This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/Cubk-pypphbHurcpN8gQO24aPmo.roa File: Cubk-pypphbHurcpN8gQO24aPmo.roa (raw, json) Hash identifier: Z2Jn9OBEvax0qfjF47zSpr0jFX8NKPgGYlL3wHse5A4= Subject key identifier: 0A:E6:E4:FA:9C:A9:A6:16:C7:BA:B7:29:37:C8:10:3B:6E:1A:3E:6A Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Certificate serial: 019B7C7F52DE0A56CD4E52828F23E85081AE Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/Cubk-pypphbHurcpN8gQO24aPmo.roa Signing time: Fri 02 Jan 2026 02:17:57 +0000 ROA not before: Fri 02 Jan 2026 02:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35491 IP address blocks: 2001:1a68:15::/48 maxlen: 48 2001:1a68:15::/64 maxlen: 64 2001:1a68:15:1::/64 maxlen: 64 2001:1a68:15:254::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:52:de:0a:56:cd:4e:52:82:8f:23:e8:50:81:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Validity Not Before: Jan 2 02:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ae6e4fa9ca9a616c7bab72937c8103b6e1a3e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:79:e4:48:6f:90:1f:4d:d9:f4:22:22:4e:6f: a2:d4:70:76:5b:2c:b2:0c:30:2b:6d:3b:e9:a0:97: 4f:21:54:90:48:b9:36:79:90:c0:28:3b:25:74:12: e9:83:e3:03:e7:ac:fb:25:80:c0:97:08:ce:0e:dd: 0e:8f:db:71:a9:43:6b:1f:25:95:83:74:52:ea:7b: 1e:20:b8:5f:e1:0a:81:b8:4a:8b:cf:28:81:c6:0e: de:08:c1:48:bb:4d:1d:17:7b:90:16:f9:c3:37:4d: c9:47:4a:66:ef:ed:8b:27:1e:61:e8:e0:e6:44:0c: f9:a5:0f:7f:fa:f5:eb:3f:43:5f:0c:6c:94:89:ac: b6:ce:f4:6f:74:c9:88:04:3a:04:a0:c6:28:58:03: 49:49:2b:9e:5c:b0:53:0e:38:89:fb:75:b0:20:2c: fa:07:92:6e:ed:bd:b6:91:1b:f0:4a:c3:5d:86:65: 96:56:e2:a0:23:c2:78:44:88:80:73:7f:a9:b6:f9: 19:19:80:61:23:10:15:7d:90:e7:e2:14:48:a8:61: a4:c0:b0:6a:df:c9:25:6c:e2:c0:01:36:e8:e1:c5: 4b:29:29:c0:3c:a4:d5:33:03:56:41:4d:ab:fc:c3: 65:75:51:4a:f9:e5:36:af:3f:1a:06:68:ee:d5:cc: 46:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E6:E4:FA:9C:A9:A6:16:C7:BA:B7:29:37:C8:10:3B:6E:1A:3E:6A X509v3 Authority Key Identifier: keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/Cubk-pypphbHurcpN8gQO24aPmo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:1a68:15::/48 Signature Algorithm: sha256WithRSAEncryption 7e:52:35:66:70:61:2e:7e:81:0a:c4:f3:87:cc:80:08:9c:2c: a1:0e:f1:a8:5a:8a:e9:f8:f3:ba:8f:9c:cf:eb:a9:75:f0:f8: 6b:6c:65:56:10:19:5b:0e:d2:c4:03:ad:21:2e:61:ae:22:79: eb:f7:38:41:d7:e1:28:7b:8e:72:de:a3:5e:ea:4a:05:cb:d4: bb:e5:ae:66:b5:92:2a:3d:bb:f9:3a:7e:3f:15:40:b6:a8:09: 0e:14:57:00:e8:b5:dd:a0:26:7c:b1:67:e9:0e:02:4c:25:01: 67:29:5d:56:ef:3c:b9:27:4d:34:05:54:f8:39:25:09:d5:b1: 0b:b3:2f:6c:53:a3:38:64:1c:5b:14:51:63:d8:35:e0:61:13: 21:01:c6:57:8f:95:d7:8f:a4:b9:38:81:a9:70:7e:46:97:0d: ba:51:53:19:da:f2:83:06:db:06:69:07:cd:90:22:05:4e:22: b6:b2:02:e4:cc:00:b6:29:66:87:88:e1:0c:84:b7:8c:1b:fc: 79:4f:24:22:01:76:06:73:db:67:23:e6:d0:91:a5:87:14:32: 84:ef:fb:d8:0f:3b:8d:00:3a:ba:85:87:60:4d:54:e4:86:c0: 15:40:f8:ac:fc:44:85:c7:33:bf:7f:6b:52:24:74:94:1b:90: c7:27:c0:99 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8f1LeClbNTlKCjyPoUIGuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz MzBjNWIwHhcNMjYwMTAyMDIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWU2ZTRmYTljYTlhNjE2YzdiYWI3MjkzN2M4MTAzYjZlMWEzZTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHnkSG+QH03Z9CIiTm+i1HB2Wyyy DDArbTvpoJdPIVSQSLk2eZDAKDsldBLpg+MD56z7JYDAlwjODt0Oj9txqUNrHyWV g3RS6nseILhf4QqBuEqLzyiBxg7eCMFIu00dF3uQFvnDN03JR0pm7+2LJx5h6ODm RAz5pQ9/+vXrP0NfDGyUiay2zvRvdMmIBDoEoMYoWANJSSueXLBTDjiJ+3WwICz6 B5Ju7b22kRvwSsNdhmWWVuKgI8J4RIiAc3+ptvkZGYBhIxAVfZDn4hRIqGGkwLBq 38klbOLAATbo4cVLKSnAPKTVMwNWQU2r/MNldVFK+eU2rz8aBmju1cxGmQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFArm5PqcqaYWx7q3KTfIEDtuGj5qMB8GA1UdIwQY MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt NWQ2NjVlOTk4ZjZhLzEvQ3Viay1weXBwaGJIdXJjcE44Z1FPMjRhUG1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEaaAAV MA0GCSqGSIb3DQEBCwUAA4IBAQB+UjVmcGEufoEKxPOHzIAInCyhDvGoWorp+PO6 j5zP66l18PhrbGVWEBlbDtLEA60hLmGuInnr9zhB1+Eoe45y3qNe6koFy9S75a5m tZIqPbv5On4/FUC2qAkOFFcA6LXdoCZ8sWfpDgJMJQFnKV1W7zy5J000BVT4OSUJ 1bELsy9sU6M4ZBxbFFFj2DXgYRMhAcZXj5XXj6S5OIGpcH5Glw26UVMZ2vKDBtsG aQfNkCIFTiK2sgLkzAC2KWaHiOEMhLeMG/x5TyQiAXYGc9tnI+bQkaWHFDKE7/vY DzuNADq6hYdgTVTkhsAVQPis/ESFxzO/f2tSJHSUG5DHJ8CZ -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:02 2026 by rpki-client