This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/fAGJ0zZiE23sjBMLXsq0Z_mvXEo.roa File: fAGJ0zZiE23sjBMLXsq0Z_mvXEo.roa (raw, json) Hash identifier: hQSWzXWXEpVRTEJG6Hqx3+kFQWHZ1X1EhYkwPSOVP3I= Subject key identifier: 7C:01:89:D3:36:62:13:6D:EC:8C:13:0B:5E:CA:B4:67:F9:AF:5C:4A Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E762FC22B366C033FF216C09798EC Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/fAGJ0zZiE23sjBMLXsq0Z_mvXEo.roa Signing time: Thu 01 Jan 2026 12:18:09 +0000 ROA not before: Thu 01 Jan 2026 12:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214062 IP address blocks: 91.200.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:76:2f:c2:2b:36:6c:03:3f:f2:16:c0:97:98:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c0189d33662136dec8c130b5ecab467f9af5c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e0:da:2e:ee:db:c1:79:53:2a:5a:bc:94:97: 7e:5c:3e:89:5e:b5:dd:2f:be:23:ad:8d:ad:06:78: 9e:e7:65:da:7c:94:38:c9:7d:22:f1:51:20:fd:7e: 6b:2a:38:a4:ad:ff:b2:17:bf:6a:04:a7:d9:cf:2c: a4:98:a3:7b:be:85:c8:37:e8:21:d6:45:51:e9:dc: 2e:7f:5c:fd:e7:71:35:55:2b:50:c5:39:f7:85:6d: 68:65:aa:4f:fc:45:9a:3c:37:f0:7d:bf:ad:f9:90: b3:7c:b8:71:fc:88:09:b4:d4:ad:49:da:df:96:ce: 1d:90:7d:09:f1:6d:94:96:46:8a:c6:fc:75:50:51: 98:93:71:4d:2b:32:05:06:75:0f:e1:df:b9:ff:31: 3f:ac:18:e7:03:e2:9f:bb:55:63:7f:53:08:2d:cd: 13:16:76:cc:4f:e8:e4:6b:5c:20:fa:b3:4e:17:a7: 0e:11:e0:73:7b:70:92:e9:de:7b:2a:3a:ce:41:7f: 05:44:5c:b1:de:fb:a3:19:61:2f:47:a5:5a:a1:a0: fd:2d:9c:c2:f0:9c:dc:c6:44:c5:8a:db:56:4d:3e: fe:40:33:d4:23:96:61:b4:34:dc:4c:05:cf:7a:63: dd:30:1d:6c:3b:16:c4:94:80:3a:32:1f:ec:7c:29: 4a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:01:89:D3:36:62:13:6D:EC:8C:13:0B:5E:CA:B4:67:F9:AF:5C:4A X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/fAGJ0zZiE23sjBMLXsq0Z_mvXEo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.220.0/24 Signature Algorithm: sha256WithRSAEncryption 72:f8:f4:88:2e:0d:f5:62:6f:62:6a:1f:dc:c8:72:0e:d5:9a: 39:f7:55:6e:3a:fd:d1:c3:51:ed:39:e0:3f:2b:2d:27:aa:92: 60:6c:3a:04:ae:82:ea:2a:53:e2:53:38:45:b5:d3:27:63:60: 91:ec:7c:a2:b3:8c:53:21:d2:73:46:28:28:6e:da:3d:7f:2b: 06:c1:15:67:62:d2:d9:2d:7f:dc:f1:0b:48:7b:99:4a:43:c3: c5:cf:78:3c:3e:a6:1c:29:dd:09:8c:ad:b4:d4:66:fe:03:bd: 4e:ec:29:bb:45:a5:2e:ea:0c:82:9f:4b:d8:df:8b:e5:06:f6: 69:e4:66:2a:b5:ce:02:d1:4b:1c:a2:a6:c4:83:6f:aa:8b:06: 00:77:9d:c8:be:83:11:ea:97:cc:7c:97:92:06:8e:c0:a2:d9: 29:4f:1c:3d:98:d6:e2:41:4b:2c:1d:45:17:1e:17:db:7c:f5: 62:dd:88:18:de:3b:c5:52:87:e2:e9:10:c0:7f:b7:c5:f2:eb: 66:2b:83:4b:6a:3d:61:65:d1:64:ce:df:9a:4f:4a:2e:96:cb: 74:94:e7:2a:fa:3f:ec:f8:a2:39:65:e4:9a:89:a2:6f:e4:b8: e1:dd:97:9a:b7:95:ff:71:85:61:46:a3:e2:7d:f7:8c:fb:62: 2f:57:e5:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fnYvwis2bAM/8hbAl5jsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzAxODlkMzM2NjIxMzZkZWM4YzEzMGI1ZWNhYjQ2N2Y5YWY1YzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveDaLu7bwXlTKlq8lJd+XD6JXrXd L74jrY2tBnie52XafJQ4yX0i8VEg/X5rKjikrf+yF79qBKfZzyykmKN7voXIN+gh 1kVR6dwuf1z953E1VStQxTn3hW1oZapP/EWaPDfwfb+t+ZCzfLhx/IgJtNStSdrf ls4dkH0J8W2UlkaKxvx1UFGYk3FNKzIFBnUP4d+5/zE/rBjnA+Kfu1Vjf1MILc0T FnbMT+jka1wg+rNOF6cOEeBze3CS6d57KjrOQX8FRFyx3vujGWEvR6VaoaD9LZzC 8JzcxkTFittWTT7+QDPUI5ZhtDTcTAXPemPdMB1sOxbElIA6Mh/sfClKQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHwBidM2YhNt7IwTC17KtGf5r1xKMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvZkFHSjB6WmlFMjNzakJNTFhzcTBaX212WEVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8jcMA0G CSqGSIb3DQEBCwUAA4IBAQBy+PSILg31Ym9iah/cyHIO1Zo591VuOv3Rw1HtOeA/ Ky0nqpJgbDoEroLqKlPiUzhFtdMnY2CR7Hyis4xTIdJzRigobto9fysGwRVnYtLZ LX/c8QtIe5lKQ8PFz3g8PqYcKd0JjK201Gb+A71O7Cm7RaUu6gyCn0vY34vlBvZp 5GYqtc4C0UscoqbEg2+qiwYAd53IvoMR6pfMfJeSBo7AotkpTxw9mNbiQUssHUUX HhfbfPVi3YgY3jvFUofi6RDAf7fF8utmK4NLaj1hZdFkzt+aT0oulst0lOcq+j/s +KI5ZeSaiaJv5Ljh3Zeat5X/cYVhRqPiffeM+2IvV+X3 -----END CERTIFICATE-----Generated at Sun Jan 18 11:26:34 2026 by rpki-client