This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/9pGhFTVH5XN8vbhHpytqSGENvrk.roa File: 9pGhFTVH5XN8vbhHpytqSGENvrk.roa (raw, json) Hash identifier: LhRnX4VDOkccbXWuT427U2ER9cwZLZ0V0MGvKtu8Yyg= Subject key identifier: F6:91:A1:15:35:47:E5:73:7C:BD:B8:47:A7:2B:6A:48:61:0D:BE:B9 Certificate issuer: /CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c Certificate serial: 019B7BA41153F13D108CADE3137D94BD2901 Authority key identifier: 27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/9pGhFTVH5XN8vbhHpytqSGENvrk.roa Signing time: Thu 01 Jan 2026 22:18:28 +0000 ROA not before: Thu 01 Jan 2026 22:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41741 IP address blocks: 91.102.24.0/21 maxlen: 24 91.102.28.0/22 maxlen: 22 91.102.29.0/24 maxlen: 24 2a03:6180::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:11:53:f1:3d:10:8c:ad:e3:13:7d:94:bd:29:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c Validity Not Before: Jan 1 22:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f691a1153547e5737cbdb847a72b6a48610dbeb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6f:d2:b7:1d:f1:d1:12:19:e2:ba:de:43:d8: 91:99:4b:e8:f8:d7:32:bf:1d:d3:78:66:42:a4:71: 0a:6f:9f:02:92:a0:e2:0d:03:f6:94:e9:49:4b:ee: 5c:79:6f:df:ac:3a:60:c8:33:a4:14:8b:e8:d7:1f: e1:9f:60:44:34:81:bf:a8:23:64:f3:29:ee:aa:e6: e8:67:e0:c4:ba:b4:46:bd:81:12:b8:b0:70:69:01: a3:56:e8:53:a1:a9:85:cd:1a:cf:b7:82:bd:5f:7a: 5e:45:de:ea:1d:ec:21:81:b2:0f:be:eb:47:54:97: 20:0a:6a:a3:d5:78:da:fd:8b:28:56:e3:9e:dd:85: 10:37:7f:36:dd:64:92:53:78:91:86:e1:74:bb:79: c1:ff:dc:98:c8:90:05:4e:9b:bd:8e:af:ff:57:9d: 0b:df:86:17:b2:bd:8c:26:52:46:8e:46:26:27:d2: 68:d3:56:cb:01:8d:7a:1c:e9:c0:da:e7:74:bd:0b: 91:96:d8:dd:78:62:dc:8c:32:3c:13:99:d7:1a:71: ff:70:df:06:a9:97:f2:3c:42:41:57:86:a6:8b:30: 43:8b:eb:c3:53:72:16:23:33:6c:0f:d4:fd:0d:c1: 24:97:c1:d3:26:b9:e6:1e:b8:05:38:8b:f3:e5:85: a5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:91:A1:15:35:47:E5:73:7C:BD:B8:47:A7:2B:6A:48:61:0D:BE:B9 X509v3 Authority Key Identifier: keyid:27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/9pGhFTVH5XN8vbhHpytqSGENvrk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.102.24.0/21 IPv6: 2a03:6180::/32 Signature Algorithm: sha256WithRSAEncryption 98:35:41:2c:33:e3:af:87:93:a5:bd:31:2b:96:77:6d:46:c1: 7d:fb:f8:6a:25:ba:02:ae:76:28:3f:6b:6b:8a:b8:55:05:3b: 66:fe:7a:0a:73:ad:5d:21:7d:4d:34:ab:a0:59:c3:47:37:cd: 2e:c6:91:c8:36:dc:d1:75:b9:ac:ba:04:2d:22:d6:8f:a8:43: df:e8:83:67:26:19:e6:df:a2:f4:be:50:7f:05:68:c8:68:55: 90:02:1b:0c:0d:7e:10:96:24:d5:e2:ee:34:88:22:78:df:81: 26:d2:2c:60:6d:5a:61:ba:9e:ad:16:c5:47:14:6a:6e:87:fe: 88:33:ea:e9:41:25:85:f6:10:72:8b:c7:94:81:36:a6:03:3b: 4e:45:23:e0:57:4d:0e:cf:7d:be:06:77:bb:41:80:65:a4:10: bb:6a:ac:07:0e:04:39:7d:69:3e:0a:68:45:28:97:dc:ef:33: 5e:f0:7f:e4:5e:63:4f:a5:4f:19:b6:78:39:e9:65:b9:8f:61: 48:f0:bc:37:db:4e:bb:ea:f8:eb:33:d1:9e:f9:94:4e:b2:25: 24:54:33:a7:45:41:4a:00:4c:b2:6e:97:b1:8c:bd:88:62:31: ec:bd:16:bf:7f:b1:fc:ff:7c:51:6a:8b:b7:f3:5f:66:80:e4: d3:73:4e:2f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7pBFT8T0QjK3jE32UvSkBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MDI5MGY1ZjMxZjIzOGRmM2U4ZjNiZGZjYzA1NzUxY2My ZjE5MmMwHhcNMjYwMTAxMjIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjkxYTExNTM1NDdlNTczN2NiZGI4NDdhNzJiNmE0ODYxMGRiZWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApm/Stx3x0RIZ4rreQ9iRmUvo+Ncy vx3TeGZCpHEKb58CkqDiDQP2lOlJS+5ceW/frDpgyDOkFIvo1x/hn2BENIG/qCNk 8ynuquboZ+DEurRGvYESuLBwaQGjVuhToamFzRrPt4K9X3peRd7qHewhgbIPvutH VJcgCmqj1Xja/YsoVuOe3YUQN3823WSSU3iRhuF0u3nB/9yYyJAFTpu9jq//V50L 34YXsr2MJlJGjkYmJ9Jo01bLAY16HOnA2ud0vQuRltjdeGLcjDI8E5nXGnH/cN8G qZfyPEJBV4amizBDi+vDU3IWIzNsD9T9DcEkl8HTJrnmHrgFOIvz5YWlzwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPaRoRU1R+VzfL24R6crakhhDb65MB8GA1UdIwQY MBaAFCcCkPXzHyON8+jzvfzAV1HMLxksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSndLUTlmTWZJNDN6NlBPOV9NQlhVY3d2R1N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hNTkzMGEtNzIzMy00ZWU5LTk5MDAt YjE0Y2M5MWM3NzZjLzEvOXBHaEZUVkg1WE44dmJoSHB5dHFTR0VOdnJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9hNTkzMGEtNzIzMy00ZWU5LTk5MDAtYjE0Y2M5MWM3NzZj LzEvSndLUTlmTWZJNDN6NlBPOV9NQlhVY3d2R1N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDW2YYMA0E AgACMAcDBQAqA2GAMA0GCSqGSIb3DQEBCwUAA4IBAQCYNUEsM+Ovh5OlvTErlndt RsF9+/hqJboCrnYoP2trirhVBTtm/noKc61dIX1NNKugWcNHN80uxpHINtzRdbms ugQtItaPqEPf6INnJhnm36L0vlB/BWjIaFWQAhsMDX4QliTV4u40iCJ434Em0ixg bVphup6tFsVHFGpuh/6IM+rpQSWF9hByi8eUgTamAztORSPgV00Oz32+Bne7QYBl pBC7aqwHDgQ5fWk+CmhFKJfc7zNe8H/kXmNPpU8Ztng56WW5j2FI8Lw320676vjr M9Ge+ZROsiUkVDOnRUFKAEyybpexjL2IYjHsvRa/f7H8/3xRaou3819mgOTTc04v -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:58 2026 by rpki-client