This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/UaE9HUZqWyZXYgdpordPUMfIGo8.roa File: UaE9HUZqWyZXYgdpordPUMfIGo8.roa (raw, json) Hash identifier: Gx99uSDg98fd5vz7OkrsXET/Gz402jM+/KjYSeuc8p8= Subject key identifier: 51:A1:3D:1D:46:6A:5B:26:57:62:07:69:A2:B7:4F:50:C7:C8:1A:8F Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E3909CDE048FF1D498093FEDB8EDE73 Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/UaE9HUZqWyZXYgdpordPUMfIGo8.roa Signing time: Fri 02 Jan 2026 10:20:25 +0000 ROA not before: Fri 02 Jan 2026 10:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50340 IP address blocks: 85.142.144.0/23 maxlen: 24 85.142.147.0/24 maxlen: 24 85.143.52.0/23 maxlen: 24 85.143.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:09:cd:e0:48:ff:1d:49:80:93:fe:db:8e:de:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51a13d1d466a5b2657620769a2b74f50c7c81a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8d:06:80:52:82:e6:27:78:11:63:5a:a1:e0: 24:0b:e8:9b:a4:b5:8a:2d:76:e9:23:ed:06:e8:a3: f3:95:66:d7:92:46:29:df:ea:b8:9d:78:8b:0c:84: e5:ad:71:29:f9:12:0e:62:12:6d:e7:c8:80:d6:c4: 76:e6:b8:1f:5a:12:b0:64:d0:0e:54:18:e4:b3:94: 18:af:0d:8a:25:79:b9:42:33:51:8b:cb:f7:f3:ea: 2d:40:c4:4b:38:39:c8:b1:f1:61:bb:2d:0e:69:47: c5:fa:bf:5b:62:e8:a9:7f:68:0d:29:70:12:0a:23: 24:db:e4:3a:22:3f:f4:c0:2f:d2:9c:0f:59:15:a7: 2f:7b:5a:39:3c:4a:63:08:5d:da:c1:33:d8:22:a2: f8:d9:1e:bd:e8:cb:3d:ed:b4:4e:4c:9b:c7:a6:0a: 13:38:2b:79:b9:0e:b3:2b:ff:4a:0c:4a:5d:93:49: de:b5:8d:98:15:40:ee:94:9f:fc:3b:24:89:4f:6e: 02:2f:2a:e6:68:08:0a:dc:78:0a:61:80:1b:44:56: 7a:05:e2:ca:5f:69:f7:74:48:fe:6f:e8:97:72:71: bb:cb:69:cc:6d:b8:9f:2d:00:1f:87:19:ed:81:2c: f8:a9:64:c3:b1:5e:a5:4d:72:aa:ed:fb:41:5b:e9: c9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A1:3D:1D:46:6A:5B:26:57:62:07:69:A2:B7:4F:50:C7:C8:1A:8F X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/UaE9HUZqWyZXYgdpordPUMfIGo8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.142.144.0/23 85.142.147.0/24 85.143.52.0-85.143.54.255 Signature Algorithm: sha256WithRSAEncryption 92:7c:aa:07:63:f2:5c:78:83:67:d2:37:16:22:9f:59:14:c2: e9:82:f7:98:8c:ec:26:2c:f9:8c:2c:0f:1f:a6:d2:3f:8e:2c: 20:72:bf:f4:8e:1f:89:9d:c3:ec:a4:39:63:e4:1f:a9:6f:5a: d2:2e:66:3a:2a:38:cb:13:25:29:f1:d2:39:d7:ed:48:d2:07: ab:29:71:f9:a6:c7:ff:38:a2:1d:d0:91:e8:63:51:4d:29:8a: 73:6a:0b:fd:9d:91:8c:03:b3:8c:2a:55:3f:02:7a:42:a7:7f: c6:49:64:d7:26:94:e2:cb:a6:88:3f:d1:a3:3e:c0:79:26:48: b6:2c:86:83:3e:09:7f:3e:54:8c:71:d8:b1:0a:f2:75:70:c8: 9e:92:1a:64:b6:f6:26:ca:31:c9:c7:56:dc:f2:b5:da:e5:e1: 72:2c:c0:d3:49:03:51:d7:51:1c:cb:49:72:17:31:4a:f2:2b: d4:70:00:ed:f5:0f:ff:95:15:db:2f:21:20:b6:1e:77:48:c4: c7:3a:2a:f2:57:bf:7b:bc:7f:6b:de:db:79:91:ec:68:4d:47: e7:9a:f1:87:14:f7:8c:9d:b4:83:73:ba:92:26:a4:b5:9b:02: fb:56:85:33:26:2b:fc:44:e3:b5:30:bf:c0:79:9f:8e:7e:30: 28:e5:28:d5 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt+OQnN4Ej/HUmAk/7bjt5zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWExM2QxZDQ2NmE1YjI2NTc2MjA3NjlhMmI3NGY1MGM3YzgxYThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI0GgFKC5id4EWNaoeAkC+ibpLWK LXbpI+0G6KPzlWbXkkYp3+q4nXiLDITlrXEp+RIOYhJt58iA1sR25rgfWhKwZNAO VBjks5QYrw2KJXm5QjNRi8v38+otQMRLODnIsfFhuy0OaUfF+r9bYuipf2gNKXAS CiMk2+Q6Ij/0wC/SnA9ZFacve1o5PEpjCF3awTPYIqL42R696Ms97bROTJvHpgoT OCt5uQ6zK/9KDEpdk0netY2YFUDulJ/8OySJT24CLyrmaAgK3HgKYYAbRFZ6BeLK X2n3dEj+b+iXcnG7y2nMbbifLQAfhxntgSz4qWTDsV6lTXKq7ftBW+nJ/wIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFFGhPR1GalsmV2IHaaK3T1DHyBqPMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvVWFFOUhVWnFXeVpYWWdkcG9yZFBVTWZJR284LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBVY6QAwQA VY6TMAwDBAJVjzQDBABVjzYwDQYJKoZIhvcNAQELBQADggEBAJJ8qgdj8lx4g2fS NxYin1kUwumC95iM7CYs+YwsDx+m0j+OLCByv/SOH4mdw+ykOWPkH6lvWtIuZjoq OMsTJSnx0jnX7UjSB6spcfmmx/84oh3QkehjUU0pinNqC/2dkYwDs4wqVT8CekKn f8ZJZNcmlOLLpog/0aM+wHkmSLYshoM+CX8+VIxx2LEK8nVwyJ6SGmS29ibKMcnH Vtzytdrl4XIswNNJA1HXURzLSXIXMUryK9RwAO31D/+VFdsvISC2HndIxMc6KvJX v3u8f2ve23mR7GhNR+ea8YcU94ydtINzupImpLWbAvtWhTMmK/xE47Uwv8B5n45+ MCjlKNU= -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:58 2026 by rpki-client