This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/UKQMI_1tAdL7QkXpECyLkKgiFXw.roa File: UKQMI_1tAdL7QkXpECyLkKgiFXw.roa (raw, json) Hash identifier: xCvizHfY/xMnYQ9a7uuh91R0ms1D7ktEV/mIEaRjfJ8= Subject key identifier: 50:A4:0C:23:FD:6D:01:D2:FB:42:45:E9:10:2C:8B:90:A8:22:15:7C Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71 Certificate serial: 019B7D5CA89C7861E460450D72C30D52C1A2 Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/UKQMI_1tAdL7QkXpECyLkKgiFXw.roa Signing time: Fri 02 Jan 2026 06:19:43 +0000 ROA not before: Fri 02 Jan 2026 06:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 272401 IP address blocks: 176.57.203.0/24 maxlen: 24 176.57.204.0/24 maxlen: 24 176.57.205.0/24 maxlen: 24 176.57.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a8:9c:78:61:e4:60:45:0d:72:c3:0d:52:c1:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71 Validity Not Before: Jan 2 06:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50a40c23fd6d01d2fb4245e9102c8b90a822157c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6a:c7:70:8b:c1:4b:ff:70:f9:b7:c7:ca:07: de:f8:45:a4:27:57:d0:d5:97:18:1b:7e:c2:32:71: 06:77:b2:9f:10:8e:eb:ed:80:b3:c3:cb:b9:9d:1d: a5:56:75:d2:69:ab:b4:3c:2a:2a:53:4b:8f:00:72: 99:ad:a1:be:5c:df:f9:8e:26:d8:f5:e7:c9:6f:47: 63:1e:b5:59:a5:96:fe:d8:c1:d6:9a:ac:5a:1d:ac: 1f:e9:48:73:cb:00:b2:8b:93:e0:81:3e:72:f8:ff: 44:60:50:b7:83:ef:39:14:fa:6f:52:a8:1e:01:d1: c6:94:17:0e:70:a3:02:21:f3:f7:94:21:39:ca:b3: 1d:4d:f0:0a:3d:01:6e:67:4f:b1:9c:14:9f:12:06: 9d:0d:73:81:20:1e:7f:c4:2a:99:8d:a0:11:05:8f: da:21:d7:4a:5c:63:53:f4:0b:53:34:c7:60:88:44: 2f:28:48:68:e9:df:82:00:de:fb:85:70:bb:db:c4: 0a:bf:95:8b:46:d5:be:96:cb:4f:af:c1:20:49:9f: 47:15:6f:05:32:ba:37:8a:61:0b:a8:f7:f9:1d:cb: b9:23:59:d0:9d:7a:9b:63:e3:19:cc:4c:3d:a1:2a: be:0d:c2:85:b4:6d:d6:c6:9e:51:de:ca:81:92:ac: 91:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A4:0C:23:FD:6D:01:D2:FB:42:45:E9:10:2C:8B:90:A8:22:15:7C X509v3 Authority Key Identifier: keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/UKQMI_1tAdL7QkXpECyLkKgiFXw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.57.203.0-176.57.206.255 Signature Algorithm: sha256WithRSAEncryption 14:d2:08:39:ab:0d:21:4e:8d:15:a5:b1:c5:08:4f:21:01:8e: 4d:61:65:b8:1b:f9:b5:ba:35:4d:c3:0b:9c:bd:d9:ba:7b:c8: 3e:04:0a:2b:6a:db:84:d8:05:76:54:94:4b:21:23:e5:99:60: 12:8b:8c:96:05:d0:85:4f:32:05:2a:cf:2c:76:f6:d0:94:0b: a2:cf:ad:3e:d4:9d:3f:8c:44:11:0d:43:86:7b:f2:56:0f:70: c7:f2:d4:3b:c6:6a:6a:59:5c:aa:4c:ec:d4:2d:3d:8b:ff:7b: 06:6a:05:47:57:bc:0c:ef:36:c9:09:1e:0f:f9:dc:e2:3a:42: 25:04:6c:ee:de:56:ea:c8:16:35:a4:d0:fc:e9:f5:30:74:9f: 65:09:cd:ec:01:98:a7:05:ce:9b:97:a0:4b:7a:cc:db:36:f3: 94:fd:ba:a4:d3:3c:bc:e1:a9:b6:89:b2:bd:26:6e:98:c9:12: 59:45:a7:cb:de:b1:91:39:7f:39:ed:62:3d:11:0c:c6:bf:d1: 7e:7a:30:c7:63:57:29:56:d1:9f:ea:41:25:98:ea:18:c4:f5: 87:84:e8:4b:41:3e:87:94:1a:cd:6b:4c:57:d6:3a:07:92:45: 1e:6d:89:64:cc:52:68:95:46:b4:35:83:e6:39:45:79:1b:ea: ca:dc:e0:2e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt9XKiceGHkYEUNcsMNUsGiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YzQwM2Q0M2I1ZjM4ZmNhMjExOWNkMTQwOWE5Mjc2M2Vk ZWZlNzEwHhcNMjYwMTAyMDYxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGE0MGMyM2ZkNmQwMWQyZmI0MjQ1ZTkxMDJjOGI5MGE4MjIxNTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02rHcIvBS/9w+bfHygfe+EWkJ1fQ 1ZcYG37CMnEGd7KfEI7r7YCzw8u5nR2lVnXSaau0PCoqU0uPAHKZraG+XN/5jibY 9efJb0djHrVZpZb+2MHWmqxaHawf6UhzywCyi5PggT5y+P9EYFC3g+85FPpvUqge AdHGlBcOcKMCIfP3lCE5yrMdTfAKPQFuZ0+xnBSfEgadDXOBIB5/xCqZjaARBY/a IddKXGNT9AtTNMdgiEQvKEho6d+CAN77hXC728QKv5WLRtW+lstPr8EgSZ9HFW8F Mro3imELqPf5Hcu5I1nQnXqbY+MZzEw9oSq+DcKFtG3Wxp5R3sqBkqyRYQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFFCkDCP9bQHS+0JF6RAsi5CoIhV8MB8GA1UdIwQY MBaAFEnEA9Q7Xzj8ohGc0UCaknY+3v5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQt Zjg4OWNhMTYxYzAxLzEvVUtRTUlfMXRBZEw3UWtYcEVDeUxrS2dpRlh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQtZjg4OWNhMTYxYzAx LzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACwOcsD BACwOc4wDQYJKoZIhvcNAQELBQADggEBABTSCDmrDSFOjRWlscUITyEBjk1hZbgb +bW6NU3DC5y92bp7yD4ECitq24TYBXZUlEshI+WZYBKLjJYF0IVPMgUqzyx29tCU C6LPrT7UnT+MRBENQ4Z78lYPcMfy1DvGampZXKpM7NQtPYv/ewZqBUdXvAzvNskJ Hg/53OI6QiUEbO7eVurIFjWk0Pzp9TB0n2UJzewBmKcFzpuXoEt6zNs285T9uqTT PLzhqbaJsr0mbpjJEllFp8vesZE5fzntYj0RDMa/0X56MMdjVylW0Z/qQSWY6hjE 9YeE6EtBPoeUGs1rTFfWOgeSRR5tiWTMUmiVRrQ1g+Y5RXkb6src4C4= -----END CERTIFICATE-----Generated at Sun Jan 25 21:27:36 2026 by rpki-client