This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/1K1Um4B_fpW1GkCf_gBrii6dk-U.roa File: 1K1Um4B_fpW1GkCf_gBrii6dk-U.roa (raw, json) Hash identifier: /YNif+CPSNTVk1hV3V7FBKNaBXD9ZU/xIRYCuPXwkd4= Subject key identifier: D4:AD:54:9B:80:7F:7E:95:B5:1A:40:9F:FE:00:6B:8A:2E:9D:93:E5 Certificate issuer: /CN=c4f1f214fb22cc536128f5de4aa017a87880f285 Certificate serial: 019B7EA736B908C6851EB9C6C2AEEDEC32CA Authority key identifier: C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/1K1Um4B_fpW1GkCf_gBrii6dk-U.roa Signing time: Fri 02 Jan 2026 12:20:46 +0000 ROA not before: Fri 02 Jan 2026 12:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51707 IP address blocks: 46.18.8.0/21 maxlen: 21 46.18.8.0/23 maxlen: 23 46.18.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:36:b9:08:c6:85:1e:b9:c6:c2:ae:ed:ec:32:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4f1f214fb22cc536128f5de4aa017a87880f285 Validity Not Before: Jan 2 12:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4ad549b807f7e95b51a409ffe006b8a2e9d93e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d4:90:55:30:cc:00:f9:0b:d8:57:2d:9e:23: 23:c6:17:04:64:16:a0:b8:41:d3:51:23:fa:3e:b5: 05:f8:c0:16:c2:33:94:6e:77:94:3c:c8:e4:ac:af: a5:ed:de:01:d7:ef:43:16:e8:a7:e0:9b:47:58:71: 49:fc:7b:49:2c:65:bc:6f:69:a7:68:45:5d:d5:c4: 8d:4d:2c:06:18:32:24:fe:fd:d5:28:c0:16:c2:19: 30:26:60:d8:72:99:66:be:1c:00:a4:31:7e:8b:33: 6e:7a:25:92:16:bd:80:3d:16:d8:d6:c6:74:0b:ff: 51:43:a7:43:65:dc:de:3e:18:f9:cd:ed:ea:1c:c6: 00:77:78:37:d2:3b:d9:33:79:1b:e0:d9:2c:cf:1c: 8c:e9:b5:be:aa:07:b3:e2:fa:cd:35:95:33:db:cb: dd:da:f8:e8:5d:81:df:50:75:3a:00:d2:2c:1d:2f: cf:3c:ab:55:c9:6c:2f:4d:ac:e2:4e:d9:8c:96:07: 5e:f1:73:e1:95:a9:17:df:d7:5b:3d:e2:a6:19:30: 41:1c:2a:bc:08:e6:c4:9f:b8:66:28:a9:71:7f:0a: 90:ed:f6:71:dc:cc:0a:0b:48:85:fc:a0:18:fa:77: 2d:0e:dd:8f:ff:a1:06:67:07:5b:92:1f:e5:fd:bc: 6e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:AD:54:9B:80:7F:7E:95:B5:1A:40:9F:FE:00:6B:8A:2E:9D:93:E5 X509v3 Authority Key Identifier: keyid:C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/1K1Um4B_fpW1GkCf_gBrii6dk-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.18.8.0/21 Signature Algorithm: sha256WithRSAEncryption 48:b1:bb:a5:6c:24:b2:1c:85:ec:ce:88:66:b7:fb:f2:5e:65: df:c5:fa:56:9b:22:03:bd:02:39:4a:92:40:f3:d9:2f:b6:c6: 