This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/AGH32cynD1g31TMTO74Iax9Ggd4.roa File: AGH32cynD1g31TMTO74Iax9Ggd4.roa (raw, json) Hash identifier: leiJEevLJyZZ4+GHUepvyrmeuEBnTdpZnBVIgUP01Mw= Subject key identifier: 00:61:F7:D9:CC:A7:0F:58:37:D5:33:13:3B:BE:08:6B:1F:46:81:DE Certificate issuer: /CN=82b12ecfb22f29d60a3e31b79f362dd60c2d4c10 Certificate serial: 019B7DCB5EFE0C4E5BE0D35AE210C4CDBDEA Authority key identifier: 82:B1:2E:CF:B2:2F:29:D6:0A:3E:31:B7:9F:36:2D:D6:0C:2D:4C:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/AGH32cynD1g31TMTO74Iax9Ggd4.roa Signing time: Fri 02 Jan 2026 08:20:38 +0000 ROA not before: Fri 02 Jan 2026 08:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197446 IP address blocks: 194.0.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.crl rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5e:fe:0c:4e:5b:e0:d3:5a:e2:10:c4:cd:bd:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82b12ecfb22f29d60a3e31b79f362dd60c2d4c10 Validity Not Before: Jan 2 08:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0061f7d9cca70f5837d533133bbe086b1f4681de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b6:0c:3a:da:bd:34:21:da:05:28:e1:b9:ef: 08:50:63:16:59:cf:0f:16:69:3c:f4:5a:a1:d9:3a: a4:4f:f8:b2:c1:c9:19:83:04:25:27:84:ca:92:55: 80:c9:42:d0:77:5c:84:89:ff:6e:6b:35:e5:0d:76: 0a:69:42:ea:31:88:57:62:9c:37:20:65:22:64:d9: db:46:83:6c:c0:38:68:fd:95:08:68:3d:28:e0:a1: ae:17:d8:69:e0:82:cc:75:72:cc:54:45:91:f3:4e: 20:2b:d6:df:94:d5:c1:e5:cf:a3:7c:6b:6f:3b:37: 99:6b:df:a5:26:b4:d5:cd:7e:8e:e3:b1:68:c4:36: 58:ec:e0:31:95:20:52:b9:ad:b7:3f:ee:24:40:20: 5e:20:e4:29:d5:01:38:f8:5b:17:21:15:2f:e4:a6: 55:7a:11:64:54:16:c2:67:15:3a:7a:2e:59:b8:ff: c9:d7:d0:86:f8:32:62:1c:e8:9c:ea:62:d2:f7:d5: 0b:76:84:8c:1b:86:29:80:d7:ad:f6:27:8a:74:3f: eb:9e:5f:85:de:b8:c1:60:f9:c4:e9:f6:77:8c:1d: f6:22:d1:f4:f0:2a:0b:30:1b:cb:79:7b:5b:80:c8: f1:86:c4:19:8b:04:16:1f:48:46:aa:c8:3d:c7:66: 60:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:61:F7:D9:CC:A7:0F:58:37:D5:33:13:3B:BE:08:6B:1F:46:81:DE X509v3 Authority Key Identifier: keyid:82:B1:2E:CF:B2:2F:29:D6:0A:3E:31:B7:9F:36:2D:D6:0C:2D:4C:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/AGH32cynD1g31TMTO74Iax9Ggd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.242.0/24 Signature Algorithm: sha256WithRSAEncryption c5:2c:34:e3:d7:90:55:64:d2:7a:4f:c8:83:b3:d9:3e:3f:79: 