This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/1ct-Ix4vqSryVTwpOe2dk96HqOE.roa File: 1ct-Ix4vqSryVTwpOe2dk96HqOE.roa (raw, json) Hash identifier: ZHQYlnog1xkIVPDyJbvsnZ9amnNHU1IoPvRVcPKPYG8= Subject key identifier: D5:CB:7E:23:1E:2F:A9:2A:F2:55:3C:29:39:ED:9D:93:DE:87:A8:E1 Certificate issuer: /CN=bf2938590e0d0019725662d4b4ae4cc9ec3a734d Certificate serial: 019B797F03723A10156FC74D405049DF6A6C Authority key identifier: BF:29:38:59:0E:0D:00:19:72:56:62:D4:B4:AE:4C:C9:EC:3A:73:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/1ct-Ix4vqSryVTwpOe2dk96HqOE.roa Signing time: Thu 01 Jan 2026 12:18:45 +0000 ROA not before: Thu 01 Jan 2026 12:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60943 IP address blocks: 46.255.31.0/24 maxlen: 24 193.160.240.0/22 maxlen: 22 2a0c:dac0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:03:72:3a:10:15:6f:c7:4d:40:50:49:df:6a:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf2938590e0d0019725662d4b4ae4cc9ec3a734d Validity Not Before: Jan 1 12:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5cb7e231e2fa92af2553c2939ed9d93de87a8e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:31:ca:0a:87:83:03:30:35:a2:a9:c6:e9:68: 9c:64:a0:dc:49:3f:b0:0f:28:ae:5a:1c:df:f3:bc: 68:16:72:76:e0:6b:ea:c3:12:d5:8f:d2:70:37:99: 8f:25:c3:89:39:c2:09:5d:8d:4e:7c:03:63:7b:71: a9:27:c3:19:9e:4c:96:ff:cc:a3:05:67:be:98:d2: 8c:83:9c:41:9e:78:64:78:d1:59:10:ef:1f:7d:4a: b2:7d:91:c0:4b:8a:cd:16:12:5b:7a:ee:1f:cb:86: a8:df:78:a3:08:8f:ac:c5:ad:f7:2f:23:31:ec:c5: d2:6c:15:2c:5e:da:a7:61:89:b1:9b:1d:29:ef:2b: 9b:04:1c:48:06:b2:db:50:eb:dc:84:c0:d8:ae:cd: 9e:18:57:ec:fd:5f:3a:b4:2d:01:ae:85:07:30:61: 68:1d:c5:7b:2a:7a:cc:eb:ce:d2:13:57:6c:ea:ad: 40:a3:d2:24:25:20:11:01:d2:80:d2:d0:b1:3a:8a: 43:d6:13:2a:34:5f:e8:fb:ef:8c:29:6c:af:63:ed: 3d:ed:1a:6c:09:1f:2d:7a:c8:2f:76:cc:66:36:bb: fb:60:54:19:dc:a4:6f:da:1f:c9:b2:ff:7b:1b:ed: 8e:e6:9d:ff:e4:57:e0:2f:f3:d6:20:31:c9:83:4f: 60:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:CB:7E:23:1E:2F:A9:2A:F2:55:3C:29:39:ED:9D:93:DE:87:A8:E1 X509v3 Authority Key Identifier: keyid:BF:29:38:59:0E:0D:00:19:72:56:62:D4:B4:AE:4C:C9:EC:3A:73:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/1ct-Ix4vqSryVTwpOe2dk96HqOE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.255.31.0/24 193.160.240.0/22 IPv6: 2a0c:dac0::/29 Signature Algorithm: sha256WithRSAEncryption 36:5b:5f:dd:d9:36:3b:72:6a:92:87:5d:78:cd:7f:82:69:17: 