This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/1-KiwJ7_SOfhMSL1wh3lOIzJdqf0.roa File: 1-KiwJ7_SOfhMSL1wh3lOIzJdqf0.roa (raw, json) Hash identifier: Q/Tsqdd7rd4T6xRRkiE1SIt+/mkcRs5YGJIeO2ihizo= Subject key identifier: F8:A8:B0:27:BF:D2:39:F8:4C:48:BD:70:87:79:4E:23:32:5D:A9:FD Certificate issuer: /CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3 Certificate serial: 019B7AC93259567CCB60167727150ECF2D68 Authority key identifier: 0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/1-KiwJ7_SOfhMSL1wh3lOIzJdqf0.roa Signing time: Thu 01 Jan 2026 18:19:24 +0000 ROA not before: Thu 01 Jan 2026 18:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56588 IP address blocks: 46.226.136.0/21 maxlen: 21 2a00:6a00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.crl rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:32:59:56:7c:cb:60:16:77:27:15:0e:cf:2d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3 Validity Not Before: Jan 1 18:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8a8b027bfd239f84c48bd7087794e23325da9fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fe:b1:c1:85:7e:b5:70:92:41:78:b3:52:00: 34:b9:9b:b8:7d:25:c7:71:01:1a:38:35:e4:40:f3: 36:bc:71:de:cb:b6:e7:aa:ad:c0:b2:02:ee:5a:f5: 51:ba:4d:7b:78:6c:9f:52:b2:fe:3d:f2:1e:b0:1b: 31:da:d6:e4:e3:16:e0:22:a3:f6:c8:ad:9c:2e:64: 6a:3b:6c:10:c9:84:8b:71:4f:60:7d:a9:0a:01:76: 6c:2f:ad:94:1a:85:53:e2:c2:31:3d:56:3f:a7:e7: cc:6a:fd:41:c1:95:69:74:02:d9:7a:42:f6:d3:03: a8:f5:0b:30:5e:80:62:c0:0b:10:14:01:5a:ca:0a: 0e:ba:59:e9:5e:4e:2d:b7:b6:3d:b5:fb:76:64:bb: 16:ed:67:95:a2:04:77:5c:73:81:49:91:ba:d6:80: a7:c3:ad:bc:86:4a:ab:71:24:b3:30:aa:65:ec:70: 61:cc:c5:96:d1:2a:f8:6e:da:41:d7:61:20:f6:8e: 28:a0:a7:d8:d1:ee:33:df:21:bf:86:39:7f:ec:da: f1:f8:d2:c5:51:92:20:91:19:aa:85:12:51:83:7c: 61:52:d8:b8:56:36:ce:9a:e2:2d:ff:37:69:63:a4: 78:40:f2:40:bf:e5:5c:c7:f3:a7:15:cc:16:cd:ff: 2f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A8:B0:27:BF:D2:39:F8:4C:48:BD:70:87:79:4E:23:32:5D:A9:FD X509v3 Authority Key Identifier: keyid:0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/1-KiwJ7_SOfhMSL1wh3lOIzJdqf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.226.136.0/21 IPv6: 2a00:6a00::/32 Signature Algorithm: sha256WithRSAEncryption 45:28:c7:9f:5f:13:64:4d:d1:2c:78:4a:79:a9:6d:e3:cf:d0: 11:58:fa:3a:b1:17:5e:9d:a0:83:f4:8a:71:ad:cf:92:5c:11: 