68:f8:69:96:ff:60:e9:3f:a5:8f:b4:2a:1d:44:5c:e8:d2:bf: f8:fc:1a:73:a2:87:2d:d5:cd:59:84:54:b4:0c:9f:ae:b8:bb: 99:77:d0:62:9a:bd:2b:1e:ee:c0:83:32:8e:c2:dc:3f:87:00: 2e:18:75:b3:f5:00:bd:af:6b:32:2d:78:27:95:be:b3:8c:ea: 32:1d:ab:34:a3:79:0d:94:21:07:69:17:2e:63:83:36:f2:74: 6b:6a:7b:8e:62:fa:b5:99:80:2a:a4:ff:4f:b8:df:a9:01:49: 4f:14:8e:c4:5c:3e:fa:fb:13:16:9e:49:a2:0a:3e:c5:ba:11: 0f:04:01:dc:7f:0b:f3:f7:98:cd:91:96:17:31:2f:04:cd:5e: 52:80:86:6b:f6:c4:9d:ac:47:1a:b7:6d:ec:12:fc:91:4b:23: 35:c8:82:08:55:fc:14:fb:f7:a9:57:7b:90:18:2d:83:34:22: 04:50:f8:e0:19:f5:ae:de:7e:53:5d:60:01:29:68:0d:94:9f: e7:bd:fd:1b:fa:67:d0:58:ef:dc:dd:2e:98:3e:5f:20:b0:da: 90:bd:4e:a9:da:05:0c:dc:0d:01:54:69:c2:e1:f1:7c:39:76: a1:80:a2:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y17+DE5b4NNa4hDEzb3qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYjEyZWNmYjIyZjI5ZDYwYTNlMzFiNzlmMzYyZGQ2MGMy ZDRjMTAwHhcNMjYwMTAyMDgyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDYxZjdkOWNjYTcwZjU4MzdkNTMzMTMzYmJlMDg2YjFmNDY4MWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbYMOtq9NCHaBSjhue8IUGMWWc8P Fmk89Fqh2TqkT/iywckZgwQlJ4TKklWAyULQd1yEif9uazXlDXYKaULqMYhXYpw3 IGUiZNnbRoNswDho/ZUIaD0o4KGuF9hp4ILMdXLMVEWR804gK9bflNXB5c+jfGtv OzeZa9+lJrTVzX6O47FoxDZY7OAxlSBSua23P+4kQCBeIOQp1QE4+FsXIRUv5KZV ehFkVBbCZxU6ei5ZuP/J19CG+DJiHOic6mLS99ULdoSMG4YpgNet9ieKdD/rnl+F 3rjBYPnE6fZ3jB32ItH08CoLMBvLeXtbgMjxhsQZiwQWH0hGqsg9x2Zg0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFABh99nMpw9YN9UzEzu+CGsfRoHeMB8GA1UdIwQY MBaAFIKxLs+yLynWCj4xt582LdYMLUwQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3JFdXo3SXZLZFlLUGpHM256WXQxZ3d0VEJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hNWM3MzgtM2RmNS00ZTAyLWFmMzEt MmIwZWFiM2QzZDM3LzEvQUdIMzJjeW5EMWczMVRNVE83NElheDlHZ2Q0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9hNWM3MzgtM2RmNS00ZTAyLWFmMzEtMmIwZWFiM2QzZDM3 LzEvZ3JFdXo3SXZLZFlLUGpHM256WXQxZ3d0VEJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgDyMA0G CSqGSIb3DQEBCwUAA4IBAQDFLDTj15BVZNJ6T8iDs9k+P3lo+GmW/2DpP6WPtCod RFzo0r/4/Bpzooct1c1ZhFS0DJ+uuLuZd9Bimr0rHu7AgzKOwtw/hwAuGHWz9QC9 r2syLXgnlb6zjOoyHas0o3kNlCEHaRcuY4M28nRranuOYvq1mYAqpP9PuN+pAUlP FI7EXD76+xMWnkmiCj7FuhEPBAHcfwvz95jNkZYXMS8EzV5SgIZr9sSdrEcat23s EvyRSyM1yIIIVfwU+/epV3uQGC2DNCIEUPjgGfWu3n5TXWABKWgNlJ/nvf0b+mfQ WO/c3S6YPl8gsNqQvU6p2gUM3A0BVGnC4fF8OXahgKJY -----END CERTIFICATE-----Generated at Tue Feb 10 03:57:15 2026 by rpki-client