This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/ubWTx4s1XitX6PHQT8bII0Sr8VA.roa File: ubWTx4s1XitX6PHQT8bII0Sr8VA.roa (raw, json) Hash identifier: OkiBE/NUzkKV+xXfw7sua6AgcBbcZ2vjT39S06HxuOw= Subject key identifier: B9:B5:93:C7:8B:35:5E:2B:57:E8:F1:D0:4F:C6:C8:23:44:AB:F1:50 Certificate issuer: /CN=5b5bff9d41f719f62600c32d3410ddb99eccb30c Certificate serial: 019B7910C541A09275F5E362DC7C93D4EC88 Authority key identifier: 5B:5B:FF:9D:41:F7:19:F6:26:00:C3:2D:34:10:DD:B9:9E:CC:B3:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1v_nUH3GfYmAMMtNBDduZ7Msww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/ubWTx4s1XitX6PHQT8bII0Sr8VA.roa Signing time: Thu 01 Jan 2026 10:18:20 +0000 ROA not before: Thu 01 Jan 2026 10:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25228 IP address blocks: 78.138.4.0/22 maxlen: 22 78.138.36.0/22 maxlen: 22 83.229.52.0/22 maxlen: 22 83.229.100.0/24 maxlen: 24 83.229.101.0/24 maxlen: 24 83.229.102.0/24 maxlen: 24 185.115.108.0/22 maxlen: 22 213.255.212.0/22 maxlen: 22 213.255.220.0/22 maxlen: 22 213.255.232.0/22 maxlen: 22 213.255.236.0/22 maxlen: 22 213.255.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.crl rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft rsync://rpki.ripe.net/repository/DEFAULT/W1v_nUH3GfYmAMMtNBDduZ7Msww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c5:41:a0:92:75:f5:e3:62:dc:7c:93:d4:ec:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b5bff9d41f719f62600c32d3410ddb99eccb30c Validity Not Before: Jan 1 10:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9b593c78b355e2b57e8f1d04fc6c82344abf150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fd:60:fc:c5:b9:8e:31:36:c4:df:27:d5:04: ce:14:1c:62:f9:0c:06:4a:62:07:f9:9f:7b:a9:07: 9d:eb:86:4b:df:67:26:0e:9c:a7:96:8e:7f:63:89: 65:f9:4f:a0:b9:c8:aa:b6:3d:9b:6b:d2:64:41:90: 0f:f6:fb:d0:19:69:a5:1d:e3:1b:6f:b4:9b:a0:05: a2:2a:fb:59:c2:b8:4c:90:e5:f0:2d:9a:80:80:1e: 47:46:f4:2a:53:21:4d:cd:2a:6b:cc:80:09:50:65: b2:96:cf:b6:b5:f7:f5:7a:71:51:58:69:e3:72:15: 9d:39:6e:44:f7:0f:aa:13:6b:e2:81:7b:0b:7d:26: be:2b:ee:dd:55:46:2d:e8:04:51:4f:e8:8d:28:3b: c9:65:76:a0:60:fc:8c:8c:f0:8f:8a:99:49:0e:8d: 6d:e9:7b:8a:5a:63:67:00:76:5d:c5:80:8b:41:f4: ee:a6:86:20:1c:81:b5:ea:a2:92:18:b3:d3:70:69: 0a:37:32:e6:0b:78:7a:15:29:d6:b8:8e:9e:f3:ef: f8:4a:6b:c1:00:bc:b1:06:66:5b:1b:de:72:36:ad: 02:43:9c:1c:e6:12:57:6d:78:1c:34:67:ba:d7:b5: a4:f2:0f:50:d8:b1:c8:c6:16:17:22:67:ff:f3:c0: e4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B5:93:C7:8B:35:5E:2B:57:E8:F1:D0:4F:C6:C8:23:44:AB:F1:50 X509v3 Authority Key Identifier: keyid:5B:5B:FF:9D:41:F7:19:F6:26:00:C3:2D:34:10:DD:B9:9E:CC:B3:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1v_nUH3GfYmAMMtNBDduZ7Msww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/ubWTx4s1XitX6PHQT8bII0Sr8VA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.138.4.0/22 78.138.36.0/22 83.229.52.0/22 83.229.100.0-83.229.102.255 185.115.108.0/22 213.255.212.0/22 213.255.220.0/22 213.255.232.0/21 213.255.252.