This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/UKATPR0b1kY7oFPVkZYEepDy3LY.roa File: UKATPR0b1kY7oFPVkZYEepDy3LY.roa (raw, json) Hash identifier: CrwvVmRRQkszz0pHbbKO1FTUZbPyR5yvt9U+ujLmXCw= Subject key identifier: 50:A0:13:3D:1D:1B:D6:46:3B:A0:53:D5:91:96:04:7A:90:F2:DC:B6 Certificate issuer: /CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb Certificate serial: 019B7DCAC6AF8B456EAE98CC499791B1D927 Authority key identifier: F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/UKATPR0b1kY7oFPVkZYEepDy3LY.roa Signing time: Fri 02 Jan 2026 08:19:59 +0000 ROA not before: Fri 02 Jan 2026 08:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2635 IP address blocks: 185.64.140.0/22 maxlen: 32 2a04:fa80::/29 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:c6:af:8b:45:6e:ae:98:cc:49:97:91:b1:d9:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb Validity Not Before: Jan 2 08:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50a0133d1d1bd6463ba053d59196047a90f2dcb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:86:99:e0:2a:8b:e2:7d:1c:42:8d:fc:cc:e6: 7f:55:42:7e:3f:a6:e1:f4:3c:18:9b:e3:fe:d4:5c: 52:af:ae:16:8c:63:68:ca:13:34:3a:96:c7:11:27: 17:8b:40:83:30:be:de:5e:ff:ce:4c:63:07:0f:31: 10:43:40:9e:6b:d9:fa:0c:49:d2:d0:04:a6:35:b8: a9:25:69:31:44:c7:53:d5:c3:16:48:17:4f:00:ed: 8d:21:a1:b7:67:73:e3:19:c8:87:4e:f5:f6:59:62: ba:08:59:cd:f6:30:7c:26:bf:4b:30:01:77:d5:7d: 06:40:91:20:64:de:d9:c7:08:07:73:2d:9d:4d:03: a8:78:f7:71:54:fa:7c:b3:ac:ec:6d:6a:cd:95:ee: ac:82:4c:53:d8:45:87:ca:2c:60:66:3f:7a:55:a2: e6:ca:f1:fe:0e:b1:70:5d:9d:ce:54:fc:c6:f9:42: d0:b2:58:4f:4a:74:47:43:b4:ae:ca:e7:e2:a6:ac: 2c:9c:e5:7d:53:a2:60:45:c1:9d:4a:f2:65:a7:6e: 94:84:98:23:3b:ed:fe:56:aa:26:88:6f:5d:6a:77: 94:65:cd:0d:a1:2d:8d:a6:5f:4c:15:7e:bc:87:9f: 80:82:49:1d:ce:76:7d:2e:ec:f5:68:41:24:5f:f5: 04:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A0:13:3D:1D:1B:D6:46:3B:A0:53:D5:91:96:04:7A:90:F2:DC:B6 X509v3 Authority Key Identifier: keyid:F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/UKATPR0b1kY7oFPVkZYEepDy3LY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.64.140.0/22 IPv6: 2a04:fa80::/29 Signature Algorithm: sha256WithRSAEncryption 1b:79:ed:cb:8e:0d:2a:fb:17:9d:04:52:17:c6:bc:37:0e:e2: ea:c8:42:75:c8:71:9f:03:cb:ad:2a:ff:20:24:89:53:11:cb: c4:e2:4c:b2:c6:81:83:ac:d7:48:c6:19:b0:6c:c4:a8:77:33: 