This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/UBCKv_WWXY7T8US1FqPcXNJVmjg.roa File: UBCKv_WWXY7T8US1FqPcXNJVmjg.roa (raw, json) Hash identifier: R7LskYqdTLN1UcYPAtGnZ+S1OveE97ZJ0efnayhth/g= Subject key identifier: 50:10:8A:BF:F5:96:5D:8E:D3:F1:44:B5:16:A3:DC:5C:D2:55:9A:38 Certificate issuer: /CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324 Certificate serial: 019B7CEE7031D1769ECBD010F332B1C0ADC9 Authority key identifier: 1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/UBCKv_WWXY7T8US1FqPcXNJVmjg.roa Signing time: Fri 02 Jan 2026 04:19:19 +0000 ROA not before: Fri 02 Jan 2026 04:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25540 IP address blocks: 91.220.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:70:31:d1:76:9e:cb:d0:10:f3:32:b1:c0:ad:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324 Validity Not Before: Jan 2 04:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50108abff5965d8ed3f144b516a3dc5cd2559a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a9:f7:91:b7:68:fe:22:96:c5:92:9c:9a:49: 98:60:3f:36:3b:2d:f6:ae:ef:a5:89:66:96:b1:74: 87:42:6f:44:93:a8:70:18:e5:f9:12:38:1f:a4:58: 10:71:37:5e:a5:64:ef:73:ea:80:3d:a3:54:f1:75: e8:61:5d:e9:3d:f3:aa:cf:82:85:2c:ec:e8:0d:aa: 43:79:48:c1:56:cc:c6:ee:80:3d:7c:59:d1:12:01: c8:88:1f:38:4f:0f:bc:82:06:59:c7:62:f6:4a:fc: 3c:bc:8f:1f:57:fb:40:05:44:21:c5:c3:24:43:07: 6f:66:cb:fc:0b:d5:0f:ef:f0:e5:52:27:51:74:2c: 5c:0a:42:d7:5b:21:82:26:a7:bc:13:bc:32:39:e0: e7:6e:64:4e:d3:d3:e0:74:3c:0a:46:5b:a5:45:59: e5:72:20:93:0a:30:b3:d9:aa:a3:5c:97:83:a1:8f: ca:5b:19:10:8b:10:24:75:35:de:b7:a4:1e:8e:86: b3:49:49:4a:03:62:6f:08:e8:57:0d:d5:48:89:20: 18:1f:6f:b9:ba:71:c3:58:22:b4:5b:59:ed:9e:5e: e6:97:ae:d3:66:38:83:c7:7c:2d:90:70:62:e0:9d: e3:5a:e8:dc:0f:82:b1:e7:55:63:f7:a3:e8:93:c4: 7f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:10:8A:BF:F5:96:5D:8E:D3:F1:44:B5:16:A3:DC:5C:D2:55:9A:38 X509v3 Authority Key Identifier: keyid:1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/UBCKv_WWXY7T8US1FqPcXNJVmjg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.116.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:40:d6:d3:7b:b6:44:14:77:e1:5d:28:2b:35:7a:97:2c:72: 86:c9:f4:a2:e8:72:b2:e1:af:04:7d:4e:af:82:20:ed:c5:d8: 91:18:c3:48:dc:a9:a1:e4:c8:6f:b4:c1:92:4e:de:96:d1:e3: 9d:f4:5d:6a:3d:47:d8:45:f2:4d:52:76:91:bf:58:33:16:18: 40:e0:a1:3c:3c:f3:fc:c3:3e:99:65:97:56:e5:8b:07:90:83: 82:f5:a3:f3:90:32:79:0a:a9:75:62:87:72:48:f9:b5:b7:e6: 18:77:bb:dd:06:f9:74:22:b9:2e:bf:dc:f7:c5:f3:06:45:3a: 09:a1:65:68:58:4c:34:04:8e:d3:d4:93:10:db:83:68:85:65: 67:2a:ca:5e:33:bd:00:31:5b:60:2e:79:9a:ca:92:80:a8:0f: bc:e0:fc:59:95:e6:31:3f:b9:df:ca:5a:31:93:8f:4c:ab:e6: b4:eb:8e:8d:ac:46:f4:98:f6:5a:3c:b0:21:49:51:19:a7:cb: 18:d1:76:37:44:17:22:2a:00:04:60:fb:f1:23:70:51:07:4c: 4a:47:02:8f:7b:22:0a:e5:80:f6:73:2b:5b:59:bb:6d:b3:2d: f4:bd:73:0a:2b:ff:1e:b1:17:d5:0a:b0:a6:26:9b:02:e5:37: 3c:17:da:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87nAx0Xaey9AQ8zKxwK3JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmOWZmZDhlZTMyYjNlMzU3OTc4ZDljYjk5MjE2Y2NlODEz N2EzMjQwHhcNMjYwMTAyMDQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDEwOGFiZmY1OTY1ZDhlZDNmMTQ0YjUxNmEzZGM1Y2QyNTU5YTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6n3kbdo/iKWxZKcmkmYYD82Oy32 ru+liWaWsXSHQm9Ek6hwGOX5EjgfpFgQcTdepWTvc+qAPaNU8XXoYV3pPfOqz4KF LOzoDapDeUjBVszG7oA9fFnREgHIiB84Tw+8ggZZx2L2Svw8vI8fV/tABUQhxcMk QwdvZsv8C9UP7/DlUidRdCxcCkLXWyGCJqe8E7wyOeDnbmRO09PgdDwKRlulRVnl ciCTCjCz2aqjXJeDoY/KWxkQixAkdTXet6QejoazSUlKA2JvCOhXDdVIiSAYH2+5 unHDWCK0W1ntnl7ml67TZjiDx3wtkHBi4J3jWujcD4Kx51Vj96Pok8R/DQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFAQir/1ll2O0/FEtRaj3FzSVZo4MB8GA1UdIwQY MBaAFB+f/Y7jKz41eXjZy5khbM6BN6MkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wM2ZmZDAtN2U4Yi00M2ZlLThlZWUt YWFlNjM4ZGJiMWMxLzEvVUJDS3ZfV1dYWTdUOFVTMUZxUGNYTkpWbWpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8wM2ZmZDAtN2U4Yi00M2ZlLThlZWUtYWFlNjM4ZGJiMWMx LzEvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9x0MA0G CSqGSIb3DQEBCwUAA4IBAQCaQNbTe7ZEFHfhXSgrNXqXLHKGyfSi6HKy4a8EfU6v giDtxdiRGMNI3Kmh5MhvtMGSTt6W0eOd9F1qPUfYRfJNUnaRv1gzFhhA4KE8PPP8 wz6ZZZdW5YsHkIOC9aPzkDJ5Cql1YodySPm1t+YYd7vdBvl0Irkuv9z3xfMGRToJ oWVoWEw0BI7T1JMQ24NohWVnKspeM70AMVtgLnmaypKAqA+84PxZleYxP7nfylox k49Mq+a0646NrEb0mPZaPLAhSVEZp8sY0XY3RBciKgAEYPvxI3BRB0xKRwKPeyIK 5YD2cytbWbttsy30vXMKK/8esRfVCrCmJpsC5Tc8F9rI -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:17 2026 by rpki-client