJkNjY0M2Yy LzEvODZ6anl2dWVKc0dtQldUM0RTck90RmVfVUFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFV/pgAwQG W78AAwQCuRAMAwQE1cRwMA0EAgACMAcDBQAqAheoMA0GCSqGSIb3DQEBCwUAA4IB AQChQATa69LQTm6v4enl523ZF630a9bb7tgV/4HYmXtvLDkZwr9XqljfuNgFAcj7 36EKzNAfVraMSHnsGguomj0EzbOk7CjGhnmhkiVw9hVxcgRtEWK4DaNS1gaseXbx RUNn1R8kE36PZYq9tbbEW/4BcAOAltRbYWCVHs3hQUVrcLIH4wn+ExSCpzBi96lz dhxVduBxZV/iV/4Ke43QBua6GRUGj6sr8jUJB/KflDeTLvE5+FvBrZNenLsi/F6/ gkbH4N8a6lLSXv73guQaaTZCxQL6e4jPWyf6Tl2yc5Of6aSv4H3LeDwKNs9v0jKY u5aIRjEpIZWHxd5n8XNzuk64 -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:10 2026 by rpki-client