This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/cUEUQmxnQKASDEmjBqqPI8qU0NE.roa File: cUEUQmxnQKASDEmjBqqPI8qU0NE.roa (raw, json) Hash identifier: hTXL3jAiDQJw6uD/ei84eZq2mv/QVCCWrUoL9YV6zhk= Subject key identifier: 71:41:14:42:6C:67:40:A0:12:0C:49:A3:06:AA:8F:23:CA:94:D0:D1 Certificate issuer: /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec Certificate serial: 019B7CED0EF2E4CFF78966C0ED7F99BBB4EA Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/cUEUQmxnQKASDEmjBqqPI8qU0NE.roa Signing time: Fri 02 Jan 2026 04:17:49 +0000 ROA not before: Fri 02 Jan 2026 04:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24634 IP address blocks: 46.19.192.0/21 maxlen: 24 185.192.160.0/22 maxlen: 24 2a0a:2d40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:0e:f2:e4:cf:f7:89:66:c0:ed:7f:99:bb:b4:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec Validity Not Before: Jan 2 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=714114426c6740a0120c49a306aa8f23ca94d0d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e2:ac:60:eb:58:12:72:28:49:07:96:23:ee: 6a:e2:6e:1b:ef:c8:d9:83:98:07:6c:2f:c1:24:cb: d2:ab:90:d8:44:fc:c0:ac:ff:5c:d0:ec:c5:a7:bf: fa:36:79:87:45:9e:14:31:32:ae:47:45:8b:d1:3a: 18:95:a5:4d:f9:2c:ad:d2:a7:90:6b:a0:f1:c0:e7: 7f:7f:ac:fe:dd:af:2e:d2:08:87:39:9d:47:48:71: f5:eb:79:af:b9:78:ac:9f:fa:b3:33:63:0f:86:4c: ec:b4:95:3f:1d:24:77:94:f4:91:f4:70:3f:d8:f2: 96:e4:3b:0a:c8:36:79:04:16:3b:c0:84:b5:de:a4: 2e:d1:24:7c:4f:ca:d0:ed:5e:14:44:5d:8f:42:65: b3:59:37:8e:87:f4:82:64:07:85:94:02:e8:c5:69: 92:ea:d5:66:dc:82:30:a4:c9:6d:4d:01:d2:ba:ff: 0f:a9:67:3f:9c:c6:ba:c5:c6:55:04:56:b1:76:67: da:03:39:31:07:8f:11:16:b9:65:a1:bf:62:3c:19: 0f:7f:21:59:e2:1c:d5:10:db:4d:cf:5e:66:5f:27: 2a:dc:b7:b4:3d:b3:5b:2c:46:b7:9e:6f:e7:fa:fe: d8:35:2b:7e:ea:53:09:15:c2:24:98:87:6c:0a:e0: 18:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:41:14:42:6C:67:40:A0:12:0C:49:A3:06:AA:8F:23:CA:94:D0:D1 X509v3 Authority Key Identifier: keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/cUEUQmxnQKASDEmjBqqPI8qU0NE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.19.192.0/21 185.192.160.0/22 IPv6: 2a0a:2d40::/29 Signature Algorithm: sha256WithRSAEncryption 83:f6:d1:63:7e:6b:6d:ee:6b:92:7b:f4:e0:86:55:c6:c1:a1: 32:67:4a:8a:bf:4a:7c:2f:0f:a4:bb:80:f6:b8:d5:bd:4d:95: ed:d3:5c:b3:0c:46:4a:87:33:1b:41:44:7f:d1:68:4a:f9:a4: 