This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1Kg_Ulab4sB3FtCcoo1l5PNO7rw.roa File: 1Kg_Ulab4sB3FtCcoo1l5PNO7rw.roa (raw, json) Hash identifier: c8c2ZCfFSRIW6FylRlfxyknjH4TvpagO5fNnP9Ygg7g= Subject key identifier: D4:A8:3F:52:56:9B:E2:C0:77:16:D0:9C:A2:8D:65:E4:F3:4E:EE:BC Certificate issuer: /CN=d425900312ff3bda4d2f896f64df65646fd9c251 Certificate serial: 019B7D5BF2C7AF5DAD32FB7A87A947C139EC Authority key identifier: D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1Kg_Ulab4sB3FtCcoo1l5PNO7rw.roa Signing time: Fri 02 Jan 2026 06:18:56 +0000 ROA not before: Fri 02 Jan 2026 06:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25376 IP address blocks: 82.148.224.0/19 maxlen: 24 185.12.232.0/22 maxlen: 24 2a00:1b98::/32 maxlen: 32 2a02:f0a0::/30 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:f2:c7:af:5d:ad:32:fb:7a:87:a9:47:c1:39:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d425900312ff3bda4d2f896f64df65646fd9c251 Validity Not Before: Jan 2 06:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4a83f52569be2c07716d09ca28d65e4f34eeebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5e:8c:20:e6:be:9a:35:22:15:f2:fa:9b:5e: 77:3b:35:79:72:f5:42:75:b3:ee:2c:07:64:07:fb: d3:38:2c:bb:49:8b:19:4b:dc:4d:58:6b:ed:ac:3f: 50:f0:fa:4a:45:26:5d:0f:23:aa:97:28:3e:1e:36: 7d:d6:cc:00:c9:36:d3:47:af:c8:07:37:98:4c:be: cb:07:99:a4:94:bc:83:77:e3:da:50:59:47:55:73: 45:b5:90:b6:86:12:a8:90:d4:50:18:77:25:79:16: 14:ab:65:68:ff:23:bc:09:41:0c:32:3f:18:79:a5: af:de:a2:91:9d:85:3b:51:20:23:2b:3b:d8:0c:58: 33:e9:29:1e:fb:71:fc:d5:99:ea:12:7c:ff:e3:cf: 2e:d8:55:02:27:2d:0f:51:89:66:40:2c:1e:41:8a: 3e:3c:34:b0:7e:1f:ab:5b:e5:6f:60:7e:26:d0:11: a1:6d:bd:0a:b7:0e:90:0b:77:33:65:f3:74:e5:cb: ad:02:46:e4:61:ad:d7:5f:c8:a1:37:63:83:6b:68: 76:2f:38:25:30:ba:67:f3:b4:35:d9:f8:39:fe:c6: e6:5c:f8:f6:fe:0c:1b:b2:6c:05:3e:b0:87:21:57: 8e:40:cc:ca:44:5b:86:14:70:2c:01:d3:e8:1e:ff: 58:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A8:3F:52:56:9B:E2:C0:77:16:D0:9C:A2:8D:65:E4:F3:4E:EE:BC X509v3 Authority Key Identifier: keyid:D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1Kg_Ulab4sB3FtCcoo1l5PNO7rw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.148.224.0/19 185.12.232.0/22 IPv6: 2a00:1b98::/32 2a02:f0a0::/30 Signature Algorithm: sha256WithRSAEncryption 73:57:1e:7f:31:e2:54:8a:8e:16:18:89:b8:ea:65:7c:38:12: 9d:2c:8a:af:dc:e1:21:01:8e:5c:66:d6:7f:6b:84:a0:8d:9a: 