This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/5Kagby_sStjMFhSw2G6-l1YpdBk.roa File: 5Kagby_sStjMFhSw2G6-l1YpdBk.roa (raw, json) Hash identifier: Noo2j7EiUwmhRo9X0f0rtLLladI+Ufm3DSaLlHlT9cg= Subject key identifier: E4:A6:A0:6F:2F:EC:4A:D8:CC:16:14:B0:D8:6E:BE:97:56:29:74:19 Certificate issuer: /CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd Certificate serial: 019B79113E57C870726750FF7F3BE851C1DD Authority key identifier: 1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/5Kagby_sStjMFhSw2G6-l1YpdBk.roa Signing time: Thu 01 Jan 2026 10:18:51 +0000 ROA not before: Thu 01 Jan 2026 10:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39292 IP address blocks: 91.209.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 04:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:3e:57:c8:70:72:67:50:ff:7f:3b:e8:51:c1:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd Validity Not Before: Jan 1 10:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4a6a06f2fec4ad8cc1614b0d86ebe9756297419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4c:ed:12:88:09:03:aa:50:36:d3:70:8e:29: bc:b8:f6:f0:13:0f:49:c2:69:4b:04:dd:e8:5a:b2: f5:da:34:ff:1b:4f:0d:45:ce:37:32:3e:3b:e6:a8: ea:ec:37:5f:8e:e2:c3:58:e2:b6:b8:d9:91:e2:45: 5f:97:00:61:ad:2d:61:77:88:c7:ab:43:74:7f:da: 16:67:79:5b:e8:49:e8:bb:14:cf:ac:91:62:af:60: 7d:db:9c:fc:c8:99:e8:0f:e3:4f:46:90:eb:6a:c4: 8d:6b:36:92:f5:0b:e4:9e:f1:86:d5:8d:31:b1:5a: b3:61:6a:51:ab:68:7c:09:f4:a2:6b:ad:6d:f7:cf: c1:b1:e8:e2:73:86:14:b9:cd:88:ee:a6:94:c6:a1: af:79:b8:ef:35:e8:a4:cf:f7:7c:84:87:0f:e7:49: 0e:de:3b:5a:3d:50:cc:29:fb:0d:d9:d3:95:a6:52: 8f:33:27:2c:e3:a0:f7:05:94:54:f6:58:df:91:e8: 63:51:cb:b5:5c:c8:c8:29:69:2c:9e:32:56:19:b9: 60:4d:82:3f:2d:64:7d:a7:bd:d2:86:6c:ac:fe:1a: ae:fb:20:5f:a0:5f:8a:18:a8:6c:88:d7:15:f6:90: 1a:9b:77:95:ed:55:e1:b8:cf:93:39:d2:14:72:ce: fa:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A6:A0:6F:2F:EC:4A:D8:CC:16:14:B0:D8:6E:BE:97:56:29:74:19 X509v3 Authority Key Identifier: keyid:1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/5Kagby_sStjMFhSw2G6-l1YpdBk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.7.0/24 Signature Algorithm: sha256WithRSAEncryption 90:39:1e:84:da:1b:b6:01:fe:cd:c7:99:eb:89:b7:c9:28:31: b3:c8:26:72:b4:d9:cb:b8:e1:9f:9c:2b:1c:83:5b:49:a1:a8: f6:c1:9a:ba:b2:bc:fc:a3:7f:91:a1:c1:0c:db:c5:5f:28:aa: 19:28:e2:cc:37:bd:1e:ef:92:b4:7e:3c:59:f4:05:e8:b7:49: 36:6f:7a:71:9c:c6:d3:45:8d:96:1e:3b:18:aa:98:e5:20:e0: 5f:20:8d:95:30:9d:c4:eb:c3:38:cf:25:fa:b5:25:09:6b:f3: 0c:07:36:a5:66:ef:88:e9:d4:39:14:12:9f:c1:9f:8b:d3:42: d7:99:4b:45:35:a9:1b:93:55:09:f3:78:f9:26:2f:5b:cc:74: c3:05:1a:ec:63:d0:1d:a6:e7:6c:13:43:d9:9a:c9:9b:e6:0a: b8:c0:b3:7f:8c:59:0b:1f:3f:6d:36:3f:33:63:a5:cd:a4:d9: 50:fb:60:39:78:37:b0:fd:07:b2:5a:28:8e:91:7d:89:09:ac: fd:b2:53:13:38:cf:fa:1e:03:d3:f9:ac:e8:9f:a6:1a:1d:3c: 79:cb:a5:72:cf:48:09:04:f2:39:a1:a0:b9:e2:47:fa:ea:61: fc:02:b4:97:ee:db:2c:7e:be:82:1b:ad:c5:0c:f6:53:32:b1: cb:fd:0f:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ET5XyHByZ1D/fzvoUcHdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYmFiNDBkNjA4MTMzY2RkZjc2YzNiNWE2ZjgxNWRmODFm YmM3ZGQwHhcNMjYwMTAxMTAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGE2YTA2ZjJmZWM0YWQ4Y2MxNjE0YjBkODZlYmU5NzU2Mjk3NDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0ztEogJA6pQNtNwjim8uPbwEw9J wmlLBN3oWrL12jT/G08NRc43Mj475qjq7DdfjuLDWOK2uNmR4kVflwBhrS1hd4jH q0N0f9oWZ3lb6EnouxTPrJFir2B925z8yJnoD+NPRpDrasSNazaS9QvknvGG1Y0x sVqzYWpRq2h8CfSia61t98/Bsejic4YUuc2I7qaUxqGvebjvNeikz/d8hIcP50kO 3jtaPVDMKfsN2dOVplKPMycs46D3BZRU9ljfkehjUcu1XMjIKWksnjJWGblgTYI/ LWR9p73Shmys/hqu+yBfoF+KGKhsiNcV9pAam3eV7VXhuM+TOdIUcs76qQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOSmoG8v7ErYzBYUsNhuvpdWKXQZMB8GA1UdIwQY MBaAFB66tA1ggTPN33bDtab4Fd+B+8fdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHJxMERXQ0JNODNmZHNPMXB2Z1YzNEg3eDkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yYjI2YWYtZTc1NC00MDgwLTllYzkt NTlmMGYxMGIxZDI5LzEvNUthZ2J5X3NTdGpNRmhTdzJHNi1sMVlwZEJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8yYjI2YWYtZTc1NC00MDgwLTllYzktNTlmMGYxMGIxZDI5 LzEvSHJxMERXQ0JNODNmZHNPMXB2Z1YzNEg3eDkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9EHMA0G CSqGSIb3DQEBCwUAA4IBAQCQOR6E2hu2Af7Nx5nribfJKDGzyCZytNnLuOGfnCsc g1tJoaj2wZq6srz8o3+RocEM28VfKKoZKOLMN70e75K0fjxZ9AXot0k2b3pxnMbT RY2WHjsYqpjlIOBfII2VMJ3E68M4zyX6tSUJa/MMBzalZu+I6dQ5FBKfwZ+L00LX mUtFNakbk1UJ83j5Ji9bzHTDBRrsY9AdpudsE0PZmsmb5gq4wLN/jFkLHz9tNj8z Y6XNpNlQ+2A5eDew/QeyWiiOkX2JCaz9slMTOM/6HgPT+azon6YaHTx5y6Vyz0gJ BPI5oaC54kf66mH8ArSX7tssfr6CG63FDPZTMrHL/Q/v -----END CERTIFICATE-----Generated at Wed Feb 4 15:56:34 2026 by rpki-client