22:c8:8b:3f:8e:88:74:19:d1:ef:86:db:43:f3:e7:24:3a:5b: c3:57:eb:1c:14:76:c4:42:19:e1:3d:a2:27:d5:85:5b:e3:5a: e1:2c:75:fe:9e:54:98:c8:11:ba:87:e2:33:3b:aa:6c:5a:bf: f7:c4:b5:f7:77:76:f3:9a:d2:ed:f4:ac:15:a5:3b:8e:04:b7: 53:26:5d:dd:a9:09:14:a0:af:7b:2c:cf:4e:4c:bd:b6:a5:50: 38:b0:46:34:7f:9e:ef:7a:56:be:c5:1d:b4:bc:54:d0:0e:a6: ce:e3:92:57:24:0d:fb:e5:8c:52:dd:62:35:55:3b:b2:50:01: eb:67:ba:68:af:a7:52:87:24:04:e1:72:c4:a3:47:7c:34:8e: 9f:e3:b3:ef:f6:35:73:1a:2d:6c:bc:48:9e:2c:9c:36:f8:02: f5:3f:93:eb:e5:b4:ed:37:30:aa:c3:c6:db:40:a9:da:13:b3: b4:df:38:94:cf:07:78:bf:d2:1c:bd:c1:df:37:2c:7c:b7:63: 4b:7e:ea:15:18:2c:80:e8:57:aa:f8:7f:e1:36:ea:06:8b:82: dd:37:c6:14 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt6yTJZVnzLYBZ3JxUOzy1oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMDQ4YjVmODE1MjM1YzM5M2ZlYTc2MWUwN2ViOGI4YmJm ODdmZDMwHhcNMjYwMTAxMTgxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGE4YjAyN2JmZDIzOWY4NGM0OGJkNzA4Nzc5NGUyMzMyNWRhOWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP6xwYV+tXCSQXizUgA0uZu4fSXH cQEaODXkQPM2vHHey7bnqq3AsgLuWvVRuk17eGyfUrL+PfIesBsx2tbk4xbgIqP2 yK2cLmRqO2wQyYSLcU9gfakKAXZsL62UGoVT4sIxPVY/p+fMav1BwZVpdALZekL2 0wOo9QswXoBiwAsQFAFaygoOulnpXk4tt7Y9tft2ZLsW7WeVogR3XHOBSZG61oCn w628hkqrcSSzMKpl7HBhzMWW0Sr4btpB12Eg9o4ooKfY0e4z3yG/hjl/7Nrx+NLF UZIgkRmqhRJRg3xhUti4VjbOmuIt/zdpY6R4QPJAv+Vcx/OnFcwWzf8vDQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFPiosCe/0jn4TEi9cId5TiMyXan9MB8GA1UdIwQY MBaAFAwEi1+BUjXDk/6nYeB+uLi7+H/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREFTTFg0RlNOY09UX3FkaDRINjR1THY0ZjlNLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My82ZDdjMWMtOGViZC00MjQ2LTgzZjkt NWYzY2MzMThmMTgwLzEvMS1LaXdKN19TT2ZoTVNMMXdoM2xPSXpKZHFmMC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjMvNmQ3YzFjLThlYmQtNDI0Ni04M2Y5LTVmM2NjMzE4ZjE4 MC8xL0RBU0xYNEZTTmNPVF9xZGg0SDY0dUx2NGY5TS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAy7iiDAN BAIAAjAHAwUAKgBqADANBgkqhkiG9w0BAQsFAAOCAQEARSjHn18TZE3RLHhKealt 48/QEVj6OrEXXp2gg/SKca3PklwRIsiLP46IdBnR74bbQ/PnJDpbw1frHBR2xEIZ 4T2iJ9WFW+Na4Sx1/p5UmMgRuofiMzuqbFq/98S193d285rS7fSsFaU7jgS3UyZd 3akJFKCveyzPTky9tqVQOLBGNH+e73pWvsUdtLxU0A6mzuOSVyQN++WMUt1iNVU7 slAB62e6aK+nUockBOFyxKNHfDSOn+Oz7/Y1cxotbLxIniycNvgC9T+T6+W07Tcw qsPG20Cp2hOztN84lM8HeL/SHL3B3zcsfLdjS37qFRgsgOhXqvh/4TbqBouC3TfG FA== -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:57 2026 by rpki-client