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:55:4d:f5:64:c9:50:c0:af:52:d7:db:0f:ba:05:4b:65:1d: cc:aa:3d:2b:ed:6f:ee:f1:3c:88:9c:63:42:61:87:53:22:f8: 55:56:5b:05:c2:a7:ef:2d:c4:8e:78:6b:16:61:13:89:b0:dd: aa:3d:24:ff:90:79:62:c8:eb:29:49:96:64:76:a3:70:69:f3: a0:66:24:e3:e0:92:f5:31:f9:33:a3:89:4f:a4:22:a2:53:cf: b3:86:78:1f:23:af:a5:6a:3d:64:3e:11:b1:1c:0f:43:ae:42: ec:0c:42:0e:35:d6:88:8c:f2:1b:b1:78:c4:d5:62:09:af:15: 50:29:06:e8:93:5c:20:78:14:61:f0:44:37:a7:6b:3e:87:71: c3:0c:6c:64:5f:3f:5c:c9:b4:85:e3:a8:66:f2:85:4e:e5:f7: c3:78:08:da:6e:77:ab:5e:3e:27:de:e8:3a:0e:80:86:0f:a9: d8:db:36:a2:2c:ea:b9:f4:df:33:51:09:64:ee:f8:b0:11:d7: e6:7a:8f:90:70:c2:7b:a0:f3:d5:c6:f7:b1:56:40:4f:95:c4: 20:a2:7d:7c:74:a5:bc:bd:81:cd:0f:3b:e0:29:84:fb:49:c6: 81:a1:a7:80:66:4c:17:64:68:67:7e:b7:f8:af:95:18:4c:30: b0:f7:70:62 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZt5EMVBoJJ19eNi3HyT1OyIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNWJmZjlkNDFmNzE5ZjYyNjAwYzMyZDM0MTBkZGI5OWVj Y2IzMGMwHhcNMjYwMTAxMTAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWI1OTNjNzhiMzU1ZTJiNTdlOGYxZDA0ZmM2YzgyMzQ0YWJmMTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf1g/MW5jjE2xN8n1QTOFBxi+QwG SmIH+Z97qQed64ZL32cmDpynlo5/Y4ll+U+guciqtj2ba9JkQZAP9vvQGWmlHeMb b7SboAWiKvtZwrhMkOXwLZqAgB5HRvQqUyFNzSprzIAJUGWyls+2tff1enFRWGnj chWdOW5E9w+qE2vigXsLfSa+K+7dVUYt6ARRT+iNKDvJZXagYPyMjPCPiplJDo1t 6XuKWmNnAHZdxYCLQfTupoYgHIG16qKSGLPTcGkKNzLmC3h6FSnWuI6e8+/4SmvB ALyxBmZbG95yNq0CQ5wc5hJXbXgcNGe617Wk8g9Q2LHIxhYXImf/88DkswIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFLm1k8eLNV4rV+jx0E/GyCNEq/FQMB8GA1UdIwQY MBaAFFtb/51B9xn2JgDDLTQQ3bmezLMMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzF2X25VSDNHZlltQU1NdE5CRGR1WjdNc3d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi80ZjQzZmMtNDE4Ny00YmI5LTkwNWEt ZjBjNjI1OGI5YTA0LzEvdWJXVHg0czFYaXRYNlBIUVQ4YklJMFNyOFZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi80ZjQzZmMtNDE4Ny00YmI5LTkwNWEtZjBjNjI1OGI5YTA0 LzEvVzF2X25VSDNHZlltQU1NdE5CRGR1WjdNc3d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQCTooEAwQC TookAwQCU+U0MAwDBAJT5WQDBABT5WYDBAK5c2wDBALV/9QDBALV/9wDBAPV/+gD BALV//wwDQYJKoZIhvcNAQELBQADggEBABpVTfVkyVDAr1LX2w+6BUtlHcyqPSvt b+7xPIicY0Jhh1Mi+FVWWwXCp+8txI54axZhE4mw3ao9JP+QeWLI6ylJlmR2o3Bp 86BmJOPgkvUx+TOjiU+kIqJTz7OGeB8jr6VqPWQ+EbEcD0OuQuwMQg411oiM8hux eMTVYgmvFVApBuiTXCB4FGHwRDenaz6HccMMbGRfP1zJtIXjqGbyhU7l98N4CNpu d6tePife6DoOgIYPqdjbNqIs6rn03zNRCWTu+LAR1+Z6j5Bwwnug89XG97FWQE+V xCCifXx0pby9gc0PO+AphPtJxoGhp4BmTBdkaGd+t/ivlRhMMLD3cGI= -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:27 2026 by rpki-client