This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/PAgmkJ9Y90P8HFZpFQNFqKSHvJw.roa File: PAgmkJ9Y90P8HFZpFQNFqKSHvJw.roa (raw, json) Hash identifier: agfa+X2ZLEmOMS3CDor8H1L4UhOLIOXNsAjSmE5dztQ= Subject key identifier: 3C:08:26:90:9F:58:F7:43:FC:1C:56:69:15:03:45:A8:A4:87:BC:9C Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA756E0DE8A72043DD7BA4C6E6AA68F Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/PAgmkJ9Y90P8HFZpFQNFqKSHvJw.roa Signing time: Fri 02 Jan 2026 12:20:54 +0000 ROA not before: Fri 02 Jan 2026 12:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206499 IP address blocks: 185.133.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:56:e0:de:8a:72:04:3d:d7:ba:4c:6e:6a:a6:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c0826909f58f743fc1c5669150345a8a487bc9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4b:b6:b5:0c:c1:12:e7:74:c5:dd:89:9b:83: 92:39:f3:49:59:8f:95:b7:1b:4c:96:31:6e:17:06: 27:c6:8d:a9:4c:98:9c:a9:5c:cc:20:a4:d5:0d:1f: f2:cd:44:4f:c9:a5:7b:53:95:6a:00:37:a1:26:24: 4a:e3:ea:79:79:37:04:bd:8d:8c:d8:47:26:b1:12: 6a:cb:aa:09:4b:6f:4f:50:88:5d:02:c7:77:d8:fe: d8:1c:23:be:25:59:3d:50:d2:ee:e1:18:bd:73:1d: b2:d9:a0:cf:e6:12:dd:d0:6b:77:03:ba:69:74:67: 05:c7:2b:9a:26:70:9c:6f:ad:1b:e3:bf:ad:e5:da: a7:37:bb:dc:4d:6c:23:9d:f2:df:2e:e7:5c:56:e6: a4:76:ef:18:5f:dc:bd:25:9a:bd:4d:9f:f2:55:42: 28:30:a5:d6:1f:dc:e4:f8:a3:6f:f1:a9:1a:0e:5e: a2:f8:f7:bc:d2:5e:76:1e:0f:52:31:9a:ad:4e:65: bd:72:20:1d:26:56:36:c5:c9:67:3c:4d:76:51:82: dc:92:7e:86:1d:aa:6f:61:d9:d0:bb:f0:98:30:45: 69:42:57:6d:74:dc:b7:26:0b:43:23:be:f9:c7:07: b6:f4:a7:4f:f1:ef:a9:06:aa:ed:de:65:94:04:e1: 26:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:08:26:90:9F:58:F7:43:FC:1C:56:69:15:03:45:A8:A4:87:BC:9C X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/PAgmkJ9Y90P8HFZpFQNFqKSHvJw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.208.0/24 Signature Algorithm: sha256WithRSAEncryption 87:c8:5b:2b:81:4d:2f:13:87:bd:5a:c4:84:0d:90:35:ed:74: 5b:f1:77:c4:6e:69:c1:36:71:c6:a0:6b:d3:48:78:4b:81:91: f4:39:b0:33:20:0b:17:53:c9:f8:54:76:17:0e:75:e8:43:23: ff:63:8a:d9:04:9c:de:3b:f1:af:c5:82:d5:a3:d8:07:32:0f: 4e:2f:27:de:e7:76:94:a8:b5:74:42:32:a2:48:d0:79:38:4b: 2d:a6:a9:0e:68:b5:b4:45:a8:74:5b:9e:cc:39:a2:b4:63:0a: 40:2f:ff:e9:6e:33:e4:92:5c:af:ae:ff:70:03:29:40:1c:9f: c7:49:df:20:8f:54:e2:1d:c3:da:f4:08:10:8c:cb:61:bc:d1: 61:9c:ba:3a:6a:18:ae:0c:a1:66:6f:57:80:9e:c6:06:d6:44: 47:06:47:32:7e:53:db:71:9c:6a:d4:b8:0d:c9:dc:b2:b7:3c: 7c:16:cd:eb:e3:2a:93:7d:00:58:fd:d2:33:73:d3:f2:43:b9: 9d:72:c2:78:e3:b8:2e:01:c3:2f:79:59:c6:3b:fc:d0:aa:98: 2f:44:aa:31:2d:d2:ef:fa:c6:e3:c4:68:1f:22:75:b2:9d:21: 23:6a:48:41:ce:61:e0:32:6c:a9:09:f6:92:a1:1b:fe:53:e2: 90:5e:83:e9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p1bg3opyBD3XukxuaqaPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzA4MjY5MDlmNThmNzQzZmMxYzU2NjkxNTAzNDVhOGE0ODdiYzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwku2tQzBEud0xd2Jm4OSOfNJWY+V txtMljFuFwYnxo2pTJicqVzMIKTVDR/yzURPyaV7U5VqADehJiRK4+p5eTcEvY2M 2EcmsRJqy6oJS29PUIhdAsd32P7YHCO+JVk9UNLu4Ri9cx2y2aDP5hLd0Gt3A7pp dGcFxyuaJnCcb60b47+t5dqnN7vcTWwjnfLfLudcVuakdu8YX9y9JZq9TZ/yVUIo MKXWH9zk+KNv8akaDl6i+Pe80l52Hg9SMZqtTmW9ciAdJlY2xclnPE12UYLckn6G HapvYdnQu/CYMEVpQldtdNy3JgtDI775xwe29KdP8e+pBqrt3mWUBOEmuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDwIJpCfWPdD/BxWaRUDRaikh7ycMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvUEFnbWtKOVk5MFA4SEZacEZRTkZxS1NIdkp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYXQMA0G CSqGSIb3DQEBCwUAA4IBAQCHyFsrgU0vE4e9WsSEDZA17XRb8XfEbmnBNnHGoGvT SHhLgZH0ObAzIAsXU8n4VHYXDnXoQyP/Y4rZBJzeO/GvxYLVo9gHMg9OLyfe53aU qLV0QjKiSNB5OEstpqkOaLW0Rah0W57MOaK0YwpAL//pbjPkklyvrv9wAylAHJ/H Sd8gj1TiHcPa9AgQjMthvNFhnLo6ahiuDKFmb1eAnsYG1kRHBkcyflPbcZxq1LgN ydyytzx8Fs3r4yqTfQBY/dIzc9PyQ7mdcsJ447guAcMveVnGO/zQqpgvRKoxLdLv +sbjxGgfInWynSEjakhBzmHgMmypCfaSoRv+U+KQXoPp -----END CERTIFICATE-----Generated at Fri Jan 2 21:08:10 2026 by rpki-client