This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/d9AgluGSHMCc11GvJWhXGZMzhU0.roa File: d9AgluGSHMCc11GvJWhXGZMzhU0.roa (raw, json) Hash identifier: tcL+B7NGCeHASd40SLorTYBxAtsBSGbv1JgmL4KlkG8= Subject key identifier: 77:D0:20:96:E1:92:1C:C0:9C:D7:51:AF:25:68:57:19:93:33:85:4D Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2E0E240CD6AC25AE15CEB6C696EF9 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/d9AgluGSHMCc11GvJWhXGZMzhU0.roa Signing time: Thu 01 Jan 2026 08:18:18 +0000 ROA not before: Thu 01 Jan 2026 08:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2.59.252.0/24 maxlen: 24 185.216.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:e0:e2:40:cd:6a:c2:5a:e1:5c:eb:6c:69:6e:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77d02096e1921cc09cd751af256857199333854d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:da:28:39:c6:7d:9c:c9:3d:28:9f:34:b7:f5: bc:58:24:d7:f5:dc:ea:59:00:0c:64:ef:e8:93:a0: a0:43:fa:c5:70:5b:3a:f0:bb:18:43:db:4b:5c:a4: 17:36:4a:0e:69:06:5a:ff:6b:ff:73:4b:3b:89:33: f9:6d:11:b8:1d:a9:6d:b0:b0:fa:ec:f0:04:10:c1: df:d4:c2:c2:7b:b7:76:10:b0:2f:96:e1:de:05:b9: 62:28:a2:32:73:0c:b2:79:c0:cb:55:85:b6:99:05: d1:03:67:ad:9b:57:51:0b:66:53:51:8d:9d:c3:6f: 62:e1:a2:4f:49:47:4b:97:f9:9c:ae:47:9e:c6:24: a9:d8:99:7f:7c:ed:3a:41:af:ae:11:cd:68:e4:89: d7:47:cf:39:f6:05:46:4a:8b:09:95:f6:56:32:e8: 30:cc:b9:8c:5d:df:ad:48:b0:17:49:9f:10:8f:39: 34:da:82:e4:6e:35:86:00:69:a6:51:73:13:e0:e2: ed:b4:0e:ea:84:8d:af:a4:05:cd:3e:1b:6d:6d:41: d5:42:b7:ea:7e:b9:b9:e9:8d:9f:91:23:94:6c:46: 5b:af:04:14:e8:2d:22:4c:5b:8f:7a:bb:67:9b:9e: 03:d5:9e:29:c8:10:78:fd:94:49:5b:e9:e6:ab:1a: ae:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D0:20:96:E1:92:1C:C0:9C:D7:51:AF:25:68:57:19:93:33:85:4D X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/d9AgluGSHMCc11GvJWhXGZMzhU0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.252.0/24 185.216.70.0/24 Signature Algorithm: sha256WithRSAEncryption 51:ef:ef:cb:6e:10:2c:96:f5:88:f8:41:0f:ea:7c:c2:c6:49: 76:80:92:13:31:a2:87:e2:61:d3:46:19:a9:69:83:84:69:0f: ea:b1:74:89:28:23:a6:2b:79:b1:f0:b4:89:c0:73:d4:04:54: 48:b4:28:ff:da:b1:a2:a6:fd:18:1c:ec:92:95:a3:ce:45:76: c2:60:c9:1b:4c:25:6d:09:08:0e:c3:bf:b0:68:2f:8b:15:cd: 14:2a:e2:9e:49:10:d6:1f:cd:a2:46:44:80:0f:d4:90:44:31: fc:90:a8:3f:b7:bb:46:03:c9:f7:af:16:28:ee:dd:85:cd:34: f4:c1:e1:a0:c3:29:9f:c3:3e:b4:f6:11:8a:5f:ad:66:4b:d9: 9d:ff:c6:4b:d4:8f:b9:8a:1f:9b:37:32:40:85:d9:8f:b4:c6: 3a:6d:80:61:9b:ec:cb:df:fb:2d:7b:3e:c3:31:3a:43:ec:0e: 7f:71:50:fe:5a:ab:cb:4e:d5:30:f4:90:8a:74:c9:91:32:7b: 46:3b:f3:a5:33:bc:36:c8:34:4c:fe:b4:8a:9f:ee:b9:a4:f2: 3c:3f:3e:ec:d8:58:82:c7:8a:a2:bf:1e:62:11:2a:02:dd:e3: 9a:d7:86:b6:8e:63:61:4b:d2:2e:17:17:7e:10:40:63:aa:d3: da:2e:7a:48 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ouDiQM1qwlrhXOtsaW75MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2QwMjA5NmUxOTIxY2MwOWNkNzUxYWYyNTY4NTcxOTkzMzM4NTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNooOcZ9nMk9KJ80t/W8WCTX9dzq WQAMZO/ok6CgQ/rFcFs68LsYQ9tLXKQXNkoOaQZa/2v/c0s7iTP5bRG4HaltsLD6 7PAEEMHf1MLCe7d2ELAvluHeBbliKKIycwyyecDLVYW2mQXRA2etm1dRC2ZTUY2d w29i4aJPSUdLl/mcrkeexiSp2Jl/fO06Qa+uEc1o5InXR8859gVGSosJlfZWMugw zLmMXd+tSLAXSZ8Qjzk02oLkbjWGAGmmUXMT4OLttA7qhI2vpAXNPhttbUHVQrfq frm56Y2fkSOUbEZbrwQU6C0iTFuPertnm54D1Z4pyBB4/ZRJW+nmqxquUQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHfQIJbhkhzAnNdRryVoVxmTM4VNMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvZDlBZ2x1R1NITUNjMTFHdkpXaFhHWk16aFUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAjv8AwQA udhGMA0GCSqGSIb3DQEBCwUAA4IBAQBR7+/LbhAslvWI+EEP6nzCxkl2gJITMaKH 4mHTRhmpaYOEaQ/qsXSJKCOmK3mx8LSJwHPUBFRItCj/2rGipv0YHOySlaPORXbC YMkbTCVtCQgOw7+waC+LFc0UKuKeSRDWH82iRkSAD9SQRDH8kKg/t7tGA8n3rxYo 7t2FzTT0weGgwymfwz609hGKX61mS9md/8ZL1I+5ih+bNzJAhdmPtMY6bYBhm+zL 3/stez7DMTpD7A5/cVD+WqvLTtUw9JCKdMmRMntGO/OlM7w2yDRM/rSKn+65pPI8 Pz7s2FiCx4qivx5iESoC3eOa14a2jmNhS9IuFxd+EEBjqtPaLnpI -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:08 2026 by rpki-client