This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/ukKanfspjPtogwslBOvKVuFlnzU.roa File: ukKanfspjPtogwslBOvKVuFlnzU.roa (raw, json) Hash identifier: VJCtLd80BTyZ1jJxvamfRrMpjXu4ufEwo/wpl1CsYuI= Subject key identifier: BA:42:9A:9D:FB:29:8C:FB:68:83:0B:25:04:EB:CA:56:E1:65:9F:35 Certificate issuer: /CN=0df0d62dee3a14a06e52b7ef7a0830338d9d7751 Certificate serial: 019BBBA2A6197437F4A3FB2A848BBDA5D599 Authority key identifier: 0D:F0:D6:2D:EE:3A:14:A0:6E:52:B7:EF:7A:08:30:33:8D:9D:77:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/ukKanfspjPtogwslBOvKVuFlnzU.roa Signing time: Wed 14 Jan 2026 08:32:37 +0000 ROA not before: Wed 14 Jan 2026 08:32:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209023 IP address blocks: 45.9.36.0/22 maxlen: 22 188.93.37.0/24 maxlen: 24 188.213.219.0/24 maxlen: 24 188.213.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bb:a2:a6:19:74:37:f4:a3:fb:2a:84:8b:bd:a5:d5:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0df0d62dee3a14a06e52b7ef7a0830338d9d7751 Validity Not Before: Jan 14 08:32:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba429a9dfb298cfb68830b2504ebca56e1659f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f4:3c:35:17:18:1d:b6:8e:d0:fa:df:86:17: c5:39:cf:97:1f:20:34:f6:5e:7b:b2:f8:64:5a:05: a1:7c:bf:15:3d:57:94:a8:e9:de:61:7c:36:1e:f1: 14:9e:bb:94:54:b5:91:8d:02:14:03:3c:cc:4e:74: ed:54:e6:0b:cb:f8:c8:fa:c4:51:0b:64:dd:13:a8: c3:44:12:82:61:84:a1:23:99:46:37:e7:49:98:23: ba:0c:f0:dd:be:aa:7a:12:3d:92:f0:c2:d8:f7:49: c4:41:0b:be:21:d6:67:d3:85:7e:df:6f:22:91:bb: ed:2e:d7:53:dc:95:00:bd:50:6b:87:62:8e:a9:7b: 80:3f:5a:91:6b:ad:c4:50:4b:00:28:23:37:82:6e: 15:33:49:10:ac:b6:e3:7c:31:e2:df:43:18:2f:5d: ce:71:ef:22:89:73:e2:41:e6:f1:ff:76:1d:e8:0e: 2e:6e:74:e1:26:69:b9:ca:2e:ba:f3:27:3f:80:a6: 21:3e:1a:36:c6:50:bc:53:7b:5f:a4:66:e7:e3:44: 3f:22:96:73:6b:86:e0:63:bf:ca:88:7b:55:05:fc: d6:e9:5f:6f:23:06:86:1b:17:a3:77:f7:c5:df:cf: ff:a9:31:89:e8:a4:e7:0a:e6:12:45:3c:ed:14:6e: 8e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:42:9A:9D:FB:29:8C:FB:68:83:0B:25:04:EB:CA:56:E1:65:9F:35 X509v3 Authority Key Identifier: keyid:0D:F0:D6:2D:EE:3A:14:A0:6E:52:B7:EF:7A:08:30:33:8D:9D:77:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/ukKanfspjPtogwslBOvKVuFlnzU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.36.0/22 188.93.37.0/24 188.213.219.0/24 188.213.240.