This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/UkNOO2CDkXM7dtcGCawwwbxPN_g.roa File: UkNOO2CDkXM7dtcGCawwwbxPN_g.roa (raw, json) Hash identifier: RvHxO6CCiZRu8PB12w6pIAfjfO2ckn1GqUWkiwPCsHk= Subject key identifier: 52:43:4E:3B:60:83:91:73:3B:76:D7:06:09:AC:30:C1:BC:4F:37:F8 Certificate issuer: /CN=83ad289621833dae86fdda62e4b9b09e29e078a0 Certificate serial: 019B7B368DB374BEF58574457E4C0025AC85 Authority key identifier: 83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/UkNOO2CDkXM7dtcGCawwwbxPN_g.roa Signing time: Thu 01 Jan 2026 20:18:51 +0000 ROA not before: Thu 01 Jan 2026 20:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44180 IP address blocks: 46.227.88.0/21 maxlen: 24 185.98.56.0/22 maxlen: 24 185.144.204.0/22 maxlen: 24 185.146.196.0/22 maxlen: 24 193.34.116.0/22 maxlen: 24 2a0d:9100::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:8d:b3:74:be:f5:85:74:45:7e:4c:00:25:ac:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83ad289621833dae86fdda62e4b9b09e29e078a0 Validity Not Before: Jan 1 20:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52434e3b608391733b76d70609ac30c1bc4f37f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:00:6f:44:52:47:dd:83:e7:f7:03:d2:8a:e7: c7:d1:bc:5c:37:b5:50:e5:5d:25:ed:07:40:6a:77: 3e:8f:79:b4:cb:57:30:5d:a1:9a:58:64:2b:e6:a6: 20:6f:05:0f:91:80:d8:e4:a7:0d:74:ac:97:71:55: af:82:86:d4:9c:08:5b:e5:c6:8f:d4:fb:8a:d0:8a: 28:fb:9f:c8:be:41:e5:d4:7a:16:03:a3:40:f9:82: 3d:5f:9c:98:ab:22:c3:b1:fd:a8:f8:fb:64:46:9b: 25:d5:9e:44:17:a8:2d:52:dd:b9:75:3b:24:e1:ac: 98:4b:21:54:40:c1:c6:5a:e3:80:f1:35:e1:39:63: 9c:51:2a:cc:15:36:a3:16:19:01:2e:db:02:20:75: 64:01:59:a7:a2:0b:87:ed:6d:10:b4:45:58:50:02: 27:c8:17:b4:5b:cd:52:50:21:8c:de:91:33:5d:bc: bf:63:34:70:56:64:6a:3d:9c:a5:0a:87:22:78:42: 66:84:c5:b6:1f:a5:e0:60:f4:4d:45:eb:eb:8a:9d: 92:ba:da:71:be:cb:1f:8e:6a:97:1d:03:1b:58:82: 1b:8c:5c:78:45:21:ba:ff:09:c0:32:37:22:21:5f: e2:9a:97:3a:45:24:8a:82:eb:bc:5e:64:84:09:79: 57:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:43:4E:3B:60:83:91:73:3B:76:D7:06:09:AC:30:C1:BC:4F:37:F8 X509v3 Authority Key Identifier: keyid:83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/UkNOO2CDkXM7dtcGCawwwbxPN_g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.227.88.0/21 185.98.56.0/22 185.144.204.0/22 185.146.196.0/22 193.34.116.0/22 IPv6: 2a0d:9100::/32 Signature Algorithm: sha256WithRSAEncryption 8b:10:d1:9d:42:37:72:a8:1a:ec:05:20:ee:50:24:93:42:24: