This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/kubNMvofw6ZidLydO7BpZ0XnZR0.roa File: kubNMvofw6ZidLydO7BpZ0XnZR0.roa (raw, json) Hash identifier: TKb/gNbcFLBmyxALg5scwMqg/Q4YSjcj7IUD9G4BIyc= Subject key identifier: 92:E6:CD:32:FA:1F:C3:A6:62:74:BC:9D:3B:B0:69:67:45:E7:65:1D Certificate issuer: /CN=50bb158d29e37500d5c3a25dada149b2a503f6a5 Certificate serial: 019B7EA6E5F09CAADE2A28FD6E363A9C5736 Authority key identifier: 50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/kubNMvofw6ZidLydO7BpZ0XnZR0.roa Signing time: Fri 02 Jan 2026 12:20:25 +0000 ROA not before: Fri 02 Jan 2026 12:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202630 IP address blocks: 185.121.88.0/24 maxlen: 24 185.121.89.0/24 maxlen: 24 185.121.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:e5:f0:9c:aa:de:2a:28:fd:6e:36:3a:9c:57:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50bb158d29e37500d5c3a25dada149b2a503f6a5 Validity Not Before: Jan 2 12:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92e6cd32fa1fc3a66274bc9d3bb0696745e7651d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:68:84:ce:b2:63:2b:76:0d:46:ec:5b:ea:d6: 01:f0:ca:75:81:82:97:7e:7b:a1:84:4a:52:40:4e: 39:d0:f7:71:1e:fd:46:f7:6f:da:9d:ee:1e:e5:54: 9f:5e:a0:18:64:e4:6b:9c:60:f9:08:ce:cf:82:96: 53:c1:44:18:cc:8c:e6:8c:b3:ba:e8:c8:a7:04:aa: 25:b5:d1:b0:e0:e4:ab:68:40:5f:18:cb:45:2f:f3: 70:f6:ad:07:7d:2b:bf:ae:ce:05:d5:de:6e:cb:2e: 2d:64:6f:ab:50:07:e3:80:df:90:55:75:ed:cc:44: 15:1e:28:3b:44:ee:5a:e0:90:a1:8f:71:36:25:48: 73:3c:9c:7d:0b:39:7b:93:71:9c:2e:24:bb:35:78: f2:12:b5:33:ac:6c:6e:dc:b6:4a:17:70:23:b6:5c: d3:fc:65:a1:bf:07:04:b4:a6:92:01:48:dd:7b:4f: 0f:33:aa:36:63:2b:4c:7f:f3:6d:ec:25:9e:97:16: 77:85:8e:df:5a:36:8b:c5:57:0b:cf:36:7a:40:14: 0f:ad:7c:c4:df:fc:e2:d1:2d:10:a2:66:49:5d:66: 21:fe:bd:fc:9a:24:0c:d9:f5:2e:e5:c3:c7:ae:fb: c4:58:0e:c0:74:e3:af:33:80:61:75:a4:72:65:99: 0d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E6:CD:32:FA:1F:C3:A6:62:74:BC:9D:3B:B0:69:67:45:E7:65:1D X509v3 Authority Key Identifier: keyid:50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/kubNMvofw6ZidLydO7BpZ0XnZR0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.88.0/23 185.121.91.0/24 Signature Algorithm: sha256WithRSAEncryption e2:e0:6f:b4:61:8b:1f:c2:fd:14:6d:e5:f0:23:b6:50:f1:8b: f4:af:42:9a:53:dc:f9:a8:1c:14:bd:0e:be:44:78:6c:38:08: 