This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/UKVuaZT-fIhAYRE--KS1JXgEI5w.roa File: UKVuaZT-fIhAYRE--KS1JXgEI5w.roa (raw, json) Hash identifier: qANtGtC8GTKRt8lbxEEUc7wS2p1Z1IZ7nTh4IusFBX8= Subject key identifier: 50:A5:6E:69:94:FE:7C:88:40:61:11:3E:F8:A4:B5:25:78:04:23:9C Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC86004CE3F83A04D75C52CF773382F Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/UKVuaZT-fIhAYRE--KS1JXgEI5w.roa Signing time: Thu 01 Jan 2026 18:18:30 +0000 ROA not before: Thu 01 Jan 2026 18:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209043 IP address blocks: 94.229.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:60:04:ce:3f:83:a0:4d:75:c5:2c:f7:73:38:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50a56e6994fe7c884061113ef8a4b5257804239c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:bc:c0:13:b7:01:8b:8a:0f:7e:fd:6f:3f:f5: 7c:1f:7a:3b:1d:9a:f6:ee:2a:55:73:ea:3d:bf:78: 63:6d:2c:72:2d:b5:0b:1f:2e:3b:6d:c5:de:38:64: 3d:28:2b:d1:6a:c1:e7:3b:8d:d4:b4:d9:62:2d:e5: f6:10:89:65:fa:f1:55:b2:51:e7:3b:b1:ae:3b:5d: ac:38:63:60:21:3b:38:9e:ea:e0:c6:fa:6d:55:dc: 5e:e1:69:b1:50:af:f5:70:94:30:53:47:53:0e:91: ca:cd:70:26:c0:d4:40:c8:30:00:e6:22:3d:d3:ee: 11:ea:f9:9b:72:08:7c:e6:05:25:e3:c7:13:c9:73: 0d:93:73:4b:b2:27:a9:7e:a5:36:80:99:cf:4a:5a: c4:5d:49:91:71:ba:48:3e:7b:59:8b:ad:95:03:9d: 66:73:ba:72:0b:d6:51:d1:e0:a1:92:cb:1b:db:b6: 20:9d:17:23:98:e6:de:ce:57:7e:a4:01:d2:91:8f: e8:0e:3c:12:c3:ee:35:54:aa:91:01:f6:5a:62:72: ce:da:51:ac:46:8c:1a:d2:38:3c:17:97:0b:57:bf: 86:07:8d:16:2a:58:94:72:2f:b2:4e:e5:3b:72:e9: 19:19:dc:30:00:1c:59:b8:56:e0:30:fc:b0:e3:31: eb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A5:6E:69:94:FE:7C:88:40:61:11:3E:F8:A4:B5:25:78:04:23:9C X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/UKVuaZT-fIhAYRE--KS1JXgEI5w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.229.210.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:c5:4e:b3:bd:7f:3b:7e:d5:b0:b1:4e:58:5e:f3:8e:1d:77: c9:47:d1:e5:75:ac:2c:22:35:76:b8:6d:42:57:41:27:1c:98: e7:c1:ac:ad:d0:b5:96:c8:8c:9a:ce:76:c3:e2:7d:b0:6d:99: 10:03:26:4f:c9:79:e1:6c:96:8c:0c:0c:0b:52:48:1d:61:f6: 9c:77:97:c2:14:80:ca:0f:b2:89:ae:f8:7b:93:47:de:8c:ab: a3:1b:22:53:bb:ce:c3:a5:a9:9f:86:be:59:c8:75:b8:58:8b: d4:e2:a9:58:b4:3c:de:40:de:48:8e:51:d8:a4:91:c7:1b:72: a6:47:5c:61:34:d7:7c:f5:f7:e5:da:80:ff:26:83:05:d4:23: 15:78:26:9b:1a:26:47:85:d4:62:d0:2f:6e:68:a2:82:50:34: 74:81:7d:72:14:e0:b5:33:09:a2:8e:03:3d:d5:0a:cf:93:46: bb:71:7a:9f:e8:a8:de:42:32:33:a3:d1:51:d6:1f:b0:6b:63: 8e:e6:23:80:27:2f:9c:68:27:9b:f4:70:bb:8f:80:13:61:42: 20:51:d9:4f:c9:2d:7c:52:24:a6:45:ba:fb:c5:ef:a1:da:52: 32:5c:d9:97:26:96:d6:51:12:ea:17:fb:85:48:47:e8:9c:7b: d4:37:07:5c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yGAEzj+DoE11xSz3czgvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGE1NmU2OTk0ZmU3Yzg4NDA2MTExM2VmOGE0YjUyNTc4MDQyMzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bzAE7cBi4oPfv1vP/V8H3o7HZr2 7ipVc+o9v3hjbSxyLbULHy47bcXeOGQ9KCvRasHnO43UtNliLeX2EIll+vFVslHn O7GuO12sOGNgITs4nurgxvptVdxe4WmxUK/1cJQwU0dTDpHKzXAmwNRAyDAA5iI9 0+4R6vmbcgh85gUl48cTyXMNk3NLsiepfqU2gJnPSlrEXUmRcbpIPntZi62VA51m c7pyC9ZR0eChkssb27YgnRcjmObezld+pAHSkY/oDjwSw+41VKqRAfZaYnLO2lGs Rowa0jg8F5cLV7+GB40WKliUci+yTuU7cukZGdwwABxZuFbgMPyw4zHrnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFClbmmU/nyIQGERPviktSV4BCOcMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvVUtWdWFaVC1mSWhBWVJFLS1LUzFKWGdFSTV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXuXSMA0G CSqGSIb3DQEBCwUAA4IBAQAsxU6zvX87ftWwsU5YXvOOHXfJR9HldawsIjV2uG1C V0EnHJjnwayt0LWWyIyaznbD4n2wbZkQAyZPyXnhbJaMDAwLUkgdYfacd5fCFIDK D7KJrvh7k0fejKujGyJTu87Dpamfhr5ZyHW4WIvU4qlYtDzeQN5IjlHYpJHHG3Km R1xhNNd89ffl2oD/JoMF1CMVeCabGiZHhdRi0C9uaKKCUDR0gX1yFOC1MwmijgM9 1QrPk0a7cXqf6KjeQjIzo9FR1h+wa2OO5iOAJy+caCeb9HC7j4ATYUIgUdlPyS18 UiSmRbr7xe+h2lIyXNmXJpbWURLqF/uFSEfonHvUNwdc -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:18 2026 by rpki-client