This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/kwFPG9hW2RnxD_y7iGiEkD7ds7s.roa File: kwFPG9hW2RnxD_y7iGiEkD7ds7s.roa (raw, json) Hash identifier: oBOX2hL6Q0voGuCACiRactuFniCHTuH8t84KLSlEN9Y= Subject key identifier: 93:01:4F:1B:D8:56:D9:19:F1:0F:FC:BB:88:68:84:90:3E:DD:B3:BB Certificate issuer: /CN=c9d5b129e06f9524685e700102841f72d6915c33 Certificate serial: 019B7E38B50A33A118B5F16C102E5BA99452 Authority key identifier: C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/kwFPG9hW2RnxD_y7iGiEkD7ds7s.roa Signing time: Fri 02 Jan 2026 10:20:04 +0000 ROA not before: Fri 02 Jan 2026 10:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39944 IP address blocks: 91.212.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.crl rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b5:0a:33:a1:18:b5:f1:6c:10:2e:5b:a9:94:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d5b129e06f9524685e700102841f72d6915c33 Validity Not Before: Jan 2 10:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93014f1bd856d919f10ffcbb886884903eddb3bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:66:3c:9d:f5:ad:7a:db:4b:1b:fb:12:8f:3d: 2b:9a:48:d2:a3:e0:ec:de:41:e3:58:e5:c4:b0:25: cf:ed:95:fd:e5:ac:bb:bc:51:a9:e3:a9:1c:a9:ca: d1:6d:19:2d:5f:0c:80:a3:14:c0:5d:f1:9b:31:b4: 59:0b:a0:29:92:20:bf:23:04:02:cb:cc:5d:14:1c: 39:62:76:84:fa:98:09:67:99:ed:66:0e:a7:e2:1d: 51:56:55:09:c5:b3:3f:e8:5d:ef:fb:70:31:f8:e5: 63:fc:d2:c2:07:59:23:56:1d:f1:d1:55:0c:6c:8c: d6:57:2b:51:a3:34:ca:82:43:62:58:f3:4b:1d:96: 64:ff:d0:d2:ca:ae:8c:48:23:cc:a3:6a:8c:cf:63: 2f:43:fd:17:ab:6b:6c:96:8b:c8:63:f4:ad:fe:64: fd:0c:16:a3:35:c4:f9:b8:9e:da:ba:9c:6e:49:95: 99:3a:0b:f6:76:18:f7:30:b8:3c:fd:aa:e2:60:83: 75:33:ea:24:d8:07:04:5a:50:a1:f5:45:87:c0:b9: 7d:69:e7:1f:4d:36:83:73:4c:eb:3c:13:7b:2d:1b: 84:52:90:10:f8:30:90:11:f8:ad:96:9d:de:c8:27: 78:08:0f:17:87:37:8e:9b:86:9e:f1:c7:3e:29:b0: f3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:01:4F:1B:D8:56:D9:19:F1:0F:FC:BB:88:68:84:90:3E:DD:B3:BB X509v3 Authority Key Identifier: keyid:C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/kwFPG9hW2RnxD_y7iGiEkD7ds7s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.79.0/24 Signature Algorithm: sha256WithRSAEncryption 94:14:65:6f:c3:a0:a0:2a:0e:b5:03:a4:fc:02:cc:fc:f0:c5: c7:bd:58:0c:4a:d9:2c:db:c0:8d:76:7c:6f:f0:de:bd:27:f0: ac:53:52:12:e5:ac:90:a6:2b:75:b3:db:89:05:07:f4:be:d2: c2:55:69:6b:aa:82:d9:f2:45:94:35:08:34:3c:d2:8e:0f:3c: 9f:02:76:6c:98:17:d6:3b:21:67:f2:64:bb:40:8b:63:ff:78: 06:78:95:d0:4f:53:f8:90:0a:04:11:16:e8:11:60:51:a1:e0: b5:f7:40:db:39:67:ce:d3:d9:66:87:73:91:d6:56:c4:a6:be: db:cb:31:8b:20:1e:c8:39:82:d2:ae:2e:df:da:7a:de:a1:9d: d5:e7:87:f3:17:09:ba:6f:41:69:9d:3f:5d:e5:46:ff:f6:1a: 29:df:ed:ea:8a:c3:2e:00:fc:49:77:fc:90:ad:ba:d5:2b:39: 84:14:e8:11:e5:4e:cc:2c:b6:56:90:13:56:88:42:73:13:c5: ed:63:72:e5:14:b2:d8:bb:bf:a9:a9:10:b3:90:1f:f0:47:75: da:cc:01:36:1c:18:1c:08:d7:d5:ef:ee:ce:9a:09:a4:3d:56: 5c:e9:9c:df:be:7b:40:e1:84:ca:d7:98:bf:cd:b3:f4:23:f9: 20:f8:65:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OLUKM6EYtfFsEC5bqZRSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDViMTI5ZTA2Zjk1MjQ2ODVlNzAwMTAyODQxZjcyZDY5 MTVjMzMwHhcNMjYwMTAyMTAyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzAxNGYxYmQ4NTZkOTE5ZjEwZmZjYmI4ODY4ODQ5MDNlZGRiM2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32Y8nfWtettLG/sSjz0rmkjSo+Ds 3kHjWOXEsCXP7ZX95ay7vFGp46kcqcrRbRktXwyAoxTAXfGbMbRZC6ApkiC/IwQC y8xdFBw5YnaE+pgJZ5ntZg6n4h1RVlUJxbM/6F3v+3Ax+OVj/NLCB1kjVh3x0VUM bIzWVytRozTKgkNiWPNLHZZk/9DSyq6MSCPMo2qMz2MvQ/0Xq2tslovIY/St/mT9 DBajNcT5uJ7aupxuSZWZOgv2dhj3MLg8/ariYIN1M+ok2AcEWlCh9UWHwLl9aecf TTaDc0zrPBN7LRuEUpAQ+DCQEfitlp3eyCd4CA8XhzeOm4ae8cc+KbDz0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJMBTxvYVtkZ8Q/8u4hohJA+3bO7MB8GA1UdIwQY MBaAFMnVsSngb5UkaF5wAQKEH3LWkVwzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRXeEtlQnZsU1JvWG5BQkFvUWZjdGFSWERNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8xOWY5ZDctNDQzOC00ZDYxLWJlNzct YzJlYWRkNWVmM2YxLzEva3dGUEc5aFcyUm54RF95N2lHaUVrRDdkczdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8xOWY5ZDctNDQzOC00ZDYxLWJlNzctYzJlYWRkNWVmM2Yx LzEveWRXeEtlQnZsU1JvWG5BQkFvUWZjdGFSWERNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9RPMA0G CSqGSIb3DQEBCwUAA4IBAQCUFGVvw6CgKg61A6T8Asz88MXHvVgMStks28CNdnxv 8N69J/CsU1IS5ayQpit1s9uJBQf0vtLCVWlrqoLZ8kWUNQg0PNKODzyfAnZsmBfW OyFn8mS7QItj/3gGeJXQT1P4kAoEERboEWBRoeC190DbOWfO09lmh3OR1lbEpr7b yzGLIB7IOYLSri7f2nreoZ3V54fzFwm6b0FpnT9d5Ub/9hop3+3qisMuAPxJd/yQ rbrVKzmEFOgR5U7MLLZWkBNWiEJzE8XtY3LlFLLYu7+pqRCzkB/wR3XazAE2HBgc CNfV7+7OmgmkPVZc6ZzfvntA4YTK15i/zbP0I/kg+GWo -----END CERTIFICATE-----Generated at Sun Jan 25 16:53:51 2026 by rpki-client