This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/1-UKHSAM5AevZEqWUhu5rend0iyQ.roa File: 1-UKHSAM5AevZEqWUhu5rend0iyQ.roa (raw, json) Hash identifier: KXPe+NqDhBkXJxLOH97HX7eFcl1M35NsSA1uK/QdVrw= Subject key identifier: F9:42:87:48:03:39:01:EB:D9:12:A5:94:86:EE:6B:7A:77:74:8B:24 Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Certificate serial: 019BA3264ADCA844DE836FF5A2422AB369E8 Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/1-UKHSAM5AevZEqWUhu5rend0iyQ.roa Signing time: Fri 09 Jan 2026 14:25:54 +0000 ROA not before: Fri 09 Jan 2026 14:25:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201814 IP address blocks: 94.26.68.0/24 maxlen: 24 94.26.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 09:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:26:4a:dc:a8:44:de:83:6f:f5:a2:42:2a:b3:69:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Validity Not Before: Jan 9 14:25:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9428748033901ebd912a59486ee6b7a77748b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f8:c8:97:fb:34:31:66:75:3e:5f:f5:30:76: 56:14:93:d5:05:f8:90:56:05:9e:26:64:07:18:92: e7:54:2f:b9:ac:e5:33:47:44:11:c5:a3:4b:c7:42: c0:c1:ea:1b:c7:2d:8b:72:d6:0b:92:64:02:36:e4: 8f:66:7f:8a:3d:ab:d8:80:18:98:58:d4:c7:4c:80: 1b:01:ca:bd:2a:b8:50:c8:fd:93:07:d4:b8:15:23: d1:4c:15:d3:07:86:cb:cb:5d:31:ad:07:3f:e6:55: c8:4f:7f:0d:5a:bb:de:d1:48:ae:fa:8a:6a:62:f5: 92:66:45:ea:95:6c:62:d1:c1:a2:c2:1a:86:76:cd: be:d0:a9:0d:ea:80:4b:1a:c6:b8:93:ee:65:09:26: e7:07:5b:58:6e:ff:3b:90:6e:3a:a3:1e:15:3f:9f: da:8d:f1:cd:fd:0d:f1:09:70:d8:40:17:f7:b4:b5: 52:c0:6a:20:02:b3:6e:a1:b8:7e:41:45:69:55:48: 0f:d0:d2:48:dc:a3:a6:f9:62:f4:06:aa:8c:43:b2: 9f:38:b1:d3:3b:1f:67:b8:04:b8:75:8a:70:0b:9f: 7b:ff:d3:ac:ca:1c:17:88:c3:a4:d3:60:54:1d:1a: 40:c4:19:d8:eb:ae:e6:ed:83:43:f4:0f:b3:79:bc: a6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:42:87:48:03:39:01:EB:D9:12:A5:94:86:EE:6B:7A:77:74:8B:24 X509v3 Authority Key Identifier: keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/1-UKHSAM5AevZEqWUhu5rend0iyQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.26.68.0/24 94.26.88.0/24 Signature Algorithm: sha256WithRSAEncryption 98:66:e9:e5:d8:0f:88:5f:a7:c2:94:56:9b:6c:46:70:6d:eb: 17:9b:c0:79:a0:ed:4e:c6:65:2b:fc:97:de:dc:69:f8:c8:7b: 2a:2d:b3:b0:42:89:b5:73:ee:81:42:f1:e6:6d:6c:6d:7a:ae: d0:80:d2:96:80:9a:58:2a:66:42:27:6a:79:2a:5a:99:da:27: 1e:db:f7:20:f5:54:d4:83:cf:8a:ff:97:b2:00:9b:6f:64:b7: 90:53:b1:c0:52:d3:ce:75:c7:bf:d2:ea:39:bc:ee:8f:1c:d2: f7:04:f7:b9:12:de:bd:65:58:40:ca:f1:0f:c2:40:78:8a:69: be:19:6e:11:74:92:95:e7:ff:73:f5:fb:3b:c4:cd:89:81:eb: fd:af:4f:ab:96:8e:e2:70:37:3b:25:c2:d8:8a:5e:81:bf:7f: 32:ce:bc:e5:95:44:dd:33:f8:fb:0f:ea:9a:e8:e1:ed:6f:f3: 23:f8:22:09:41:46:fb:33:6b:fd:f7:37:0b:e4:15:c8:02:b8: c1:d2:bd:df:e6:d6:c5:fa:24:4c:08:91:22:76:19:80:b7:8c: ea:aa:8d:89:1d:e7:7d:99:88:ef:a7:0f:4f:96:f1:08:db:0a: 30:5c:37:30:57:db:7e:9a:fe:00:75:71:56:8f:79:0d:a0:04: b7:b1:15:ec -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZujJkrcqETeg2/1okIqs2noMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2 YzQzNDIwHhcNMjYwMTA5MTQyNTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTQyODc0ODAzMzkwMWViZDkxMmE1OTQ4NmVlNmI3YTc3NzQ4YjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfjIl/s0MWZ1Pl/1MHZWFJPVBfiQ VgWeJmQHGJLnVC+5rOUzR0QRxaNLx0LAweobxy2LctYLkmQCNuSPZn+KPavYgBiY WNTHTIAbAcq9KrhQyP2TB9S4FSPRTBXTB4bLy10xrQc/5lXIT38NWrve0Uiu+opq YvWSZkXqlWxi0cGiwhqGds2+0KkN6oBLGsa4k+5lCSbnB1tYbv87kG46ox4VP5/a jfHN/Q3xCXDYQBf3tLVSwGogArNuobh+QUVpVUgP0NJI3KOm+WL0BqqMQ7KfOLHT Ox9nuAS4dYpwC597/9OsyhwXiMOk02BUHRpAxBnY667m7YND9A+zebymwwIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPlCh0gDOQHr2RKllIbua3p3dIskMB8GA1UdIwQY MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt YzE2Nzg3MjcyMDQ5LzEvMS1VS0hTQU01QWV2WkVxV1VodTVyZW5kMGl5US5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTQvMjY5YTA0LTc3YjQtNGVlNy1iMTY0LWMxNjc4NzI3MjA0 OS8xLzNoTHJuSFhUV2RKUk43WHZUaGR2WHV0c1EwSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAF4aRAME AF4aWDANBgkqhkiG9w0BAQsFAAOCAQEAmGbp5dgPiF+nwpRWm2xGcG3rF5vAeaDt TsZlK/yX3txp+Mh7Ki2zsEKJtXPugULx5m1sbXqu0IDSloCaWCpmQidqeSpamdon Htv3IPVU1IPPiv+XsgCbb2S3kFOxwFLTznXHv9LqObzujxzS9wT3uRLevWVYQMrx D8JAeIppvhluEXSSlef/c/X7O8TNiYHr/a9Pq5aO4nA3OyXC2Ipegb9/Ms685ZVE 3TP4+w/qmujh7W/zI/giCUFG+zNr/fc3C+QVyAK4wdK93+bWxfokTAiRInYZgLeM 6qqNiR3nfZmI76cPT5bxCNsKMFw3MFfbfpr+AHVxVo95DaAEt7EV7A== -----END CERTIFICATE-----Generated at Fri Jan 23 12:54:07 2026 by rpki-client