This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/1-UNFmXWJaLztiP7uL4Flu5cWIl0.roa File: 1-UNFmXWJaLztiP7uL4Flu5cWIl0.roa (raw, json) Hash identifier: PHuC6x6Gg7qDirj9Kp/Ed4/YHHnXQMz+G2GImQ1QRoo= Subject key identifier: F9:43:45:99:75:89:68:BC:ED:88:FE:EE:2F:81:65:BB:97:16:22:5D Certificate issuer: /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407 Certificate serial: 019B7DC9B0C3F638D9DF4374994F4B1DB79F Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/1-UNFmXWJaLztiP7uL4Flu5cWIl0.roa Signing time: Fri 02 Jan 2026 08:18:48 +0000 ROA not before: Fri 02 Jan 2026 08:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197143 IP address blocks: 46.245.160.0/24 maxlen: 24 46.245.161.0/24 maxlen: 24 46.245.162.0/24 maxlen: 24 46.245.163.0/24 maxlen: 24 46.245.164.0/24 maxlen: 24 46.245.165.0/24 maxlen: 24 46.245.166.0/24 maxlen: 24 46.245.167.0/24 maxlen: 24 185.33.128.0/24 maxlen: 24 185.33.129.0/24 maxlen: 24 185.33.130.0/24 maxlen: 24 185.33.131.0/24 maxlen: 24 185.218.218.0/24 maxlen: 24 185.218.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:b0:c3:f6:38:d9:df:43:74:99:4f:4b:1d:b7:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407 Validity Not Before: Jan 2 08:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9434599758968bced88feee2f8165bb9716225d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a3:60:d1:6b:fd:30:46:46:1e:d4:3e:99:78: 9b:89:35:80:2d:24:5d:5b:47:a1:5d:99:9d:64:9a: 39:0a:1d:0d:ca:af:cb:43:b2:33:08:5f:c4:e2:3a: 34:41:9f:18:3e:48:be:78:f9:04:53:65:6b:1a:e6: 12:0e:e3:80:2e:40:b9:ed:e8:5c:a4:58:12:74:c2: 02:bb:bf:dd:23:45:fb:9b:4f:05:f3:8a:24:2e:4e: be:1d:26:30:d5:0d:8a:51:a2:09:ad:23:c6:39:af: fd:bb:77:63:ea:6a:89:94:61:77:d7:6c:ac:75:dc: 9b:8b:ea:94:3a:57:6f:f4:b3:a7:a7:08:33:e9:a4: ca:b5:8b:f7:32:68:00:04:63:04:69:5b:14:36:d0: aa:b6:e1:6b:b3:4e:6a:ac:9c:9d:93:1f:40:b2:1a: de:08:9a:79:85:e4:c9:52:a3:85:c5:44:39:03:fe: 5e:92:20:ca:1a:49:79:8c:33:d3:f6:cd:85:16:28: 4b:7a:5f:0b:7c:96:6d:87:0d:e1:d2:ae:d1:9e:91: fb:8f:4a:1f:82:fa:ce:cf:dd:f6:14:67:20:56:b2: 11:00:52:1d:8d:60:13:ab:9d:89:89:4d:21:dd:fe: ca:72:ab:ce:9b:b4:ef:4f:42:8f:85:96:24:df:79: 58:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:43:45:99:75:89:68:BC:ED:88:FE:EE:2F:81:65:BB:97:16:22:5D X509v3 Authority Key Identifier: keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/1-UNFmXWJaLztiP7uL4Flu5cWIl0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.245.160.0/21 185.33.128.0/22 185.218.218.0/23 