90:1d:f6:78:45:1d:1c:0f:9c:3f:e3:f2:d9:d3:0b:b7:36:4b: f3:a9:97:9a:bc:4b:e3:af:d6:c5:87:a7:b1:63:b6:b3:b3:48: ea:50:36:4c:02:5a:c5:9a:00:6f:3e:db:c9:22:ba:8f:bc:22: b8:73:ee:71:35:0e:1c:a5:3f:35:c5:32:d2:94:1c:9e:ee:e4: 14:c7:40:e8:ad:03:81:62:1e:5f:a8:b0:1e:86:77:65:30:17: 0c:fb:f9:1e:4a:9a:d8:e2:13:c1:b7:5b:2f:95:d7:3c:0a:94: 3c:62:9f:11:da:01:16:91:ba:ab:a0:05:c9:b1:cc:0f:0a:e9: 4d:02:b1:9f:4e:fd:35:44:89:c5:0d:82:da:76:63:6b:14:59: 7d:bf:55:54:a1:b7:91:af:ef:9a:56:22:b5:8e:e6:b0:4b:ce: c4:1c:05:c6:73:1e:bc:10:b3:b1:c3:39:b9:94:37:16:71:5d: 12:77:1b:44:8f:8b:84:57:d1:85:c6:82:52:ac:8a:a5:e8:cc: bf:36:b1:ba:7e:00:9c:c7:8c:d0:7a:e0:29:c7:c5:b9:7e:87: eb:ae:11:53:7b:b7:b7:7e:22:9d:f0:61:1f:4c:74:66:0e:cd: f6:f6:5d:90 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5fwNyOhAVb8dNQFBJ32psMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMjkzODU5MGUwZDAwMTk3MjU2NjJkNGI0YWU0Y2M5ZWMz YTczNGQwHhcNMjYwMTAxMTIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWNiN2UyMzFlMmZhOTJhZjI1NTNjMjkzOWVkOWQ5M2RlODdhOGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9THKCoeDAzA1oqnG6WicZKDcST+w DyiuWhzf87xoFnJ24GvqwxLVj9JwN5mPJcOJOcIJXY1OfANje3GpJ8MZnkyW/8yj BWe+mNKMg5xBnnhkeNFZEO8ffUqyfZHAS4rNFhJbeu4fy4ao33ijCI+sxa33LyMx 7MXSbBUsXtqnYYmxmx0p7yubBBxIBrLbUOvchMDYrs2eGFfs/V86tC0BroUHMGFo HcV7KnrM687SE1ds6q1Ao9IkJSARAdKA0tCxOopD1hMqNF/o+++MKWyvY+097Rps CR8tesgvdsxmNrv7YFQZ3KRv2h/Jsv97G+2O5p3/5FfgL/PWIDHJg09gqwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNXLfiMeL6kq8lU8KTntnZPeh6jhMB8GA1UdIwQY MBaAFL8pOFkODQAZclZi1LSuTMnsOnNNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnlrNFdRNE5BQmx5Vm1MVXRLNU15ZXc2YzAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84MzNhYTItYWYwNC00ZjEwLWExNjct NmFjZDg2Njg2ZTg1LzEvMWN0LUl4NHZxU3J5VlR3cE9lMmRrOTZIcU9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy84MzNhYTItYWYwNC00ZjEwLWExNjctNmFjZDg2Njg2ZTg1 LzEvdnlrNFdRNE5BQmx5Vm1MVXRLNU15ZXc2YzAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALv8fAwQC waDwMA0EAgACMAcDBQMqDNrAMA0GCSqGSIb3DQEBCwUAA4IBAQA2W1/d2TY7cmqS h114zX+CaReQHfZ4RR0cD5w/4/LZ0wu3NkvzqZeavEvjr9bFh6exY7azs0jqUDZM AlrFmgBvPtvJIrqPvCK4c+5xNQ4cpT81xTLSlBye7uQUx0DorQOBYh5fqLAehndl MBcM+/keSprY4hPBt1svldc8CpQ8Yp8R2gEWkbqroAXJscwPCulNArGfTv01RInF DYLadmNrFFl9v1VUobeRr++aViK1juawS87EHAXGcx68ELOxwzm5lDcWcV0SdxtE j4uEV9GFxoJSrIql6My/NrG6fgCcx4zQeuApx8W5fofrrhFTe7e3fiKd8GEfTHRm Ds329l2Q -----END CERTIFICATE-----Generated at Tue Feb 10 03:02:22 2026 by rpki-client