This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/UKQKeoBcJ58UDn8U0AVzCBpGHL0.roa File: UKQKeoBcJ58UDn8U0AVzCBpGHL0.roa (raw, json) Hash identifier: ERdWN8WLzpsUzWSpD67UEm0f8b3RE+imyAiE9mzGSAU= Subject key identifier: 50:A4:0A:7A:80:5C:27:9F:14:0E:7F:14:D0:05:73:08:1A:46:1C:BD Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A251889B9016E438A04D92C4157F88 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/UKQKeoBcJ58UDn8U0AVzCBpGHL0.roa Signing time: Thu 01 Jan 2026 08:17:42 +0000 ROA not before: Thu 01 Jan 2026 08:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58325 IP address blocks: 212.134.220.0/22 maxlen: 22 212.134.236.0/22 maxlen: 22 212.134.244.0/22 maxlen: 22 212.134.252.0/22 maxlen: 22 212.135.130.0/23 maxlen: 24 212.135.132.0/23 maxlen: 24 212.135.136.0/23 maxlen: 24 212.135.138.0/23 maxlen: 24 212.135.140.0/23 maxlen: 24 212.135.142.0/23 maxlen: 24 212.135.144.0/23 maxlen: 24 212.135.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:51:88:9b:90:16:e4:38:a0:4d:92:c4:15:7f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50a40a7a805c279f140e7f14d00573081a461cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a7:d1:19:de:7f:26:bd:68:ab:9d:88:9a:f1: 82:7a:94:33:60:c0:da:49:6f:14:d5:20:74:25:ea: 09:54:75:88:4f:e9:9d:25:e5:88:60:a5:32:f0:0e: 7c:39:aa:1f:b6:38:49:6d:26:4c:19:2f:ea:ac:46: 0f:2b:64:aa:13:2d:bc:c7:9c:a7:e4:4a:a9:a5:e4: 41:f0:dc:21:fb:5b:01:ca:db:63:06:13:a4:47:40: 7c:f0:0a:c8:37:f4:25:31:95:18:0e:db:50:08:3f: b4:7b:f9:b2:c8:b7:67:7b:2d:fc:d4:fc:ee:ca:67: de:7c:02:a6:3d:df:bd:23:53:dd:ec:17:6e:c3:84: ad:35:31:6e:4d:fd:4e:fd:df:f3:32:54:72:2e:29: fb:7e:12:74:fc:1c:88:34:cd:9f:4e:33:a0:fd:9c: 68:70:78:29:22:75:04:6c:cb:ce:75:9c:7c:35:95: 16:92:9f:13:c5:58:c9:ca:41:2e:8e:04:1d:a3:da: a4:94:01:26:63:7f:77:8d:0d:3f:84:93:16:9c:40: af:e2:43:68:49:37:59:fa:54:b8:ae:c7:44:2b:1d: 86:11:d5:f7:df:5a:da:d0:76:fd:fc:40:ce:fb:65: 0b:f3:18:8a:20:b0:44:55:8c:1e:a4:a9:65:b1:7d: 13:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A4:0A:7A:80:5C:27:9F:14:0E:7F:14:D0:05:73:08:1A:46:1C:BD X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/UKQKeoBcJ58UDn8U0AVzCBpGHL0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.220.0/22 212.134.236.0/22 212.134.244.0/22 212.134.252.0/22 212.135.130.0-212.135.133.255 212.135.136.0-212.135.147.255 Signature Algorithm: sha256WithRSAEncryption 65:c6:28:e4:6d:68:d1:f6:9e:07:5a:20:58:7a:96:77:77:4e: e7:67:ed:b3:2b:f2:7c:17:b6:33:49:0a:1e:61:86:62:a1:b7: 85:28:2b:48:32:8a:99:c0:54:5e:5d:83:d0:36:72:00:06:82: 8c:a9:97:c3:a0:62:8f:74:0f:0d:ca:b4:77:6b:67:8f:ce:5b: 31:42:cf:8f:fc:8b:f6:4a:9e:2e:02:56:bf:a4:12:0b:97:c3: 0e:25:af:22:50:77:ec:f8:04:f0:00:3d:8b:46:6b:c6:0e:70: 31:e9:62:cb:36:30:87:e4:54:62:3b:5e:0c:e9:7c:01:f6:c9: 33:c5:41:be:a1:76:51:e9:ef:73:0c:be:b9:76:bb:0f:c9:a7: b4:1f:03:44:f7:c7:1b:d9:b1:e7:27:b9:22:ef:bd:7c:e9:ad: f0:db:d6:47:53:a0:15:4c:c9:36:b0:66:65:9f:ed:eb:62:17: 04:a2:67:49:4d:eb:87:ff:e0:75:45:15:0c:bd:c0:d9:a8:82: c4:4b:c2:5f:c4:17:50:68:a4:79:bc:3b:9a:ea:cb:45:b0:13: aa:b8:91:8e:9f:3e:47:0e:88:f4:34:46:47:1e:81:05:76:1c: 0e:e5:08:04:6e:cf:3a:f0:64:77:4b:20:cb:9b:19:ed:ae:3d: 53:4f:c4:d3 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZt4olGIm5AW5DigTZLEFX+IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGE0MGE3YTgwNWMyNzlmMTQwZTdmMTRkMDA1NzMwODFhNDYxY2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKfRGd5/Jr1oq52ImvGCepQzYMDa SW8U1SB0JeoJVHWIT+mdJeWIYKUy8A58OaoftjhJbSZMGS/qrEYPK2SqEy28x5yn 5EqppeRB8Nwh+1sByttjBhOkR0B88ArIN/QlMZUYDttQCD+0e/myyLdney381Pzu ymfefAKmPd+9I1Pd7Bduw4StNTFuTf1O/d/zMlRyLin7fhJ0/ByINM2fTjOg/Zxo cHgpInUEbMvOdZx8NZUWkp8TxVjJykEujgQdo9qklAEmY393jQ0/hJMWnECv4kNo STdZ+lS4rsdEKx2GEdX331ra0Hb9/EDO+2UL8xiKILBEVYwepKllsX0TpQIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFFCkCnqAXCefFA5/FNAFcwgaRhy9MB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvVUtRS2VvQmNKNThVRG44VTBBVnpDQnBHSEwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQC1IbcAwQC 1IbsAwQC1Ib0AwQC1Ib8MAwDBAHUh4IDBAHUh4QwDAMEA9SHiAMEAtSHkDANBgkq hkiG9w0BAQsFAAOCAQEAZcYo5G1o0faeB1ogWHqWd3dO52ftsyvyfBe2M0kKHmGG YqG3hSgrSDKKmcBUXl2D0DZyAAaCjKmXw6Bij3QPDcq0d2tnj85bMULPj/yL9kqe LgJWv6QSC5fDDiWvIlB37PgE8AA9i0Zrxg5wMeliyzYwh+RUYjteDOl8AfbJM8VB vqF2Uenvcwy+uXa7D8mntB8DRPfHG9mx5ye5Iu+9fOmt8NvWR1OgFUzJNrBmZZ/t 62IXBKJnSU3rh//gdUUVDL3A2aiCxEvCX8QXUGikebw7murLRbATqriRjp8+Rw6I 9DRGRx6BBXYcDuUIBG7POvBkd0sgy5sZ7a49U0/E0w== -----END CERTIFICATE-----Generated at Mon Jan 19 08:16:37 2026 by rpki-client