This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/UO3-ECp44i-4NHov7ZcCJgmk2iw.roa File: UO3-ECp44i-4NHov7ZcCJgmk2iw.roa (raw, json) Hash identifier: pq04zRZsIbyhYdzYcYCke50JhIGeXTbV4hV+QB02Ah0= Subject key identifier: 50:ED:FE:10:2A:78:E2:2F:B8:34:7A:2F:ED:97:02:26:09:A4:DA:2C Certificate issuer: /CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a Certificate serial: 019C09EB2534E7A475A495B533D0A71E8D4E Authority key identifier: 30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/UO3-ECp44i-4NHov7ZcCJgmk2iw.roa Signing time: Thu 29 Jan 2026 13:22:11 +0000 ROA not before: Thu 29 Jan 2026 13:22:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214790 IP address blocks: 185.223.168.0/24 maxlen: 24 185.223.169.0/24 maxlen: 24 185.223.170.0/24 maxlen: 24 185.223.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:09:eb:25:34:e7:a4:75:a4:95:b5:33:d0:a7:1e:8d:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a Validity Not Before: Jan 29 13:22:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50edfe102a78e22fb8347a2fed97022609a4da2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:34:b6:72:ec:4a:45:c3:96:6e:b5:b9:75:ad: 4b:0b:b6:92:6f:e3:a2:89:a4:3d:59:4d:01:f8:6f: 78:76:35:80:c0:61:e7:42:60:a8:cd:0c:e0:1a:e4: 32:e1:5e:f5:e3:b8:37:76:cc:25:f7:77:23:b1:31: fa:69:9e:34:8f:58:8f:0e:df:ea:ab:e5:88:be:54: 9f:4c:50:d1:a0:95:32:e6:bc:ad:10:b0:60:54:f1: ab:59:2b:8e:7d:11:2b:60:ea:15:3e:a3:3b:0d:a1: 21:08:00:2e:7c:3a:ec:27:46:0c:b8:0d:64:cc:d9: c9:93:4a:46:07:c3:62:7c:5d:0b:cf:52:e8:8c:ef: ce:a5:f0:36:7f:28:44:85:ce:e7:f5:05:eb:41:38: 5d:71:3d:3a:2a:16:74:e4:c6:d9:d8:70:74:71:9a: f0:b9:a6:09:62:d2:a1:d7:51:04:f5:ff:6b:fc:91: d1:e9:38:a6:ae:48:9b:e6:ea:d2:f8:2f:63:95:9f: 02:13:78:16:19:04:d6:cf:64:e8:93:a1:b7:98:8b: e4:26:cc:9a:19:18:c1:2a:21:6d:ed:df:4e:a2:48: 35:ee:ea:e0:11:de:a1:0d:91:3c:60:ca:39:52:78: 60:37:9b:84:c7:dc:4a:c3:c0:23:c0:20:11:f0:07: 4b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:ED:FE:10:2A:78:E2:2F:B8:34:7A:2F:ED:97:02:26:09:A4:DA:2C X509v3 Authority Key Identifier: keyid:30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/UO3-ECp44i-4NHov7ZcCJgmk2iw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.223.168.0/22 Signature Algorithm: sha256WithRSAEncryption a7:e2:ec:54:4c:18:52:6c:fb:c7:d4:d5:fc:7e:52:f8:d1:d7: c6:97:85:f9:62:67:f2:bb:18:46:80:15:49:73:84:75:a2:a1: a2:26:be:7e:40:c9:c6:02:8d:81:6d:70:d6:85:80:35:b3:82: bf:fd:37:63:02:d3:89:34:86:e8:b7:c7:e0:d6:c3:32:9c:d5: 60:07:db:c3:23:90:95:50:cc:48:3e:83:fa:ee:2e:48:81:a1: 33:98:ba:df:d6:1a:82:1b:1e:6f:33:71:3f:05:ea:e7:2d:b0: 92:5a:ea:00:06:1d:c9:7c:ff:f0:98:d7:f3:64:32:77:ea:35: 58:29:4b:c7:e6:f6:a4:33:a1:1e:b0:93:d2:29:63:fb:5b:67: bd:c3:45:c8:8e:9b:75:ab:b5:d8:79:94:90:2b:3c:b4:e5:7b: df:6a:97:57:c8:19:f4:d6:a5:35:c4:5c:e6:94:48:88:da:db: 6d:f3:d0:7e:41:9c:bb:ee:7c:b4:81:86:02:9f:1a:ad:d4:3c: e2:87:f9:4d:b0:d8:a9:64:a1:0f:46:bc:cf:1b:43:6c:dc:47: 13:85:0b:78:22:0b:f5:9c:ab:bc:a9:1d:ae:a2:9f:52:3b:35: c4:a5:8f:53:61:e9:69:73:64:9f:24:48:5c:70:0e:ce:3d:12: 21:d5:66:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwJ6yU056R1pJW1M9CnHo1OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwODdkMmUxY2MwOGE5NTE3NGJmNzk0ZTJmMmRlNmUzZDAz ZWY4MmEwHhcNMjYwMTI5MTMyMjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGVkZmUxMDJhNzhlMjJmYjgzNDdhMmZlZDk3MDIyNjA5YTRkYTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTS2cuxKRcOWbrW5da1LC7aSb+Oi iaQ9WU0B+G94djWAwGHnQmCozQzgGuQy4V7147g3dswl93cjsTH6aZ40j1iPDt/q q+WIvlSfTFDRoJUy5rytELBgVPGrWSuOfRErYOoVPqM7DaEhCAAufDrsJ0YMuA1k zNnJk0pGB8NifF0Lz1LojO/OpfA2fyhEhc7n9QXrQThdcT06KhZ05MbZ2HB0cZrw uaYJYtKh11EE9f9r/JHR6Timrkib5urS+C9jlZ8CE3gWGQTWz2Tok6G3mIvkJsya GRjBKiFt7d9Ookg17urgEd6hDZE8YMo5UnhgN5uEx9xKw8AjwCAR8AdL/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFDt/hAqeOIvuDR6L+2XAiYJpNosMB8GA1UdIwQY MBaAFDCH0uHMCKlRdL95Ti8t5uPQPvgqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYmE5YTYtZjYxNi00ZTc0LTk2N2Qt N2U3MTkwZmZjNGM5LzEvVU8zLUVDcDQ0aS00TkhvdjdaY0NKZ21rMml3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8xYmE5YTYtZjYxNi00ZTc0LTk2N2QtN2U3MTkwZmZjNGM5 LzEvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCud+oMA0G CSqGSIb3DQEBCwUAA4IBAQCn4uxUTBhSbPvH1NX8flL40dfGl4X5YmfyuxhGgBVJ c4R1oqGiJr5+QMnGAo2BbXDWhYA1s4K//TdjAtOJNIbot8fg1sMynNVgB9vDI5CV UMxIPoP67i5IgaEzmLrf1hqCGx5vM3E/BernLbCSWuoABh3JfP/wmNfzZDJ36jVY KUvH5vakM6EesJPSKWP7W2e9w0XIjpt1q7XYeZSQKzy05XvfapdXyBn01qU1xFzm lEiI2ttt89B+QZy77ny0gYYCnxqt1Dzih/lNsNipZKEPRrzPG0Ns3EcThQt4Igv1 nKu8qR2uop9SOzXEpY9TYelpc2SfJEhccA7OPRIh1Wab -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:09 2026 by rpki-client