This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/AqgdamS7ykTc5_HqfSgHZzg-Qso.roa File: AqgdamS7ykTc5_HqfSgHZzg-Qso.roa (raw, json) Hash identifier: DOyihYhY01+95T0gRT92vlpyvdeigYu6nAKnqJSzkek= Subject key identifier: 02:A8:1D:6A:64:BB:CA:44:DC:E7:F1:EA:7D:28:07:67:38:3E:42:CA Certificate issuer: /CN=ee182424b484197dc304524092dcdd992fcbe4be Certificate serial: 019B7A5B27A9D7872855554F6F716FBACD81 Authority key identifier: EE:18:24:24:B4:84:19:7D:C3:04:52:40:92:DC:DD:99:2F:CB:E4:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hgkJLSEGX3DBFJAktzdmS_L5L4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/AqgdamS7ykTc5_HqfSgHZzg-Qso.roa Signing time: Thu 01 Jan 2026 16:19:12 +0000 ROA not before: Thu 01 Jan 2026 16:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208321 IP address blocks: 185.235.88.0/22 maxlen: 24 2a0b:e200::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.mft rsync://rpki.ripe.net/repository/DEFAULT/7hgkJLSEGX3DBFJAktzdmS_L5L4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:27:a9:d7:87:28:55:55:4f:6f:71:6f:ba:cd:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee182424b484197dc304524092dcdd992fcbe4be Validity Not Before: Jan 1 16:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02a81d6a64bbca44dce7f1ea7d280767383e42ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8e:08:f7:3d:e1:e3:ef:07:91:e8:16:5a:31: e7:eb:86:17:9a:c6:b7:27:8b:74:4d:d6:81:ed:66: be:30:d1:3e:68:14:fe:6b:bb:7f:0e:90:b2:07:75: cd:12:aa:b9:1c:f9:5f:74:a7:2c:84:9f:25:13:93: 22:cf:8a:27:f5:8f:49:01:16:31:c7:41:b8:2a:05: 5d:d8:36:c2:7f:e9:2e:32:06:26:7f:b0:5c:72:b5: 1b:56:b3:42:d9:8a:63:71:ce:9d:97:52:5a:a5:60: ec:71:e8:78:f9:76:10:27:9f:97:fb:6f:c5:b9:61: 6d:ad:51:a3:40:d9:04:9f:ce:3f:83:b0:1b:e4:17: 3b:12:fe:0c:e4:b6:f5:b0:3a:b8:ac:20:85:21:49: 59:32:da:a1:f7:af:6b:d3:01:5a:97:99:16:f4:f4: 1a:d5:f0:74:17:f8:c3:6d:56:d1:7e:6d:eb:7a:03: bc:6a:2f:d0:b7:3a:26:cb:28:3a:8f:6b:a7:c2:e1: 74:3f:d7:e8:1b:99:1b:97:3c:72:7e:55:dc:91:23: e4:f8:f2:c0:46:ba:69:ed:6b:c0:aa:01:7f:05:a3: 90:76:8d:7f:fc:8c:4e:97:5a:f3:47:be:bd:07:09: 98:26:08:98:e9:77:6e:e8:66:a4:1b:fe:67:89:9a: 22:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A8:1D:6A:64:BB:CA:44:DC:E7:F1:EA:7D:28:07:67:38:3E:42:CA X509v3 Authority Key Identifier: keyid:EE:18:24:24:B4:84:19:7D:C3:04:52:40:92:DC:DD:99:2F:CB:E4:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hgkJLSEGX3DBFJAktzdmS_L5L4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/AqgdamS7ykTc5_HqfSgHZzg-Qso.