This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/1-XW1Sz2PaZ2CH23FH35lEDI1Dvg.roa File: 1-XW1Sz2PaZ2CH23FH35lEDI1Dvg.roa (raw, json) Hash identifier: OwzM/XrJoESuDpIjRWGFQ9kHnBpSBVpQxsgx+bma9vw= Subject key identifier: F9:75:B5:4B:3D:8F:69:9D:82:1F:6D:C5:1F:7E:65:10:32:35:0E:F8 Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0 Certificate serial: 019B7C7FC31520670AEB3978DA74B476737C Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/1-XW1Sz2PaZ2CH23FH35lEDI1Dvg.roa Signing time: Fri 02 Jan 2026 02:18:26 +0000 ROA not before: Fri 02 Jan 2026 02:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43853 IP address blocks: 46.22.112.0/20 maxlen: 20 131.117.176.0/21 maxlen: 21 185.183.56.0/22 maxlen: 22 2a02:2a48::/32 maxlen: 32 2a0b:680::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:c3:15:20:67:0a:eb:39:78:da:74:b4:76:73:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0 Validity Not Before: Jan 2 02:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f975b54b3d8f699d821f6dc51f7e651032350ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ce:6d:7d:ad:d9:12:ba:59:51:7e:8b:d7:2b: eb:38:74:c2:5f:3e:f4:ff:53:cd:e7:5d:db:37:0a: 64:79:be:b4:32:08:6d:c2:cb:b5:13:7c:33:75:1d: 49:5b:37:59:b1:90:de:f5:74:0f:ea:0c:3e:f3:85: 9a:9a:1a:12:8f:67:c9:e5:31:24:14:95:96:5c:be: fe:3b:ad:5d:c2:5e:45:c8:73:07:06:81:a9:9a:0d: ad:fa:bc:e1:95:5c:96:cd:9e:27:94:9c:5a:fa:63: 44:3c:64:e3:a9:3c:af:01:37:8a:33:56:67:99:c4: e1:10:14:05:8c:e6:be:1d:91:9f:bb:77:0f:97:83: 18:b6:2b:01:b1:46:1e:07:bd:b5:5f:9d:85:83:61: 7a:dc:91:f2:3b:9d:cc:00:32:a0:b2:1a:80:e6:e8: 21:ec:c8:b2:d3:b2:2a:ae:d1:c5:e5:e9:7b:f6:ee: fa:58:30:4d:7b:4c:88:18:4c:11:11:d2:de:da:df: da:80:be:05:8e:4f:c3:7e:c6:35:a8:08:f2:33:65: d2:14:47:68:f0:7f:eb:a7:f0:a6:5f:06:16:fc:70: e6:be:fc:b1:4f:cb:f8:b4:3d:80:bb:1f:90:83:8d: 83:ee:b6:08:01:82:21:9e:58:44:48:73:a7:7d:1b: bc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:75:B5:4B:3D:8F:69:9D:82:1F:6D:C5:1F:7E:65:10:32:35:0E:F8 X509v3 Authority Key Identifier: keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/1-XW1Sz2PaZ2CH23FH35lEDI1Dvg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.22.112.0/20 131.117.176.0/21 185.183.56.0/22 IPv6: 2a02:2a48::/32 2a0b:680::/29 Signature Algorithm: sha256WithRSAEncryption 63:a3:ed:51:e7:49:ae:a5:51:cc:f5:0a:62:f1:c3:eb:8c:ba: 79:fc:6e:73:e1:d1:f9:cc:bc:e5:7a:02:f8:82:95:85:89:a8: 