46:61:e8:fe:a3:16:2d:e8:e1:f0:e3:97:47:3c:e1:99:6d:84: 24:dd:c3:e3:a7:56:21:f2:db:fa:b6:4d:3c:62:81:a5:51:60: 27:d1:b0:64:5d:7a:98:9e:cd:2e:ef:70:cc:1c:ac:4d:c3:e6: 03:41:21:16:80:8c:cb:09:fc:a3:34:2e:ce:04:42:69:85:f4: 05:96:41:db:90:d2:28:87:6d:70:b0:d9:e5:1e:08:41:bf:e2: d1:e0:e4:f6:28:24:a6:73:92:d7:43:a7:8a:97:db:0a:70:11: a1:e2:87:aa:81:a4:cd:57:e3:0e:b4:4f:69:74:f7:e3:ff:9d: b6:fe:80:de:6f:0a:10:ed:ce:e6:a1:ce:52:12:9f:a0:e2:bc: bf:ee:05:67:8d:32:39:8d:83:31:7c:06:f3:29:ba:4e:5a:58: 82:ee:b5:8b:6b:5d:5d:8a:d6:92:88:f3:30:00:df:db:ad:5c: 04:ec:4f:13:a9:75:5d:c8:1b:ad:11:45:7e:20:d7:8b:c6:7e: 41:fe:ab:06:4c:f3:24:4f:0e:80:18:53:fd:e4:a2:d8:38:ab: 8b:bb:d8:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pza5CMaFHrnGwq7t7DLKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZjFmMjE0ZmIyMmNjNTM2MTI4ZjVkZTRhYTAxN2E4Nzg4 MGYyODUwHhcNMjYwMTAyMTIyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGFkNTQ5YjgwN2Y3ZTk1YjUxYTQwOWZmZTAwNmI4YTJlOWQ5M2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9SQVTDMAPkL2FctniMjxhcEZBag uEHTUSP6PrUF+MAWwjOUbneUPMjkrK+l7d4B1+9DFuin4JtHWHFJ/HtJLGW8b2mn aEVd1cSNTSwGGDIk/v3VKMAWwhkwJmDYcplmvhwApDF+izNueiWSFr2APRbY1sZ0 C/9RQ6dDZdzePhj5ze3qHMYAd3g30jvZM3kb4NkszxyM6bW+qgez4vrNNZUz28vd 2vjoXYHfUHU6ANIsHS/PPKtVyWwvTaziTtmMlgde8XPhlakX39dbPeKmGTBBHCq8 CObEn7hmKKlxfwqQ7fZx3MwKC0iF/KAY+nctDt2P/6EGZwdbkh/l/bxu4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNStVJuAf36VtRpAn/4Aa4ounZPlMB8GA1UdIwQY MBaAFMTx8hT7IsxTYSj13kqgF6h4gPKFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFBIeUZQc2l6Rk5oS1BYZVNxQVhxSGlBOG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9lMmIzNDktZTc5Ni00ODY1LTgwNDAt ZWNmNGY0MjBjOThhLzEvMUsxVW00Ql9mcFcxR2tDZl9nQnJpaTZkay1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9lMmIzNDktZTc5Ni00ODY1LTgwNDAtZWNmNGY0MjBjOThh LzEveFBIeUZQc2l6Rk5oS1BYZVNxQVhxSGlBOG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLhIIMA0G CSqGSIb3DQEBCwUAA4IBAQBIsbulbCSyHIXszohmt/vyXmXfxfpWmyIDvQI5SpJA 89kvtsZGYej+oxYt6OHw45dHPOGZbYQk3cPjp1Yh8tv6tk08YoGlUWAn0bBkXXqY ns0u73DMHKxNw+YDQSEWgIzLCfyjNC7OBEJphfQFlkHbkNIoh21wsNnlHghBv+LR 4OT2KCSmc5LXQ6eKl9sKcBGh4oeqgaTNV+MOtE9pdPfj/522/oDebwoQ7c7moc5S Ep+g4ry/7gVnjTI5jYMxfAbzKbpOWliC7rWLa11ditaSiPMwAN/brVwE7E8TqXVd yButEUV+INeLxn5B/qsGTPMkTw6AGFP95KLYOKuLu9jC -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:30 2026 by rpki-client