This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/KW7umHVJ56QoDNMnSiTEYaBt9H4.roa File: KW7umHVJ56QoDNMnSiTEYaBt9H4.roa (raw, json) Hash identifier: WMo2Ql6XzExg3Mapj6piiDG4OCCwUTpcEwMdawtps4g= Subject key identifier: 29:6E:EE:98:75:49:E7:A4:28:0C:D3:27:4A:24:C4:61:A0:6D:F4:7E Certificate issuer: /CN=a206dfffab1d518c132f6d56d8d4a31d9059f4bf Certificate serial: 019B7FF21AFE3BB075086CB6746FF3F93580 Authority key identifier: A2:06:DF:FF:AB:1D:51:8C:13:2F:6D:56:D8:D4:A3:1D:90:59:F4:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/KW7umHVJ56QoDNMnSiTEYaBt9H4.roa Signing time: Fri 02 Jan 2026 18:22:11 +0000 ROA not before: Fri 02 Jan 2026 18:22:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210363 IP address blocks: 212.46.49.0/24 maxlen: 24 2a0c:5e80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:1a:fe:3b:b0:75:08:6c:b6:74:6f:f3:f9:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a206dfffab1d518c132f6d56d8d4a31d9059f4bf Validity Not Before: Jan 2 18:22:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=296eee987549e7a4280cd3274a24c461a06df47e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f6:cd:53:1a:70:01:dd:db:f6:2a:dc:3a:fc: 68:e1:11:e9:7d:60:dc:24:a5:14:08:63:53:ac:f3: c6:20:41:e8:46:4f:92:99:68:d8:6b:9e:40:8a:cf: 37:bc:c5:9e:67:8c:f1:f8:b5:54:55:77:9d:43:ca: c6:64:60:31:b2:3d:e7:e2:2d:9c:be:64:49:34:fe: 8d:9a:48:82:b2:c6:0c:82:12:fc:04:cd:30:92:78: 42:a4:79:18:34:d8:cf:b8:1e:83:dd:8e:ba:a6:a1: 54:b2:ce:08:4c:7c:25:a9:38:27:46:1f:83:84:7f: b6:78:5b:25:fe:06:b1:8e:e8:81:8a:bf:94:48:62: 98:de:b2:25:9c:7d:40:bc:ba:6c:35:7c:d1:f3:8a: 68:e7:76:98:c7:13:29:49:f1:e1:13:56:fb:ad:be: b0:d0:a7:ad:d7:45:b3:be:f7:33:92:ed:07:02:ff: 15:ed:33:67:6a:cf:ea:06:72:fd:ec:42:ab:bd:4d: d9:51:6f:cd:69:27:8a:0f:e3:c8:fe:05:ca:ae:a2: 85:00:38:0f:2c:06:3a:20:ce:0f:e1:b0:9e:8c:b7: d7:e8:38:d6:d6:6c:fe:f5:3f:f8:6f:74:e3:d5:58: c0:45:fa:ac:d0:dc:65:ad:4a:fd:23:3d:ac:3d:0a: 89:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6E:EE:98:75:49:E7:A4:28:0C:D3:27:4A:24:C4:61:A0:6D:F4:7E X509v3 Authority Key Identifier: keyid:A2:06:DF:FF:AB:1D:51:8C:13:2F:6D:56:D8:D4:A3:1D:90:59:F4:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/KW7umHVJ56QoDNMnSiTEYaBt9H4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.46.49.0/24 IPv6: 2a0c:5e80::/29 Signature Algorithm: sha256WithRSAEncryption 91:5c:94:45:02:b7:79:c1:eb:ef:78:44:a3:44:ac:e0:84:0b: