This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/A2gg-MX124Lpmk4q6amGH364pI8.roa File: A2gg-MX124Lpmk4q6amGH364pI8.roa (raw, json) Hash identifier: vW20LJAGKrZU5294D/w3GbyCDoxlRHd2AtS8gCcCOJ4= Subject key identifier: 03:68:20:F8:C5:F5:DB:82:E9:9A:4E:2A:E9:A9:86:1F:7E:B8:A4:8F Certificate issuer: /CN=0ff1c0e911cce4c453fec2b168f6c13d36e0df85 Certificate serial: 019BFA45620AE91E16230386D99C1A54A6BD Authority key identifier: 0F:F1:C0:E9:11:CC:E4:C4:53:FE:C2:B1:68:F6:C1:3D:36:E0:DF:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/A2gg-MX124Lpmk4q6amGH364pI8.roa Signing time: Mon 26 Jan 2026 12:26:49 +0000 ROA not before: Mon 26 Jan 2026 12:26:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 194.15.194.0/24 maxlen: 24 194.39.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:45:62:0a:e9:1e:16:23:03:86:d9:9c:1a:54:a6:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ff1c0e911cce4c453fec2b168f6c13d36e0df85 Validity Not Before: Jan 26 12:26:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=036820f8c5f5db82e99a4e2ae9a9861f7eb8a48f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:92:47:ce:05:7b:cb:02:03:85:17:f4:ff:0a: e0:d3:34:33:aa:44:e3:b1:89:a0:df:b2:fb:10:12: e3:2a:0f:4c:a5:c2:85:40:17:70:63:06:80:db:62: 50:31:0d:2e:7f:0c:b1:ee:8f:9e:22:18:dc:35:26: fa:ae:c8:92:fe:6c:5c:07:e3:da:1f:52:de:1c:1c: 2c:b7:85:48:8f:da:b9:d9:46:ee:87:8e:17:f2:42: 81:3a:6d:ad:59:ae:d0:f0:82:86:3d:00:ce:05:d3: e5:78:3e:7c:e0:0c:1e:ca:6e:30:70:ba:6f:08:ae: 52:86:41:83:f9:8a:de:86:b5:30:c2:27:f3:f8:ac: 6b:04:bd:ba:4a:27:53:5d:5f:a1:9e:3e:6d:6e:dc: 71:1b:9e:1d:98:fc:19:b8:78:fd:6d:2f:ed:8f:5f: 98:78:64:af:b2:03:60:ff:68:2c:d6:21:41:c6:fb: a8:48:5b:37:81:48:86:ff:ba:d2:84:cb:f2:fb:ba: ce:db:7b:2d:05:83:d6:6f:ec:df:d3:a8:c6:c5:b1: 3f:ed:83:03:47:41:e2:86:c6:c5:a7:da:5c:bc:50: a3:7d:33:42:ec:48:4c:5c:0d:35:3e:b3:74:73:57: f3:25:0d:98:7a:82:c8:ae:a9:91:4c:44:d5:2a:0f: d5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:68:20:F8:C5:F5:DB:82:E9:9A:4E:2A:E9:A9:86:1F:7E:B8:A4:8F X509v3 Authority Key Identifier: keyid:0F:F1:C0:E9:11:CC:E4:C4:53:FE:C2:B1:68:F6:C1:3D:36:E0:DF:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/A2gg-MX124Lpmk4q6amGH364pI8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.15.194.0/24 194.39.175.0/24 Signature Algorithm: sha256WithRSAEncryption 95:d6:18:9a:88:51:38:28:7b:f2:cd:86:e4:08:e8:18:1e:1c: 8f:16:fe:fe:31:fd:9e:ae:50:c6:7c:7c:82:83:63:d5:db:a1: