This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/UFE842JQ7HXlV4O8ypyYJqZjKxo.roa File: UFE842JQ7HXlV4O8ypyYJqZjKxo.roa (raw, json) Hash identifier: d4GAUahRXjgUNYF+NjmfLkIgWSJGMgXblr9oMS3knEw= Subject key identifier: 50:51:3C:E3:62:50:EC:75:E5:57:83:BC:CA:9C:98:26:A6:63:2B:1A Certificate issuer: /CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6 Certificate serial: 019B78A36F691A7AEA5511429480E21A9EB9 Authority key identifier: 18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/UFE842JQ7HXlV4O8ypyYJqZjKxo.roa Signing time: Thu 01 Jan 2026 08:18:55 +0000 ROA not before: Thu 01 Jan 2026 08:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213212 IP address blocks: 85.159.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:6f:69:1a:7a:ea:55:11:42:94:80:e2:1a:9e:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6 Validity Not Before: Jan 1 08:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50513ce36250ec75e55783bcca9c9826a6632b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ae:60:82:95:03:38:27:ff:63:75:3e:dc:5c: 9e:f9:3b:22:c6:54:42:9f:c8:7a:18:d3:1c:f3:00: 25:61:43:30:42:2e:52:b5:ae:f6:6a:bf:8c:3a:64: 76:43:a3:06:ee:5d:7a:08:7c:ba:78:cc:a1:3b:10: 84:4a:fb:16:84:fc:da:14:ee:fd:68:4a:91:50:bc: 00:c2:6e:a7:f0:d7:06:c8:75:3a:e7:d8:b7:54:b4: 5b:b6:90:7f:f4:9b:31:17:51:d4:5b:9c:34:b8:37: 13:4e:31:f3:a7:ac:ea:8a:6b:9e:f1:00:e7:ad:6f: 8a:95:ae:b8:d3:77:b6:c4:a6:16:6d:01:19:08:01: dd:14:7b:2c:d5:60:9b:65:23:b2:7c:2d:62:0f:26: 53:57:1d:d5:44:e4:08:d4:03:8b:ed:ea:dd:8d:f1: f5:05:d8:c6:96:7c:f4:86:71:5e:e8:37:09:34:53: 58:18:21:bb:fe:e4:4a:ae:86:35:a0:2a:53:3f:fe: 45:84:27:a1:de:21:b3:7d:9d:76:2d:5d:90:49:49: 1b:6f:51:3c:b8:d9:f9:0b:ef:5c:21:72:51:60:38: e9:c6:26:93:5f:ed:9e:b0:3f:3f:eb:6e:8b:ab:b4: f9:4f:3e:f1:01:13:03:4c:30:a4:5c:d4:9e:f7:5f: c4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:51:3C:E3:62:50:EC:75:E5:57:83:BC:CA:9C:98:26:A6:63:2B:1A X509v3 Authority Key Identifier: keyid:18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/UFE842JQ7HXlV4O8ypyYJqZjKxo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.159.117.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:5d:c9:7e:ec:00:cd:ab:ab:bf:6c:ba:2e:ea:29:63:f0:7b: aa:5b:3c:93:fe:37:3d:5d:82:c5:89:72:c6:2e:85:28:bd:22: 2c:dd:42:7a:9e:de:c7:c3:60:f8:60:10:13:7e:d6:51:0d:de: 0f:43:67:fd:ae:07:8b:75:98:40:bc:ef:67:ae:48:91:61:f8: 53:99:e6:f3:ba:07:58:6c:1a:fa:4a:1a:6a:62:d3:0c:75:9d: ca:33:14:c7:e6:2f:a1:1a:b3:3b:4b:8a:2e:e4:ff:69:2e:43: d9:66:2a:34:3c:b8:0d:eb:1b:c5:d0:39:85:90:c5:e0:71:30: 95:75:08:a9:73:ed:0d:d7:7c:7c:a9:61:b7:d6:e9:f6:cf:23: 6d:c4:0d:01:e4:5a:65:3e:18:7f:5a:b8:4a:5b:22:95:e7:43: 2d:5e:35:f6:05:f7:12:ee:fe:24:5c:e9:13:47:02:6d:48:35: 8a:5b:5a:bf:d5:44:8a:ac:b6:01:64:f9:82:9e:7c:5c:95:8e: 12:99:f0:98:b9:b8:9a:95:de:3d:f3:db:f3:ed:12:0f:40:07: 50:6c:b1:9a:39:ed:25:c1:2c:f4:6b:19:04:8c:93:bb:f8:d3: 51:b4:28:53:aa:b1:4e:bc:78:af:53:cf:30:2d:64:73:1c:f1: 2b:06:9c:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o29pGnrqVRFClIDiGp65MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZjkxOTRkNGRkN2Q0YjdiNzc3YzkyMDA3OWU0MDFkM2Ey NTMzYjYwHhcNMjYwMTAxMDgxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDUxM2NlMzYyNTBlYzc1ZTU1NzgzYmNjYTljOTgyNmE2NjMyYjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo65ggpUDOCf/Y3U+3Fye+TsixlRC n8h6GNMc8wAlYUMwQi5Sta72ar+MOmR2Q6MG7l16CHy6eMyhOxCESvsWhPzaFO79 aEqRULwAwm6n8NcGyHU659i3VLRbtpB/9JsxF1HUW5w0uDcTTjHzp6zqimue8QDn rW+Kla6403e2xKYWbQEZCAHdFHss1WCbZSOyfC1iDyZTVx3VROQI1AOL7erdjfH1 BdjGlnz0hnFe6DcJNFNYGCG7/uRKroY1oCpTP/5FhCeh3iGzfZ12LV2QSUkbb1E8 uNn5C+9cIXJRYDjpxiaTX+2esD8/626Lq7T5Tz7xARMDTDCkXNSe91/EOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFBRPONiUOx15VeDvMqcmCamYysaMB8GA1UdIwQY MBaAFBj5GU1N19S3t3fJIAeeQB06JTO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1BrWlRVM1gxTGUzZDhrZ0I1NUFIVG9sTTdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kMmM2ODktZWMzNi00ZWRmLTk2ZjQt Mzg5OTVmMjRiMWVmLzEvVUZFODQySlE3SFhsVjRPOHlweVlKcVpqS3hvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9kMmM2ODktZWMzNi00ZWRmLTk2ZjQtMzg5OTVmMjRiMWVm LzEvR1BrWlRVM1gxTGUzZDhrZ0I1NUFIVG9sTTdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVZ91MA0G CSqGSIb3DQEBCwUAA4IBAQA+Xcl+7ADNq6u/bLou6ilj8HuqWzyT/jc9XYLFiXLG LoUovSIs3UJ6nt7Hw2D4YBATftZRDd4PQ2f9rgeLdZhAvO9nrkiRYfhTmebzugdY bBr6ShpqYtMMdZ3KMxTH5i+hGrM7S4ou5P9pLkPZZio0PLgN6xvF0DmFkMXgcTCV dQipc+0N13x8qWG31un2zyNtxA0B5FplPhh/WrhKWyKV50MtXjX2BfcS7v4kXOkT RwJtSDWKW1q/1USKrLYBZPmCnnxclY4SmfCYubiald4989vz7RIPQAdQbLGaOe0l wSz0axkEjJO7+NNRtChTqrFOvHivU88wLWRzHPErBpyd -----END CERTIFICATE-----Generated at Mon Feb 9 23:57:06 2026 by rpki-client