6f:2a:83:b3:cf:53:6b:24:ca:83:9f:c4:80:34:71:94:4a:ef: c9:99:03:53:13:58:d1:2a:2a:c3:f4:1e:0b:47:92:3e:a1:55: 73:4f:95:50:c9:9d:bf:45:0e:af:6e:98:89:97:42:a2:95:a9: 50:8c:49:8c:79:6a:58:d4:a1:7f:bd:5e:10:40:1e:e0:a4:b9: a8:8f:d0:b1:eb:d8:f1:2b:ea:d7:67:8a:d0:91:a6:1a:1c:26: 44:21:32:04:00:98:ea:2f:29:7a:82:a6:c8:06:73:62:fe:bf: bf:43:d7:d7:24:11:0a:57:03:9d:2d:54:60:03:45:57:a7:48: e2:c4:ce:0a:2e:5e:6d:6d:2c:b4:56:9f:6f:51:0a:75:99:7c: 1e:40:68:dd:e3:d6:ed:a5:6b:9d:ca:c7:08:84:18:4f:1b:c9: 01:95:3f:51:58:66:54:65:83:27:5d:8b:7a:11:63:a6:b9:f6: ee:3b:b5:c8:6a:d3:ac:f8:b6:87:37:13:63:cb:51:4d:66:99: 37:c5:53:df -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9ysavi0VurpjMSZeRsdknMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YWNiMjY5ZmE4YTU1NGY1MjQzYTNhYmQ2OGQ1YjhkNzZm ZTVlYmIwHhcNMjYwMTAyMDgxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGEwMTMzZDFkMWJkNjQ2M2JhMDUzZDU5MTk2MDQ3YTkwZjJkY2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIaZ4CqL4n0cQo38zOZ/VUJ+P6bh 9DwYm+P+1FxSr64WjGNoyhM0OpbHEScXi0CDML7eXv/OTGMHDzEQQ0Cea9n6DEnS 0ASmNbipJWkxRMdT1cMWSBdPAO2NIaG3Z3PjGciHTvX2WWK6CFnN9jB8Jr9LMAF3 1X0GQJEgZN7ZxwgHcy2dTQOoePdxVPp8s6zsbWrNle6sgkxT2EWHyixgZj96VaLm yvH+DrFwXZ3OVPzG+ULQslhPSnRHQ7SuyufipqwsnOV9U6JgRcGdSvJlp26UhJgj O+3+VqomiG9daneUZc0NoS2Npl9MFX68h5+AgkkdznZ9Luz1aEEkX/UEVQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFCgEz0dG9ZGO6BT1ZGWBHqQ8ty2MB8GA1UdIwQY MBaAFPassmn6ilVPUkOjq9aNW412/l67MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXF5eWFmcUtWVTlTUTZPcjFvMWJqWGItWHJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yOTU1ZmQtMDkyYS00ZWNjLWE5MmYt ZmJiMzNhNTRmYWRlLzEvVUtBVFBSMGIxa1k3b0ZQVmtaWUVlcER5M0xZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8yOTU1ZmQtMDkyYS00ZWNjLWE5MmYtZmJiMzNhNTRmYWRl LzEvOXF5eWFmcUtWVTlTUTZPcjFvMWJqWGItWHJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuUCMMA0E AgACMAcDBQMqBPqAMA0GCSqGSIb3DQEBCwUAA4IBAQAbee3Ljg0q+xedBFIXxrw3 DuLqyEJ1yHGfA8utKv8gJIlTEcvE4kyyxoGDrNdIxhmwbMSodzNvKoOzz1NrJMqD n8SANHGUSu/JmQNTE1jRKirD9B4LR5I+oVVzT5VQyZ2/RQ6vbpiJl0KilalQjEmM eWpY1KF/vV4QQB7gpLmoj9Cx69jxK+rXZ4rQkaYaHCZEITIEAJjqLyl6gqbIBnNi /r+/Q9fXJBEKVwOdLVRgA0VXp0jixM4KLl5tbSy0Vp9vUQp1mXweQGjd49btpWud yscIhBhPG8kBlT9RWGZUZYMnXYt6EWOmufbuO7XIatOs+LaHNxNjy1FNZpk3xVPf -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:14 2026 by rpki-client