Signature Algorithm: sha256WithRSAEncryption 60:16:87:26:5a:08:4c:66:eb:e1:64:c3:f7:69:2b:e8:8e:63: dd:2c:08:c8:8f:5f:ff:21:8d:c3:73:7d:f5:73:07:e3:65:f0: da:5b:80:d7:1e:5a:3f:83:d8:7c:46:bd:4a:6c:b3:73:40:bf: 7d:9e:5d:02:96:90:97:8a:cd:b9:d6:5d:55:a1:b7:2a:3f:5e: 26:38:68:96:3e:d6:96:a0:79:27:fd:65:14:90:d8:58:5c:79: d7:86:22:da:f8:a3:1f:b6:42:b3:42:12:6a:2e:95:74:15:4f: 55:cb:ac:54:6f:ec:5c:e3:c1:e3:96:45:8c:37:f9:8c:4e:fe: 5c:62:ba:d3:05:0f:a4:39:f0:72:c5:4e:98:25:8c:90:3e:4a: 91:d9:23:62:64:a9:a0:89:62:10:da:a1:b1:49:3a:8b:b7:4f: 09:d0:1f:cb:a1:35:8a:96:02:aa:f2:db:b6:9a:24:6d:4d:6c: 44:c9:cf:2f:69:7e:0b:5d:36:9b:4e:ff:c8:57:14:51:64:b8: 1c:c5:6c:f9:b9:07:16:2d:72:93:48:f2:9b:ce:c3:d9:24:94: 63:2b:15:9f:91:fb:7b:3d:8c:0e:03:cf:ea:5b:4e:20:c1:0a: 5a:b9:25:8d:e8:c6:37:5a:4a:57:dd:58:ed:61:fd:39:0c:86: e5:8f:a5:78 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt9ybDD9jjZ30N0mU9LHbefMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMTE3MmMxYzczZjk3MWE5ZmIyZTg5Yjc5MTcyMDBjNTAw ZWU0MDcwHhcNMjYwMTAyMDgxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTQzNDU5OTc1ODk2OGJjZWQ4OGZlZWUyZjgxNjViYjk3MTYyMjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6Ng0Wv9MEZGHtQ+mXibiTWALSRd W0ehXZmdZJo5Ch0Nyq/LQ7IzCF/E4jo0QZ8YPki+ePkEU2VrGuYSDuOALkC57ehc pFgSdMICu7/dI0X7m08F84okLk6+HSYw1Q2KUaIJrSPGOa/9u3dj6mqJlGF312ys ddybi+qUOldv9LOnpwgz6aTKtYv3MmgABGMEaVsUNtCqtuFrs05qrJydkx9Ashre CJp5heTJUqOFxUQ5A/5ekiDKGkl5jDPT9s2FFihLel8LfJZthw3h0q7RnpH7j0of gvrOz932FGcgVrIRAFIdjWATq52JiU0h3f7KcqvOm7TvT0KPhZYk33lYHwIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFPlDRZl1iWi87Yj+7i+BZbuXFiJdMB8GA1UdIwQY MBaAFC0RcsHHP5can7Lom3kXIAxQDuQHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83OWFjYTktNTFkZC00ZjIyLWI0MDQt ZDUzODY2ZTkxODZhLzEvMS1VTkZtWFdKYUx6dGlQN3VMNEZsdTVjV0lsMC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZDUvNzlhY2E5LTUxZGQtNGYyMi1iNDA0LWQ1Mzg2NmU5MTg2 YS8xL0xSRnl3Y2NfbHhxZnN1aWJlUmNnREZBTzVBYy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAy71oAME ArkhgAMEAbna2jANBgkqhkiG9w0BAQsFAAOCAQEAYBaHJloITGbr4WTD92kr6I5j 3SwIyI9f/yGNw3N99XMH42Xw2luA1x5aP4PYfEa9Smyzc0C/fZ5dApaQl4rNudZd VaG3Kj9eJjholj7WlqB5J/1lFJDYWFx514Yi2vijH7ZCs0ISai6VdBVPVcusVG/s XOPB45ZFjDf5jE7+XGK60wUPpDnwcsVOmCWMkD5KkdkjYmSpoIliENqhsUk6i7dP CdAfy6E1ipYCqvLbtpokbU1sRMnPL2l+C102m07/yFcUUWS4HMVs+bkHFi1yk0jy m87D2SSUYysVn5H7ez2MDgPP6ltOIMEKWrkljejGN1pKV91Y7WH9OQyG5Y+leA== -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:32 2026 by rpki-client