This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/kPug_51GXqlwJeY-HP5uXbxeYwg.roa File: kPug_51GXqlwJeY-HP5uXbxeYwg.roa (raw, json) Hash identifier: Z2QdLBL1AQqHVn4FXvTh9DWxNql4rQQE8ELM9WrIyhI= Subject key identifier: 90:FB:A0:FF:9D:46:5E:A9:70:25:E6:3E:1C:FE:6E:5D:BC:5E:63:08 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F8497B894ADAF22AA6B454BD14743A7 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/kPug_51GXqlwJeY-HP5uXbxeYwg.roa Signing time: Fri 02 Jan 2026 16:22:34 +0000 ROA not before: Fri 02 Jan 2026 16:22:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39906 IP address blocks: 93.170.84.0/22 maxlen: 24 95.46.32.0/23 maxlen: 24 95.46.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:97:b8:94:ad:af:22:aa:6b:45:4b:d1:47:43:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90fba0ff9d465ea97025e63e1cfe6e5dbc5e6308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cb:3a:c4:24:12:67:f0:3d:ea:66:46:e1:d7: e2:82:b2:ae:b0:7c:0e:d7:42:55:77:35:da:ba:22: 86:d3:00:2b:dd:6d:c8:3e:16:ea:86:bc:f6:9f:50: fc:80:0e:73:ed:e8:67:2f:73:1f:e7:2d:39:ad:42: 48:77:fa:4f:af:b7:fa:9f:14:f9:8f:8e:24:a0:53: 83:92:e9:17:16:bf:7f:68:a4:79:18:bd:52:2e:e3: 26:49:e0:30:2b:b0:84:1e:98:67:2b:f5:99:8e:17: b5:5d:c8:dc:bd:95:d0:67:7d:c0:c2:8e:4f:6b:c8: d8:cc:ef:33:c6:ef:30:d5:0f:5f:aa:72:e1:06:d2: 38:00:ff:8b:5f:ff:c8:22:87:f6:79:96:9d:ee:a9: b7:f9:50:27:29:a3:a0:34:16:47:30:86:09:de:25: 34:5f:57:10:f3:ef:33:c6:7b:15:02:ae:6d:6c:1e: 4f:e0:f1:ee:b9:ae:a6:06:1f:36:34:5e:6f:ab:7c: 4f:a4:cc:84:75:99:06:0a:fd:9b:09:68:0e:a8:4b: db:39:3c:28:6e:d4:16:63:f3:15:ec:f2:3e:6e:77: 1a:cb:f7:3f:79:98:a4:4a:64:03:ed:2c:bd:80:33: 55:80:74:d3:ee:7f:e3:c0:36:9b:e4:72:b7:e9:63: 81:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FB:A0:FF:9D:46:5E:A9:70:25:E6:3E:1C:FE:6E:5D:BC:5E:63:08 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/kPug_51GXqlwJeY-HP5uXbxeYwg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.170.84.0/22 95.46.32.0/23 Signature Algorithm: sha256WithRSAEncryption 50:a9:45:c3:24:27:41:11:5a:bc:35:36:4c:c9:19:67:6d:b5: 5a:3d:a9:0d:fd:0e:aa:24:93:c9:62:19:d8:00:12:60:42:93: 0a:6d:54:54:e5:d6:11:f3:67:66:f0:04:a8:e5:b5:0c:58:af: 06:8a:db:97:42:15:4e:de:ab:23:9d:87:28:9a:ef:6d:ab:f1: 34:0d:8a:65:58:ac:36:ce:bd:bc:fd:54:fb:b8:f4:1a:09:74: 4d:28:6d:fd:7f:8b:27:fb:e7:b5:23:dc:10:6a:ae:f1:6d:a6: bc:1e:f0:e4:ee:10:ee:4e:e3:5b:da:91:fe:fd:79:6e:2e:26: 21:76:4a:78:8c:57:be:81:5c:45:52:3b:4e:68:b1:ba:52:99: 84:6c:41:ef:fb:b0:25:e4:e6:bb:80:b3:10:aa:36:d2:7e:07: ca:af:f1:99:6b:15:f7:ff:4d:2f:63:c8:cf:52:9f:3e:8c:b3: 87:d0:3a:cc:e5:d5:04:92:b8:a7:49:f4:20:f6:18:bc:4d:59: 45:fb:f5:d4:5e:3c:c9:05:aa:76:7a:25:5e:27:98:c9:a9:1d: 89:db:34:29:45:29:d8:24:ce:86:1e:87:09:3e:b7:a3:bb:ec: a9:90:86:40:b5:59:35:8f:a4:9d:28:ae:bc:5d:4f:68:98:23: f9:67:0a:b4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hJe4lK2vIqprRUvRR0OnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGZiYTBmZjlkNDY1ZWE5NzAyNWU2M2UxY2ZlNmU1ZGJjNWU2MzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ss6xCQSZ/A96mZG4dfigrKusHwO 10JVdzXauiKG0wAr3W3IPhbqhrz2n1D8gA5z7ehnL3Mf5y05rUJId/pPr7f6nxT5 j44koFODkukXFr9/aKR5GL1SLuMmSeAwK7CEHphnK/WZjhe1XcjcvZXQZ33Awo5P a8jYzO8zxu8w1Q9fqnLhBtI4AP+LX//IIof2eZad7qm3+VAnKaOgNBZHMIYJ3iU0 X1cQ8+8zxnsVAq5tbB5P4PHuua6mBh82NF5vq3xPpMyEdZkGCv2bCWgOqEvbOTwo btQWY/MV7PI+bncay/c/eZikSmQD7Sy9gDNVgHTT7n/jwDab5HK36WOB8QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJD7oP+dRl6pcCXmPhz+bl28XmMIMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEva1B1Z181MUdYcWx3SmVZLUhQNXVYYnhlWXdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCXapUAwQB Xy4gMA0GCSqGSIb3DQEBCwUAA4IBAQBQqUXDJCdBEVq8NTZMyRlnbbVaPakN/Q6q JJPJYhnYABJgQpMKbVRU5dYR82dm8ASo5bUMWK8GituXQhVO3qsjnYcomu9tq/E0 DYplWKw2zr28/VT7uPQaCXRNKG39f4sn++e1I9wQaq7xbaa8HvDk7hDuTuNb2pH+ /XluLiYhdkp4jFe+gVxFUjtOaLG6UpmEbEHv+7Al5Oa7gLMQqjbSfgfKr/GZaxX3 /00vY8jPUp8+jLOH0DrM5dUEkrinSfQg9hi8TVlF+/XUXjzJBap2eiVeJ5jJqR2J 2zQpRSnYJM6GHocJPreju+ypkIZAtVk1j6SdKK68XU9omCP5Zwq0 -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:32 2026 by rpki-client