This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ag-Wx2VYmrn7-folashr8eTXsf8.roa File: ag-Wx2VYmrn7-folashr8eTXsf8.roa (raw, json) Hash identifier: w9wAmudjJU/rhhQFe2qNRaIMyTSyVHzXk/5fyA0yMPs= Subject key identifier: 6A:0F:96:C7:65:58:9A:B9:FB:F9:FA:25:6A:C8:6B:F1:E4:D7:B1:FF Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BB607620E8B5CC7B05C34691EC217DC52 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ag-Wx2VYmrn7-folashr8eTXsf8.roa Signing time: Tue 13 Jan 2026 06:24:55 +0000 ROA not before: Tue 13 Jan 2026 06:24:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64267 IP address blocks: 37.202.202.0/24 maxlen: 24 151.240.2.0/24 maxlen: 24 151.241.33.0/24 maxlen: 24 151.241.43.0/24 maxlen: 24 151.241.48.0/24 maxlen: 24 151.241.164.0/24 maxlen: 24 151.242.26.0/24 maxlen: 24 151.243.26.0/24 maxlen: 24 151.244.42.0/24 maxlen: 24 151.244.69.0/24 maxlen: 24 151.245.69.0/24 maxlen: 24 151.245.162.0/24 maxlen: 24 151.245.166.0/24 maxlen: 24 151.245.177.0/24 maxlen: 24 151.247.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:07:62:0e:8b:5c:c7:b0:5c:34:69:1e:c2:17:dc:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 13 06:24:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a0f96c765589ab9fbf9fa256ac86bf1e4d7b1ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b4:f9:0f:0e:30:bb:e5:38:54:66:ea:63:76: 9e:6b:36:58:bb:e7:18:c0:4a:e2:a9:3c:ab:be:95: f2:27:0c:a2:34:e4:7a:6a:36:8a:14:57:52:75:1d: e8:f0:11:6b:e5:9e:ee:10:e0:cc:39:6b:f8:dd:d1: 83:c8:d4:05:57:ad:43:b2:14:20:38:07:6f:8e:ff: 10:ba:a4:21:15:7b:52:42:01:ae:0f:21:58:d2:14: 8e:7e:9c:d9:4a:8b:c4:ab:1c:6a:8d:d2:2b:de:71: e8:16:3a:96:8f:98:03:8c:2c:52:01:ea:70:70:b4: 6b:ba:22:91:0c:f9:41:87:e7:a7:9f:51:44:be:9c: ed:a6:ee:07:a1:c8:13:84:16:ec:af:32:39:92:9c: 13:1c:0d:08:2f:c6:12:63:64:83:ea:0b:3f:28:73: 0f:91:a2:a8:04:99:b6:18:d1:ea:51:12:99:75:c1: eb:4c:a9:28:d6:11:e7:6c:1d:d5:61:23:8b:5d:1a: f1:30:82:6e:32:98:2d:c7:85:8e:a3:fe:65:e0:09: 84:00:7d:14:fa:4e:4d:a1:52:5d:1e:a1:9f:78:49: 1e:bc:d0:a8:8d:73:17:92:5c:d8:96:95:e7:0f:36: ac:c7:64:a1:1e:51:15:62:16:4e:da:c0:ba:11:96: ab:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0F:96:C7:65:58:9A:B9:FB:F9:FA:25:6A:C8:6B:F1:E4:D7:B1:FF X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ag-Wx2VYmrn7-folashr8eTXsf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.202.0/24 151.240.2.0/24 151.241.33.0/24 151.241.43.0/24 151.241.48.0/24 151.241.164.0/24 151.242.26.0/24 151.243.26.0/24 151.244.42.0/24 151.244.69.0/24 151.245.69.0/24 151.245.162.0/24 151.245.166.0/24 151.245.177.0/24 151.247.246.