This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/u_QB-Ev0JPcN2aGHTltLdocjqUk.roa File: u_QB-Ev0JPcN2aGHTltLdocjqUk.roa (raw, json) Hash identifier: GUBuNvmgDVVxx4VZn82YTya9TWu1ENr/mMqKSnqy0cc= Subject key identifier: BB:F4:01:F8:4B:F4:24:F7:0D:D9:A1:87:4E:5B:4B:76:87:23:A9:49 Certificate issuer: /CN=4eeb6b2c3e09ca1c45fd7547e458946cc8a468b4 Certificate serial: 019B7B36B58A54566CFCF14DDE416898A1FF Authority key identifier: 4E:EB:6B:2C:3E:09:CA:1C:45:FD:75:47:E4:58:94:6C:C8:A4:68:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/u_QB-Ev0JPcN2aGHTltLdocjqUk.roa Signing time: Thu 01 Jan 2026 20:19:01 +0000 ROA not before: Thu 01 Jan 2026 20:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8934 IP address blocks: 93.93.144.0/21 maxlen: 24 185.109.120.0/22 maxlen: 24 193.188.64.0/19 maxlen: 24 2a02:9c0::/29 maxlen: 29 2a02:9c0::/32 maxlen: 64 2a02:9c6::/32 maxlen: 32 2a02:9c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b5:8a:54:56:6c:fc:f1:4d:de:41:68:98:a1:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eeb6b2c3e09ca1c45fd7547e458946cc8a468b4 Validity Not Before: Jan 1 20:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbf401f84bf424f70dd9a1874e5b4b768723a949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b9:2c:df:34:87:29:64:04:f6:f4:48:dc:fb: 45:78:72:f2:81:f7:c5:e5:91:0d:e0:aa:52:cf:92: 58:b8:72:b2:fc:46:aa:91:46:d9:ef:b4:f6:9f:75: 4a:36:77:c8:17:47:f6:78:b7:9a:47:d4:5e:71:f2: 1a:b3:c4:57:41:aa:4d:45:4e:57:9e:93:7b:13:b0: 66:3e:3c:81:80:e3:ce:ef:94:f3:74:0f:1c:e7:8e: cd:ee:89:4f:92:9a:77:9a:19:4b:66:ad:68:ee:cb: 46:f5:de:5d:97:01:22:f9:46:f4:ce:4a:7b:28:89: af:8d:a4:8e:73:68:3f:53:a2:db:51:51:be:49:65: 14:45:1f:47:7f:16:4a:c7:b8:02:b9:07:12:d7:f9: c7:27:fb:ca:6d:9a:89:c8:10:f6:2f:09:47:eb:04: fe:c3:89:5a:5a:db:29:b0:e3:4d:d4:ec:93:a4:18: 9b:8f:76:53:af:02:60:2b:9a:13:81:98:89:95:6d: 91:97:ba:d0:46:64:4d:8a:9a:ec:00:c1:70:1f:e1: 36:5f:85:e7:d2:20:0d:58:10:96:91:b4:ae:fd:13: f7:05:48:ee:25:44:67:f7:fd:93:31:27:d9:ed:d8: e7:ba:c0:a8:7e:1e:74:cd:07:e4:c5:8b:68:69:75: a5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F4:01:F8:4B:F4:24:F7:0D:D9:A1:87:4E:5B:4B:76:87:23:A9:49 X509v3 Authority Key Identifier: keyid:4E:EB:6B:2C:3E:09:CA:1C:45:FD:75:47:E4:58:94:6C:C8:A4:68:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/u_QB-Ev0JPcN2aGHTltLdocjqUk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.93.144.0/21 185.109.120.0/22 193.188.64.0/19 IPv6: 2a02:9c0::/29 Signature Algorithm: sha256WithRSAEncryption 