This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/UBpgPjM3yRmgwemDq3QYP18QkYo.roa File: UBpgPjM3yRmgwemDq3QYP18QkYo.roa (raw, json) Hash identifier: jWc6UT2OLEpce0CtdDSaREbwCX66QN3mFlzXw7dYxS4= Subject key identifier: 50:1A:60:3E:33:37:C9:19:A0:C1:E9:83:AB:74:18:3F:5F:10:91:8A Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019C22BE1E53D75D0B31B8B7CF109B131247 Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/UBpgPjM3yRmgwemDq3QYP18QkYo.roa Signing time: Tue 03 Feb 2026 09:03:30 +0000 ROA not before: Tue 03 Feb 2026 09:03:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44477 IP address blocks: 85.142.231.0/24 maxlen: 24 85.142.234.0/23 maxlen: 24 85.142.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 09:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:22:be:1e:53:d7:5d:0b:31:b8:b7:cf:10:9b:13:12:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Feb 3 09:03:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=501a603e3337c919a0c1e983ab74183f5f10918a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:53:0d:79:ec:d8:27:1a:b3:28:bd:a5:34:fb: 31:af:ce:5e:f9:dd:44:99:a3:38:dd:24:bd:0d:50: d4:64:b3:62:1b:43:04:7e:51:25:23:17:c8:2f:f7: d2:63:44:f6:5f:3d:6e:df:13:6e:1c:c8:84:3f:7f: b6:e4:6d:fa:f8:7e:eb:c3:ed:3c:eb:d2:8c:57:7d: fc:97:0a:cc:18:a8:06:42:57:6f:ad:6b:4d:1b:6e: 32:bc:06:25:b5:b4:e5:8d:d9:a5:36:0d:af:15:b3: d7:82:4c:8a:51:22:c1:ce:70:52:61:6f:e3:a2:bc: 42:e8:4c:d5:55:64:3b:74:f4:c3:bc:00:64:ae:fa: e0:3e:42:38:82:ea:c1:f1:7c:31:96:7c:11:cb:07: 67:b0:b7:24:42:ff:fd:e8:f8:69:b9:bc:a4:24:c9: d4:7d:bd:b4:ca:ba:04:6e:87:2c:7c:24:17:9b:28: 31:f1:53:75:d0:4c:58:47:57:a6:75:16:03:59:c5: 8b:c0:ae:67:54:de:e9:dd:ef:07:ca:9a:4c:f6:bf: 27:2b:8f:bc:cc:1d:2d:ea:8d:d8:b8:2d:88:c0:36: 70:5f:4b:d8:5b:39:e2:a5:8b:57:fa:c2:80:3a:88: a0:0e:50:8f:01:ef:57:bf:76:95:f2:4a:f5:44:b3: 39:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1A:60:3E:33:37:C9:19:A0:C1:E9:83:AB:74:18:3F:5F:10:91:8A X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/UBpgPjM3yRmgwemDq3QYP18QkYo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.142.231.0/24 85.142.234.0-85.142.239.255 Signature Algorithm: sha256WithRSAEncryption 93:d5:72:33:74:39:4c:98:f3:b3:73:b1:c8:c4:68:d9:1e:6e: fa:fb:5e:4f:7c:c7:45:1b:2e:39:8d:fb:3f:d7:e7:1b:b2:fb: 4c:c6:c7:99:75:de:f0:6e:ac:48:54:ee:33:a0:19:1a:72:42: 60:7b:0d:73:3b:68:f6:2b:9f:b9:a6:3a:c4:1d:7c:68:d0:fa: 15:51:c8:ce:e6:aa:44:fa:2c:1c:ea:0e:6c:a0:15:82:a8:e7: ca:d8:56:84:99:67:cf:7f:f9:61:dd:a8:e0:bf:8d:73:d9:1c: a7:b5:7a:a4:57:9a:b9:e9:c7:7b:fb:ca:d5:20:fd:bd:d8:d4: a4:96:3d:5c:a1:54:2b:78:78:79:a2:68:3f:dc:b8:1f:ff:64: 2b:aa:ec:33:ca:0b:62:ec:d2:b9:7c:67:c8:65:36:10:de:69: 0d:79:5d:31:2f:c0:e1:f8:5d:69:65:2b:f0:73:f5:a7:f2:29: 4e:a7:c2:80:8c:3a:6b:bf:ea:1d:19:a2:14:86:7b:60:25:52: a7:a7:b2:f3:04:87:13:1b:57:67:e3:b9:11:06:bf:dd:dd:00: ef:b0:90:ba:60:36:cc:ca:80:52:e9:68:04:87:cd:c1:f3:f0: ec:c5:60:14:59:b6:0c:e1:0d:c8:e6:fa:4a:08:61:82:36:ca: 27:6d:5d:83 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZwivh5T110LMbi3zxCbExJHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMjAzMDkwMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDFhNjAzZTMzMzdjOTE5YTBjMWU5ODNhYjc0MTgzZjVmMTA5MThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1MNeezYJxqzKL2lNPsxr85e+d1E maM43SS9DVDUZLNiG0MEflElIxfIL/fSY0T2Xz1u3xNuHMiEP3+25G36+H7rw+08 69KMV338lwrMGKgGQldvrWtNG24yvAYltbTljdmlNg2vFbPXgkyKUSLBznBSYW/j orxC6EzVVWQ7dPTDvABkrvrgPkI4gurB8XwxlnwRywdnsLckQv/96PhpubykJMnU fb20yroEbocsfCQXmygx8VN10ExYR1emdRYDWcWLwK5nVN7p3e8HyppM9r8nK4+8 zB0t6o3YuC2IwDZwX0vYWznipYtX+sKAOoigDlCPAe9Xv3aV8kr1RLM52wIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFFAaYD4zN8kZoMHpg6t0GD9fEJGKMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvVUJwZ1BqTTN5Um1nd2VtRHEzUVlQMThRa1lvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAVY7nMAwD BAFVjuoDBARVjuAwDQYJKoZIhvcNAQELBQADggEBAJPVcjN0OUyY87NzscjEaNke bvr7Xk98x0UbLjmN+z/X5xuy+0zGx5l13vBurEhU7jOgGRpyQmB7DXM7aPYrn7mm OsQdfGjQ+hVRyM7mqkT6LBzqDmygFYKo58rYVoSZZ89/+WHdqOC/jXPZHKe1eqRX mrnpx3v7ytUg/b3Y1KSWPVyhVCt4eHmiaD/cuB//ZCuq7DPKC2Ls0rl8Z8hlNhDe aQ15XTEvwOH4XWllK/Bz9afyKU6nwoCMOmu/6h0ZohSGe2AlUqensvMEhxMbV2fj uREGv93dAO+wkLpgNszKgFLpaASHzcHz8OzFYBRZtgzhDcjm+koIYYI2yidtXYM= -----END CERTIFICATE-----Generated at Sat Feb 7 18:35:02 2026 by rpki-client