This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/1xRS3NEJjEx5UZbwpqmlKAt2jws.roa File: 1xRS3NEJjEx5UZbwpqmlKAt2jws.roa (raw, json) Hash identifier: js9Axf4ESCujTVZU7VYFjkx4kXDlOUsMLJ+P9IJ0OBk= Subject key identifier: D7:14:52:DC:D1:09:8C:4C:79:51:96:F0:A6:A9:A5:28:0B:76:8F:0B Certificate issuer: /CN=c811029686b2c80a7f0460b6c6ef1b9086728097 Certificate serial: 019B7AC9005A6BD018D25C5DE68DA1FC6567 Authority key identifier: C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/1xRS3NEJjEx5UZbwpqmlKAt2jws.roa Signing time: Thu 01 Jan 2026 18:19:11 +0000 ROA not before: Thu 01 Jan 2026 18:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57740 IP address blocks: 46.235.0.0/24 maxlen: 24 46.235.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:00:5a:6b:d0:18:d2:5c:5d:e6:8d:a1:fc:65:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c811029686b2c80a7f0460b6c6ef1b9086728097 Validity Not Before: Jan 1 18:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d71452dcd1098c4c795196f0a6a9a5280b768f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c2:b0:3e:54:e4:11:58:b1:e8:c4:76:17:83: 52:a5:de:81:b4:7d:e0:4f:1c:04:e9:dd:f2:c3:1d: d6:94:83:36:f2:25:69:d9:91:9d:39:b1:7e:d3:ca: 24:86:11:a0:e6:c2:3a:e4:94:b8:17:25:b2:bd:5d: d9:83:17:90:60:a6:0c:59:8e:13:ba:d6:5f:9b:2a: b2:c3:37:1c:56:42:2f:d0:c8:bb:03:e8:ce:97:bb: 14:9a:a2:f4:63:1d:c3:26:06:59:d7:52:37:c5:d0: ff:92:1b:58:91:b0:76:89:0e:be:2c:57:7a:44:a2: 43:ab:38:b8:75:56:2f:9f:ca:d9:2d:70:df:fd:1c: 9b:fa:65:8e:92:17:ae:a4:ff:39:0d:16:5e:48:8c: 45:49:57:ed:5e:8b:e6:f5:e5:f0:08:b3:f5:ea:29: 81:ef:d4:f3:8a:42:c7:ae:a9:be:b9:28:7b:88:c8: 36:53:ce:db:3b:a9:b5:e9:3f:2e:12:8d:ef:b1:36: ef:26:83:40:2a:ea:ca:c7:f2:75:cc:d6:c4:e8:a0: ff:c7:d3:1a:28:29:2a:3e:70:b9:f3:93:f5:fa:63: d6:b7:97:7f:52:1c:33:25:a1:c1:fc:71:fa:bc:dc: b5:54:6d:e4:bb:28:9b:4a:6a:6a:f2:e4:7b:bf:c5: c5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:14:52:DC:D1:09:8C:4C:79:51:96:F0:A6:A9:A5:28:0B:76:8F:0B X509v3 Authority Key Identifier: keyid:C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/1xRS3NEJjEx5UZbwpqmlKAt2jws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.235.0.0/24 46.235.3.0/24 Signature Algorithm: sha256WithRSAEncryption 23:11:a0:0e:91:06:b4:92:82:3a:66:df:cd:37:51:fa:ef:eb: 97:59:1c:42:11:84:97:aa:83:69:72:b1:24:1b:60:04:18:c5: 86:8b:5c:79:07:f8:1c:e1:99:3f:80:1a:85:43:f4:f6:b9:d7: 