This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/1-_iuOiCq6wrrlu0U_bsrNgalB5U.roa File: 1-_iuOiCq6wrrlu0U_bsrNgalB5U.roa (raw, json) Hash identifier: CFs95qJY3OCkwLKNDcwjofH0U54eBPgPiR2T2rDBUA0= Subject key identifier: FB:F8:AE:3A:20:AA:EB:0A:EB:96:ED:14:FD:BB:2B:36:06:A5:07:95 Certificate issuer: /CN=535db143e906aa20e5782907f845d4a76962ff7b Certificate serial: 019B797EE41C108071B39FCB24DAD6F008E7 Authority key identifier: 53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/1-_iuOiCq6wrrlu0U_bsrNgalB5U.roa Signing time: Thu 01 Jan 2026 12:18:37 +0000 ROA not before: Thu 01 Jan 2026 12:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51785 IP address blocks: 46.18.248.0/21 maxlen: 21 46.18.248.0/23 maxlen: 23 46.18.248.0/24 maxlen: 24 46.18.249.0/24 maxlen: 24 46.18.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e4:1c:10:80:71:b3:9f:cb:24:da:d6:f0:08:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535db143e906aa20e5782907f845d4a76962ff7b Validity Not Before: Jan 1 12:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbf8ae3a20aaeb0aeb96ed14fdbb2b3606a50795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0b:25:e0:70:74:f2:68:72:67:3d:a3:fe:e2: 7e:9f:9f:e5:49:a3:e0:6a:58:36:f2:8b:b5:41:42: e4:cc:08:12:21:f9:24:f2:f1:09:50:b3:2b:54:dc: 66:26:52:f1:7a:f9:0b:e5:1b:ef:4a:72:b5:82:02: 93:01:88:86:2a:f4:e3:52:48:9e:6b:0b:80:16:dc: be:60:42:85:65:42:8b:90:2e:91:f1:ce:7c:4e:c9: 65:ea:f8:4a:45:83:67:a8:eb:9e:a8:ea:6e:5c:a8: 7b:d6:27:36:c7:11:4a:ea:56:ca:05:62:d8:3c:20: c4:0f:28:e6:fb:f9:95:31:01:05:3e:97:76:6a:5c: 27:ca:ce:94:8d:8e:a6:ea:63:cf:cf:67:5b:df:08: 0c:d7:91:db:14:e7:12:39:a6:86:5b:e4:d5:d2:9d: 8c:1d:50:ee:ce:a0:1e:f8:df:06:40:2e:b9:51:10: a7:a4:ac:dc:3c:08:f8:ab:f0:d4:c2:0f:88:c5:db: fd:f3:30:00:b4:8d:66:43:74:07:b9:ab:94:06:d4: 91:36:e6:47:2e:95:12:a9:e8:a5:2e:24:66:5e:d5: 2c:45:ff:9a:93:c0:cf:b3:1d:fb:d3:6a:93:8b:33: 73:54:78:76:bd:40:a3:19:b6:67:96:d8:da:61:5b: 8d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F8:AE:3A:20:AA:EB:0A:EB:96:ED:14:FD:BB:2B:36:06:A5:07:95 X509v3 Authority Key Identifier: keyid:53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/1-_iuOiCq6wrrlu0U_bsrNgalB5U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.18.248.0/21 Signature Algorithm: sha256WithRSAEncryption 04:fa:0a:a7:36:c4:85:d9:3a:93:2c:c1:db:09:9a:4f:2f:00: 25:40:39:61:d1:a4:c8:43:73:e1:dd:da:f6:19:94:29:dd:19: 