This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/91AHWAe32PyJG1Gq369vSWtuhck.roa File: 91AHWAe32PyJG1Gq369vSWtuhck.roa (raw, json) Hash identifier: z0Jt1FkD3krKcEDQ5ovPKrtw2oSDxvYy/stBGAY6h4o= Subject key identifier: F7:50:07:58:07:B7:D8:FC:89:1B:51:AA:DF:AF:6F:49:6B:6E:85:C9 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019BBC5B50380E98F7764C1770060D3C81A9 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/91AHWAe32PyJG1Gq369vSWtuhck.roa Signing time: Wed 14 Jan 2026 11:54:19 +0000 ROA not before: Wed 14 Jan 2026 11:54:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9123 IP address blocks: 93.190.244.0/24 maxlen: 24 2a0a:3200::/29 maxlen: 29 2a0e:15c6::/32 maxlen: 32 2a0f:1203::/32 maxlen: 32 2a0f:2ec0::/29 maxlen: 29 2a0f:e204::/32 maxlen: 32 2a0f:e7c1::/32 maxlen: 32 2a13:c907::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bc:5b:50:38:0e:98:f7:76:4c:17:70:06:0d:3c:81:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 14 11:54:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f750075807b7d8fc891b51aadfaf6f496b6e85c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b5:31:e2:e0:19:de:ef:b6:15:2d:d8:3a:70: 6d:96:00:9f:5b:8b:e0:bd:6c:89:3f:11:68:ff:0c: b9:d6:71:5c:3f:c5:1f:1c:f3:95:4d:d2:56:6b:22: a7:43:c4:98:eb:70:55:a4:8e:10:b4:4e:20:69:e7: 11:48:26:1c:d6:b1:b5:58:31:23:1b:00:4b:2e:44: 48:96:a7:43:2b:fb:1b:09:11:d8:48:49:a4:e0:e3: f4:4b:fa:61:f6:f5:c6:e7:70:dc:8f:de:ad:fc:94: 2f:d1:a9:33:e2:11:01:bf:33:e8:bd:6d:c5:58:2b: cd:0b:ac:c6:fb:6d:9a:d2:11:a6:4c:41:e9:33:ec: d2:0d:b6:df:44:48:9d:66:9a:d1:42:c9:9e:c4:34: d4:59:2d:ef:fd:a7:81:ce:d5:48:d3:c1:28:29:ac: a9:61:a5:35:cb:73:fc:eb:7a:0c:c6:5a:a8:3c:53: aa:37:13:0b:6d:63:cf:12:3a:c1:0a:76:86:95:c3: 9e:41:7b:88:df:dd:8e:df:d2:c9:b1:54:98:9f:61: 0b:5b:ae:96:b3:7b:a8:ff:af:3d:97:9e:64:02:a7: 4c:66:a7:05:d3:76:2b:bc:c2:ee:98:f2:ff:10:d6: 3f:83:bf:e6:1d:47:d5:17:77:67:d4:1d:64:79:9d: dc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:50:07:58:07:B7:D8:FC:89:1B:51:AA:DF:AF:6F:49:6B:6E:85:C9 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/91AHWAe32PyJG1Gq369vSWtuhck.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.190.244.0/24 IPv6: 2a0a:3200::/29 2a0e:15c6::/32 2a0f:1203::/32 2a0f:2ec0::/29 2a0f:e204::/32 2a0f:e7c1::/32 2a13:c907::/32 Signature Algorithm: sha256WithRSAEncryption 9a:60:ee:e9:ff:4c:3c:bc:1e:f5:b0:6a:bf:77:52:82:52:aa: 72:b8:5a:e7:d2:7f:59:0f:86:56:7d:be:1c:f1:b5:e6:f5:e9: 7b:ab:3b:d5:0a:1e:c3:0e:7d:f0:ee:6b:ac:5a:74:a4:97:e0: f2:b4:45:e1:31:52:43:01:55:77:76:2b:71:3a:02:e1:93:37: 12:30:1c:f7:43:90:3f:42:33:8d:d9:1a:c2:36:aa:89:03:b5: b7:d3:cb:0b:33:42:3c:68:e7:5a:c4:45:05:4e:21:2c:a2:73: a1:c2:61:10:47:22:fc:c7:d8:d9:69:84:d5:35:5a:2b:80:12: 51:af:80:b6:e4:65:13:ea:8d:a0:ea:8e:b3:30:ea:04:16:85: 2a:63:b7:ee:ed:20:2f:4c:a0:71:b5:04:6e:b6:7e:88:0b:11: 10:1a:5c:96:d0:4e:0a:2c:c0:a7:f1:51:f9:30:1f:e0:91:34: 1c:a3:73:4e:46:d9:2d:18:cc:96:e3:38:c8:f5:9c:12:b9:80: 39:80:2a:40:4b:51:fe:c2:53:20:69:29:e8:8e:d6:48:db:9c: 2d:71:28:14:67:1d:3a:db:6f:85:c7:d1:ac:fe:a1:20:90:f0: 26:25:ab:76:73:4e:1f:ee:41:02:99:6d:32:91:d4:e5:6f:2f: 4d:97:03:da -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZu8W1A4Dpj3dkwXcAYNPIGpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTE0MTE1NDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzUwMDc1ODA3YjdkOGZjODkxYjUxYWFkZmFmNmY0OTZiNmU4NWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbUx4uAZ3u+2FS3YOnBtlgCfW4vg vWyJPxFo/wy51nFcP8UfHPOVTdJWayKnQ8SY63BVpI4QtE4gaecRSCYc1rG1WDEj GwBLLkRIlqdDK/sbCRHYSEmk4OP0S/ph9vXG53Dcj96t/JQv0akz4hEBvzPovW3F WCvNC6zG+22a0hGmTEHpM+zSDbbfREidZprRQsmexDTUWS3v/aeBztVI08EoKayp YaU1y3P863oMxlqoPFOqNxMLbWPPEjrBCnaGlcOeQXuI392O39LJsVSYn2ELW66W s3uo/689l55kAqdMZqcF03YrvMLumPL/ENY/g7/mHUfVF3dn1B1keZ3caQIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFPdQB1gHt9j8iRtRqt+vb0lrboXJMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvOTFBSFdBZTMyUHlKRzFHcTM2OXZTV3R1aGNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzAMBAIAATAGAwQAXb70MDcE AgACMDEDBQMqCjIAAwUAKg4VxgMFACoPEgMDBQMqDy7AAwUAKg/iBAMFACoP58ED BQAqE8kHMA0GCSqGSIb3DQEBCwUAA4IBAQCaYO7p/0w8vB71sGq/d1KCUqpyuFrn 0n9ZD4ZWfb4c8bXm9el7qzvVCh7DDn3w7musWnSkl+DytEXhMVJDAVV3ditxOgLh kzcSMBz3Q5A/QjON2RrCNqqJA7W308sLM0I8aOdaxEUFTiEsonOhwmEQRyL8x9jZ aYTVNVorgBJRr4C25GUT6o2g6o6zMOoEFoUqY7fu7SAvTKBxtQRutn6ICxEQGlyW 0E4KLMCn8VH5MB/gkTQco3NORtktGMyW4zjI9ZwSuYA5gCpAS1H+wlMgaSnojtZI 25wtcSgUZx0622+Fx9Gs/qEgkPAmJat2c04f7kECmW0ykdTlby9NlwPa -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:35 2026 by rpki-client