4e:7b:35:ec:a3:94:bc:e7:25:5d:8b:11:78:46:16:07:d3:9a: ba:fd:3f:b0:b3:ce:b2:d8:82:79:6c:32:f4:d4:04:f9:36:5f: e3:2d:65:0c:85:f4:7a:31:99:53:c8:2f:3c:ed:92:10:4c:57: 1b:cf:85:87:68:21:be:53:6e:7d:6b:7a:c1:b3:11:3d:77:66: d2:ec:db:b6:7e:5c:68:2c:e8:dc:3b:db:39:31:b4:7d:dc:e8: 49:42:7b:23:8b:12:a9:15:42:df:c1:1c:73:59:83:9c:cc:5c: b9:3d:9d:1c:42:a5:08:a2:55:2a:64:8e:2d:a7:3b:5d:e4:f7: c7:1b:6a:a3:8f:55:b0:98:63:fc:21:d9:f5:a6:d2:e5:38:bd: b1:57:cc:36:6e:e7:f5:3d:c6:b0:c0:dd:08:7e:e2:de:9b:e7: 4d:bb:62:68:35:b0:5a:bb:b1:2e:17:ae:9b:b0:0e:8e:b5:89: 7a:6c:3a:f8:b1:41:1e:ec:93:fc:5a:6b:db:8c:6b:df:fd:3e: ad:fd:52:93 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87Q7y5M/3iWbA7X+Zu7TqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNlZDc5NGFkYWZiOTFjYjgxYTk2OWViOGE5YjI5MDVm ZWUyZWMwHhcNMjYwMTAyMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTQxMTQ0MjZjNjc0MGEwMTIwYzQ5YTMwNmFhOGYyM2NhOTRkMGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuKsYOtYEnIoSQeWI+5q4m4b78jZ g5gHbC/BJMvSq5DYRPzArP9c0OzFp7/6NnmHRZ4UMTKuR0WL0ToYlaVN+Syt0qeQ a6DxwOd/f6z+3a8u0giHOZ1HSHH163mvuXisn/qzM2MPhkzstJU/HSR3lPSR9HA/ 2PKW5DsKyDZ5BBY7wIS13qQu0SR8T8rQ7V4URF2PQmWzWTeOh/SCZAeFlALoxWmS 6tVm3IIwpMltTQHSuv8PqWc/nMa6xcZVBFaxdmfaAzkxB48RFrllob9iPBkPfyFZ 4hzVENtNz15mXycq3Le0PbNbLEa3nm/n+v7YNSt+6lMJFcIkmIdsCuAY7wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFHFBFEJsZ0CgEgxJowaqjyPKlNDRMB8GA1UdIwQY MBaAFCrD7XlK2vuRy4GpaeuKmykF/uLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQdGVVcmEtNUhMZ2FscDY0cWJLUVgtNHV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83YjEyN2ItNDRjZS00Y2FkLWFkOGYt MDg5YzFjM2Q0MzU3LzEvY1VFVVFteG5RS0FTREVtakJxcVBJOHFVME5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi83YjEyN2ItNDRjZS00Y2FkLWFkOGYtMDg5YzFjM2Q0MzU3 LzEvS3NQdGVVcmEtNUhMZ2FscDY0cWJLUVgtNHV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDLhPAAwQC ucCgMA0EAgACMAcDBQMqCi1AMA0GCSqGSIb3DQEBCwUAA4IBAQCD9tFjfmtt7muS e/TghlXGwaEyZ0qKv0p8Lw+ku4D2uNW9TZXt01yzDEZKhzMbQUR/0WhK+aROezXs o5S85yVdixF4RhYH05q6/T+ws86y2IJ5bDL01AT5Nl/jLWUMhfR6MZlTyC887ZIQ TFcbz4WHaCG+U259a3rBsxE9d2bS7Nu2flxoLOjcO9s5MbR93OhJQnsjixKpFULf wRxzWYOczFy5PZ0cQqUIolUqZI4tpztd5PfHG2qjj1WwmGP8Idn1ptLlOL2xV8w2 buf1PcawwN0IfuLem+dNu2JoNbBau7EuF66bsA6OtYl6bDr4sUEe7JP8WmvbjGvf /T6t/VKT -----END CERTIFICATE-----Generated at Mon Jan 26 01:43:03 2026 by rpki-client