54:ac:aa:9c:75:20:33:44:e4:84:1f:5a:71:07:f9:41:d2:7b: e6:a5:a6:77:96:95:02:92:b9:05:13:3f:ca:fc:ab:07:14:28: a1:9b:e0:10:7f:70:ba:45:2b:79:eb:ae:d2:bb:a5:f5:57:1f: 99:38:18:6c:42:a0:f7:95:3b:62:f7:0b:2a:30:b2:9c:7d:00: 47:fd:1c:08:87:6f:84:94:b2:bd:b5:71:c6:e1:28:79:7c:f4: 29:76:33:68:d6:6d:24:d8:ff:fd:d2:0d:2b:82:50:f6:bd:2f: 1a:56:4d:74:2f:bb:ea:bf:b6:7c:04:6b:48:8d:b4:c6:40:39: 2d:09:f3:5a:e9:cf:e5:ae:b9:f9:3a:27:66:ec:a5:48:80:b5: de:34:26:2c:e7:cf:59:81:8d:75:05:e6:e6:44:a8:7a:e0:6b: 14:c1:33:11:92:4f:c1:70:29:9f:c7:06:00:c4:2b:c0:05:e7: ee:5c:03:49:a6:a8:3e:1a:ae:1c:d0:2f:08:1d:3c:9b:3e:9c: b6:98:93:99:d1:fe:42:06:d4:a2:cd:22:a5:83:a4:fa:ef:b3: 8e:6c:31:99 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt8f8MVIGcK6zl42nS0dnN8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1N2FiNzE4YjRhY2IzYTY3OWM1ZGI4ZmNlZTcyOTRlZDZi ZTJiZDAwHhcNMjYwMTAyMDIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTc1YjU0YjNkOGY2OTlkODIxZjZkYzUxZjdlNjUxMDMyMzUwZWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs5tfa3ZErpZUX6L1yvrOHTCXz70 /1PN513bNwpkeb60Mghtwsu1E3wzdR1JWzdZsZDe9XQP6gw+84WamhoSj2fJ5TEk FJWWXL7+O61dwl5FyHMHBoGpmg2t+rzhlVyWzZ4nlJxa+mNEPGTjqTyvATeKM1Zn mcThEBQFjOa+HZGfu3cPl4MYtisBsUYeB721X52Fg2F63JHyO53MADKgshqA5ugh 7Miy07IqrtHF5el79u76WDBNe0yIGEwREdLe2t/agL4Fjk/DfsY1qAjyM2XSFEdo 8H/rp/CmXwYW/HDmvvyxT8v4tD2Aux+Qg42D7rYIAYIhnlhESHOnfRu8+QIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFPl1tUs9j2mdgh9txR9+ZRAyNQ74MB8GA1UdIwQY MBaAFLV6txi0rLOmecXbj87nKU7WvivQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iYTFiZTMtNzk2ZS00NWM4LThiNzYt YzcwMGVhMDNjMjI3LzEvMS1YVzFTejJQYVoyQ0gyM0ZIMzVsRURJMUR2Zy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzcvYmExYmUzLTc5NmUtNDVjOC04Yjc2LWM3MDBlYTAzYzIy Ny8xL3RYcTNHTFNzczZaNXhkdVB6dWNwVHRhLUs5QS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBBBggrBgEFBQcBBwEB/wQyMDAwGAQCAAEwEgMEBC4WcAME A4N1sAMEArm3ODAUBAIAAjAOAwUAKgIqSAMFAyoLBoAwDQYJKoZIhvcNAQELBQAD ggEBAGOj7VHnSa6lUcz1CmLxw+uMunn8bnPh0fnMvOV6AviClYWJqFSsqpx1IDNE 5IQfWnEH+UHSe+alpneWlQKSuQUTP8r8qwcUKKGb4BB/cLpFK3nrrtK7pfVXH5k4 GGxCoPeVO2L3Cyowspx9AEf9HAiHb4SUsr21ccbhKHl89Cl2M2jWbSTY//3SDSuC UPa9LxpWTXQvu+q/tnwEa0iNtMZAOS0J81rpz+Wuufk6J2bspUiAtd40Jiznz1mB jXUF5uZEqHrgaxTBMxGST8FwKZ/HBgDEK8AF5+5cA0mmqD4arhzQLwgdPJs+nLaY k5nR/kIG1KLNIqWDpPrvs45sMZk= -----END CERTIFICATE-----Generated at Mon Jan 12 02:31:28 2026 by rpki-client