This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/ubDRCyGTNPH280nyPWUjQFlxXwo.roa File: ubDRCyGTNPH280nyPWUjQFlxXwo.roa (raw, json) Hash identifier: aQLrEZhn3B0wMZ5KJdawYUdqKjoKHetb4pEObkiH9xU= Subject key identifier: B9:B0:D1:0B:21:93:34:F1:F6:F3:49:F2:3D:65:23:40:59:71:5F:0A Certificate issuer: /CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610 Certificate serial: 019B7F850E1A0018D8D007E93407273F2415 Authority key identifier: 5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/ubDRCyGTNPH280nyPWUjQFlxXwo.roa Signing time: Fri 02 Jan 2026 16:23:04 +0000 ROA not before: Fri 02 Jan 2026 16:23:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12315 IP address blocks: 185.215.40.0/22 maxlen: 22 193.254.214.0/23 maxlen: 23 213.34.32.0/19 maxlen: 19 2a04:c580::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:0e:1a:00:18:d8:d0:07:e9:34:07:27:3f:24:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610 Validity Not Before: Jan 2 16:23:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9b0d10b219334f1f6f349f23d65234059715f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:af:bc:ca:04:5f:8c:1d:93:ec:f7:13:ad:aa: ac:5b:1b:23:ab:fe:30:99:c6:9b:4e:42:4b:08:52: 08:6e:36:89:81:d1:c3:03:3d:24:a8:e8:87:9e:8a: d3:f9:85:dc:00:6f:a6:49:79:1e:1e:94:a2:d9:85: e1:3b:8c:0e:7e:73:fc:8e:1d:a7:c2:8a:cf:2f:84: 47:7a:68:f9:77:b6:4d:2c:68:38:3a:11:53:3a:9b: 16:d4:c1:93:36:69:0f:7e:93:39:57:90:ad:ca:cb: b7:4f:3b:5d:a8:3b:ec:3b:ca:9b:70:3b:27:99:32: e6:67:68:80:a7:03:21:4f:a8:46:02:8e:ff:d2:41: b2:95:63:a4:47:93:41:40:fb:d4:36:af:e6:6a:9f: 31:90:d5:af:01:81:3a:c4:87:3f:e4:f2:91:62:0a: 8f:10:16:74:da:37:48:6c:96:d0:ed:80:72:df:a5: f2:6d:d0:02:fb:3b:d4:df:59:0e:29:26:f7:21:0d: af:73:4d:00:40:16:e6:c2:7e:3f:50:c4:1d:6f:bc: 0b:26:02:c2:ca:70:84:65:f4:49:bd:2d:76:d4:2b: 77:e3:be:8a:28:45:4a:cd:0c:3a:85:1f:83:1f:1b: e5:71:6c:da:01:d6:8b:4c:4d:0a:f3:76:48:64:28: 37:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B0:D1:0B:21:93:34:F1:F6:F3:49:F2:3D:65:23:40:59:71:5F:0A X509v3 Authority Key Identifier: keyid:5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/ubDRCyGTNPH280nyPWUjQFlxXwo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.215.40.0/22 193.254.214.0/23 213.34.32.0/19 IPv6: 2a04:c580::/29 Signature Algorithm: sha256WithRSAEncryption 1f:85:0b:f1:51:94:8a:cc:c1:b0:c4:a0:e4:1b:30:08:cc:54: 1f:7e:cb:b4:78:30:07:0d:b6:1b:30:6f:c6:b4:4c:cb:6b:2b: 