This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/ub5Gbn-YsJ-NB5WNKq2Bt_YSsCA.roa File: ub5Gbn-YsJ-NB5WNKq2Bt_YSsCA.roa (raw, json) Hash identifier: 1K2JkD0zvoEdDQMkDBZtkD/kPzcmNeVAmBs9rlyU3HQ= Subject key identifier: B9:BE:46:6E:7F:98:B0:9F:8D:07:95:8D:2A:AD:81:B7:F6:12:B0:20 Certificate issuer: /CN=5bf5bda583652e0587fef84166b41f6cda8f1f78 Certificate serial: 019B7C80B6BA63EB50ADB2EB752605DD0684 Authority key identifier: 5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/ub5Gbn-YsJ-NB5WNKq2Bt_YSsCA.roa Signing time: Fri 02 Jan 2026 02:19:28 +0000 ROA not before: Fri 02 Jan 2026 02:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 2a09:a380:100::/40 maxlen: 40 2a09:a380:200::/40 maxlen: 40 2a09:a380:300::/40 maxlen: 40 2a09:a380:400::/40 maxlen: 40 2a09:a380:500::/40 maxlen: 40 2a09:a380:600::/40 maxlen: 40 2a09:a380:700::/40 maxlen: 40 2a09:a380:800::/40 maxlen: 40 2a09:a380:900::/40 maxlen: 40 2a09:a380:a00::/40 maxlen: 40 2a09:a380:b00::/40 maxlen: 40 2a09:a380:c00::/40 maxlen: 40 2a09:a380:d00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b6:ba:63:eb:50:ad:b2:eb:75:26:05:dd:06:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bf5bda583652e0587fef84166b41f6cda8f1f78 Validity Not Before: Jan 2 02:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9be466e7f98b09f8d07958d2aad81b7f612b020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b4:03:c9:37:fc:4a:7c:84:30:5e:4d:85:d1: b1:d7:a5:3f:4a:58:5e:00:ab:3e:54:2c:53:11:12: 35:e4:0a:b6:fa:b8:e4:f7:d6:ab:5e:ce:98:95:e7: 79:df:89:88:e9:d0:06:3e:09:03:ae:b4:24:c5:a2: 87:99:30:96:e7:91:e9:ff:67:c5:02:4a:10:63:21: 53:69:53:81:46:67:5e:41:0f:9d:78:92:66:82:ef: ef:d9:69:1f:0a:1f:83:a9:d2:c2:9d:ab:77:4a:69: 4e:cb:6a:78:d1:14:1a:90:97:32:33:72:8b:4c:0f: 5b:f0:9b:b3:04:05:9d:63:80:05:54:4e:bc:cb:d1: 50:dc:3d:ce:e2:d2:01:45:0f:16:83:cd:2b:d8:0f: 06:5e:21:04:ea:8e:23:23:b2:ad:d7:40:14:67:bf: 97:82:a8:08:a4:96:84:a8:e1:94:7e:08:bc:bb:65: 1c:7a:8d:3c:30:30:dd:37:00:da:8d:cd:b6:52:8c: 3d:7e:0a:f5:32:66:13:2a:95:ed:32:02:11:a3:2d: 10:49:35:b2:5b:c5:8a:a2:f1:4e:f9:51:c4:86:a3: c0:21:6b:fc:d7:19:ee:8e:f3:a3:00:a7:c2:38:65: d4:91:f3:93:d0:21:27:d8:ad:a5:61:44:c6:f8:52: 10:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:BE:46:6E:7F:98:B0:9F:8D:07:95:8D:2A:AD:81:B7:F6:12:B0:20 X509v3 Authority Key Identifier: keyid:5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/ub5Gbn-YsJ-NB5WNKq2Bt_YSsCA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:a380:100::-2a09:a380:dff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption ae:e9:e9:20:22:99:52:d6:ae:3a:c7:85:85:ba:4e:3d:01:d8: b6:3f:2b:4b:78:ad:9b:b5:95:e7:72:44:d4:bc:5c:68:12:0c: ba:9d:8d:2d:cb:25:27:50:44:ef:49:4b:34:e5:95:3a:3f:38: 72:72:e1:a2:f2:eb:82:14:fd:6d:27:06:b8:cf:2b:ea:e6:10: 92:d6:88:d0:4a:ca:3f:3a:d8:88:ba:73:0e:7c:31:73:e6:df: 2c:e8:2e:6b:2d:a9:b4:36:29:d1:15:c5:aa:c8:1f:d8:f1:32: 67:51:1a:eb:63:29:59:15:f8:04:b0:91:71:09:42:a1:63:78: 58:32:c2:90:d6:96:c9:91:22:1f:b1:94:0d:a9:2d:ff:be:ce: 46:39:07:99:d5:77:8d:28:0c:bf:81:a0:75:0d:15:44:40:99: 2b:f9:6c:e2:30:52:36:7d:2b:d5:08:1d:25:f6:89:c2:af:44: 9f:15:d7:4c:d1:99:1a:e4:51:dc:04:38:13:81:17:f0:b9:07: 5d:8c:37:1e:8b:12:b7:fb:cc:19:29:38:5a:55:57:9e:bc:7c: ef:41:36:ce:a2:ef:b4:ed:83:2f:45:98:9e:1f:91:19:df:2b: 26:6a:68:5a:b1:f7:70:51:49:a3:5b:98:cd:81:94:78:11:fa: 88:46:72:1d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gLa6Y+tQrbLrdSYF3QaEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZjViZGE1ODM2NTJlMDU4N2ZlZjg0MTY2YjQxZjZjZGE4 ZjFmNzgwHhcNMjYwMTAyMDIxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWJlNDY2ZTdmOThiMDlmOGQwNzk1OGQyYWFkODFiN2Y2MTJiMDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrQDyTf8SnyEMF5NhdGx16U/Slhe AKs+VCxTERI15Aq2+rjk99arXs6Yled534mI6dAGPgkDrrQkxaKHmTCW55Hp/2fF AkoQYyFTaVOBRmdeQQ+deJJmgu/v2WkfCh+DqdLCnat3SmlOy2p40RQakJcyM3KL TA9b8JuzBAWdY4AFVE68y9FQ3D3O4tIBRQ8Wg80r2A8GXiEE6o4jI7Kt10AUZ7+X gqgIpJaEqOGUfgi8u2Uceo08MDDdNwDajc22Uow9fgr1MmYTKpXtMgIRoy0QSTWy W8WKovFO+VHEhqPAIWv81xnujvOjAKfCOGXUkfOT0CEn2K2lYUTG+FIQxQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLm+Rm5/mLCfjQeVjSqtgbf2ErAgMB8GA1UdIwQY MBaAFFv1vaWDZS4Fh/74QWa0H2zajx94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV19XOXBZTmxMZ1dIX3ZoQlpyUWZiTnFQSDNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jN2I3ZGQtMWY3MC00YmFlLTlkNmMt MmE3OWU1ZDIyYWUxLzEvdWI1R2JuLVlzSi1OQjVXTktxMkJ0X1lTc0NBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9jN2I3ZGQtMWY3MC00YmFlLTlkNmMtMmE3OWU1ZDIyYWUx LzEvV19XOXBZTmxMZ1dIX3ZoQlpyUWZiTnFQSDNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASMBADBgAqCaOA AQMGASoJo4AMMA0GCSqGSIb3DQEBCwUAA4IBAQCu6ekgIplS1q46x4WFuk49Adi2 PytLeK2btZXnckTUvFxoEgy6nY0tyyUnUETvSUs05ZU6PzhycuGi8uuCFP1tJwa4 zyvq5hCS1ojQSso/OtiIunMOfDFz5t8s6C5rLam0NinRFcWqyB/Y8TJnURrrYylZ FfgEsJFxCUKhY3hYMsKQ1pbJkSIfsZQNqS3/vs5GOQeZ1XeNKAy/gaB1DRVEQJkr +WziMFI2fSvVCB0l9onCr0SfFddM0Zka5FHcBDgTgRfwuQddjDceixK3+8wZKTha VVeevHzvQTbOou+07YMvRZieH5EZ3ysmamhasfdwUUmjW5jNgZR4EfqIRnId -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:17 2026 by rpki-client