f0:77:0b:38:cd:78:5f:81:59:8a:2e:c1:c0:80:b7:fc:f0:67: b3:6d:3b:f4:15:70:48:8d:ae:3f:aa:24:be:ee:a7:4f:70:10: c3:a0:38:d4:97:12:48:7a:55:1e:76:15:21:09:e4:57:17:6a: 24:96:26:e9:50:04:8d:f1:ff:80:08:e5:1e:fb:23:ca:a3:ce: aa:47:b4:96:31:41:ad:ce:09:2d:58:29:26:09:f9:15:b6:ba: 57:a9:20:f8:e2:70:0f:6c:44:e1:16:f7:ea:65:c2:5d:76:da: 60:7a:35:14:b9:0b:8f:8c:26:ee:4a:5f:15:1e:c4:53:66:de: aa:cb:96:b1:ee:91:0b:51:60:0b:56:d0:a3:5c:30:3c:7d:7e: 25:70:8c:56:bc:b4:14:0c:2f:5c:f5:62:49:fd:e7:d2:90:66: 78:d7:ed:cd:44:4c:86:f3:2b:d2:92:64:59:17:91:57:17:2d: 13:24:30:4c:8e:35:86:01:89:38:7d:06:3e:1c:6a:80:87:35: b6:79:8f:35:b8:45:20:e1:1e:db:40:26:12:e8:42:bc:b1:8b: 65:04:61:ed -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZv6RWIK6R4WIwOG2ZwaVKa9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZjFjMGU5MTFjY2U0YzQ1M2ZlYzJiMTY4ZjZjMTNkMzZl MGRmODUwHhcNMjYwMTI2MTIyNjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzY4MjBmOGM1ZjVkYjgyZTk5YTRlMmFlOWE5ODYxZjdlYjhhNDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JJHzgV7ywIDhRf0/wrg0zQzqkTj sYmg37L7EBLjKg9MpcKFQBdwYwaA22JQMQ0ufwyx7o+eIhjcNSb6rsiS/mxcB+Pa H1LeHBwst4VIj9q52Ubuh44X8kKBOm2tWa7Q8IKGPQDOBdPleD584Aweym4wcLpv CK5ShkGD+YrehrUwwifz+KxrBL26SidTXV+hnj5tbtxxG54dmPwZuHj9bS/tj1+Y eGSvsgNg/2gs1iFBxvuoSFs3gUiG/7rShMvy+7rO23stBYPWb+zf06jGxbE/7YMD R0HihsbFp9pcvFCjfTNC7EhMXA01PrN0c1fzJQ2YeoLIrqmRTETVKg/VNwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFANoIPjF9duC6ZpOKumphh9+uKSPMB8GA1UdIwQY MBaAFA/xwOkRzOTEU/7CsWj2wT024N+FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF9IQTZSSE01TVJUX3NLeGFQYkJQVGJnMzRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi83ZDJlNTEtMjJkMi00NjFhLWFhMmUt NzlkMTNmYWFiNjJjLzEvQTJnZy1NWDEyNExwbWs0cTZhbUdIMzY0cEk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi83ZDJlNTEtMjJkMi00NjFhLWFhMmUtNzlkMTNmYWFiNjJj LzEvRF9IQTZSSE01TVJUX3NLeGFQYkJQVGJnMzRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwg/CAwQA wievMA0GCSqGSIb3DQEBCwUAA4IBAQCV1hiaiFE4KHvyzYbkCOgYHhyPFv7+Mf2e rlDGfHyCg2PV26Hwdws4zXhfgVmKLsHAgLf88GezbTv0FXBIja4/qiS+7qdPcBDD oDjUlxJIelUedhUhCeRXF2oklibpUASN8f+ACOUe+yPKo86qR7SWMUGtzgktWCkm CfkVtrpXqSD44nAPbEThFvfqZcJddtpgejUUuQuPjCbuSl8VHsRTZt6qy5ax7pEL UWALVtCjXDA8fX4lcIxWvLQUDC9c9WJJ/efSkGZ41+3NREyG8yvSkmRZF5FXFy0T JDBMjjWGAYk4fQY+HGqAhzW2eY81uEUg4R7bQCYS6EK8sYtlBGHt -----END CERTIFICATE-----Generated at Mon Feb 9 23:44:06 2026 by rpki-client