This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/UgQXPpoAPzzEY23clmnNXDMzKII.roa File: UgQXPpoAPzzEY23clmnNXDMzKII.roa (raw, json) Hash identifier: wVgI0/jKoNmP2W8lcpq9i62znX0LDf4x7s4+L/CLD44= Subject key identifier: 52:04:17:3E:9A:00:3F:3C:C4:63:6D:DC:96:69:CD:5C:33:33:28:82 Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019B7E3899F96E57FD06442AC56AFEE4BB06 Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/UgQXPpoAPzzEY23clmnNXDMzKII.roa Signing time: Fri 02 Jan 2026 10:19:57 +0000 ROA not before: Fri 02 Jan 2026 10:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60799 IP address blocks: 82.98.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:99:f9:6e:57:fd:06:44:2a:c5:6a:fe:e4:bb:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Jan 2 10:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5204173e9a003f3cc4636ddc9669cd5c33332882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4c:f6:c7:df:92:f1:61:1e:a8:64:73:2a:7a: f9:e4:f6:30:4c:5a:79:62:0a:36:15:7d:37:38:e2: fb:9a:f3:99:df:21:0c:ab:fc:a3:6d:c4:4b:19:6c: f6:74:b9:aa:df:a5:e3:ce:2a:bc:11:de:e9:25:a1: 40:35:a0:1b:2a:5a:4c:5b:8e:52:5d:40:f0:c7:22: f4:68:f3:dc:57:bf:87:22:d8:6d:f7:1f:58:ca:06: 6b:1e:7b:18:24:61:cc:89:65:dd:69:f5:b3:93:9a: 8d:81:b1:05:83:39:d9:d8:7b:b8:82:96:ac:d9:d6: f1:86:18:69:2f:a0:ee:10:cb:48:54:3f:31:e8:d9: 90:42:dd:27:27:4c:e6:88:c4:c9:c3:19:ce:4e:9c: 4a:c9:5d:c7:43:ef:53:62:78:a8:ab:08:05:f2:8e: a9:b2:88:f5:9d:99:87:67:80:34:2e:92:a9:80:b9: 5d:4e:4b:6c:92:4a:c9:e4:df:02:52:9d:4f:42:32: 70:c8:10:b0:c6:43:b9:dd:6e:b8:bf:d0:5d:cd:46: 30:43:94:34:71:aa:91:62:fc:c9:0a:96:2e:82:42: 6f:a6:62:ae:f8:a4:c0:1d:5a:65:06:5d:e4:9f:e5: 75:b1:aa:5f:cd:e3:70:bf:33:74:4f:14:d4:f4:cc: 6e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:04:17:3E:9A:00:3F:3C:C4:63:6D:DC:96:69:CD:5C:33:33:28:82 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/UgQXPpoAPzzEY23clmnNXDMzKII.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.98.231.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:d6:b7:1b:cf:43:c2:f3:91:f6:52:21:43:9a:85:3f:de:bc: c9:bf:d4:a4:59:9c:1a:63:9e:1e:b1:f6:81:76:a4:fe:26:36: c7:83:6b:ef:b6:fc:07:0c:92:e2:eb:b5:1b:4f:09:9d:20:19: 19:29:50:ea:41:4c:44:96:c7:78:b6:a9:9d:0d:c7:ee:48:9f: 7e:86:9f:e7:67:33:e5:5e:96:28:8d:fd:6e:55:fb:d6:7a:73: 88:5f:70:7a:c4:e6:40:22:5e:57:71:b6:25:af:bb:1f:7c:9c: 7f:7b:5f:fa:71:a6:f4:d4:68:ff:17:8c:e0:25:8f:65:f9:44: ae:fa:1e:6f:8e:1d:07:1d:5b:9b:de:b2:70:04:ff:e6:4e:07: e1:50:54:53:3d:72:67:7f:31:df:b6:6c:22:a3:d9:0a:1d:0e: da:3f:ca:52:87:0f:d4:a7:9c:66:cb:4c:cf:d5:0d:51:f7:7e: de:76:c5:42:be:bf:7b:73:8d:a0:3a:c4:1c:cd:75:9e:ec:51: 70:9e:54:fb:41:84:ab:6f:33:fb:65:6c:d8:dc:e0:41:c3:52: 66:1e:71:a6:3d:53:b4:99:48:a6:ce:f0:8d:74:2c:d1:cd:e6: b5:ea:36:03:82:81:e4:23:b1:44:6f:5c:b5:78:42:b9:65:3f: b8:1a:84:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJn5blf9BkQqxWr+5LsGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwMTAyMTAxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjA0MTczZTlhMDAzZjNjYzQ2MzZkZGM5NjY5Y2Q1YzMzMzMyODgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkz2x9+S8WEeqGRzKnr55PYwTFp5 Ygo2FX03OOL7mvOZ3yEMq/yjbcRLGWz2dLmq36Xjziq8Ed7pJaFANaAbKlpMW45S XUDwxyL0aPPcV7+HItht9x9YygZrHnsYJGHMiWXdafWzk5qNgbEFgznZ2Hu4gpas 2dbxhhhpL6DuEMtIVD8x6NmQQt0nJ0zmiMTJwxnOTpxKyV3HQ+9TYnioqwgF8o6p soj1nZmHZ4A0LpKpgLldTktskkrJ5N8CUp1PQjJwyBCwxkO53W64v9BdzUYwQ5Q0 caqRYvzJCpYugkJvpmKu+KTAHVplBl3kn+V1sapfzeNwvzN0TxTU9MxuWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFIEFz6aAD88xGNt3JZpzVwzMyiCMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvVWdRWFBwb0FQenpFWTIzY2xtbk5YRE16S0lJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUmLnMA0G CSqGSIb3DQEBCwUAA4IBAQCK1rcbz0PC85H2UiFDmoU/3rzJv9SkWZwaY54esfaB dqT+JjbHg2vvtvwHDJLi67UbTwmdIBkZKVDqQUxElsd4tqmdDcfuSJ9+hp/nZzPl XpYojf1uVfvWenOIX3B6xOZAIl5XcbYlr7sffJx/e1/6cab01Gj/F4zgJY9l+USu +h5vjh0HHVub3rJwBP/mTgfhUFRTPXJnfzHftmwio9kKHQ7aP8pShw/Up5xmy0zP 1Q1R937edsVCvr97c42gOsQczXWe7FFwnlT7QYSrbzP7ZWzY3OBBw1JmHnGmPVO0 mUimzvCNdCzRzea16jYDgoHkI7FEb1y1eEK5ZT+4GoSZ -----END CERTIFICATE-----Generated at Thu Feb 5 13:55:01 2026 by rpki-client