This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/c1T_ugUar9ceFcuB3HM0intn2C4.roa File: c1T_ugUar9ceFcuB3HM0intn2C4.roa (raw, json) Hash identifier: r2UF6QghR5sMhXjvwfbc2TQkLc9tI62JzcSjSV6zEYY= Subject key identifier: 73:54:FF:BA:05:1A:AF:D7:1E:15:CB:81:DC:73:34:8A:7B:67:D8:2E Certificate issuer: /CN=b56a8c91ad31745ff727da0482ede1b2fab462e7 Certificate serial: 019B77C6DCB9FD23DD937F85A50EC45CB9EE Authority key identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/c1T_ugUar9ceFcuB3HM0intn2C4.roa Signing time: Thu 01 Jan 2026 04:17:59 +0000 ROA not before: Thu 01 Jan 2026 04:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 46.31.112.0/24 maxlen: 24 46.31.113.0/24 maxlen: 24 46.31.114.0/24 maxlen: 24 46.31.116.0/24 maxlen: 24 46.31.117.0/24 maxlen: 24 46.31.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:dc:b9:fd:23:dd:93:7f:85:a5:0e:c4:5c:b9:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56a8c91ad31745ff727da0482ede1b2fab462e7 Validity Not Before: Jan 1 04:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7354ffba051aafd71e15cb81dc73348a7b67d82e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:72:73:42:03:f3:5a:5b:13:65:5d:21:b4:38: 19:36:4d:97:81:0f:22:e0:66:b6:c8:6d:ca:3e:cb: 2c:3b:52:6a:b6:ae:8e:6f:3e:18:2e:2a:9d:fd:e0: 6f:ec:6c:d1:10:00:62:2a:91:3d:1a:a0:8b:57:03: 53:2b:52:4f:06:89:11:25:03:05:8c:82:c4:aa:ff: 60:3b:80:e4:5d:6b:29:51:af:7e:95:74:b1:bf:af: 39:23:27:88:27:f6:2e:25:d7:c0:78:77:32:a0:1e: 94:1f:03:a6:62:26:84:19:14:20:99:01:ab:98:ee: 58:f2:73:fd:b3:f9:35:bb:92:ba:8b:2f:f5:a3:a3: ee:01:34:95:7e:33:62:ce:99:a2:54:6d:08:6c:ad: 8f:78:62:c7:b3:a8:2b:22:76:0c:e8:2a:05:b4:25: 8c:4f:6a:be:4c:25:eb:18:26:04:83:61:d2:bf:44: ef:15:fc:4e:fc:02:f6:aa:1e:88:a6:a1:bf:36:e0: 2f:7c:59:c9:94:37:3f:42:a0:c8:78:48:b3:88:74: dc:81:48:a6:97:14:4c:41:38:64:c5:ac:59:a1:c8: 42:92:88:71:cc:ea:af:2b:ba:4c:c2:1b:f3:6f:e2: e2:d5:7b:da:71:0b:c3:55:39:f0:b0:54:ae:8c:15: 54:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:54:FF:BA:05:1A:AF:D7:1E:15:CB:81:DC:73:34:8A:7B:67:D8:2E X509v3 Authority Key Identifier: keyid:B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/c1T_ugUar9ceFcuB3HM0intn2C4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.112.0-46.31.114.255 46.31.116.0-46.31.118.255 Signature Algorithm: sha256WithRSAEncryption 33:87:5d:9b:04:28:50:89:6a:4e:b7:6e:52:4f:29:c7:ab:7a: dc:e4:73:ab:79:ba:19:c1:dc:08:03:7d:fd:24:81:a3:de:0f: 4c:97:b6:96:81:e5:27:11:ec:fd:e7:da:6b:15:1d:8a:97:02: aa:38:c7:94:c4:01:44:34:ff:97:3a:4c:4a:a1:a4:49:9f:5f: a6:83:43:64:54:dd:a1:7a:a1:5e:6f:e4:b1:89:37:1a:99:5d: bf:a8:9b:dd:d2:22:d0:15:47:f9:a4:68:0b:f4:2d:86:a2:dd: f5:76:42:3b:f7:7a:70:6a:33:a2:01:53:f5:25:4b:e1:94:6a: dc:d0:7c:2f:c4:64:a8:d4:f5:5d:5d:6e:40:d1:7a:06:f9:b3: a3:44:ea:72:a2:22:f2:8e:0a:02:11:4d:d7:9f:01:65:3c:70: 38:96:33:c7:bd:76:04:8f:20:0e:33:aa:de:42:56:22:46:90: ee:d1:b7:17:2e:c1:0e:2e:9a:3b:e1:f5:98:82:2c:da:25:a8: d0:89:2d:06:4d:af:8f:b7:69:13:a1:4a:1a:28:bd:f3:42:ff: 6e:43:b1:8d:d2:93:d8:99:f9:61:d2:22:fb:f0:7c:0f:8a:98: f8:33:b5:6e:b1:f5:1e:7c:ef:be:3f:57:4f:39:cd:79:3b:6a: 03:b6:db:e7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt3xty5/SPdk3+FpQ7EXLnuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NmE4YzkxYWQzMTc0NWZmNzI3ZGEwNDgyZWRlMWIyZmFi NDYyZTcwHhcNMjYwMTAxMDQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzU0ZmZiYTA1MWFhZmQ3MWUxNWNiODFkYzczMzQ4YTdiNjdkODJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHJzQgPzWlsTZV0htDgZNk2XgQ8i 4Ga2yG3KPsssO1Jqtq6Obz4YLiqd/eBv7GzREABiKpE9GqCLVwNTK1JPBokRJQMF jILEqv9gO4DkXWspUa9+lXSxv685IyeIJ/YuJdfAeHcyoB6UHwOmYiaEGRQgmQGr mO5Y8nP9s/k1u5K6iy/1o6PuATSVfjNizpmiVG0IbK2PeGLHs6grInYM6CoFtCWM T2q+TCXrGCYEg2HSv0TvFfxO/AL2qh6IpqG/NuAvfFnJlDc/QqDIeEiziHTcgUim lxRMQThkxaxZochCkohxzOqvK7pMwhvzb+Li1XvacQvDVTnwsFSujBVUmQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFHNU/7oFGq/XHhXLgdxzNIp7Z9guMB8GA1UdIwQY MBaAFLVqjJGtMXRf9yfaBILt4bL6tGLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zNWZmMzItYTY4Ny00ZjUwLTk2OWEt OTg2NDg5MDE2ODhmLzEvYzFUX3VnVWFyOWNlRmN1QjNITTBpbnRuMkM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8zNWZmMzItYTY4Ny00ZjUwLTk2OWEtOTg2NDg5MDE2ODhm LzEvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAQuH3AD BAAuH3IwDAMEAi4fdAMEAC4fdjANBgkqhkiG9w0BAQsFAAOCAQEAM4ddmwQoUIlq TrduUk8px6t63ORzq3m6GcHcCAN9/SSBo94PTJe2loHlJxHs/efaaxUdipcCqjjH lMQBRDT/lzpMSqGkSZ9fpoNDZFTdoXqhXm/ksYk3Gpldv6ib3dIi0BVH+aRoC/Qt hqLd9XZCO/d6cGozogFT9SVL4ZRq3NB8L8RkqNT1XV1uQNF6Bvmzo0TqcqIi8o4K AhFN158BZTxwOJYzx712BI8gDjOq3kJWIkaQ7tG3Fy7BDi6aO+H1mIIs2iWo0Ikt Bk2vj7dpE6FKGii980L/bkOxjdKT2Jn5YdIi+/B8D4qY+DO1brH1Hnzvvj9XTznN eTtqA7bb5w== -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:54 2026 by rpki-client