This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/AgTnJsYb3ydisGXKef39K4KmiI4.roa File: AgTnJsYb3ydisGXKef39K4KmiI4.roa (raw, json) Hash identifier: SulRYmIL5kOQ3oA/juOrlXAnh022aF3iSqrk8GNXqHY= Subject key identifier: 02:04:E7:26:C6:1B:DF:27:62:B0:65:CA:79:FD:FD:2B:82:A6:88:8E Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019C289E535384655075980EB1BAD411D60E Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/AgTnJsYb3ydisGXKef39K4KmiI4.roa Signing time: Wed 04 Feb 2026 12:26:30 +0000 ROA not before: Wed 04 Feb 2026 12:26:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203273 IP address blocks: 194.67.201.0/24 maxlen: 24 2a0e:d606::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:28:9e:53:53:84:65:50:75:98:0e:b1:ba:d4:11:d6:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Feb 4 12:26:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0204e726c61bdf2762b065ca79fdfd2b82a6888e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d0:08:af:e6:7b:3c:38:b7:5a:3b:a8:94:9a: 3e:10:1f:48:ce:f4:d9:1c:f0:29:1e:f1:91:10:88: b3:30:c8:b4:08:a6:ff:a5:c4:dd:8d:c7:cb:41:df: 3a:43:cd:e6:0c:55:e3:cd:0e:7f:8a:90:11:eb:29: ac:31:7a:29:9a:f2:88:c0:61:f4:ad:f5:70:1c:ab: 34:38:05:fc:9c:d3:5d:bf:a8:26:a5:9c:c2:5f:9c: 29:a0:63:81:8f:0a:c1:72:65:28:2d:cb:2b:46:28: 1e:cf:fa:4d:f7:3b:46:a8:b8:13:81:42:0b:ec:d9: a7:e2:58:b4:36:48:a4:35:26:4f:a2:09:87:7a:ec: b1:2a:c7:0f:4d:e9:2e:2f:9c:b8:20:44:ee:97:6d: a1:cc:1a:c3:b6:2a:97:ad:36:38:51:14:44:67:f7: 6d:22:ee:e9:37:02:4d:70:4c:5c:47:49:a1:73:d6: 24:54:76:58:67:72:28:a7:56:61:27:72:5e:21:5c: 42:e3:db:2e:e2:e4:d9:b1:91:b6:0a:d7:3c:ca:61: 6c:45:47:06:6a:48:29:f6:a7:8b:95:45:47:1d:30: 5e:dc:84:4b:08:09:47:af:66:98:c4:ca:94:63:bf: 5b:5f:ae:ed:db:e5:26:63:e3:b8:ba:36:82:3a:15: 28:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:04:E7:26:C6:1B:DF:27:62:B0:65:CA:79:FD:FD:2B:82:A6:88:8E X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/AgTnJsYb3ydisGXKef39K4KmiI4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.67.201.0/24 IPv6: 2a0e:d606::/48 Signature Algorithm: sha256WithRSAEncryption 40:3a:0f:f9:aa:1a:d8:17:b5:68:e0:f1:d3:17:35:7b:5e:26: 17:65:27:3d:10:68:a7:51:f1:2a:20:7e:4d:b7:9c:a6:16:fd: 06:92:7c:f0:6d:d3:83:fe:d8:ee:6e:40:fc:6d:c2:fe:f9:90: 96:c6:de:c6:dd:ef:77:6f:ce:ec:da:fe:da:44:0a:42:2c:72: 5c:c3:7f:c7:f0:1b:81:b1:32:24:fc:20:97:41:be:7a:48:7b: 6a:8f:b9:5d:60:a9:e0:d3:2c:3b:83:11:d2:a1:b9:18:6e:11: 2d:ce:18:39:29:6f:e8:56:26:c3:91:3f:3c:08:99:d2:9e:32: de:27:38:30:28:bc:c5:c2:81:cb:04:49:13:2a:d0:18:7d:bd: 97:f4:d0:f7:d6:1d:d7:e4:28:bc:05:31:07:90:82:3e:1c:37: 79:94:a5:ee:a3:ac:5a:4b:fa:98:bf:62:b5:be:d9:cf:dd:2a: 48:fc:f5:09:b6:d2:bd:c2:8d:eb:58:6f:56:46:41:3a:33:bc: eb:2c:3e:7e:f4:9d:de:0c:97:2f:98:c4:1c:62:3f:ed:df:d7: 4a:69:27:79:b4:c1:79:3f:d3:2a:90:ce:bc:88:77:41:26:52: 78:a8:25:50:1b:f9:86:dd:5d:a8:b4:cc:8f:8a:33:e6:01:27: 75:98:0a:5a -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZwonlNThGVQdZgOsbrUEdYOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMjA0MTIyNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjA0ZTcyNmM2MWJkZjI3NjJiMDY1Y2E3OWZkZmQyYjgyYTY4ODhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNAIr+Z7PDi3WjuolJo+EB9IzvTZ HPApHvGREIizMMi0CKb/pcTdjcfLQd86Q83mDFXjzQ5/ipAR6ymsMXopmvKIwGH0 rfVwHKs0OAX8nNNdv6gmpZzCX5wpoGOBjwrBcmUoLcsrRigez/pN9ztGqLgTgUIL 7Nmn4li0NkikNSZPogmHeuyxKscPTekuL5y4IETul22hzBrDtiqXrTY4URREZ/dt Iu7pNwJNcExcR0mhc9YkVHZYZ3Iop1ZhJ3JeIVxC49su4uTZsZG2Ctc8ymFsRUcG akgp9qeLlUVHHTBe3IRLCAlHr2aYxMqUY79bX67t2+UmY+O4ujaCOhUoTwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAIE5ybGG98nYrBlynn9/SuCpoiOMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvQWdUbkpzWWIzeWRpc0dYS2VmMzlLNEttaUk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwkPJMA8E AgACMAkDBwAqDtYGAAAwDQYJKoZIhvcNAQELBQADggEBAEA6D/mqGtgXtWjg8dMX NXteJhdlJz0QaKdR8Sogfk23nKYW/QaSfPBt04P+2O5uQPxtwv75kJbG3sbd73dv zuza/tpECkIsclzDf8fwG4GxMiT8IJdBvnpIe2qPuV1gqeDTLDuDEdKhuRhuES3O GDkpb+hWJsORPzwImdKeMt4nODAovMXCgcsESRMq0Bh9vZf00PfWHdfkKLwFMQeQ gj4cN3mUpe6jrFpL+pi/YrW+2c/dKkj89Qm20r3CjetYb1ZGQTozvOssPn70nd4M ly+YxBxiP+3f10ppJ3m0wXk/0yqQzryId0EmUnioJVAb+YbdXai0zI+KM+YBJ3WY Clo= -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:07 2026 by rpki-client