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.235.88.0/22 IPv6: 2a0b:e200::/29 Signature Algorithm: sha256WithRSAEncryption 66:bb:e2:0b:ea:3f:a1:c0:eb:a7:63:50:9e:b4:e2:c1:7d:db: 07:73:ed:cf:d9:73:cc:d8:1b:2b:73:09:e7:a3:37:b8:74:c3: bb:35:d2:93:3f:4e:27:3e:36:c0:a0:af:98:48:32:f6:70:d4: 8a:3a:2a:96:a7:a8:a3:e6:32:c3:0f:20:84:d1:17:5e:ce:0e: c0:70:54:5f:8b:3e:28:56:b9:43:84:11:d3:3d:79:e2:42:0c: 02:7b:02:58:8e:76:29:de:5f:fd:0c:e0:10:c7:4c:fe:c3:11: 86:4e:8b:de:a4:60:09:e5:90:bf:f0:a8:af:cb:4d:b1:23:7a: 7f:a4:e3:77:8e:40:44:e4:7d:db:9c:73:0f:ca:11:a7:7d:21: a3:ea:63:5c:10:b8:81:16:b0:fb:6b:c9:50:33:97:d0:2f:bb: d0:46:0d:9a:d8:fe:b3:35:10:3a:6e:da:47:f3:87:c8:cd:df: 75:59:cc:40:c8:03:c4:64:80:1d:38:df:b1:60:f2:8f:9b:35: 5e:5c:3a:0b:28:e6:3f:9e:ab:a9:7f:36:bb:5a:7d:f8:fb:25: 71:e6:30:c3:88:29:f4:da:1f:d5:31:50:d1:66:f5:8d:15:ed: a8:73:bd:f1:5d:2b:60:2f:11:55:fb:f3:25:c3:04:9b:6d:b8: cb:16:6d:17 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6Wyep14coVVVPb3Fvus2BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMTgyNDI0YjQ4NDE5N2RjMzA0NTI0MDkyZGNkZDk5MmZj YmU0YmUwHhcNMjYwMTAxMTYxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmE4MWQ2YTY0YmJjYTQ0ZGNlN2YxZWE3ZDI4MDc2NzM4M2U0MmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY4I9z3h4+8HkegWWjHn64YXmsa3 J4t0TdaB7Wa+MNE+aBT+a7t/DpCyB3XNEqq5HPlfdKcshJ8lE5Miz4on9Y9JARYx x0G4KgVd2DbCf+kuMgYmf7BccrUbVrNC2Ypjcc6dl1JapWDsceh4+XYQJ5+X+2/F uWFtrVGjQNkEn84/g7Ab5Bc7Ev4M5Lb1sDq4rCCFIUlZMtqh969r0wFal5kW9PQa 1fB0F/jDbVbRfm3regO8ai/Qtzomyyg6j2unwuF0P9foG5kblzxyflXckSPk+PLA Rrpp7WvAqgF/BaOQdo1//IxOl1rzR769BwmYJgiY6Xdu6GakG/5niZoimQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAKoHWpku8pE3Ofx6n0oB2c4PkLKMB8GA1UdIwQY MBaAFO4YJCS0hBl9wwRSQJLc3Zkvy+S+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2hna0pMU0VHWDNEQkZKQWt0emRtU19MNUw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi80YzQwNTgtOGVlMy00ZTNlLWEzMGMt YmFjNDc2Yjk3ZWVlLzEvQXFnZGFtUzd5a1RjNV9IcWZTZ0haemctUXNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi80YzQwNTgtOGVlMy00ZTNlLWEzMGMtYmFjNDc2Yjk3ZWVl LzEvN2hna0pMU0VHWDNEQkZKQWt0emRtU19MNUw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuetYMA0E AgACMAcDBQMqC+IAMA0GCSqGSIb3DQEBCwUAA4IBAQBmu+IL6j+hwOunY1CetOLB fdsHc+3P2XPM2Bsrcwnnoze4dMO7NdKTP04nPjbAoK+YSDL2cNSKOiqWp6ij5jLD DyCE0Rdezg7AcFRfiz4oVrlDhBHTPXniQgwCewJYjnYp3l/9DOAQx0z+wxGGTove pGAJ5ZC/8Kivy02xI3p/pON3jkBE5H3bnHMPyhGnfSGj6mNcELiBFrD7a8lQM5fQ L7vQRg2a2P6zNRA6btpH84fIzd91WcxAyAPEZIAdON+xYPKPmzVeXDoLKOY/nqup fza7Wn34+yVx5jDDiCn02h/VMVDRZvWNFe2oc73xXStgLxFV+/MlwwSbbbjLFm0X -----END CERTIFICATE-----Generated at Tue Feb 10 01:13:36 2026 by rpki-client