This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/AqmAgHriNnJHkWPaVpHiCVSrxzc.roa File: AqmAgHriNnJHkWPaVpHiCVSrxzc.roa (raw, json) Hash identifier: aJrLUUNljpcCgBNzw6pYinTo0GGEWrztOV6zIFCBdXA= Subject key identifier: 02:A9:80:80:7A:E2:36:72:47:91:63:DA:56:91:E2:09:54:AB:C7:37 Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F839E977E3D061F4829BE26619C485A Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/AqmAgHriNnJHkWPaVpHiCVSrxzc.roa Signing time: Fri 02 Jan 2026 16:21:30 +0000 ROA not before: Fri 02 Jan 2026 16:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50673 IP address blocks: 46.243.188.0/22 maxlen: 22 128.0.68.0/23 maxlen: 23 188.72.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:9e:97:7e:3d:06:1f:48:29:be:26:61:9c:48:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02a980807ae23672479163da5691e20954abc737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cc:d1:7c:0e:d2:fa:86:47:66:ed:80:9d:f4: 76:33:2b:ba:5f:49:9a:89:c2:c0:e0:ce:d9:13:a9: 43:0f:0a:57:96:3e:a8:fb:80:9e:b3:48:b1:ca:3b: 10:9f:99:bd:0e:37:e6:db:ea:dd:09:fb:61:ad:3c: b1:d8:7e:ad:01:24:02:64:cc:8f:d3:10:ab:2e:4e: 97:3b:0c:eb:01:da:af:36:02:16:eb:58:d9:56:5c: 90:1b:cf:91:00:b0:8c:79:62:82:12:e5:b2:59:99: 6a:01:fe:32:ea:7d:31:fe:ce:1e:b8:3d:aa:d5:63: 74:a3:89:70:cf:bf:48:a0:ce:e7:68:a1:63:49:87: 92:1a:b7:a0:8f:09:c7:e8:ab:87:7d:a2:74:20:4f: a0:1c:40:15:16:3f:f4:79:0a:b3:fc:f0:da:01:16: 81:da:24:32:b3:f5:9e:6b:57:01:80:5d:79:8b:49: 6a:3c:2a:05:c0:d3:22:b1:8e:53:98:61:9a:84:81: 04:56:e6:78:06:7e:65:b2:4f:55:67:fd:9e:4e:c7: ae:1e:dd:e5:ae:44:54:33:69:42:ee:95:b6:b6:16: 8a:00:22:38:01:c3:9c:38:fb:f2:25:81:56:b7:df: 08:c8:8a:c5:87:58:02:9f:b6:db:35:38:eb:8e:9a: 86:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A9:80:80:7A:E2:36:72:47:91:63:DA:56:91:E2:09:54:AB:C7:37 X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/AqmAgHriNnJHkWPaVpHiCVSrxzc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.188.0/22 128.0.68.0/23 188.72.68.0/23 Signature Algorithm: sha256WithRSAEncryption 81:89:5a:4d:5a:24:c8:99:7f:d9:a2:d7:6b:36:07:a7:49:c5: f2:76:6e:09:d9:47:12:16:f8:95:45:06:74:a7:12:9f:0c:80: 07:57:64:11:26:4b:5a:15:b8:60:30:f8:a9:fb:a5:1b:c4:87: e2:0e:e2:25:89:01:32:f0:51:f7:42:71:34:fa:e1:2c:51:f0: 96:99:df:97:c9:19:b3:3f:17:5d:a1:7d:fa:c6:ab:1a:ea:a2: e4:65:db:0e:24:d6:fc:0f:a3:e4:b5:66:01:9a:d2:59:f0:2a: 45:05:e8:3d:91:86:4c:a1:6e:32:83:1b:8e:95:67:d9:54:62: 07:ff:21:78:10:e8:36:9f:d4:33:41:11:ee:82:f0:7d:84:c8: de:8d:30:52:31:e1:ea:7f:29:04:35:49:bf:32:f0:2b:8e:08: f4:4e:4a:1f:1c:ba:39:89:0e:df:f9:bf:9b:7e:f3:6d:3c:49: ed:d1:5d:58:1c:5e:e0:22:6c:10:11:fd:bc:bd:c9:16:11:d1: cc:ea:82:6a:b6:1c:5f:1b:ad:32:82:be:ce:f6:5b:46:5d:d6: bf:d0:7e:52:6c:bf:12:b3:88:ed:98:4a:71:35:73:45:66:45: 29:ca:92:31:aa:e4:74:2d:8d:4b:ee:26:e9:4d:b2:bb:56:53: 51:88:80:f5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/g56Xfj0GH0gpviZhnEhaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmE5ODA4MDdhZTIzNjcyNDc5MTYzZGE1NjkxZTIwOTU0YWJjNzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwszRfA7S+oZHZu2AnfR2Myu6X0ma icLA4M7ZE6lDDwpXlj6o+4Ces0ixyjsQn5m9Djfm2+rdCfthrTyx2H6tASQCZMyP 0xCrLk6XOwzrAdqvNgIW61jZVlyQG8+RALCMeWKCEuWyWZlqAf4y6n0x/s4euD2q 1WN0o4lwz79IoM7naKFjSYeSGregjwnH6KuHfaJ0IE+gHEAVFj/0eQqz/PDaARaB 2iQys/Wea1cBgF15i0lqPCoFwNMisY5TmGGahIEEVuZ4Bn5lsk9VZ/2eTseuHt3l rkRUM2lC7pW2thaKACI4AcOcOPvyJYFWt98IyIrFh1gCn7bbNTjrjpqGUwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAKpgIB64jZyR5Fj2laR4glUq8c3MB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvQXFtQWdIcmlObkpIa1dQYVZwSGlDVlNyeHpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLvO8AwQB gABEAwQBvEhEMA0GCSqGSIb3DQEBCwUAA4IBAQCBiVpNWiTImX/ZotdrNgenScXy dm4J2UcSFviVRQZ0pxKfDIAHV2QRJktaFbhgMPip+6UbxIfiDuIliQEy8FH3QnE0 +uEsUfCWmd+XyRmzPxddoX36xqsa6qLkZdsOJNb8D6PktWYBmtJZ8CpFBeg9kYZM oW4ygxuOlWfZVGIH/yF4EOg2n9QzQRHugvB9hMjejTBSMeHqfykENUm/MvArjgj0 TkofHLo5iQ7f+b+bfvNtPEnt0V1YHF7gImwQEf28vckWEdHM6oJqthxfG60ygr7O 9ltGXda/0H5SbL8Ss4jtmEpxNXNFZkUpypIxquR0LY1L7ibpTbK7VlNRiID1 -----END CERTIFICATE-----Generated at Sun Jan 11 11:46:18 2026 by rpki-client