This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/UlilGon0YKDf0xdX5d2N-ep_o1o.roa File: UlilGon0YKDf0xdX5d2N-ep_o1o.roa (raw, json) Hash identifier: kcQzP6cGo7ynAzpkGcfKXnwKfZQwJn7rzspiaXGt8Ao= Subject key identifier: 52:58:A5:1A:89:F4:60:A0:DF:D3:17:57:E5:DD:8D:F9:EA:7F:A3:5A Certificate issuer: /CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123 Certificate serial: 019C0C39F40218E8C7867DE99F044F7789EB Authority key identifier: 29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/UlilGon0YKDf0xdX5d2N-ep_o1o.roa Signing time: Fri 30 Jan 2026 00:07:30 +0000 ROA not before: Fri 30 Jan 2026 00:07:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 393439 IP address blocks: 81.85.160.0/22 maxlen: 22 81.85.162.0/24 maxlen: 24 81.85.164.0/24 maxlen: 24 81.85.165.0/24 maxlen: 24 81.85.166.0/24 maxlen: 24 81.85.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0c:39:f4:02:18:e8:c7:86:7d:e9:9f:04:4f:77:89:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123 Validity Not Before: Jan 30 00:07:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5258a51a89f460a0dfd31757e5dd8df9ea7fa35a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6a:8e:8a:73:2d:60:f5:38:8b:9e:2c:3b:17: ee:c3:ca:90:2f:45:b3:49:54:b1:d4:81:73:9a:bf: 0e:e4:50:96:c3:2b:ec:d1:69:eb:45:37:57:ee:41: 52:57:c9:d6:3b:3f:74:23:cd:6c:94:05:2f:4e:49: c9:9c:08:06:b4:e3:4e:b9:0f:94:e2:a4:80:b3:fe: 04:de:2f:28:b2:30:43:00:75:18:6a:3a:d2:35:17: 76:a2:e1:b0:32:46:ca:f7:3a:ce:91:1b:a4:f2:78: 78:d7:a8:ac:44:f9:5b:59:70:1c:8c:6d:94:51:9a: c8:eb:39:f3:d5:6a:8e:fe:d3:0c:ae:f7:61:59:b4: d1:c1:41:39:eb:86:14:c0:2a:8a:31:21:65:df:50: 96:2e:d8:dc:25:c9:9a:0b:22:81:f2:d0:f5:34:7b: 57:fb:63:6e:21:3e:32:2f:42:7a:e9:59:68:eb:08: b0:a0:80:a8:7c:a2:29:aa:40:7b:9a:72:98:a4:c9: e2:d3:78:eb:bf:e1:3a:1e:51:e0:c0:64:54:58:38: 3f:e8:66:a3:40:b8:cf:8c:29:18:08:45:94:b3:b2: a7:d1:40:6d:a0:6e:eb:8b:c0:52:19:db:13:ff:01: 8e:68:82:76:26:68:5e:41:a3:1e:f8:1f:a1:d4:24: d9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:58:A5:1A:89:F4:60:A0:DF:D3:17:57:E5:DD:8D:F9:EA:7F:A3:5A X509v3 Authority Key Identifier: keyid:29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/UlilGon0YKDf0xdX5d2N-ep_o1o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.85.160.0-81.85.166.255 81.85.168.0/21 Signature Algorithm: sha256WithRSAEncryption 1d:67:f1:43:d4:3d:d2:8e:7b:09:41:9e:94:69:cd:ab:4e:44: ac:dc:17:05:d3:bb:6d:8e:8f:bd:d1:44:ba:60:50:30:c7:27: 