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:69:e6:cd:84:e0:d6:c0:d6:7e:41:be:48:67:ec:39:c0:95: 4f:97:1a:55:9d:89:6a:79:ce:26:bf:a2:23:bf:cf:8b:bf:63: 1a:ed:5a:0a:35:7e:f8:87:47:c9:c4:02:dc:79:fb:b9:4e:af: e2:5e:de:d9:c4:a5:c2:f6:27:e5:d7:9b:26:ae:c1:42:30:f6: 22:74:7a:a1:da:50:69:64:ac:67:d1:ee:26:57:d6:57:30:ca: 24:51:4e:40:fe:f1:05:1e:eb:79:3f:36:97:37:f3:40:28:99: 74:87:f6:02:0c:76:ef:ec:50:c0:ec:c0:55:da:dc:1d:fe:25: 9d:02:c8:0e:21:f1:56:ea:72:4a:77:b1:46:f4:2d:84:5e:8f: 83:ad:ba:73:29:72:48:f7:24:7d:91:e7:e9:2a:42:bc:d0:ba: 45:04:ca:a5:98:66:4a:97:1b:db:59:88:9f:20:a5:db:16:56: 04:d2:49:08:e7:30:32:d3:de:76:9d:18:09:74:29:08:57:45: 78:a2:04:ec:e4:b7:ac:31:89:5d:6e:d4:d3:f3:ae:92:f1:a8: d0:09:78:bc:74:b7:67:83:e6:5c:4e:ea:d9:a0:52:cc:fa:10: 6d:d4:21:c8:99:07:28:30:9b:df:50:e7:ad:29:c7:f1:ba:a5: e5:a8:5e:27 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZu7oqYZdDf0o/sqhIu9pdWZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZjBkNjJkZWUzYTE0YTA2ZTUyYjdlZjdhMDgzMDMzOGQ5 ZDc3NTEwHhcNMjYwMTE0MDgzMjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTQyOWE5ZGZiMjk4Y2ZiNjg4MzBiMjUwNGViY2E1NmUxNjU5ZjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvQ8NRcYHbaO0PrfhhfFOc+XHyA0 9l57svhkWgWhfL8VPVeUqOneYXw2HvEUnruUVLWRjQIUAzzMTnTtVOYLy/jI+sRR C2TdE6jDRBKCYYShI5lGN+dJmCO6DPDdvqp6Ej2S8MLY90nEQQu+IdZn04V+328i kbvtLtdT3JUAvVBrh2KOqXuAP1qRa63EUEsAKCM3gm4VM0kQrLbjfDHi30MYL13O ce8iiXPiQebx/3Yd6A4ubnThJmm5yi668yc/gKYhPho2xlC8U3tfpGbn40Q/IpZz a4bgY7/KiHtVBfzW6V9vIwaGGxejd/fF38//qTGJ6KTnCuYSRTztFG6O/QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLpCmp37KYz7aIMLJQTrylbhZZ81MB8GA1UdIwQY MBaAFA3w1i3uOhSgblK373oIMDONnXdRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGZEV0xlNDZGS0J1VXJmdmVnZ3dNNDJkZDFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xMGRhYzktMjdlOC00YTNiLWI0MWMt NTE4NGNkNmZjMjEzLzEvdWtLYW5mc3BqUHRvZ3dzbEJPdktWdUZsbnpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xMGRhYzktMjdlOC00YTNiLWI0MWMtNTE4NGNkNmZjMjEz LzEvRGZEV0xlNDZGS0J1VXJmdmVnZ3dNNDJkZDFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCLQkkAwQA vF0lAwQAvNXbAwQAvNXwMA0GCSqGSIb3DQEBCwUAA4IBAQBsaebNhODWwNZ+Qb5I Z+w5wJVPlxpVnYlqec4mv6Ijv8+Lv2Ma7VoKNX74h0fJxALcefu5Tq/iXt7ZxKXC 9ifl15smrsFCMPYidHqh2lBpZKxn0e4mV9ZXMMokUU5A/vEFHut5PzaXN/NAKJl0 h/YCDHbv7FDA7MBV2twd/iWdAsgOIfFW6nJKd7FG9C2EXo+DrbpzKXJI9yR9kefp KkK80LpFBMqlmGZKlxvbWYifIKXbFlYE0kkI5zAy0952nRgJdCkIV0V4ogTs5Les MYldbtTT866S8ajQCXi8dLdng+ZcTurZoFLM+hBt1CHImQcoMJvfUOetKcfxuqXl qF4n -----END CERTIFICATE-----Generated at Mon Jan 26 02:32:04 2026 by rpki-client