This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/uj3jB1h_BPelT0gTa2jTECaTC_E.roa
File: uj3jB1h_BPelT0gTa2jTECaTC_E.roa (raw, json)
Hash identifier: 2myfgj9WZ6r4hpUffwkXe16EkwdfIe0OAsHUggJVE+c=
Subject key identifier: BA:3D:E3:07:58:7F:04:F7:A5:4F:48:13:6B:68:D3:10:26:93:0B:F1
Certificate issuer: /CN=93515f25986e4b572a78b109d995c9ddf5da1266
Certificate serial: 019B79ECCB29AFE01A0146483EED36A09A07
Authority key identifier: 93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/uj3jB1h_BPelT0gTa2jTECaTC_E.roa
Signing time: Thu 01 Jan 2026 14:18:40 +0000
ROA not before: Thu 01 Jan 2026 14:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60855
IP address blocks: 143.126.100.0/24 maxlen: 24
143.126.203.0/24 maxlen: 24
143.126.211.0/24 maxlen: 24
143.126.221.0/24 maxlen: 24
143.126.248.0/23 maxlen: 23
143.126.248.0/24 maxlen: 24
143.126.249.0/24 maxlen: 24
143.126.250.0/23 maxlen: 23
143.126.250.0/24 maxlen: 24
143.126.251.0/24 maxlen: 24
143.126.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:cb:29:af:e0:1a:01:46:48:3e:ed:36:a0:9a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93515f25986e4b572a78b109d995c9ddf5da1266
Validity
Not Before: Jan 1 14:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba3de307587f04f7a54f48136b68d31026930bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:73:42:fa:94:d6:55:d7:d7:2e:c1:bf:90:32:
dd:ea:f5:18:f9:78:92:7b:34:2c:9b:03:41:ef:fe:
a7:1c:8d:9a:f6:8a:bf:ee:26:76:1a:f2:9f:aa:d8:
e2:cb:bf:ac:2e:33:5d:73:80:b2:b6:21:66:c7:d4:
0c:0d:15:47:81:fb:12:73:83:1e:5b:bb:0c:ec:a6:
39:d3:1d:ab:3e:84:27:c3:61:2a:74:e2:8d:3b:75:
70:7f:25:41:3a:66:fc:f8:ed:be:6f:b3:a5:f9:05:
bf:9c:0f:49:b6:77:29:8b:69:b0:09:fa:3f:30:cd:
39:1e:f7:15:81:15:7d:9e:aa:78:59:f8:d1:9f:f6:
99:f3:00:2d:3a:5b:d7:97:b7:b7:2b:65:d5:69:4d:
97:9a:db:19:99:c4:52:e7:0f:a9:10:35:b7:4b:61:
9b:c5:cc:14:f8:fa:04:b3:33:bc:f6:a0:11:f0:48:
37:0f:51:db:9d:f2:5c:64:0a:0c:71:a2:f8:f5:3a:
4c:f0:52:7b:b0:58:88:7a:e7:ea:34:0d:13:5f:ee:
d5:c2:63:cd:bb:82:30:0b:66:31:6d:4e:72:81:d4:
6b:9e:47:f3:34:46:ad:32:33:91:97:20:07:85:25:
9a:dc:f9:89:ef:17:b9:ce:6e:f4:32:84:c1:08:1d:
be:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3D:E3:07:58:7F:04:F7:A5:4F:48:13:6B:68:D3:10:26:93:0B:F1
X509v3 Authority Key Identifier:
keyid:93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/uj3jB1h_BPelT0gTa2jTECaTC_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.126.100.0/24
143.126.203.0/24
143.126.211.0/24
143.126.221.0/24
143.126.248.0/22
143.126.255.0/24
Signature Algorithm: sha256WithRSAEncryption
68:f1:7a:85:06:3f:f0:70:2e:ee:6b:26:a2:31:4a:71:44:93:
c5:e4:aa:ec:b3:f5:cf:5d:98:e7:69:44:ba:db:ad:74:80:3e:
75:32:c4:f3:89:7d:46:56:a8:15:a6:f4:b2:60:0c:a9:dc:44:
16:fd:5d:4d:ea:92:2c:ac:0d:60:c3:46:56:3d:03:be:1a:56:
18:dc:d2:5a:91:64:2d:22:9c:c3:4c:77:92:0f:23:a9:fd:97:
35:a1:f7:b4:40:20:59:6e:22:25:71:19:03:2d:7c:32:40:46:
8a:5d:3b:6e:c1:3d:05:2f:ca:44:ca:81:ee:3e:b5:2a:7d:32:
7a:07:e5:da:cd:1a:4e:a2:4c:dc:f0:fd:8d:8b:54:de:3d:48:
c6:eb:9c:ad:93:7e:a2:e4:b8:65:cc:58:4e:97:f1:17:79:8e:
9d:b7:de:ab:ad:4c:98:b6:3e:16:55:91:a8:d8:39:92:f0:0d:
70:b6:6f:9d:e0:83:83:fc:82:3e:bd:aa:9d:57:77:d8:5b:9a:
70:82:7e:81:a4:84:94:ad:18:07:70:f9:c6:0a:78:db:a8:85:
19:6f:7a:a1:09:c1:60:8a:f5:b3:17:e2:ae:5b:40:df:80:89:
13:61:ce:88:cc:66:1d:ca:0e:c2:e5:32:fd:be:ce:01:e7:b3:
fb:1e:a6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:07:51 2026 by rpki-client