d6:43:23:a1:bd:11:2e:a9:2f:a3:58:e3:35:11:43:45:fd:41: 5c:cf:6f:aa:d1:50:99:34:83:6f:e4:a5:12:01:cb:cf:b8:0f: 06:da:0d:d3:16:8f:59:82:fe:1a:39:13:9d:73:1c:34:7c:d7: dd:4e:4e:75:43:c2:f2:9a:c8:70:d4:93:81:c5:5c:e4:1e:4d: c0:91:7e:91:aa:fb:a2:cc:a3:05:be:69:05:69:55:d6:de:c4: 6d:45:1a:12:3b:be:0d:ed:a2:51:7e:dd:cc:ff:67:75:54:91: 63:03:36:6d:1d:d1:47:15:ab:fd:47:e7:0a:14:26:b6:8a:0b: d3:80:7e:40:fa:4b:9c:d0:9e:6e:97:99:c2:2e:b1:b5:66:a6: 9e:be:f7:5c:26:cd:17:4a:53:1d:31:4a:d9:bd:82:69:78:a7: 29:df:cf:e7:28:93:18:24:8e:a4:84:0a:4a:ec:d1:f2:a2:f5: b9:e0:e2:f9:71:b4:61:6e:ae:70:67:13:fc:fd:d3:52:03:b2: 9e:62:96:4a:b6:42:5a:ae:cb:3d:a1:8f:c8:0c:73:64:44:5e: 13:57:e3:30:c3:44:2b:02:72:34:4b:af:d1:4e:b7:76:bc:54: ea:80:65:9c -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt7No2zdL71hXRFfkwAJayFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzYWQyODk2MjE4MzNkYWU4NmZkZGE2MmU0YjliMDllMjll MDc4YTAwHhcNMjYwMTAxMjAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjQzNGUzYjYwODM5MTczM2I3NmQ3MDYwOWFjMzBjMWJjNGYzN2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngBvRFJH3YPn9wPSiufH0bxcN7VQ 5V0l7QdAanc+j3m0y1cwXaGaWGQr5qYgbwUPkYDY5KcNdKyXcVWvgobUnAhb5caP 1PuK0Ioo+5/IvkHl1HoWA6NA+YI9X5yYqyLDsf2o+PtkRpsl1Z5EF6gtUt25dTsk 4ayYSyFUQMHGWuOA8TXhOWOcUSrMFTajFhkBLtsCIHVkAVmnoguH7W0QtEVYUAIn yBe0W81SUCGM3pEzXby/YzRwVmRqPZylCocieEJmhMW2H6XgYPRNRevrip2Sutpx vssfjmqXHQMbWIIbjFx4RSG6/wnAMjciIV/impc6RSSKguu8XmSECXlX5wIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFFJDTjtgg5FzO3bXBgmsMMG8Tzf4MB8GA1UdIwQY MBaAFIOtKJYhgz2uhv3aYuS5sJ4p4HigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzYwb2xpR0RQYTZHX2RwaTVMbXduaW5nZUtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9lMTg3MGYtOWNiNi00MzM5LWFhMzgt MGFmNDIzMWRhNzlhLzEvVWtOT08yQ0RrWE03ZHRjR0Nhd3d3YnhQTl9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9lMTg3MGYtOWNiNi00MzM5LWFhMzgtMGFmNDIzMWRhNzlh LzEvZzYwb2xpR0RQYTZHX2RwaTVMbXduaW5nZUtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDLuNYAwQC uWI4AwQCuZDMAwQCuZLEAwQCwSJ0MA0EAgACMAcDBQAqDZEAMA0GCSqGSIb3DQEB CwUAA4IBAQCLENGdQjdyqBrsBSDuUCSTQiTWQyOhvREuqS+jWOM1EUNF/UFcz2+q 0VCZNINv5KUSAcvPuA8G2g3TFo9Zgv4aOROdcxw0fNfdTk51Q8Lymshw1JOBxVzk Hk3AkX6RqvuizKMFvmkFaVXW3sRtRRoSO74N7aJRft3M/2d1VJFjAzZtHdFHFav9 R+cKFCa2igvTgH5A+kuc0J5ul5nCLrG1ZqaevvdcJs0XSlMdMUrZvYJpeKcp38/n KJMYJI6khApK7NHyovW54OL5cbRhbq5wZxP8/dNSA7KeYpZKtkJarss9oY/IDHNk RF4TV+Mww0QrAnI0S6/RTrd2vFTqgGWc -----END CERTIFICATE-----Generated at Tue Feb 10 07:29:12 2026 by rpki-client