3e:51:64:2f:4c:3e:2b:3f:e2:dc:15:41:21:01:83:bf:ac:11: 6c:52:b9:21:36:7e:d6:eb:1d:3f:d9:43:bf:f1:7c:7a:24:b1: 83:26:f6:8d:2e:f1:a8:38:e0:37:c8:27:01:de:1c:4e:41:2e: 2b:fa:86:e7:fb:ab:53:63:e3:d7:a1:23:07:ee:e1:48:92:63: 0f:25:97:3a:fd:41:dd:f6:60:8e:72:ef:7f:6a:a7:c4:95:6e: 35:39:0b:fe:43:4c:3d:f3:9f:36:04:ce:71:34:49:ce:f5:f3: 7b:c3:1f:62:67:87:26:d5:6f:9d:b0:d2:42:80:14:ee:11:c4: 4b:e2:1d:f9:29:01:c2:c1:7b:e1:87:a6:cc:66:aa:62:db:7f: fe:b5:5c:d0:4c:f2:5f:c9:e7:5c:76:05:ae:77:8e:c0:0b:cb: 70:ec:28:d3:2b:a3:d1:f2:be:bf:08:d4:02:bd:0c:83:6f:25: 0c:2b:77:e5:f1:98:58:ed:5f:2f:61:f6:3f:27:5c:36:45:7d: bb:b9:99:d8:cd:a0:5f:02:34:85:12:3c:ab:7a:90:9e:18:b6: 95:28:aa:de:96:dd:39:5b:a9:db:87:63:8f:bf:c4:e1:8c:89: 55:12:6b:76:45:74:bf:07:ed:ed:3b:45:76:c8:0b:fd:ea:08: 5a:80:4a:7a -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt7NrWKVFZs/PFN3kFomKH/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZWI2YjJjM2UwOWNhMWM0NWZkNzU0N2U0NTg5NDZjYzhh NDY4YjQwHhcNMjYwMTAxMjAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmY0MDFmODRiZjQyNGY3MGRkOWExODc0ZTViNGI3Njg3MjNhOTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bks3zSHKWQE9vRI3PtFeHLygffF 5ZEN4KpSz5JYuHKy/EaqkUbZ77T2n3VKNnfIF0f2eLeaR9RecfIas8RXQapNRU5X npN7E7BmPjyBgOPO75TzdA8c547N7olPkpp3mhlLZq1o7stG9d5dlwEi+Ub0zkp7 KImvjaSOc2g/U6LbUVG+SWUURR9HfxZKx7gCuQcS1/nHJ/vKbZqJyBD2LwlH6wT+ w4laWtspsONN1OyTpBibj3ZTrwJgK5oTgZiJlW2Rl7rQRmRNiprsAMFwH+E2X4Xn 0iANWBCWkbSu/RP3BUjuJURn9/2TMSfZ7djnusCofh50zQfkxYtoaXWlKwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFLv0AfhL9CT3Ddmhh05bS3aHI6lJMB8GA1UdIwQY MBaAFE7rayw+CcocRf11R+RYlGzIpGi0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHV0ckxENEp5aHhGX1hWSDVGaVViTWlrYUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84ZjU5ZWMtZjkyYy00MjNkLThmYjct NmU5YWRkYzgxNjJiLzEvdV9RQi1FdjBKUGNOMmFHSFRsdExkb2NqcVVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi84ZjU5ZWMtZjkyYy00MjNkLThmYjctNmU5YWRkYzgxNjJi LzEvVHV0ckxENEp5aHhGX1hWSDVGaVViTWlrYUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDXV2QAwQC uW14AwQFwbxAMA0EAgACMAcDBQMqAgnAMA0GCSqGSIb3DQEBCwUAA4IBAQA+UWQv TD4rP+LcFUEhAYO/rBFsUrkhNn7W6x0/2UO/8Xx6JLGDJvaNLvGoOOA3yCcB3hxO QS4r+obn+6tTY+PXoSMH7uFIkmMPJZc6/UHd9mCOcu9/aqfElW41OQv+Q0w98582 BM5xNEnO9fN7wx9iZ4cm1W+dsNJCgBTuEcRL4h35KQHCwXvhh6bMZqpi23/+tVzQ TPJfyedcdgWud47AC8tw7CjTK6PR8r6/CNQCvQyDbyUMK3fl8ZhY7V8vYfY/J1w2 RX27uZnYzaBfAjSFEjyrepCeGLaVKKrelt05W6nbh2OPv8ThjIlVEmt2RXS/B+3t O0V2yAv96ghagEp6 -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:39 2026 by rpki-client