This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/TA_UQQnUzcyb4z4VNBXIFoSiKOQ.roa File: TA_UQQnUzcyb4z4VNBXIFoSiKOQ.roa (raw, json) Hash identifier: 5coZuaEZYCG1SDhEG5622pcijd3TmgMAYuwLwdnG3Xk= Subject key identifier: 4C:0F:D4:41:09:D4:CD:CC:9B:E3:3E:15:34:15:C8:16:84:A2:28:E4 Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255 Certificate serial: 019B797DDE21BA7333294EA2159E3B649BFE Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/TA_UQQnUzcyb4z4VNBXIFoSiKOQ.roa Signing time: Thu 01 Jan 2026 12:17:30 +0000 ROA not before: Thu 01 Jan 2026 12:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43581 IP address blocks: 46.29.236.0/24 maxlen: 24 46.29.237.0/24 maxlen: 24 46.29.239.0/24 maxlen: 24 85.159.226.0/24 maxlen: 24 85.159.230.0/24 maxlen: 24 85.159.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:de:21:ba:73:33:29:4e:a2:15:9e:3b:64:9b:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255 Validity Not Before: Jan 1 12:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c0fd44109d4cdcc9be33e153415c81684a228e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e7:1f:de:94:a4:bd:32:32:30:b2:ea:e0:b0: 17:6b:dd:31:db:ca:08:06:28:4d:27:a8:b7:37:e3: 33:12:b0:66:cc:51:f2:f5:40:32:24:1c:65:ae:9d: bc:d1:1a:b2:06:b3:f1:2c:43:ca:08:48:35:18:c7: 07:1e:a9:ee:60:a8:3d:f1:97:64:b3:cf:8d:a9:23: 50:b6:42:14:c0:2a:36:72:76:bd:ea:56:05:b4:e5: 27:9a:d5:6c:a5:98:a8:39:e3:74:eb:53:f0:fa:e0: 1c:93:67:a2:15:f0:66:e8:c8:37:ed:b0:40:58:6c: c8:40:d4:12:83:77:bc:38:53:a8:a0:ed:7d:d8:1f: 0e:81:79:69:d9:c8:37:67:a4:da:15:dc:4b:72:8b: f9:88:ab:72:b6:90:21:86:11:61:79:3e:44:5e:2f: 67:35:12:23:1e:0e:e4:bd:83:65:39:8f:b9:1a:35: d9:36:32:b5:8a:dd:1d:3e:8c:ef:bb:90:74:f1:84: df:7e:a0:04:d6:63:61:fc:98:cc:6c:51:c9:03:ae: de:58:cc:84:b9:db:55:b7:c3:59:c3:02:d4:79:b1: b8:a1:6f:c9:6d:d0:1e:ca:f6:f2:0b:bd:19:2e:a2: 3c:9e:c8:ec:f1:51:14:b0:99:57:dc:62:dc:ed:fc: e8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0F:D4:41:09:D4:CD:CC:9B:E3:3E:15:34:15:C8:16:84:A2:28:E4 X509v3 Authority Key Identifier: keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/TA_UQQnUzcyb4z4VNBXIFoSiKOQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.29.236.0/23 46.29.239.0/24 85.159.226.0/24 85.159.230.0/23 Signature Algorithm: sha256WithRSAEncryption 08:8d:ef:e8:ec:27:3c:63:aa:25:85:32:d3:c3:6c:c9:86:f3: b6:e9:05:74:d3:63:b7:68:9b:df:fc:2d:e3:87:59:a7:e9:ca: e2:ea:bb:bc:ac:57:6a:04:5e:ad:f3:b6:9f:4f:a3:61:a9:f4: 6c:c3:92:26:7f:b3:70:9d:5f:8a:c0:58:fd:f6:9a:e4:17:ba: 70:9a:ef:e1:2b:58:b8:f2:20:96:69:81:58:e9:0f:23:55:0e: 52:8d:0d:55:4d:0c:51:09:b2:f1:1a:59:0c:1a:b5:ba:99:ef: c5:98:40:6b:18:2a:f9:9c:cd:6f:62:3c:02:7b:99:b2:20:1d: f5:84:66:96:67:8a:0f:18:76:c4:b5:77:cf:fb:d9:f2:80:81: bf:f9:fc:4e:64:34:5b:ad:69:6c:0a:cf:a8:94:ce:70:02:93: d1:07:de:4a:f9:7e:53:4b:8d:e2:fb:c4:f6:25:9a:85:33:a9: 09:b1:66:a7:bc:f1:b4:1f:e7:31:59:b3:40:4f:2f:c5:cf:2a: c8:18:8b:64:e0:f6:15:af:45:fa:fd:f3:59:7d:52:61:3f:37: 69:ef:0c:8d:cb:39:34:83:d4:18:b9:61:2a:a5:ae:3f:3e:1e: 21:8c:14:41:5d:95:f0:60:20:b2:eb:d8:95:11:bd:7a:57:41: 23:5d:44:65 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5fd4hunMzKU6iFZ47ZJv+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMzZkZTI3OTc0NzI3YWEwMDQ2YjNlOWM4ZDA2MjQ2NzQ1 NDEyNTUwHhcNMjYwMTAxMTIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzBmZDQ0MTA5ZDRjZGNjOWJlMzNlMTUzNDE1YzgxNjg0YTIyOGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOcf3pSkvTIyMLLq4LAXa90x28oI BihNJ6i3N+MzErBmzFHy9UAyJBxlrp280RqyBrPxLEPKCEg1GMcHHqnuYKg98Zdk s8+NqSNQtkIUwCo2cna96lYFtOUnmtVspZioOeN061Pw+uAck2eiFfBm6Mg37bBA WGzIQNQSg3e8OFOooO192B8OgXlp2cg3Z6TaFdxLcov5iKtytpAhhhFheT5EXi9n NRIjHg7kvYNlOY+5GjXZNjK1it0dPozvu5B08YTffqAE1mNh/JjMbFHJA67eWMyE udtVt8NZwwLUebG4oW/JbdAeyvbyC70ZLqI8nsjs8VEUsJlX3GLc7fzoLwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFEwP1EEJ1M3Mm+M+FTQVyBaEoijkMB8GA1UdIwQY MBaAFB423ieXRyeqAEaz6cjQYkZ0VBJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzkt ZGY3OTNhOTQwYmFiLzEvVEFfVVFRblV6Y3liNHo0Vk5CWElGb1NpS09RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzktZGY3OTNhOTQwYmFi LzEvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLh3sAwQA Lh3vAwQAVZ/iAwQBVZ/mMA0GCSqGSIb3DQEBCwUAA4IBAQAIje/o7Cc8Y6olhTLT w2zJhvO26QV002O3aJvf/C3jh1mn6cri6ru8rFdqBF6t87afT6NhqfRsw5Imf7Nw nV+KwFj99prkF7pwmu/hK1i48iCWaYFY6Q8jVQ5SjQ1VTQxRCbLxGlkMGrW6me/F mEBrGCr5nM1vYjwCe5myIB31hGaWZ4oPGHbEtXfP+9nygIG/+fxOZDRbrWlsCs+o lM5wApPRB95K+X5TS43i+8T2JZqFM6kJsWanvPG0H+cxWbNATy/FzyrIGItk4PYV r0X6/fNZfVJhPzdp7wyNyzk0g9QYuWEqpa4/Ph4hjBRBXZXwYCCy69iVEb16V0Ej XURl -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:55 2026 by rpki-client