This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/UGlXiePxdtN9_biDKwHc5-4dEOg.roa File: UGlXiePxdtN9_biDKwHc5-4dEOg.roa (raw, json) Hash identifier: qy/tHECpGjvf9NCeVZ2upWo90R395VZ8CphzabXPI4s= Subject key identifier: 50:69:57:89:E3:F1:76:D3:7D:FD:B8:83:2B:01:DC:E7:EE:1D:10:E8 Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E390BB8721B61AD7CA6C533560CC1FE Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/UGlXiePxdtN9_biDKwHc5-4dEOg.roa Signing time: Fri 02 Jan 2026 10:20:26 +0000 ROA not before: Fri 02 Jan 2026 10:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51783 IP address blocks: 85.143.168.0/22 maxlen: 22 85.143.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:0b:b8:72:1b:61:ad:7c:a6:c5:33:56:0c:c1:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50695789e3f176d37dfdb8832b01dce7ee1d10e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d4:5e:f2:06:4e:c9:98:70:91:d2:cb:c6:ad: a2:64:67:0c:bd:06:04:fb:a0:2c:b6:6e:1e:64:32: dc:9a:69:51:a6:8f:ac:56:ac:0b:01:fb:b8:6e:f7: 0e:69:5b:d3:e0:f5:fc:27:3a:e4:9e:b4:03:88:13: a1:f9:53:37:14:6e:9a:7e:dd:04:92:cd:7b:f1:77: 12:ec:d9:ba:18:16:5c:69:1f:e2:42:8f:f7:b9:03: cd:ac:86:8a:1c:e4:27:1d:e3:c6:1e:9f:fe:83:e8: 59:ed:f1:cc:bc:e3:84:7d:53:13:27:16:76:42:b1: d8:a2:9f:0f:f7:52:9e:b5:fb:29:df:68:37:e5:33: 6f:7a:4e:88:fc:e5:41:d8:61:0c:99:32:1a:b6:47: 75:4f:df:8d:d7:50:5c:87:b2:b2:87:bd:ce:c4:70: e8:6e:11:4a:b6:ad:26:33:bc:9e:08:e2:2e:71:18: 19:01:23:07:03:e0:62:c7:b7:96:c4:ce:4b:96:a3: 8b:97:99:15:fc:9e:fa:a9:13:96:d7:53:7c:71:f5: 1a:b6:d8:e5:14:52:7f:3d:18:44:25:75:da:40:f4: e2:06:2e:7a:fa:b7:68:01:6d:97:55:90:78:df:6d: 32:2f:0d:37:b0:26:f9:17:f6:36:07:0a:14:70:6d: 7c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:69:57:89:E3:F1:76:D3:7D:FD:B8:83:2B:01:DC:E7:EE:1D:10:E8 X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/UGlXiePxdtN9_biDKwHc5-4dEOg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.143.168.0/22 85.143.188.0/23 Signature Algorithm: sha256WithRSAEncryption 27:a7:44:f7:83:41:12:30:43:52:b8:6e:cb:46:1a:ea:d9:69: ce:ed:54:7d:d4:59:da:bf:11:80:31:37:0e:20:7a:45:9b:36: d1:9d:89:1c:0a:18:91:58:1b:e3:57:f3:bb:2d:75:22:73:f4: 71:0c:85:25:0a:4d:a4:dc:34:e8:00:f8:2d:ff:5f:c0:e8:73: fe:d7:06:b1:0c:c1:73:a4:1f:9f:58:94:fd:02:ec:d9:90:16: fa:c8:9d:b9:1e:d3:8f:85:6b:52:49:b8:46:2a:de:af:ac:b0: 85:06:62:1b:89:58:31:cc:12:d4:5c:ad:3b:6b:31:96:4b:c4: 1e:e2:9b:3d:eb:dd:e2:af:00:55:0f:d9:5c:3c:48:26:25:31: ac:60:e6:15:3c:b0:da:e0:6b:fc:75:0d:83:87:c1:7c:f4:ea: 13:91:0e:1a:91:5c:e8:a6:92:24:b5:fd:da:a9:0c:8e:e2:76: 9a:82:07:d5:46:c2:20:1e:8c:47:5f:be:ec:7e:4d:4c:fd:e2: 50:62:31:62:4d:ca:45:b1:c2:18:3e:32:54:f2:11:45:79:5b: 02:d1:5c:fd:ad:0c:2d:ea:e9:55:00:ee:f1:23:f7:c9:00:ea: 2f:d6:b2:82:bc:34:44:42:34:27:b0:b8:00:e4:22:43:cd:a6: 2f:6c:bc:7a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OQu4chthrXymxTNWDMH+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDY5NTc4OWUzZjE3NmQzN2RmZGI4ODMyYjAxZGNlN2VlMWQxMGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtRe8gZOyZhwkdLLxq2iZGcMvQYE +6Astm4eZDLcmmlRpo+sVqwLAfu4bvcOaVvT4PX8JzrknrQDiBOh+VM3FG6aft0E ks178XcS7Nm6GBZcaR/iQo/3uQPNrIaKHOQnHePGHp/+g+hZ7fHMvOOEfVMTJxZ2 QrHYop8P91Ketfsp32g35TNvek6I/OVB2GEMmTIatkd1T9+N11Bch7Kyh73OxHDo bhFKtq0mM7yeCOIucRgZASMHA+Bix7eWxM5LlqOLl5kV/J76qROW11N8cfUattjl FFJ/PRhEJXXaQPTiBi56+rdoAW2XVZB4320yLw03sCb5F/Y2BwoUcG18AwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFBpV4nj8XbTff24gysB3OfuHRDoMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvVUdsWGllUHhkdE45X2JpREt3SGM1LTRkRU9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCVY+oAwQB VY+8MA0GCSqGSIb3DQEBCwUAA4IBAQAnp0T3g0ESMENSuG7LRhrq2WnO7VR91Fna vxGAMTcOIHpFmzbRnYkcChiRWBvjV/O7LXUic/RxDIUlCk2k3DToAPgt/1/A6HP+ 1waxDMFzpB+fWJT9AuzZkBb6yJ25HtOPhWtSSbhGKt6vrLCFBmIbiVgxzBLUXK07 azGWS8Qe4ps9693irwBVD9lcPEgmJTGsYOYVPLDa4Gv8dQ2Dh8F89OoTkQ4akVzo ppIktf3aqQyO4naaggfVRsIgHoxHX77sfk1M/eJQYjFiTcpFscIYPjJU8hFFeVsC 0Vz9rQwt6ulVAO7xI/fJAOov1rKCvDREQjQnsLgA5CJDzaYvbLx6 -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:19 2026 by rpki-client