41:27:e5:ed:44:c5:a4:5c:cc:eb:53:43:20:74:57:ce:43:b9: 48:7d:a0:a3:1d:56:04:d9:d2:39:83:7c:95:ac:69:55:32:2c: 24:7a:8c:f9:10:c4:0f:73:27:fd:f6:c5:eb:35:6b:26:38:34: 2d:7a:f8:5e:dd:a5:9e:ee:09:e6:4f:c3:05:26:73:5a:4e:3a: da:52:80:b0:e2:0c:d5:f5:ab:6b:9a:f4:37:df:7c:17:94:94: 50:db:b5:87:a6:3f:c0:c2:19:ba:68:11:9f:9b:ca:c3:87:29: 4c:33:59:86:8a:aa:88:2f:74:49:0b:99:77:5f:6b:75:bf:5e: 1b:92:8e:00:50:5b:80:2e:3e:e6:87:53:2b:24:31:6d:f2:63: 45:5f:9b:e3:f8:00:67:31:e4:ce:73:d5:83:dd:a8:68:88:4f: e8:b9:e6:0c:8d:8a:0b:a9:23:46:27:d5:c5:fc:ed:54:9a:92: a5:3e:71:f6:94:cc:a0:82:e1:ca:ee:ea:1c:17:9c:58:ac:ca: bd:05:02:1b:1c:a2:bd:2a:a9:e6:de:40:c2:30:f9:cd:ed:8f: 17:20:aa:ed -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZwMOfQCGOjHhn3pnwRPd4nrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZjZhMzAwYmY3ZDQwYjdmOGQ2MTgxYzViOGE3ZGJjNzFi N2QxMjMwHhcNMjYwMTMwMDAwNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjU4YTUxYTg5ZjQ2MGEwZGZkMzE3NTdlNWRkOGRmOWVhN2ZhMzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGqOinMtYPU4i54sOxfuw8qQL0Wz SVSx1IFzmr8O5FCWwyvs0WnrRTdX7kFSV8nWOz90I81slAUvTknJnAgGtONOuQ+U 4qSAs/4E3i8osjBDAHUYajrSNRd2ouGwMkbK9zrOkRuk8nh416isRPlbWXAcjG2U UZrI6znz1WqO/tMMrvdhWbTRwUE564YUwCqKMSFl31CWLtjcJcmaCyKB8tD1NHtX +2NuIT4yL0J66Vlo6wiwoICofKIpqkB7mnKYpMni03jrv+E6HlHgwGRUWDg/6Gaj QLjPjCkYCEWUs7Kn0UBtoG7ri8BSGdsT/wGOaIJ2JmheQaMe+B+h1CTZ4wIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFFJYpRqJ9GCg39MXV+Xdjfnqf6NaMB8GA1UdIwQY MBaAFCn2owC/fUC3+NYYHFuKfbxxt9EjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZhakFMOTlRTGY0MWhnY1c0cDl2SEczMFNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hYWY0OWMtODNkZC00NmFhLThjZTct Yjg0YzQxM2RmYWE0LzEvVWxpbEdvbjBZS0RmMHhkWDVkMk4tZXBfbzFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hYWY0OWMtODNkZC00NmFhLThjZTctYjg0YzQxM2RmYWE0 LzEvS2ZhakFMOTlRTGY0MWhnY1c0cDl2SEczMFNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAVRVaAD BABRVaYDBANRVagwDQYJKoZIhvcNAQELBQADggEBAB1n8UPUPdKOewlBnpRpzatO RKzcFwXTu22Oj73RRLpgUDDHJ0En5e1ExaRczOtTQyB0V85DuUh9oKMdVgTZ0jmD fJWsaVUyLCR6jPkQxA9zJ/32xes1ayY4NC16+F7dpZ7uCeZPwwUmc1pOOtpSgLDi DNX1q2ua9DfffBeUlFDbtYemP8DCGbpoEZ+bysOHKUwzWYaKqogvdEkLmXdfa3W/ XhuSjgBQW4AuPuaHUyskMW3yY0Vfm+P4AGcx5M5z1YPdqGiIT+i55gyNigupI0Yn 1cX87VSakqU+cfaUzKCC4cru6hwXnFisyr0FAhscor0qqebeQMIw+c3tjxcgqu0= -----END CERTIFICATE-----Generated at Fri Jan 30 22:07:34 2026 by rpki-client