This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/RpFgP93ClwNM-ocN6qvLfic7DMs.roa File: RpFgP93ClwNM-ocN6qvLfic7DMs.roa (raw, json) Hash identifier: 5S/X3det1+F3wpDnXO5aEBYjQHz6Mc8fd6NBqHj9aKo= Subject key identifier: 46:91:60:3F:DD:C2:97:03:4C:FA:87:0D:EA:AB:CB:7E:27:3B:0C:CB Certificate issuer: /CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb Certificate serial: 019B7AC782547B53E045A6D831E7B37ED630 Authority key identifier: 0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/RpFgP93ClwNM-ocN6qvLfic7DMs.roa Signing time: Thu 01 Jan 2026 18:17:33 +0000 ROA not before: Thu 01 Jan 2026 18:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209615 IP address blocks: 91.132.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:82:54:7b:53:e0:45:a6:d8:31:e7:b3:7e:d6:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb Validity Not Before: Jan 1 18:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4691603fddc297034cfa870deaabcb7e273b0ccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ab:27:31:07:7c:a1:45:e3:ed:c0:f2:d8:88: 03:da:d5:7d:9e:24:64:94:93:54:a0:d6:a5:71:83: 6e:1d:93:d2:65:a4:f5:83:3d:29:5e:fa:61:93:8a: c9:a4:ba:a9:dd:f6:8f:d4:e3:83:8e:a1:f7:ca:50: 99:1b:91:a3:f0:14:b9:b9:a3:85:1d:00:3d:90:8a: dc:95:73:78:ff:95:6d:c7:1f:06:04:f0:45:37:f3: 98:3c:cd:ac:89:f4:18:34:cd:7e:32:8a:4d:80:a0: e7:ce:16:3a:7a:13:50:18:d9:ad:3d:92:3d:14:94: e4:cd:41:5c:00:d8:df:3b:55:37:ec:2e:9c:2f:71: 3e:cc:7f:99:3a:66:37:43:f5:c8:d2:e6:f6:1c:4a: 3c:11:cc:91:70:a3:49:ba:e6:01:a6:6e:ff:f7:eb: 21:81:c9:44:bd:fd:09:12:b6:34:10:96:f1:a0:b4: 46:0d:0d:21:23:1e:81:bb:d7:9e:c4:52:77:d1:7e: 47:37:9a:72:45:f3:c7:6d:73:5d:75:88:28:fb:92: 72:c1:d6:50:fb:88:3f:9c:f7:52:39:cc:25:a7:c5: 28:7e:cb:7e:63:43:c0:f0:39:ec:48:71:80:59:a6: cf:3c:bd:2a:6a:4d:1a:f4:f6:19:e3:23:dc:75:7a: cd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:91:60:3F:DD:C2:97:03:4C:FA:87:0D:EA:AB:CB:7E:27:3B:0C:CB X509v3 Authority Key Identifier: keyid:0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/RpFgP93ClwNM-ocN6qvLfic7DMs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.236.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:11:4e:ce:3b:8d:52:77:a8:12:9e:84:0d:eb:90:02:cb:61: 94:77:fa:61:25:91:b1:18:56:09:7b:0d:cb:69:b9:00:d6:a1: ea:6d:be:9e:f9:84:56:3f:2e:32:93:89:70:55:69:af:14:37: c0:e5:0e:06:59:a7:65:b3:ca:24:0b:59:39:f9:b5:5d:17:bb: 14:fb:70:8b:a7:06:d1:b4:6f:90:ec:10:5c:f7:48:eb:06:c6: 5c:9a:2e:3f:15:bd:8d:19:f8:6d:9f:c9:b2:0f:81:f3:a9:b0: c5:8c:aa:ec:0d:d7:7b:1f:31:73:d3:70:29:16:7e:34:ec:46: c9:e6:75:27:1c:9a:da:dc:39:3e:f0:11:cf:d7:12:b7:d0:ed: b5:45:b4:6e:8e:bd:6e:6c:40:29:af:94:ac:10:da:cc:96:7d: e2:1a:58:c6:f8:55:ac:82:01:24:13:05:ca:c8:56:ba:7a:44: b2:b3:5c:0e:b7:9d:f3:9f:e1:7a:ce:f8:07:4a:3f:86:12:f6: 18:19:45:27:a5:5c:68:4a:74:da:3c:08:e2:66:ec:a6:a1:6f: f1:89:45:39:7c:4d:b0:fc:fd:27:98:aa:54:c3:1c:6a:90:50: 23:0b:fd:96:48:09:f2:ce:cb:a8:0e:20:48:ee:3a:45:b3:e8: 25:32:ac:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x4JUe1PgRabYMeezftYwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMDZiNjVjYmI5NzY2N2FiZGZmOWI4NjFhMjJmOWQwMWQx ZDQ2Y2IwHhcNMjYwMTAxMTgxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjkxNjAzZmRkYzI5NzAzNGNmYTg3MGRlYWFiY2I3ZTI3M2IwY2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6snMQd8oUXj7cDy2IgD2tV9niRk lJNUoNalcYNuHZPSZaT1gz0pXvphk4rJpLqp3faP1OODjqH3ylCZG5Gj8BS5uaOF HQA9kIrclXN4/5Vtxx8GBPBFN/OYPM2sifQYNM1+MopNgKDnzhY6ehNQGNmtPZI9 FJTkzUFcANjfO1U37C6cL3E+zH+ZOmY3Q/XI0ub2HEo8EcyRcKNJuuYBpm7/9+sh gclEvf0JErY0EJbxoLRGDQ0hIx6Bu9eexFJ30X5HN5pyRfPHbXNddYgo+5JywdZQ +4g/nPdSOcwlp8Uofst+Y0PA8DnsSHGAWabPPL0qak0a9PYZ4yPcdXrNewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEaRYD/dwpcDTPqHDeqry34nOwzLMB8GA1UdIwQY MBaAFAoGtly7l2Z6vf+bhhoi+dAdHUbLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2dhMlhMdVhabnE5XzV1R0dpTDUwQjBkUnNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yZTE4ZjctMDljNy00NWIxLWJjYjct OWY2Njg2ZTQyODAwLzEvUnBGZ1A5M0Nsd05NLW9jTjZxdkxmaWM3RE1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8yZTE4ZjctMDljNy00NWIxLWJjYjctOWY2Njg2ZTQyODAw LzEvQ2dhMlhMdVhabnE5XzV1R0dpTDUwQjBkUnNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW4TsMA0G CSqGSIb3DQEBCwUAA4IBAQAtEU7OO41Sd6gSnoQN65ACy2GUd/phJZGxGFYJew3L abkA1qHqbb6e+YRWPy4yk4lwVWmvFDfA5Q4GWadls8okC1k5+bVdF7sU+3CLpwbR tG+Q7BBc90jrBsZcmi4/Fb2NGfhtn8myD4HzqbDFjKrsDdd7HzFz03ApFn407EbJ 5nUnHJra3Dk+8BHP1xK30O21RbRujr1ubEApr5SsENrMln3iGljG+FWsggEkEwXK yFa6ekSys1wOt53zn+F6zvgHSj+GEvYYGUUnpVxoSnTaPAjiZuymoW/xiUU5fE2w /P0nmKpUwxxqkFAjC/2WSAnyzsuoDiBI7jpFs+glMqwx -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:25 2026 by rpki-client