51:45:28:78:db:a1:d0:44:3e:01:4b:42:cf:e4:95:13:4a:35: 86:2a:3e:0c:a3:04:23:46:b7:d0:4b:24:7d:5f:b5:86:9a:53: fc:de:cc:af:12:cb:66:8d:8f:29:9b:b5:9f:e8:10:4b:a0:60: 79:95:b4:82:67:0f:f6:16:33:4f:13:48:96:71:6b:ed:9b:c5: cd:8e:10:e7:3b:b1:1a:1e:8b:23:18:20:1e:6e:99:d6:be:70: 0d:e6:c6:7c:61:59:c1:b6:c2:48:14:87:da:9c:1e:e4:66:f6: 48:c7:1d:0b:b3:bb:ce:10:31:06:c7:b2:3a:cd:9e:85:f8:94: fd:91:ba:26:ad:c1:21:dc:8e:6e:d9:54:06:4e:52:cc:3d:23: 3a:1e:47:4b:e0:d0:21:6d:1d:03:2d:c8:21:d4:e6:19:de:f2: 02:e6:f6:ea:7a:b5:d7:27:ce:77:8f:b7:54:8b:6c:44:7f:de: 7a:53:81:3b:98:98:79:88:a5:55:a7:db:25:d7:d4:a4:f3:30: 30:38:03:f4:62:52:27:1c:ce:1c:9e:92:e4:12:22:ae:df:99: 0f:5b:7f:5d -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/hQ4aABjY0AfpNAcnPyQVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMDUzMmU4ZmRhNGIyN2E1NjE1YWViYjhkN2ZkMGZjYWZh OWY2MTAwHhcNMjYwMTAyMTYyMzA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWIwZDEwYjIxOTMzNGYxZjZmMzQ5ZjIzZDY1MjM0MDU5NzE1ZjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK+8ygRfjB2T7PcTraqsWxsjq/4w mcabTkJLCFIIbjaJgdHDAz0kqOiHnorT+YXcAG+mSXkeHpSi2YXhO4wOfnP8jh2n worPL4RHemj5d7ZNLGg4OhFTOpsW1MGTNmkPfpM5V5Ctysu3TztdqDvsO8qbcDsn mTLmZ2iApwMhT6hGAo7/0kGylWOkR5NBQPvUNq/map8xkNWvAYE6xIc/5PKRYgqP EBZ02jdIbJbQ7YBy36XybdAC+zvU31kOKSb3IQ2vc00AQBbmwn4/UMQdb7wLJgLC ynCEZfRJvS121Ct3476KKEVKzQw6hR+DHxvlcWzaAdaLTE0K83ZIZCg3UQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFLmw0QshkzTx9vNJ8j1lI0BZcV8KMB8GA1UdIwQY MBaAFFoFMuj9pLJ6VhWuu41/0PyvqfYQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2dVeTZQMmtzbnBXRmE2N2pYX1FfSy1wOWhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iMjY2YmItMWEzZC00ZTQ5LTg1N2Mt ZWYzODkxNGE4YWIwLzEvdWJEUkN5R1ROUEgyODBueVBXVWpRRmx4WHdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9iMjY2YmItMWEzZC00ZTQ5LTg1N2MtZWYzODkxNGE4YWIw LzEvV2dVeTZQMmtzbnBXRmE2N2pYX1FfSy1wOWhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCudcoAwQB wf7WAwQF1SIgMA0EAgACMAcDBQMqBMWAMA0GCSqGSIb3DQEBCwUAA4IBAQAfhQvx UZSKzMGwxKDkGzAIzFQffsu0eDAHDbYbMG/GtEzLaytRRSh426HQRD4BS0LP5JUT SjWGKj4MowQjRrfQSyR9X7WGmlP83syvEstmjY8pm7Wf6BBLoGB5lbSCZw/2FjNP E0iWcWvtm8XNjhDnO7EaHosjGCAebpnWvnAN5sZ8YVnBtsJIFIfanB7kZvZIxx0L s7vOEDEGx7I6zZ6F+JT9kbomrcEh3I5u2VQGTlLMPSM6HkdL4NAhbR0DLcgh1OYZ 3vIC5vbqerXXJ853j7dUi2xEf956U4E7mJh5iKVVp9sl19Sk8zAwOAP0YlInHM4c npLkEiKu35kPW39d -----END CERTIFICATE-----Generated at Tue Jan 27 05:32:35 2026 by rpki-client