09:bc:c0:30:6e:68:7b:3d:da:84:38:4e:49:28:53:0b:8a:df: 9d:7b:62:17:f6:ce:f4:61:e9:ac:51:c1:5d:e7:ab:c3:46:79: 55:33:4a:fb:cf:e3:0c:0c:db:25:5d:36:7a:d0:d6:3e:f8:2d: 25:9b:93:54:15:91:52:40:f4:95:93:f2:02:0b:ba:7b:ce:f2: 2d:51:ec:01:65:48:44:56:48:72:70:87:b5:86:bb:e8:fb:3e: b8:2b:83:8e:8e:bb:9d:e6:c0:99:42:16:49:a4:09:1c:da:14: a3:a5:df:bd:54:14:48:db:b1:b9:90:58:fe:fc:56:51:02:70: f0:fd:d6:49:71:86:ed:c7:05:76:c8:b4:d5:42:70:40:fa:1a: 48:17:4f:e0:2e:17:e1:3f:d8:62:d5:bc:9b:4f:ab:6e:92:db: e2:a7:0c:b6:15:a7:ac:d4:f9:23:15:8c:7b:e5:2a:91:2a:f9: ae:6a:ea:6b:f2:43:02:90:0c:e8:f5:97:77:f4:93:13:19:1f: 37:4a:f9:31 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yQBaa9AY0lxd5o2h/GVnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MTEwMjk2ODZiMmM4MGE3ZjA0NjBiNmM2ZWYxYjkwODY3 MjgwOTcwHhcNMjYwMTAxMTgxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzE0NTJkY2QxMDk4YzRjNzk1MTk2ZjBhNmE5YTUyODBiNzY4ZjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMKwPlTkEVix6MR2F4NSpd6BtH3g TxwE6d3ywx3WlIM28iVp2ZGdObF+08okhhGg5sI65JS4FyWyvV3ZgxeQYKYMWY4T utZfmyqywzccVkIv0Mi7A+jOl7sUmqL0Yx3DJgZZ11I3xdD/khtYkbB2iQ6+LFd6 RKJDqzi4dVYvn8rZLXDf/Ryb+mWOkheupP85DRZeSIxFSVftXovm9eXwCLP16imB 79TzikLHrqm+uSh7iMg2U87bO6m16T8uEo3vsTbvJoNAKurKx/J1zNbE6KD/x9Ma KCkqPnC585P1+mPWt5d/UhwzJaHB/HH6vNy1VG3kuyibSmpq8uR7v8XFcwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNcUUtzRCYxMeVGW8KappSgLdo8LMB8GA1UdIwQY MBaAFMgRApaGssgKfwRgtsbvG5CGcoCXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUJFQ2xvYXl5QXBfQkdDMnh1OGJrSVp5Z0pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hZmNmNjQtMDA1MS00ZGE3LTliMTIt NTBlMzMzMzg0NjY5LzEvMXhSUzNORUpqRXg1VVpid3BxbWxLQXQyandzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hZmNmNjQtMDA1MS00ZGE3LTliMTItNTBlMzMzMzg0NjY5 LzEveUJFQ2xvYXl5QXBfQkdDMnh1OGJrSVp5Z0pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALusAAwQA LusDMA0GCSqGSIb3DQEBCwUAA4IBAQAjEaAOkQa0koI6Zt/NN1H67+uXWRxCEYSX qoNpcrEkG2AEGMWGi1x5B/gc4Zk/gBqFQ/T2udcJvMAwbmh7PdqEOE5JKFMLit+d e2IX9s70YemsUcFd56vDRnlVM0r7z+MMDNslXTZ60NY++C0lm5NUFZFSQPSVk/IC C7p7zvItUewBZUhEVkhycIe1hrvo+z64K4OOjrud5sCZQhZJpAkc2hSjpd+9VBRI 27G5kFj+/FZRAnDw/dZJcYbtxwV2yLTVQnBA+hpIF0/gLhfhP9hi1bybT6tuktvi pwy2Faes1PkjFYx75SqRKvmuaupr8kMCkAzo9Zd39JMTGR83Svkx -----END CERTIFICATE-----Generated at Wed Jan 28 23:00:21 2026 by rpki-client