87:e3:34:bb:82:0f:a7:81:54:00:8c:b6:cf:fe:d8:96:29:0a: 0c:a2:da:32:73:f5:7f:2b:53:21:6c:fd:05:d2:92:ae:eb:cc: 06:29:d2:37:44:e8:82:e6:1c:fa:ed:f6:f0:91:38:3b:fd:7a: 57:ff:ad:c6:36:70:f4:23:2b:08:50:8f:32:6b:7d:24:6d:a5: c1:f7:11:10:7a:8f:3d:81:7f:2c:44:68:1f:5f:08:5a:cb:05: 3c:fb:43:09:88:a1:ea:45:43:ff:6c:33:22:7f:aa:54:c8:82: 52:f4:9e:64:a2:a3:13:00:e4:2c:ce:04:bd:bc:08:76:01:56: e0:51:7e:93:2e:02:f2:21:e9:49:6d:00:85:60:cc:92:13:a3: 1a:c4:70:14:35:50:c7:c7:4a:fd:40:1e:8f:16:58:80:e5:f2: e3:e2:04:64:51:6e:18:a8:8b:0d:e7:44:54:f4:ea:b1:64:48: cb:d3:78:59:30:d2:ad:80:15:f1:d6:51:ca:cf:75:2b:86:ec: db:79:be:e9:5d:a6:08:74:ad:c0:55:60:93:71:2a:eb:d0:10: 71:8a:f0:f3 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt9W/LHr12tMvt6h6lHwTnsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MjU5MDAzMTJmZjNiZGE0ZDJmODk2ZjY0ZGY2NTY0NmZk OWMyNTEwHhcNMjYwMTAyMDYxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGE4M2Y1MjU2OWJlMmMwNzcxNmQwOWNhMjhkNjVlNGYzNGVlZWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV6MIOa+mjUiFfL6m153OzV5cvVC dbPuLAdkB/vTOCy7SYsZS9xNWGvtrD9Q8PpKRSZdDyOqlyg+HjZ91swAyTbTR6/I BzeYTL7LB5mklLyDd+PaUFlHVXNFtZC2hhKokNRQGHcleRYUq2Vo/yO8CUEMMj8Y eaWv3qKRnYU7USAjKzvYDFgz6Ske+3H81ZnqEnz/488u2FUCJy0PUYlmQCweQYo+ PDSwfh+rW+VvYH4m0BGhbb0Ktw6QC3czZfN05cutAkbkYa3XX8ihN2ODa2h2Lzgl MLpn87Q12fg5/sbmXPj2/gwbsmwFPrCHIVeOQMzKRFuGFHAsAdPoHv9YyQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNSoP1JWm+LAdxbQnKKNZeTzTu68MB8GA1UdIwQY MBaAFNQlkAMS/zvaTS+Jb2TfZWRv2cJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUNXUUF4TF9POXBOTDRsdlpOOWxaR19ad2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81YmY4MjYtOTIxZS00NGY1LWFmMzMt Njc2YjQyODkyNWFiLzEvMUtnX1VsYWI0c0IzRnRDY29vMWw1UE5PN3J3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy81YmY4MjYtOTIxZS00NGY1LWFmMzMtNjc2YjQyODkyNWFi LzEvMUNXUUF4TF9POXBOTDRsdlpOOWxaR19ad2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQFUpTgAwQC uQzoMBQEAgACMA4DBQAqABuYAwUCKgLwoDANBgkqhkiG9w0BAQsFAAOCAQEAc1ce fzHiVIqOFhiJuOplfDgSnSyKr9zhIQGOXGbWf2uEoI2ah+M0u4IPp4FUAIy2z/7Y likKDKLaMnP1fytTIWz9BdKSruvMBinSN0ToguYc+u328JE4O/16V/+txjZw9CMr CFCPMmt9JG2lwfcREHqPPYF/LERoH18IWssFPPtDCYih6kVD/2wzIn+qVMiCUvSe ZKKjEwDkLM4EvbwIdgFW4FF+ky4C8iHpSW0AhWDMkhOjGsRwFDVQx8dK/UAejxZY gOXy4+IEZFFuGKiLDedEVPTqsWRIy9N4WTDSrYAV8dZRys91K4bs23m+6V2mCHSt wFVgk3Eq69AQcYrw8w== -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:54 2026 by rpki-client