This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/_ab5WyJA5yqOk-0Js4gZuGEa-fM.roa
File: _ab5WyJA5yqOk-0Js4gZuGEa-fM.roa (raw, json)
Hash identifier: FHDO4ipYFvqzvb+xj5a1Mq5hKmAgkterhZxgIwP7S34=
Subject key identifier: FD:A6:F9:5B:22:40:E7:2A:8E:93:ED:09:B3:88:19:B8:61:1A:F9:F3
Certificate issuer: /CN=620dd5186de65a646dda4b89dd48ed44873af149
Certificate serial: 019B7910A462EFAC22C36FF6C4CCFD691B9E
Authority key identifier: 62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/_ab5WyJA5yqOk-0Js4gZuGEa-fM.roa
Signing time: Thu 01 Jan 2026 10:18:12 +0000
ROA not before: Thu 01 Jan 2026 10:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44664
IP address blocks: 91.202.144.0/22 maxlen: 22
91.202.144.0/24 maxlen: 24
91.202.145.0/24 maxlen: 24
91.202.146.0/24 maxlen: 24
91.202.147.0/24 maxlen: 24
91.225.56.0/22 maxlen: 22
91.225.56.0/24 maxlen: 24
91.225.57.0/24 maxlen: 24
91.225.58.0/24 maxlen: 24
91.225.59.0/24 maxlen: 24
91.247.224.0/22 maxlen: 22
91.247.224.0/24 maxlen: 24
91.247.225.0/24 maxlen: 24
91.247.226.0/24 maxlen: 24
91.247.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:a4:62:ef:ac:22:c3:6f:f6:c4:cc:fd:69:1b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620dd5186de65a646dda4b89dd48ed44873af149
Validity
Not Before: Jan 1 10:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fda6f95b2240e72a8e93ed09b38819b8611af9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:43:4e:3a:01:05:e5:a6:96:fa:33:ac:f8:e1:
ab:a1:9c:e8:50:e8:16:94:13:71:5b:f2:f2:bb:a1:
96:fe:4f:99:98:11:51:b2:96:c7:e7:fd:df:b1:3a:
59:2d:87:70:64:08:14:87:a1:3b:73:a7:37:b2:24:
8e:31:7b:4e:59:66:db:e1:85:89:35:df:1a:96:a3:
9d:4d:f7:07:e4:df:f5:44:c7:77:e3:f4:c3:7b:89:
75:03:7f:a1:22:88:a2:2e:bc:5c:c9:a1:d1:cf:f9:
5f:b0:a9:12:cc:ca:a7:c4:99:0f:d9:41:84:b9:6b:
18:2e:83:9e:92:d7:3a:4c:bb:0a:6b:84:3c:6d:79:
79:ad:de:fb:37:9c:f9:ab:13:1a:24:00:41:eb:53:
11:bb:2b:0e:83:8e:b9:67:3b:ad:f0:ea:ed:e3:42:
38:1b:e3:26:56:0f:78:d2:c1:91:57:4f:4c:bd:49:
dd:86:b0:e5:82:c2:dd:ad:99:51:5e:a2:45:06:9e:
6e:05:b4:9b:38:bb:ea:69:a4:79:a4:47:2d:13:b7:
bf:5a:61:df:5b:53:e6:4c:2b:14:fe:fd:af:bf:43:
80:bf:f5:b2:de:7c:91:d1:20:1a:44:24:5c:22:93:
a7:a5:b7:f3:d3:31:1a:d3:58:93:3d:e1:29:0d:d9:
4e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A6:F9:5B:22:40:E7:2A:8E:93:ED:09:B3:88:19:B8:61:1A:F9:F3
X509v3 Authority Key Identifier:
keyid:62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/_ab5WyJA5yqOk-0Js4gZuGEa-fM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.144.0/22
91.225.56.0/22
91.247.224.0/22
Signature Algorithm: sha256WithRSAEncryption
44:f9:e5:73:5a:9b:43:62:e4:87:36:5c:55:98:73:e1:03:33:
1a:24:7f:23:0f:b1:33:b4:7a:68:ef:ad:1a:c8:48:06:46:b6:
bb:73:75:03:3e:af:12:0a:fa:5d:04:3d:7a:e7:11:d7:ce:a9:
f6:56:28:cd:8d:70:4e:c2:d0:70:dc:e3:67:09:57:93:2a:49:
cf:39:e9:4e:09:dd:0f:0e:e1:13:69:72:f2:14:e0:ef:fb:4f:
2a:0a:cd:d1:a1:3b:42:b0:a6:84:c9:a2:d6:95:2e:d4:6c:7b:
b9:66:d9:13:4b:bd:b8:22:1c:90:a1:f3:30:98:f0:da:e9:ea:
6f:cc:f9:9c:80:b8:4d:29:ff:41:7b:5b:28:ba:86:1a:63:48:
93:8e:98:35:34:00:e5:cd:a7:a5:1e:71:d9:72:07:15:e1:2d:
69:ad:54:a5:6c:f7:43:4c:24:d3:36:af:7b:af:5d:b5:e9:09:
e3:f2:25:12:b6:fd:ee:7b:73:19:13:29:5e:d3:c7:7e:3d:a0:
7f:a1:f9:ad:57:93:dd:b4:1a:7b:e2:44:6d:8d:ab:f8:5b:c3:
f0:16:e2:0e:43:8e:cd:c2:3c:2b:21:1d:8d:3d:13:45:9f:d3:
ca:ef:8b:7e:d7:77:43:a1:32:73:54:fd:64:50:3b:92:21:3e:
78:0a:9a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:02:21 2026 by rpki-client