d0:35:61:aa:c5:d4:3a:32:6e:b2:68:30:e7:cd:dd:0b:fa:f4: b8:43:41:3f:4b:6b:8e:ad:71:38:ab:30:81:4c:05:86:e9:4c: 07:f8:b5:75:3b:3b:70:5b:53:b9:62:5c:4a:d9:99:1a:f3:7c: bd:52:e7:f3:fe:f6:0c:fb:37:c0:49:81:28:b7:3a:75:5a:f9: 2c:f0:ca:2a:c4:c2:d2:23:89:d7:df:2e:be:c6:87:3d:fa:f2: 30:f3:9c:da:a6:96:ac:58:c2:92:a2:98:e2:16:dc:92:fd:5d: 2d:a2:7f:6e:86:70:b2:87:ee:74:42:96:fb:4a:96:77:0c:ce: b1:41:eb:43:51:78:fb:7e:9f:af:29:13:71:16:79:17:e9:eb: 81:0a:2a:b2:ff:12:3e:df:84:b3:39:20:81:42:5a:cb:cb:00: d3:00:3f:88:b3:ad:db:70:a3:27:04:f2:42:7c:c2:50:05:93: dd:07:d0:db:b1:f2:6c:51:10:25:b7:89:8d:b3:8b:33:fc:9e: ac:74:58:4e:94:60:16:47:19:b1:36:88:c0:c0:cd:a8:17:c8: 2f:91:4a:79:95:36:70:35:32:ea:c3:25:3a:61:09:7d:47:da: d1:f4:f6:7d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/8hr+O7B1CGy2dG/z+TWAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMDZkZmZmYWIxZDUxOGMxMzJmNmQ1NmQ4ZDRhMzFkOTA1 OWY0YmYwHhcNMjYwMTAyMTgyMjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTZlZWU5ODc1NDllN2E0MjgwY2QzMjc0YTI0YzQ2MWEwNmRmNDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfbNUxpwAd3b9ircOvxo4RHpfWDc JKUUCGNTrPPGIEHoRk+SmWjYa55Ais83vMWeZ4zx+LVUVXedQ8rGZGAxsj3n4i2c vmRJNP6NmkiCssYMghL8BM0wknhCpHkYNNjPuB6D3Y66pqFUss4ITHwlqTgnRh+D hH+2eFsl/gaxjuiBir+USGKY3rIlnH1AvLpsNXzR84po53aYxxMpSfHhE1b7rb6w 0Ket10Wzvvczku0HAv8V7TNnas/qBnL97EKrvU3ZUW/NaSeKD+PI/gXKrqKFADgP LAY6IM4P4bCejLfX6DjW1mz+9T/4b3Tj1VjARfqs0NxlrUr9Iz2sPQqJswIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFClu7ph1SeekKAzTJ0okxGGgbfR+MB8GA1UdIwQY MBaAFKIG3/+rHVGMEy9tVtjUox2QWfS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2diZl82c2RVWXdUTDIxVzJOU2pIWkJaOUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mNTkzMWUtMGY4NC00MGJkLWFkMGEt NjcxYTFmMGFmMDU5LzEvS1c3dW1IVko1NlFvRE5NblNpVEVZYUJ0OUg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9mNTkzMWUtMGY4NC00MGJkLWFkMGEtNjcxYTFmMGFmMDU5 LzEvb2diZl82c2RVWXdUTDIxVzJOU2pIWkJaOUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA1C4xMA0E AgACMAcDBQMqDF6AMA0GCSqGSIb3DQEBCwUAA4IBAQCRXJRFArd5wevveESjRKzg hAvQNWGqxdQ6Mm6yaDDnzd0L+vS4Q0E/S2uOrXE4qzCBTAWG6UwH+LV1OztwW1O5 YlxK2Zka83y9Uufz/vYM+zfASYEotzp1Wvks8MoqxMLSI4nX3y6+xoc9+vIw85za ppasWMKSopjiFtyS/V0ton9uhnCyh+50Qpb7SpZ3DM6xQetDUXj7fp+vKRNxFnkX 6euBCiqy/xI+34SzOSCBQlrLywDTAD+Is63bcKMnBPJCfMJQBZPdB9DbsfJsURAl t4mNs4sz/J6sdFhOlGAWRxmxNojAwM2oF8gvkUp5lTZwNTLqwyU6YQl9R9rR9PZ9 -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:42 2026 by rpki-client