4e:a2:7d:3d:15:7f:90:7c:54:7e:96:96:3f:60:02:74:07:de: 1d:19:60:1d:3f:c4:bb:e2:2f:10:ab:4b:c4:18:6c:96:8a:8e: 0a:47:6e:6e:9f:d0:0d:1a:66:1f:40:b4:5c:71:4d:15:59:43: 76:c9:bf:dd:d5:75:87:72:47:78:56:8f:5f:a4:0e:af:cb:f3: 61:9a:eb:a0:e3:f8:f8:59:ba:ad:39:bf:ce:2b:59:57:7f:94: 24:fc:04:5f:47:72:c7:3b:a5:ec:29:d1:83:3a:10:fa:dc:ca: 13:4d:83:4b:26:c4:6c:d7:89:1c:50:56:48:fb:a8:a1:c8:77: ce:cd:02:ef:26:23:56:68:3c:d6:7a:08:79:09:8d:9d:b3:18: aa:5a:14:82:4c:3f:00:11:00:4c:40:d4:21:5d:de:04:57:62: 47:a4:30:c8:1b:b6:16:2a:ca:e5:55:a8:fa:cf:a1:aa:2c:e1: 33:a5:15:38:c8:cb:6c:8c:5b:8c:f4:ef:94:b3:ec:a0:bf:8f: 1a:d5:6d:0e:17:32:c2:a9:35:b1:71:45:9b:b7:c1:3c:14:71: 35:0e:d6:32 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5fuQcEIBxs5/LJNrW8AjnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNWRiMTQzZTkwNmFhMjBlNTc4MjkwN2Y4NDVkNGE3Njk2 MmZmN2IwHhcNMjYwMTAxMTIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmY4YWUzYTIwYWFlYjBhZWI5NmVkMTRmZGJiMmIzNjA2YTUwNzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgsl4HB08mhyZz2j/uJ+n5/lSaPg alg28ou1QULkzAgSIfkk8vEJULMrVNxmJlLxevkL5RvvSnK1ggKTAYiGKvTjUkie awuAFty+YEKFZUKLkC6R8c58Tsll6vhKRYNnqOueqOpuXKh71ic2xxFK6lbKBWLY PCDEDyjm+/mVMQEFPpd2alwnys6UjY6m6mPPz2db3wgM15HbFOcSOaaGW+TV0p2M HVDuzqAe+N8GQC65URCnpKzcPAj4q/DUwg+Ixdv98zAAtI1mQ3QHuauUBtSRNuZH LpUSqeilLiRmXtUsRf+ak8DPsx3702qTizNzVHh2vUCjGbZnltjaYVuNnQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPv4rjogqusK65btFP27KzYGpQeVMB8GA1UdIwQY MBaAFFNdsUPpBqog5XgpB/hF1KdpYv97MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTEyeFEta0dxaURsZUNrSC1FWFVwMmxpXzNzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8xYThkOTgtMzRjOS00ZDI2LTk3ZGMt NDg3MzFiM2MwM2E0LzEvMS1faXVPaUNxNndycmx1MFVfYnNyTmdhbEI1VS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODcvMWE4ZDk4LTM0YzktNGQyNi05N2RjLTQ4NzMxYjNjMDNh NC8xL1UxMnhRLWtHcWlEbGVDa0gtRVhVcDJsaV8zcy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAy4S+DAN BgkqhkiG9w0BAQsFAAOCAQEABPoKpzbEhdk6kyzB2wmaTy8AJUA5YdGkyENz4d3a 9hmUKd0ZTqJ9PRV/kHxUfpaWP2ACdAfeHRlgHT/Eu+IvEKtLxBhsloqOCkdubp/Q DRpmH0C0XHFNFVlDdsm/3dV1h3JHeFaPX6QOr8vzYZrroOP4+Fm6rTm/zitZV3+U JPwEX0dyxzul7CnRgzoQ+tzKE02DSybEbNeJHFBWSPuooch3zs0C7yYjVmg81noI eQmNnbMYqloUgkw/ABEATEDUIV3eBFdiR6QwyBu2FirK5VWo+s+hqizhM6UVOMjL bIxbjPTvlLPsoL+PGtVtDhcywqk1sXFFm7fBPBRxNQ7WMg== -----END CERTIFICATE-----Generated at Tue Feb 10 03:12:17 2026 by rpki-client