This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_AgXfmrENJRGa8SUzw8r4QbpeFc.roa File: _AgXfmrENJRGa8SUzw8r4QbpeFc.roa (raw, json) Hash identifier: 5DSjA+45VSfY58OSfrhbacz2KkNvODMfoUqLbPQQxis= Subject key identifier: FC:08:17:7E:6A:C4:34:94:46:6B:C4:94:CF:0F:2B:E1:06:E9:78:57 Certificate issuer: /CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461 Certificate serial: 019B7C123C840923D0A146A1F2B64E3B207B Authority key identifier: FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_AgXfmrENJRGa8SUzw8r4QbpeFc.roa Signing time: Fri 02 Jan 2026 00:18:48 +0000 ROA not before: Fri 02 Jan 2026 00:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.144.236.0/22 maxlen: 24 2a07:4407::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:3c:84:09:23:d0:a1:46:a1:f2:b6:4e:3b:20:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461 Validity Not Before: Jan 2 00:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc08177e6ac43494466bc494cf0f2be106e97857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:67:8e:d8:72:f6:d0:fe:7a:2c:17:b1:43:8e: 67:a3:04:42:a9:48:b5:5d:16:36:4a:bc:f3:41:98: d0:32:3e:02:75:50:2e:9d:bb:9d:59:53:c0:60:41: 6b:47:ed:73:02:6f:f2:36:32:7b:85:17:58:d7:06: 19:ed:97:aa:bf:0b:89:95:f5:a5:ee:e4:c6:0a:23: e3:ac:4e:03:03:ad:6f:5b:97:80:e2:a7:61:61:5c: 0e:ab:33:da:22:17:7d:00:32:ea:12:61:82:01:23: c2:15:a4:31:e6:bd:76:e9:a7:e4:eb:5c:5f:69:9c: b3:e5:9c:63:1a:67:7d:c6:9d:d2:a6:8a:b8:0b:8c: b0:b5:5f:68:cf:de:17:cc:c6:e7:69:da:a5:49:80: 33:bf:c3:8e:57:61:27:07:66:d3:85:81:43:d1:35: c9:84:0b:41:f2:a0:ce:9c:e6:ea:6e:b3:f0:16:d4: d2:f0:c6:fe:bc:cc:53:da:61:47:87:bb:4f:e4:d3: b9:8b:20:32:66:32:5a:24:12:5a:c2:d7:b0:03:6c: 90:19:68:73:4c:b2:12:26:e5:c8:ff:fe:f5:37:64: b9:4c:e7:30:0d:7d:b5:a9:22:10:b5:81:53:87:ba: e9:c8:dc:5c:e1:a2:f7:ae:24:7e:72:b0:86:68:a2: 4f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:08:17:7E:6A:C4:34:94:46:6B:C4:94:CF:0F:2B:E1:06:E9:78:57 X509v3 Authority Key Identifier: keyid:FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_AgXfmrENJRGa8SUzw8r4QbpeFc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.144.236.0/22 IPv6: 2a07:4407::/32 Signature Algorithm: sha256WithRSAEncryption 2d:94:01:17:b7:ca:50:51:ea:dd:4c:d4:4b:32:af:e5:6d:89: 1d:23:21:a9:37:3d:f1:f2:6f:dd:9b:b0:eb:6a:cc:61:e9:e2: 98:2c:fe:c8:b2:65:ba:60:d7:3b:d7:f3:8e:25:d8:45:b2:61: 14:83:e0:21:ba:ac:f1:ed:ae:30:55:5f:36:54:f4:ff:f7:eb: 57:9f:eb:91:14:00:f2:ef:d5:8c:b1:ba:75:99:43:79:41:5b: 6b:38:51:22:17:0d:13:bf:3c:e9:0a:20:2e:e2:f6:b9:55:66: fd:75:21:1b:7c:51:1b:53:c8:aa:48:dd:f9:30:f2:53:9d:e3: f8:52:b5:e2:5c:4d:5f:4a:c3:dc:b0:6f:3c:b9:72:4c:d5:25: f9:0c:63:b0:c7:af:08:5b:63:c8:63:fe:08:73:2d:59:45:33: 60:e9:89:11:99:96:41:70:9f:1c:0f:46:5f:a6:d0:35:c6:df: 64:c8:a1:8f:78:80:1e:c9:ed:84:36:01:7c:ed:1b:5b:60:6e: cd:1a:ea:f3:09:a9:95:37:94:87:89:56:10:51:4d:d3:26:a3: f7:cc:05:fb:f7:ed:4d:e2:d8:f8:65:05:a4:cc:6f:66:c5:37: 18:65:be:0b:21:8d:42:7d:17:44:18:99:d6:1e:7c:59:c4:5f: b0:d8:fa:08 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8EjyECSPQoUah8rZOOyB7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMjgyYTc5NGIzZjdhYjRjZDZmZWI2YzVmZDZiM2QyNTZh ZmM0NjEwHhcNMjYwMTAyMDAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzA4MTc3ZTZhYzQzNDk0NDY2YmM0OTRjZjBmMmJlMTA2ZTk3ODU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GeO2HL20P56LBexQ45nowRCqUi1 XRY2SrzzQZjQMj4CdVAunbudWVPAYEFrR+1zAm/yNjJ7hRdY1wYZ7ZeqvwuJlfWl 7uTGCiPjrE4DA61vW5eA4qdhYVwOqzPaIhd9ADLqEmGCASPCFaQx5r126afk61xf aZyz5ZxjGmd9xp3Spoq4C4ywtV9oz94XzMbnadqlSYAzv8OOV2EnB2bThYFD0TXJ hAtB8qDOnObqbrPwFtTS8Mb+vMxT2mFHh7tP5NO5iyAyZjJaJBJawtewA2yQGWhz TLISJuXI//71N2S5TOcwDX21qSIQtYFTh7rpyNxc4aL3riR+crCGaKJPWQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPwIF35qxDSURmvElM8PK+EG6XhXMB8GA1UdIwQY MBaAFPwoKnlLP3q0zW/rbF/Ws9JWr8RhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0NncWVVc19lclROYi10c1g5YXowbGF2eEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lNDg1ZTEtYTY1Zi00M2Q0LWI1NzIt ZDMzMjZjNTliY2QyLzEvX0FnWGZtckVOSlJHYThTVXp3OHI0UWJwZUZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9lNDg1ZTEtYTY1Zi00M2Q0LWI1NzItZDMzMjZjNTliY2Qy LzEvX0NncWVVc19lclROYi10c1g5YXowbGF2eEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZDsMA0E AgACMAcDBQAqB0QHMA0GCSqGSIb3DQEBCwUAA4IBAQAtlAEXt8pQUerdTNRLMq/l bYkdIyGpNz3x8m/dm7Drasxh6eKYLP7IsmW6YNc71/OOJdhFsmEUg+Ahuqzx7a4w VV82VPT/9+tXn+uRFADy79WMsbp1mUN5QVtrOFEiFw0TvzzpCiAu4va5VWb9dSEb fFEbU8iqSN35MPJTneP4UrXiXE1fSsPcsG88uXJM1SX5DGOwx68IW2PIY/4Icy1Z RTNg6YkRmZZBcJ8cD0ZfptA1xt9kyKGPeIAeye2ENgF87RtbYG7NGurzCamVN5SH iVYQUU3TJqP3zAX79+1N4tj4ZQWkzG9mxTcYZb4LIY1CfRdEGJnWHnxZxF+w2PoI -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:10 2026 by rpki-client