This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/UKBBl2CEsf7LASA1NJwQJHQzz9k.roa File: UKBBl2CEsf7LASA1NJwQJHQzz9k.roa (raw, json) Hash identifier: ab2nFWhFJ9hGPjgo6z6rHmRSN+V9cgkhljBpQZmUSxQ= Subject key identifier: 50:A0:41:97:60:84:B1:FE:CB:01:20:35:34:9C:10:24:74:33:CF:D9 Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019B7DCA2B7FD92F7443301306CB980CF2F9 Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/UKBBl2CEsf7LASA1NJwQJHQzz9k.roa Signing time: Fri 02 Jan 2026 08:19:19 +0000 ROA not before: Fri 02 Jan 2026 08:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197537 IP address blocks: 45.141.130.0/24 maxlen: 24 185.240.85.0/24 maxlen: 24 193.56.21.0/24 maxlen: 24 212.87.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:2b:7f:d9:2f:74:43:30:13:06:cb:98:0c:f2:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Jan 2 08:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50a041976084b1fecb012035349c10247433cfd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e7:4d:db:c6:ec:4f:e9:e1:58:24:7d:d7:1d: 68:bb:43:c9:da:ce:f4:02:98:c4:07:f5:56:1b:1a: ca:93:14:bd:04:0e:eb:20:36:d5:c0:45:4a:c2:2a: e2:ab:ce:52:06:15:4f:c0:d5:8b:3e:9e:06:bc:e7: 08:31:d7:09:43:3b:a1:04:6c:a2:d0:cc:f8:df:6f: 5b:b4:56:77:e2:19:3e:5a:c4:b2:e7:3e:38:39:3a: d7:1d:8b:44:05:f5:10:80:4e:fb:1e:d6:19:5a:b4: 2c:4f:7e:e3:2a:75:d7:09:e8:82:be:aa:4f:53:44: ff:38:3f:74:88:4a:a1:0f:f2:fb:4b:48:67:e6:f7: 13:4a:75:01:a6:84:6d:ea:6c:e3:4d:0f:ab:bb:3f: 20:2a:23:b4:0b:17:f3:2a:cd:e6:37:9f:39:99:99: 97:34:c4:b4:97:3c:95:01:63:04:a7:d9:b0:29:57: b7:94:2e:7d:01:28:20:07:f6:b5:2d:cd:a3:7c:46: ad:e7:c8:75:53:63:3a:07:08:eb:58:bc:e2:ce:fa: 0f:80:75:40:8a:9b:a3:16:c9:06:21:18:eb:6f:30: 3b:e2:34:91:79:66:e0:70:3c:61:20:27:75:08:3d: 30:80:f3:1a:15:07:51:81:1c:1b:92:97:15:86:74: 49:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A0:41:97:60:84:B1:FE:CB:01:20:35:34:9C:10:24:74:33:CF:D9 X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/UKBBl2CEsf7LASA1NJwQJHQzz9k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.130.0/24 185.240.85.0/24 193.56.21.0/24 212.87.217.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:46:ad:6e:b7:64:ab:b1:29:31:6d:f0:14:90:3b:6b:8d:45: eb:71:d5:f2:bb:46:7f:92:4d:a5:74:f3:61:98:74:04:a8:a3: 32:94:81:c5:51:e8:28:57:1c:d4:75:7f:02:7f:0e:56:86:a4: cc:98:49:97:cc:f0:c8:17:2e:dc:1d:7a:92:56:60:2f:81:33: d8:03:92:0c:5e:8b:a2:23:e1:3a:33:5f:b3:c2:f0:e9:2e:9f: 47:d5:52:6f:1d:ae:31:ef:7e:35:3c:45:39:fe:71:70:e0:b6: 3f:e4:45:3d:ad:fd:85:4d:8b:c7:5c:a2:78:05:97:86:0b:94: 72:d3:11:c3:8e:25:57:50:fc:6f:47:fe:fa:b7:c6:dd:63:85: b9:b0:cb:4c:e4:1d:20:0b:14:18:6d:a3:af:62:0f:69:77:f4: 08:1d:10:c0:d6:b8:ce:c0:08:c2:b3:f8:99:3c:62:3f:03:39: 20:ef:92:dd:43:a0:b1:c4:73:6b:45:6f:83:23:bb:9b:93:8c: bb:6e:71:c5:f6:87:6e:f5:65:b4:49:3d:bc:35:5e:5b:d5:3c: 4e:12:aa:a4:e6:b0:22:88:a4:ae:95:51:aa:34:cc:0f:0a:bc: c4:38:e6:43:67:7d:7a:e6:7e:aa:71:ec:56:a8:64:00:44:da: 1a:2f:11:3b -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9yit/2S90QzATBsuYDPL5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjYwMTAyMDgxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGEwNDE5NzYwODRiMWZlY2IwMTIwMzUzNDljMTAyNDc0MzNjZmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+dN28bsT+nhWCR91x1ou0PJ2s70 ApjEB/VWGxrKkxS9BA7rIDbVwEVKwiriq85SBhVPwNWLPp4GvOcIMdcJQzuhBGyi 0Mz4329btFZ34hk+WsSy5z44OTrXHYtEBfUQgE77HtYZWrQsT37jKnXXCeiCvqpP U0T/OD90iEqhD/L7S0hn5vcTSnUBpoRt6mzjTQ+ruz8gKiO0CxfzKs3mN585mZmX NMS0lzyVAWMEp9mwKVe3lC59ASggB/a1Lc2jfEat58h1U2M6BwjrWLzizvoPgHVA ipujFskGIRjrbzA74jSReWbgcDxhICd1CD0wgPMaFQdRgRwbkpcVhnRJeQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFFCgQZdghLH+ywEgNTScECR0M8/ZMB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvVUtCQmwyQ0VzZjdMQVNBMU5Kd1FKSFF6ejlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALY2CAwQA ufBVAwQAwTgVAwQA1FfZMA0GCSqGSIb3DQEBCwUAA4IBAQAdRq1ut2SrsSkxbfAU kDtrjUXrcdXyu0Z/kk2ldPNhmHQEqKMylIHFUegoVxzUdX8Cfw5WhqTMmEmXzPDI Fy7cHXqSVmAvgTPYA5IMXouiI+E6M1+zwvDpLp9H1VJvHa4x7341PEU5/nFw4LY/ 5EU9rf2FTYvHXKJ4BZeGC5Ry0xHDjiVXUPxvR/76t8bdY4W5sMtM5B0gCxQYbaOv Yg9pd/QIHRDA1rjOwAjCs/iZPGI/Azkg75LdQ6CxxHNrRW+DI7ubk4y7bnHF9odu 9WW0ST28NV5b1TxOEqqk5rAiiKSulVGqNMwPCrzEOOZDZ3165n6qcexWqGQARNoa LxE7 -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:32 2026 by rpki-client