This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/RkGch-hV1Hk4TzhQfRNcoDp8aQ4.roa File: RkGch-hV1Hk4TzhQfRNcoDp8aQ4.roa (raw, json) Hash identifier: ArSk8FNvQG5dEX1fm0nCfGPhiKh2s1aLul9gIYaDXF8= Subject key identifier: 46:41:9C:87:E8:55:D4:79:38:4F:38:50:7D:13:5C:A0:3A:7C:69:0E Certificate issuer: /CN=52e41f4806ce48fc398842381f2ffbe04b294818 Certificate serial: 019B775948718089FB304A77134F78CE1248 Authority key identifier: 52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/RkGch-hV1Hk4TzhQfRNcoDp8aQ4.roa Signing time: Thu 01 Jan 2026 02:18:18 +0000 ROA not before: Thu 01 Jan 2026 02:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41247 IP address blocks: 91.222.184.0/24 maxlen: 24 91.222.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.crl rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:48:71:80:89:fb:30:4a:77:13:4f:78:ce:12:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e41f4806ce48fc398842381f2ffbe04b294818 Validity Not Before: Jan 1 02:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46419c87e855d479384f38507d135ca03a7c690e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1a:21:13:56:42:cc:29:92:2b:75:55:5f:07: f4:cf:e1:b1:b2:84:da:61:aa:6b:1f:91:1e:d9:98: 3b:f0:c5:7b:92:21:2c:68:ef:79:11:91:7e:0e:fb: d8:3c:f0:c0:1f:5c:7a:19:a4:d5:23:ef:ef:23:40: 2d:27:3d:15:08:1c:a7:6a:95:d5:43:47:d2:5b:79: 2b:fe:e9:59:bb:85:16:6b:21:52:32:a4:7f:5c:16: ed:2e:20:bf:20:46:c7:5e:b6:5f:93:ea:6f:76:17: e9:32:aa:07:3f:8b:3c:a6:2b:9d:1c:c0:71:75:63: 18:66:ac:0c:d7:e6:fe:82:2a:ac:31:c3:06:45:58: 62:8b:b8:42:ae:61:f5:04:3d:b9:ef:b5:b5:80:7c: 51:83:3c:de:bb:12:a0:79:99:4a:fb:4e:2b:90:85: 6b:89:ea:cc:45:17:83:05:53:91:94:8e:a3:91:30: af:c3:50:12:d5:8a:ab:7d:29:ec:7e:21:1a:ae:66: 64:f8:60:80:dd:ae:d3:29:48:aa:eb:b3:2f:67:41: fc:79:66:1d:47:be:d0:e0:cd:54:ef:72:64:73:e7: 21:45:09:af:c0:dd:6f:ba:3c:02:38:0f:94:67:8c: 51:af:df:23:75:0c:72:a5:10:57:33:a5:bf:c3:e9: 0e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:41:9C:87:E8:55:D4:79:38:4F:38:50:7D:13:5C:A0:3A:7C:69:0E X509v3 Authority Key Identifier: keyid:52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/RkGch-hV1Hk4TzhQfRNcoDp8aQ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.222.184.0/24 91.222.187.0/24 Signature Algorithm: sha256WithRSAEncryption aa:bb:06:48:52:0d:65:f1:94:87:d2:d2:b9:d5:c8:9e:21:e2: 10:c6:9a:70:25:8f:6e:72:63:ff:da:03:d6:c8:a1:a8:44:22: f2:33:be:c2:17:ac:07:94:6f:ae:cd:ed:5c:ea:82:09:54:ac: b2:2c:7a:ec:fc:c3:94:5c:d1:fd:aa:1d:00:68:17:13:58:cd: 34:72:98:fe:c4:dd:24:c9:16:ac:39:c0:51:dd:c3:d3:dd:c5: 05:d7:6f:69:99:49:2d:7f:8b:ec:e0:00:eb:79:5d:3d:a6:37: 48:5c:36:29:48:d9:e4:c4:82:6d:bb:82:ab:70:71:f2:35:35: 3f:09:a9:31:41:d8:cc:20:84:a8:d3:66:7d:d5:70:79:13:30: aa:f1:ce:09:93:ee:25:ec:1f:51:49:77:e0:fd:c6:13:91:be: c4:25:5b:87:3c:25:cd:66:65:47:fb:34:6d:f1:6a:66:d0:29: f7:ef:71:13:9c:a3:40:8b:ed:f8:62:db:4b:06:8b:76:7d:24: 2f:e9:bf:9d:9e:bc:28:ca:33:b7:a7:95:0f:66:e5:c9:25:c0: c5:d2:56:cc:83:66:3e:69:5d:1d:51:fa:12:25:58:4c:d3:9e: 2c:e8:83:0f:18:71:e7:b4:ec:e7:0f:13:63:92:8c:b6:0f:11: da:48:d7:87 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WUhxgIn7MEp3E094zhJIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZTQxZjQ4MDZjZTQ4ZmMzOTg4NDIzODFmMmZmYmUwNGIy OTQ4MTgwHhcNMjYwMTAxMDIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjQxOWM4N2U4NTVkNDc5Mzg0ZjM4NTA3ZDEzNWNhMDNhN2M2OTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBohE1ZCzCmSK3VVXwf0z+GxsoTa YaprH5Ee2Zg78MV7kiEsaO95EZF+DvvYPPDAH1x6GaTVI+/vI0AtJz0VCBynapXV Q0fSW3kr/ulZu4UWayFSMqR/XBbtLiC/IEbHXrZfk+pvdhfpMqoHP4s8piudHMBx dWMYZqwM1+b+giqsMcMGRVhii7hCrmH1BD2577W1gHxRgzzeuxKgeZlK+04rkIVr ierMRReDBVORlI6jkTCvw1AS1YqrfSnsfiEarmZk+GCA3a7TKUiq67MvZ0H8eWYd R77Q4M1U73Jkc+chRQmvwN1vujwCOA+UZ4xRr98jdQxypRBXM6W/w+kOeQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEZBnIfoVdR5OE84UH0TXKA6fGkOMB8GA1UdIwQY MBaAFFLkH0gGzkj8OYhCOB8v++BLKUgYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXVRZlNBYk9TUHc1aUVJNEh5Xzc0RXNwU0JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wNDA4ZjctNzZhMi00OWM3LWEwMjIt ZGViNDRiODY5ZDE5LzEvUmtHY2gtaFYxSGs0VHpoUWZSTmNvRHA4YVE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8wNDA4ZjctNzZhMi00OWM3LWEwMjItZGViNDRiODY5ZDE5 LzEvVXVRZlNBYk9TUHc1aUVJNEh5Xzc0RXNwU0JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW964AwQA W967MA0GCSqGSIb3DQEBCwUAA4IBAQCquwZIUg1l8ZSH0tK51cieIeIQxppwJY9u cmP/2gPWyKGoRCLyM77CF6wHlG+uze1c6oIJVKyyLHrs/MOUXNH9qh0AaBcTWM00 cpj+xN0kyRasOcBR3cPT3cUF129pmUktf4vs4ADreV09pjdIXDYpSNnkxIJtu4Kr cHHyNTU/CakxQdjMIISo02Z91XB5EzCq8c4Jk+4l7B9RSXfg/cYTkb7EJVuHPCXN ZmVH+zRt8Wpm0Cn373ETnKNAi+34YttLBot2fSQv6b+dnrwoyjO3p5UPZuXJJcDF 0lbMg2Y+aV0dUfoSJVhM054s6IMPGHHntOznDxNjkoy2DxHaSNeH -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:19 2026 by rpki-client