This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/1ueapHgSZeRmBOGFLmKR6_H2zUw.roa File: 1ueapHgSZeRmBOGFLmKR6_H2zUw.roa (raw, json) Hash identifier: q0+HV1DIsnFoYoW/8YTV0Ggen1o+4d2qQ6LxI87aP9I= Subject key identifier: D6:E7:9A:A4:78:12:65:E4:66:04:E1:85:2E:62:91:EB:F1:F6:CD:4C Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019B78A27DED67195E1EB7BA7BEF6DF9829A Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/1ueapHgSZeRmBOGFLmKR6_H2zUw.roa Signing time: Thu 01 Jan 2026 08:17:53 +0000 ROA not before: Thu 01 Jan 2026 08:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 262287 IP address blocks: 149.126.12.0/24 maxlen: 24 2a0a:8f40:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:7d:ed:67:19:5e:1e:b7:ba:7b:ef:6d:f9:82:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Jan 1 08:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6e79aa4781265e46604e1852e6291ebf1f6cd4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c2:7a:88:c0:2f:63:55:90:b7:c0:1e:7e:63: 7c:02:86:91:f4:80:69:df:2c:8c:3c:9c:05:57:62: 8a:bf:22:9e:5c:4b:11:c4:9d:b8:36:f8:a0:47:7d: 97:f7:ff:88:3c:19:0d:15:cd:bf:f8:17:9e:7b:35: 2c:88:53:06:1f:b1:fa:56:fd:ea:2c:bf:a0:a4:22: 2c:5d:f9:50:b3:bd:7c:94:9e:fb:8a:86:e3:b3:f1: e0:6c:09:b7:1e:45:11:40:08:e0:c0:cb:2c:19:a3: cd:16:12:c7:c0:34:32:e0:af:47:8e:64:47:8a:22: 8a:4f:be:46:ea:8a:dd:9f:79:f4:38:ae:ad:d5:b1: 0b:a5:4b:b3:6a:c0:2f:d0:0c:e1:de:76:4c:be:e7: 3a:77:98:9a:30:7a:83:78:22:fa:9a:81:a2:83:02: 4b:8a:03:20:1e:75:36:e8:81:99:78:fe:0b:37:a1: 1c:8c:7a:a6:60:1c:dc:d4:b7:8a:e9:45:fb:c3:8c: 79:a6:af:ae:ad:9a:73:84:fd:df:67:9e:92:7f:01: d6:84:10:c4:f5:19:93:09:fe:56:07:73:3e:71:5b: d3:05:00:7f:85:59:86:5c:dd:96:87:53:2e:2a:b4: f6:a7:73:84:5e:ad:97:d0:61:be:af:a1:f4:21:c5: 69:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E7:9A:A4:78:12:65:E4:66:04:E1:85:2E:62:91:EB:F1:F6:CD:4C X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/1ueapHgSZeRmBOGFLmKR6_H2zUw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.126.12.0/24 IPv6: 2a0a:8f40:5::/48 Signature Algorithm: sha256WithRSAEncryption 3d:79:30:60:da:27:61:25:2f:29:4b:c6:e0:cf:3a:64:fa:b5: a1:32:64:bf:ef:7b:43:7e:52:f4:ba:fe:47:71:4f:93:15:67: 28:87:59:f2:d6:08:ba:2a:7a:83:c0:51:bd:f9:54:64:9a:14: ee:41:58:5d:6f:08:b5:34:de:ab:aa:5c:67:bf:69:32:40:e0: 11:f6:e8:d3:cb:d1:f3:34:f6:51:29:59:94:75:19:f0:89:e8: f3:47:ed:66:b5:b5:23:f4:e6:4a:f6:f9:35:45:a8:cc:a1:7a: c6:e2:5a:eb:7d:16:4a:ce:53:11:44:b8:d2:ad:2b:32:c1:31: e6:3b:39:58:9d:92:0f:84:bb:26:cf:f2:24:ef:35:99:5d:a4: fb:1d:27:a3:95:57:eb:12:59:95:ca:53:a8:65:c1:08:b3:3c: 32:e5:98:e6:22:eb:01:8e:52:88:64:05:b7:65:39:dc:fe:22: f4:5b:35:31:af:cd:89:2e:26:36:e8:ec:44:4c:f4:02:a8:ea: 4e:f5:74:4b:e6:15:eb:eb:89:52:d9:cd:e7:98:25:2a:ca:00: d1:95:66:57:14:1a:4c:d1:04:58:25:ce:01:79:4f:73:4a:e3: 67:c0:08:7e:84:53:c9:42:66:33:27:ec:b8:55:e0:1c:d9:1e: b5:c6:3f:47 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4on3tZxleHre6e+9t+YKaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYwMTAxMDgxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmU3OWFhNDc4MTI2NWU0NjYwNGUxODUyZTYyOTFlYmYxZjZjZDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7cJ6iMAvY1WQt8AefmN8AoaR9IBp 3yyMPJwFV2KKvyKeXEsRxJ24NvigR32X9/+IPBkNFc2/+BeeezUsiFMGH7H6Vv3q LL+gpCIsXflQs718lJ77iobjs/HgbAm3HkURQAjgwMssGaPNFhLHwDQy4K9HjmRH iiKKT75G6ordn3n0OK6t1bELpUuzasAv0Azh3nZMvuc6d5iaMHqDeCL6moGigwJL igMgHnU26IGZeP4LN6EcjHqmYBzc1LeK6UX7w4x5pq+urZpzhP3fZ56SfwHWhBDE 9RmTCf5WB3M+cVvTBQB/hVmGXN2Wh1MuKrT2p3OEXq2X0GG+r6H0IcVpgQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNbnmqR4EmXkZgThhS5ikevx9s1MMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvMXVlYXBIZ1NaZVJtQk9HRkxtS1I2X0gyelV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAlX4MMA8E AgACMAkDBwAqCo9AAAUwDQYJKoZIhvcNAQELBQADggEBAD15MGDaJ2ElLylLxuDP OmT6taEyZL/ve0N+UvS6/kdxT5MVZyiHWfLWCLoqeoPAUb35VGSaFO5BWF1vCLU0 3quqXGe/aTJA4BH26NPL0fM09lEpWZR1GfCJ6PNH7Wa1tSP05kr2+TVFqMyhesbi Wut9FkrOUxFEuNKtKzLBMeY7OVidkg+EuybP8iTvNZldpPsdJ6OVV+sSWZXKU6hl wQizPDLlmOYi6wGOUohkBbdlOdz+IvRbNTGvzYkuJjbo7ERM9AKo6k71dEvmFevr iVLZzeeYJSrKANGVZlcUGkzRBFglzgF5T3NK42fACH6EU8lCZjMn7LhV4BzZHrXG P0c= -----END CERTIFICATE-----Generated at Mon Jan 19 16:52:55 2026 by rpki-client