5d:00:33:df:63:90:e2:6a:e7:f5:a8:b5:66:42:59:a8:f3:af: b7:83:2e:9e:4a:0c:cc:18:1a:d6:6b:1a:1b:4e:0d:fb:03:c4: 6c:ef:85:cb:24:2b:85:68:a3:9b:34:38:2c:e5:49:7c:a5:f4: 8e:81:2a:46:f1:3c:d1:97:d5:54:28:ec:fb:50:83:58:1c:44: fa:8a:17:6c:38:6e:f2:ff:c4:60:3b:eb:83:be:85:fe:a7:08: 52:6d:73:e3:f3:a4:62:1e:49:1e:2b:86:9b:b1:ab:4f:3d:b5: d5:c0:0f:14:5c:fa:84:e3:9b:67:2b:ca:78:cf:c7:13:4d:6a: 25:6d:d0:ef:f9:47:28:22:f2:3d:7d:3b:17:d5:be:52:19:50: ca:ad:62:56:f4:c4:5c:48:17:7a:34:90:a5:c6:79:8e:a9:5e: aa:fa:2a:75:b6:a9:1a:d1:7f:10:e1:98:00:16:b6:ef:87:16: 64:f2:13:42:6a:aa:c9:07:b0:12:85:87:53:f9:67:43:e3:ef: 2b:02:4c:ec:a4:e3:cc:e6:aa:93:58:50:8a:3a:d6:ff:1f:9a: 17:39:3d:2d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+puXwnKreKij9bjY6nFc2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwYmIxNThkMjllMzc1MDBkNWMzYTI1ZGFkYTE0OWIyYTUw M2Y2YTUwHhcNMjYwMTAyMTIyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmU2Y2QzMmZhMWZjM2E2NjI3NGJjOWQzYmIwNjk2NzQ1ZTc2NTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGiEzrJjK3YNRuxb6tYB8Mp1gYKX fnuhhEpSQE450PdxHv1G92/ane4e5VSfXqAYZORrnGD5CM7PgpZTwUQYzIzmjLO6 6MinBKoltdGw4OSraEBfGMtFL/Nw9q0HfSu/rs4F1d5uyy4tZG+rUAfjgN+QVXXt zEQVHig7RO5a4JChj3E2JUhzPJx9Czl7k3GcLiS7NXjyErUzrGxu3LZKF3AjtlzT /GWhvwcEtKaSAUjde08PM6o2YytMf/Nt7CWelxZ3hY7fWjaLxVcLzzZ6QBQPrXzE 3/zi0S0QomZJXWYh/r38miQM2fUu5cPHrvvEWA7AdOOvM4BhdaRyZZkNowIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJLmzTL6H8OmYnS8nTuwaWdF52UdMB8GA1UdIwQY MBaAFFC7FY0p43UA1cOiXa2hSbKlA/alMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUxzVmpTbmpkUURWdzZKZHJhRkpzcVVEOXFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi80NWQyODQtYTM3My00NTUyLWJjOGEt NzQzMTEyYjBlNzcxLzEva3ViTk12b2Z3NlppZEx5ZE83QnBaMFhuWlIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi80NWQyODQtYTM3My00NTUyLWJjOGEtNzQzMTEyYjBlNzcx LzEvVUxzVmpTbmpkUURWdzZKZHJhRkpzcVVEOXFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuXlYAwQA uXlbMA0GCSqGSIb3DQEBCwUAA4IBAQDi4G+0YYsfwv0UbeXwI7ZQ8Yv0r0KaU9z5 qBwUvQ6+RHhsOAhdADPfY5Diauf1qLVmQlmo86+3gy6eSgzMGBrWaxobTg37A8Rs 74XLJCuFaKObNDgs5Ul8pfSOgSpG8TzRl9VUKOz7UINYHET6ihdsOG7y/8RgO+uD voX+pwhSbXPj86RiHkkeK4absatPPbXVwA8UXPqE45tnK8p4z8cTTWolbdDv+Uco IvI9fTsX1b5SGVDKrWJW9MRcSBd6NJClxnmOqV6q+ip1tqka0X8Q4ZgAFrbvhxZk 8hNCaqrJB7AShYdT+WdD4+8rAkzspOPM5qqTWFCKOtb/H5oXOT0t -----END CERTIFICATE-----Generated at Mon Jan 26 03:58:03 2026 by rpki-client