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:57:a0:8b:d8:d6:86:f7:95:af:45:c0:e6:ee:fd:82:7c:a0: 02:db:f2:49:73:f7:bc:59:bf:57:65:ec:20:c9:6b:99:be:b9: 72:2b:15:a9:35:0a:71:94:f9:70:7f:47:08:14:13:57:a2:37: 2c:df:53:ec:ff:8d:49:fc:ab:16:f5:c6:50:5b:7a:af:76:3c: cc:ca:14:23:e8:15:1c:6f:46:c2:4a:0c:88:6b:86:0f:0a:a9: 42:9b:ed:bc:66:b7:24:bb:88:16:09:36:72:0a:24:d8:fb:d4: 80:b2:7b:96:02:01:d2:4f:88:9c:c0:15:ff:22:cd:ff:ad:76: de:b7:52:1b:74:2c:a2:58:03:6e:64:e5:41:55:42:19:e7:11: fc:0f:e4:96:b9:c4:31:2d:97:58:a8:eb:a7:e1:c1:fd:a5:bd: d1:48:a1:a7:b8:dd:82:29:f1:c2:d5:9e:01:c7:18:8c:ed:db: f9:51:fd:49:93:97:3a:78:93:c6:13:8e:ea:16:6f:fd:fd:36: b2:30:19:c7:62:41:9f:c2:19:c2:a4:8a:09:3d:8d:e5:37:06: a1:8b:5e:c3:7a:9a:9e:b1:f8:79:0e:4e:c2:39:7a:c5:66:b3: cd:aa:90:15:0d:9f:af:36:fb:dc:d1:56:91:d9:b5:ec:00:be: b6:a2:65:27 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZu2B2IOi1zHsFw0aR7CF9xSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTEzMDYyNDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTBmOTZjNzY1NTg5YWI5ZmJmOWZhMjU2YWM4NmJmMWU0ZDdiMWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLT5Dw4wu+U4VGbqY3aeazZYu+cY wEriqTyrvpXyJwyiNOR6ajaKFFdSdR3o8BFr5Z7uEODMOWv43dGDyNQFV61DshQg OAdvjv8QuqQhFXtSQgGuDyFY0hSOfpzZSovEqxxqjdIr3nHoFjqWj5gDjCxSAepw cLRruiKRDPlBh+enn1FEvpztpu4HocgThBbsrzI5kpwTHA0IL8YSY2SD6gs/KHMP kaKoBJm2GNHqURKZdcHrTKko1hHnbB3VYSOLXRrxMIJuMpgtx4WOo/5l4AmEAH0U +k5NoVJdHqGfeEkevNCojXMXklzYlpXnDzasx2ShHlEVYhZO2sC6EZarZQIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFGoPlsdlWJq5+/n6JWrIa/Hk17H/MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvYWctV3gyVlltcm43LWZvbGFzaHI4ZVRYc2Y4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQAJcrKAwQA l/ACAwQAl/EhAwQAl/ErAwQAl/EwAwQAl/GkAwQAl/IaAwQAl/MaAwQAl/QqAwQA l/RFAwQAl/VFAwQAl/WiAwQAl/WmAwQAl/WxAwQAl/f2MA0GCSqGSIb3DQEBCwUA A4IBAQCPV6CL2NaG95WvRcDm7v2CfKAC2/JJc/e8Wb9XZewgyWuZvrlyKxWpNQpx lPlwf0cIFBNXojcs31Ps/41J/KsW9cZQW3qvdjzMyhQj6BUcb0bCSgyIa4YPCqlC m+28Zrcku4gWCTZyCiTY+9SAsnuWAgHST4icwBX/Is3/rXbet1IbdCyiWANuZOVB VUIZ5xH8D+SWucQxLZdYqOun4cH9pb3RSKGnuN2CKfHC1Z4BxxiM7dv5Uf1Jk5c6 eJPGE47qFm/9/TayMBnHYkGfwhnCpIoJPY3lNwahi17Depqesfh5Dk7COXrFZrPN qpAVDZ+vNvvc0VaR2bXsAL62omUn -----END CERTIFICATE-----Generated at Sun Jan 18 06:29:58 2026 by rpki-client