This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FAgdi50yFkjZKkfT6y-xvG_Xxig.roa File: FAgdi50yFkjZKkfT6y-xvG_Xxig.roa (raw, json) Hash identifier: tY97EeqJFQq7LY07X24tNB8C9kDuxlvCpaiTAhMGITQ= Subject key identifier: 14:08:1D:8B:9D:32:16:48:D9:2A:47:D3:EB:2F:B1:BC:6F:D7:C6:28 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AEED72D135202DC6593ADDC00F68F Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FAgdi50yFkjZKkfT6y-xvG_Xxig.roa Signing time: Thu 01 Jan 2026 16:18:58 +0000 ROA not before: Thu 01 Jan 2026 16:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401922 IP address blocks: 82.152.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ee:d7:2d:13:52:02:dc:65:93:ad:dc:00:f6:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14081d8b9d321648d92a47d3eb2fb1bc6fd7c628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:15:da:8d:97:57:06:0f:04:0f:f3:e0:87:4b: 7c:41:fa:4d:3e:18:5f:11:f3:64:ce:ae:f6:85:59: d5:fc:cc:bf:6d:1c:42:7b:b3:d8:e4:f7:86:14:75: f9:72:0c:f0:3a:6e:7e:45:c4:da:e5:1d:38:f7:46: 6f:5e:8f:c2:32:e6:87:1e:f0:6d:f4:c1:4b:31:fe: 0e:bc:e9:37:00:df:31:ae:3a:81:8f:43:3a:54:95: ab:9c:d5:5e:ca:ea:e0:0b:08:45:5f:91:c2:6b:6e: cf:50:1f:c6:ad:0e:96:4f:b0:27:d5:38:25:2f:5d: 97:5d:5d:75:93:83:cd:40:75:b2:be:c8:52:38:e2: 0d:f1:1e:3e:22:a8:d3:5a:3f:19:1a:e7:d0:06:b4: a3:c3:ff:4e:ee:84:76:3f:24:a8:55:2c:72:96:2d: 76:ba:a7:bc:7f:71:e5:1e:98:5e:71:f2:8d:f3:76: 2b:75:e1:7c:02:4a:95:66:13:77:6a:52:91:e5:e1: 6d:30:46:84:6d:4f:e6:ce:6c:f1:e8:51:d6:3e:8e: eb:79:f8:dd:b3:e1:28:77:a2:52:29:2d:b1:df:27: b0:25:35:4e:87:5d:30:c3:93:2d:d5:66:28:f9:ba: 4f:b1:87:71:49:5f:67:56:dd:f6:cc:08:f0:96:33: 00:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:08:1D:8B:9D:32:16:48:D9:2A:47:D3:EB:2F:B1:BC:6F:D7:C6:28 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FAgdi50yFkjZKkfT6y-xvG_Xxig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.152.62.0/24 Signature Algorithm: sha256WithRSAEncryption 94:a4:46:a2:4f:eb:bf:d8:1c:85:55:42:4c:4a:23:b0:19:8e: 27:ab:be:b1:ef:9d:b0:04:e2:2e:b0:0c:83:22:d2:6c:36:0f: 36:49:88:f2:cf:ee:6d:9f:e7:0c:02:e3:76:54:1c:f6:4b:2c: c1:07:b9:00:8a:2d:f3:16:14:b7:e4:f9:d0:24:3d:6e:14:2f: d9:ab:36:51:43:cf:53:9d:b1:27:bb:4e:83:c9:2c:b0:14:b9: 91:ed:a0:99:7e:b5:4b:a8:6c:7d:9f:df:64:91:45:82:e1:26: e6:a0:4d:fc:d2:7a:d2:ea:5e:a4:d5:5c:18:b2:6f:df:6c:c3: 70:79:94:42:e9:70:2b:45:52:9a:39:96:eb:40:5a:e0:41:89: 51:5d:82:00:82:1b:c8:d6:cb:f4:c7:ee:b8:5f:0d:d3:fb:97: 04:00:6d:21:f2:7a:5f:fa:d0:f2:a3:a3:2c:e9:2d:6d:c8:50: 2b:e1:f4:69:ac:b6:e7:84:99:b1:d8:68:83:a7:ef:f6:21:0a: f0:a1:2b:74:99:0d:d4:e4:89:80:e6:f1:a2:e2:a4:b3:79:85: 58:6a:4c:97:e3:3e:1c:25:4a:02:ea:17:98:16:68:05:2f:e9: 07:dd:8f:1a:5c:70:42:25:76:af:09:19:f2:00:df:92:77:8d: 74:eb:83:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wu7XLRNSAtxlk63cAPaPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDA4MWQ4YjlkMzIxNjQ4ZDkyYTQ3ZDNlYjJmYjFiYzZmZDdjNjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RXajZdXBg8ED/Pgh0t8QfpNPhhf EfNkzq72hVnV/My/bRxCe7PY5PeGFHX5cgzwOm5+RcTa5R0490ZvXo/CMuaHHvBt 9MFLMf4OvOk3AN8xrjqBj0M6VJWrnNVeyurgCwhFX5HCa27PUB/GrQ6WT7An1Tgl L12XXV11k4PNQHWyvshSOOIN8R4+IqjTWj8ZGufQBrSjw/9O7oR2PySoVSxyli12 uqe8f3HlHphecfKN83YrdeF8AkqVZhN3alKR5eFtMEaEbU/mzmzx6FHWPo7refjd s+Eod6JSKS2x3yewJTVOh10ww5Mt1WYo+bpPsYdxSV9nVt32zAjwljMAHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBQIHYudMhZI2SpH0+svsbxv18YoMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvRkFnZGk1MHlGa2paS2tmVDZ5LXh2R19YeGlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpg+MA0G CSqGSIb3DQEBCwUAA4IBAQCUpEaiT+u/2ByFVUJMSiOwGY4nq76x752wBOIusAyD ItJsNg82SYjyz+5tn+cMAuN2VBz2SyzBB7kAii3zFhS35PnQJD1uFC/ZqzZRQ89T nbEnu06DySywFLmR7aCZfrVLqGx9n99kkUWC4SbmoE380nrS6l6k1VwYsm/fbMNw eZRC6XArRVKaOZbrQFrgQYlRXYIAghvI1sv0x+64Xw3T+5cEAG0h8npf+tDyo6Ms 6S1tyFAr4fRprLbnhJmx2GiDp+/2IQrwoSt0mQ3U5ImA5vGi4qSzeYVYakyX4z4c JUoC6heYFmgFL+kH3Y8aXHBCJXavCRnyAN+Sd41064Ot -----END CERTIFICATE-----Generated at Mon Jan 19 18:03:52 2026 by rpki-client