This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/ubRPeeTkxSUpNxitZEengxfbjho.roa File: ubRPeeTkxSUpNxitZEengxfbjho.roa (raw, json) Hash identifier: fMSmAi5k6+uYv96mJ7QxgFHbu3bUfoKt8MD+l7YHLTM= Subject key identifier: B9:B4:4F:79:E4:E4:C5:25:29:37:18:AD:64:47:A7:83:17:DB:8E:1A Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728 Certificate serial: 019B76EB8244D89018A048822EECCBD2C81E Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/ubRPeeTkxSUpNxitZEengxfbjho.roa Signing time: Thu 01 Jan 2026 00:18:24 +0000 ROA not before: Thu 01 Jan 2026 00:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203625 IP address blocks: 185.129.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:82:44:d8:90:18:a0:48:82:2e:ec:cb:d2:c8:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7844abef711c232c84f83c807a420af3804728 Validity Not Before: Jan 1 00:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9b44f79e4e4c525293718ad6447a78317db8e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f8:1b:8e:08:9f:2d:8a:4c:8b:15:7f:08:6f: 76:79:5c:47:ab:bb:64:a1:e9:c8:b2:96:6a:f3:fc: 89:18:41:f9:b5:94:7a:94:9f:a2:46:fd:0c:e6:b7: 44:25:c5:9b:9d:9c:3d:a9:02:d8:3e:e5:c9:b0:dd: b9:02:37:0c:df:d1:b1:c6:c9:71:6c:d0:2a:60:24: c4:0d:25:c4:90:1b:c6:86:9c:0f:18:08:4b:10:99: 14:e2:88:51:fa:d0:c5:ac:65:f4:50:74:d3:49:84: d1:5d:32:2c:95:dc:19:a7:2c:27:a7:3f:0c:ae:cf: 8e:c0:ae:30:07:c1:67:b3:1b:a8:47:fb:f5:48:3a: 90:50:bf:95:dd:9d:79:ba:fe:72:2d:f4:d8:0c:cc: ca:36:2e:bb:77:92:f1:38:7d:99:f9:80:4f:d5:33: d8:db:f9:fc:79:2e:67:4c:b5:2f:04:c5:ad:6c:cb: af:92:0e:5e:0a:97:4c:ee:d7:90:e9:6f:00:bc:c8: 55:c7:09:9b:83:76:e0:72:0b:d0:1a:ad:02:70:14: 98:1c:f2:6f:1b:9e:76:7c:99:25:b9:ca:88:c1:12: 84:1a:9e:d4:39:06:62:94:44:99:55:ab:40:7f:31: cd:51:9f:34:a5:03:15:0b:fd:8b:14:84:b5:f2:65: c3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B4:4F:79:E4:E4:C5:25:29:37:18:AD:64:47:A7:83:17:DB:8E:1A X509v3 Authority Key Identifier: keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/ubRPeeTkxSUpNxitZEengxfbjho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.129.24.0/22 Signature Algorithm: sha256WithRSAEncryption bb:4c:d3:6a:3d:ed:7e:ae:73:da:e0:11:ac:5b:25:f5:45:70: 28:49:04:c5:3a:3c:50:29:e7:f9:3e:43:4d:00:54:e7:6a:2f: d3:84:c2:da:59:7b:32:9c:7e:b6:b9:2d:ac:13:57:46:2b:c5: 91:02:d2:45:b7:63:84:c4:bd:db:ea:0d:6a:b9:78:c5:e3:91: 38:b3:60:7c:68:b4:7d:62:ed:43:9a:e0:ae:f6:47:84:1a:db: 68:72:10:7f:b3:6b:63:8e:07:d2:ae:6e:c5:6c:d5:0a:25:99: 49:65:d8:74:6e:4d:75:67:18:59:b7:6c:bd:08:be:11:2f:d3: aa:2d:32:98:42:ec:e6:ec:ae:8b:e9:a7:2f:fe:94:a6:c6:b1: b3:94:c0:18:ea:28:ae:8c:48:f2:e0:b4:50:ff:62:06:5e:23: 0b:83:94:a3:7a:a1:d3:a2:26:d0:a5:22:5e:00:93:f4:2b:c7: fc:f4:d9:9b:9c:87:01:79:7e:87:6f:eb:a7:cf:ce:00:4a:11: fc:0e:af:c3:7b:74:04:a0:0a:35:21:1c:a3:ff:31:87:9d:29: e0:f4:93:a0:0c:b8:86:b9:aa:71:8b:56:4b:ad:85:95:bb:a3: 27:60:c5:8c:55:74:56:d0:a9:9c:76:e3:5e:e6:34:43:87:93: cf:ac:5f:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264JE2JAYoEiCLuzL0sgeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4 MDQ3MjgwHhcNMjYwMTAxMDAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWI0NGY3OWU0ZTRjNTI1MjkzNzE4YWQ2NDQ3YTc4MzE3ZGI4ZTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/gbjgifLYpMixV/CG92eVxHq7tk oenIspZq8/yJGEH5tZR6lJ+iRv0M5rdEJcWbnZw9qQLYPuXJsN25AjcM39Gxxslx bNAqYCTEDSXEkBvGhpwPGAhLEJkU4ohR+tDFrGX0UHTTSYTRXTIsldwZpywnpz8M rs+OwK4wB8FnsxuoR/v1SDqQUL+V3Z15uv5yLfTYDMzKNi67d5LxOH2Z+YBP1TPY 2/n8eS5nTLUvBMWtbMuvkg5eCpdM7teQ6W8AvMhVxwmbg3bgcgvQGq0CcBSYHPJv G552fJklucqIwRKEGp7UOQZilESZVatAfzHNUZ80pQMVC/2LFIS18mXDiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLm0T3nk5MUlKTcYrWRHp4MX244aMB8GA1UdIwQY MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt ZGFiNmI4M2NmN2VjLzEvdWJSUGVlVGt4U1VwTnhpdFpFZW5neGZiamhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYEYMA0G CSqGSIb3DQEBCwUAA4IBAQC7TNNqPe1+rnPa4BGsWyX1RXAoSQTFOjxQKef5PkNN AFTnai/ThMLaWXsynH62uS2sE1dGK8WRAtJFt2OExL3b6g1quXjF45E4s2B8aLR9 Yu1DmuCu9keEGttochB/s2tjjgfSrm7FbNUKJZlJZdh0bk11ZxhZt2y9CL4RL9Oq LTKYQuzm7K6L6acv/pSmxrGzlMAY6iiujEjy4LRQ/2IGXiMLg5SjeqHToibQpSJe AJP0K8f89NmbnIcBeX6Hb+unz84AShH8Dq/De3QEoAo1IRyj/zGHnSng9JOgDLiG uapxi1ZLrYWVu6MnYMWMVXRW0KmcduNe5jRDh5PPrF/i -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:05 2026 by rpki-client