This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/UBa5jx_ljBddT4tcu2z4LiFhOrk.roa
File: UBa5jx_ljBddT4tcu2z4LiFhOrk.roa (raw, json)
Hash identifier: zIhepUpUWuaAk7nANePm+39a2QbrU+z3WqdtyUCFmrk=
Subject key identifier: 50:16:B9:8F:1F:E5:8C:17:5D:4F:8B:5C:BB:6C:F8:2E:21:61:3A:B9
Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial: 019B790FF80701106DC2278563A0D3E636C3
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/UBa5jx_ljBddT4tcu2z4LiFhOrk.roa
Signing time: Thu 01 Jan 2026 10:17:28 +0000
ROA not before: Thu 01 Jan 2026 10:17:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201518
IP address blocks: 46.21.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:0f:f8:07:01:10:6d:c2:27:85:63:a0:d3:e6:36:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Validity
Not Before: Jan 1 10:17:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5016b98f1fe58c175d4f8b5cbb6cf82e21613ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:63:10:47:fc:cb:39:5d:ef:dc:40:28:3a:2d:
07:0e:a0:72:28:27:26:d4:f0:90:2c:35:7f:2d:eb:
62:4f:06:86:b6:31:0e:9a:d1:a8:f7:a5:72:3b:01:
8b:cf:47:1b:4f:73:b7:7a:84:bc:c0:bc:b0:8d:8e:
a7:15:7f:78:17:9b:72:4f:6e:b5:5c:d1:0d:76:26:
16:2d:69:2d:b8:0c:f2:fe:e0:21:c5:9d:05:84:9f:
20:fd:dd:b0:65:56:70:f2:40:91:be:15:9a:38:a1:
7e:75:54:17:af:98:d6:38:bf:dc:ca:6d:1a:41:ef:
10:91:d7:43:25:1f:e8:f7:dc:41:06:32:1a:8b:34:
b5:f7:a4:b4:06:9f:3f:32:0b:7c:35:48:4d:b8:cd:
39:16:ce:dd:47:86:89:75:e1:0d:76:c3:3f:e5:96:
9f:87:79:d0:3d:eb:bc:b8:44:e9:2f:ab:a3:41:5f:
15:4c:b1:3a:95:ba:c2:64:1b:87:1e:9d:31:e4:42:
e2:47:7a:05:de:44:25:bb:ea:f6:9a:22:d5:35:4b:
fe:39:8c:e4:31:1a:d7:19:1b:66:f2:10:bb:95:8e:
79:a0:08:3d:fe:2d:19:dc:7c:08:b4:7e:ca:53:3f:
09:04:1a:eb:0c:5a:22:27:c4:fe:4c:5c:da:66:ab:
c8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:16:B9:8F:1F:E5:8C:17:5D:4F:8B:5C:BB:6C:F8:2E:21:61:3A:B9
X509v3 Authority Key Identifier:
keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/UBa5jx_ljBddT4tcu2z4LiFhOrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.16.0/22
Signature Algorithm: sha256WithRSAEncryption
02:49:9b:04:4f:f7:56:78:d1:80:7b:22:71:d3:31:91:c1:72:
5f:e4:ca:ec:24:d4:f1:54:a3:56:c8:de:b8:2c:e6:44:71:5f:
74:f5:74:42:f9:d6:1f:74:e0:a4:7f:da:dc:7a:3c:6d:d9:f3:
4e:1d:4c:c3:5b:ee:42:89:bf:29:f4:9c:ac:db:b8:21:50:a3:
10:d3:fd:c4:a6:53:5c:a0:43:68:61:0d:d8:13:e4:41:60:8c:
c3:84:b8:64:d8:63:d2:db:8e:8e:54:4e:96:28:ef:f2:fa:07:
4d:30:c1:eb:8a:4a:25:d1:34:21:92:bc:d7:f4:97:c5:22:2a:
fb:ba:f2:25:3a:54:f8:1f:99:0d:71:ef:b1:14:5a:e5:17:22:
d6:cf:b4:cc:15:bd:7f:0c:4c:2e:0c:e2:10:f7:74:57:32:29:
36:86:18:b5:97:f4:48:78:d0:ef:09:86:46:24:22:72:81:62:
1c:03:47:b2:8e:fd:5b:2f:01:01:11:b4:38:55:9f:4b:1a:24:
dc:19:57:7b:88:44:83:82:9c:80:29:ed:47:a5:ee:5e:48:02:
95:9c:1d:c6:a7:78:9f:32:35:8e:7f:70:41:38:b5:a8:12:8c:
df:83:e4:f1:5e:d4:9d:58:1e:1e:6b:d0:14:4b:45:b1:6e:fa:
45:49:31:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:40:22 2026 by rpki-client