This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AGf948w1ABErOn40QeiT8x1IA2c.roa File: AGf948w1ABErOn40QeiT8x1IA2c.roa (raw, json) Hash identifier: 2Bo7+8C84IzQ9/VtTGrFwNf5XXlFBTfGE3F9SCZNo9I= Subject key identifier: 00:67:FD:E3:CC:35:00:11:2B:3A:7E:34:41:E8:93:F3:1D:48:03:67 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB832EE1B2E9210AA093B780B6EFE3 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AGf948w1ABErOn40QeiT8x1IA2c.roa Signing time: Fri 02 Jan 2026 08:20:47 +0000 ROA not before: Fri 02 Jan 2026 08:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211407 IP address blocks: 151.242.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:83:2e:e1:b2:e9:21:0a:a0:93:b7:80:b6:ef:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0067fde3cc3500112b3a7e3441e893f31d480367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:90:26:0b:6e:d7:09:ce:28:01:db:d7:bf:04: c9:61:6f:6b:9c:56:d1:0c:05:d3:90:0d:cb:04:97: f5:a2:5f:50:d8:3b:7a:82:42:0b:4e:69:63:e6:b4: 8c:5a:f0:65:64:a8:7b:82:72:f2:5c:f1:89:06:60: b6:ab:24:68:28:b3:c6:ec:12:a3:24:80:23:0c:b8: d2:39:82:e9:b1:f5:fa:17:5f:03:f4:2e:70:02:0c: 88:33:77:b4:64:c2:29:4b:70:e9:52:9f:6f:d3:bd: 77:a9:d6:66:1e:d1:39:00:72:a6:7a:d0:1b:e1:00: f4:07:c2:77:ef:83:db:3d:f1:5f:bc:a5:10:a2:60: a5:74:25:05:f1:0d:7a:51:b3:01:32:1f:44:c6:14: b6:73:22:b4:18:f9:37:f5:e1:cb:22:85:1e:2f:a6: eb:c8:d7:f0:49:e1:d3:28:9c:45:f1:37:6a:df:1e: a7:e2:f2:42:15:8f:86:79:98:1c:45:eb:c3:8b:59: 65:ad:28:1f:95:01:e3:0e:c6:f3:39:13:ad:91:37: 72:ac:bc:70:df:4f:50:32:a0:b2:67:60:d2:d1:77: 99:b7:fe:a8:1e:57:ef:d8:ef:05:2c:d3:c9:02:1f: 9f:cf:5f:87:09:04:61:9f:3c:f3:d4:69:29:84:f8: 70:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:67:FD:E3:CC:35:00:11:2B:3A:7E:34:41:E8:93:F3:1D:48:03:67 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AGf948w1ABErOn40QeiT8x1IA2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.116.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:7a:52:ae:9e:af:00:9c:e9:38:a4:66:58:22:11:f2:a3:8b: 81:cd:7f:3e:3b:69:1e:4f:2d:c6:87:9d:4c:cd:61:33:d5:b8: 67:55:cb:97:bf:c9:ae:b1:d1:a9:d2:f6:59:86:6b:56:23:8f: 7a:4a:16:21:59:02:1e:20:fa:5d:6d:81:2b:6e:94:dc:49:a0: c9:28:d7:e6:70:d0:6e:a6:70:82:e5:9b:aa:26:6f:a2:19:3a: 74:e6:44:88:e3:21:60:2c:1d:e5:49:a9:cd:3a:92:c9:00:29: 9e:75:c1:b2:83:ba:0f:f6:dc:5b:5b:4a:9c:6a:a2:f2:ef:da: 24:1f:67:4a:45:14:66:06:f4:3d:4b:17:42:50:7e:2f:2e:26: ad:23:13:7b:51:be:14:5f:42:26:01:84:73:42:84:7f:d1:a5: 30:01:f2:58:76:c1:0f:cd:45:36:43:ad:e3:cc:63:16:4c:a2: 47:d5:a4:3e:2e:66:d7:36:6c:f4:73:84:b4:93:75:9c:11:95: f4:92:98:f6:44:22:fd:10:06:a6:45:f2:75:aa:41:73:03:61: 3d:08:58:c6:2c:c9:59:3c:c1:d2:cb:2b:bd:b5:f3:e9:2e:13: f5:1c:d5:a9:cd:eb:f8:50:fc:f8:d1:51:1b:6f:18:68:f5:33: c5:c1:b4:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y4Mu4bLpIQqgk7eAtu/jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDY3ZmRlM2NjMzUwMDExMmIzYTdlMzQ0MWU4OTNmMzFkNDgwMzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9pAmC27XCc4oAdvXvwTJYW9rnFbR DAXTkA3LBJf1ol9Q2Dt6gkILTmlj5rSMWvBlZKh7gnLyXPGJBmC2qyRoKLPG7BKj JIAjDLjSOYLpsfX6F18D9C5wAgyIM3e0ZMIpS3DpUp9v0713qdZmHtE5AHKmetAb 4QD0B8J374PbPfFfvKUQomCldCUF8Q16UbMBMh9ExhS2cyK0GPk39eHLIoUeL6br yNfwSeHTKJxF8Tdq3x6n4vJCFY+GeZgcRevDi1llrSgflQHjDsbzOROtkTdyrLxw 309QMqCyZ2DS0XeZt/6oHlfv2O8FLNPJAh+fz1+HCQRhnzzz1GkphPhwxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFABn/ePMNQARKzp+NEHok/MdSANnMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvQUdmOTQ4dzFBQkVyT240MFFlaVQ4eDFJQTJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/J0MA0G CSqGSIb3DQEBCwUAA4IBAQBqelKunq8AnOk4pGZYIhHyo4uBzX8+O2keTy3Gh51M zWEz1bhnVcuXv8musdGp0vZZhmtWI496ShYhWQIeIPpdbYErbpTcSaDJKNfmcNBu pnCC5ZuqJm+iGTp05kSI4yFgLB3lSanNOpLJACmedcGyg7oP9txbW0qcaqLy79ok H2dKRRRmBvQ9SxdCUH4vLiatIxN7Ub4UX0ImAYRzQoR/0aUwAfJYdsEPzUU2Q63j zGMWTKJH1aQ+LmbXNmz0c4S0k3WcEZX0kpj2RCL9EAamRfJ1qkFzA2E9CFjGLMlZ PMHSyyu9tfPpLhP1HNWpzev4UPz40VEbbxho9TPFwbQm -----END CERTIFICATE-----Generated at Sun Jan 18 06:27:42 2026 by rpki-client