This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/AglMX7mwwb3rspJEIopyVPwTx-E.roa File: AglMX7mwwb3rspJEIopyVPwTx-E.roa (raw, json) Hash identifier: S+AWhAQbQR4GQpkHiPCQOCsaczJj/pHTNHnGM4CmrlA= Subject key identifier: 02:09:4C:5F:B9:B0:C1:BD:EB:B2:92:44:22:8A:72:54:FC:13:C7:E1 Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f Certificate serial: 019B7E38DC2840FC31052DC511568D2FF80A Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/AglMX7mwwb3rspJEIopyVPwTx-E.roa Signing time: Fri 02 Jan 2026 10:20:14 +0000 ROA not before: Fri 02 Jan 2026 10:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211887 IP address blocks: 185.237.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:dc:28:40:fc:31:05:2d:c5:11:56:8d:2f:f8:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f Validity Not Before: Jan 2 10:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02094c5fb9b0c1bdebb29244228a7254fc13c7e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d8:af:69:8c:5f:e7:0b:0e:46:f0:04:56:3d: 16:1f:18:f8:ef:dd:af:8c:a7:cb:39:74:9a:16:27: 6f:ec:22:36:f3:28:28:97:5d:29:13:8c:5b:88:1a: d7:be:37:d6:53:8b:32:fc:e9:af:b8:ea:a5:b1:e7: 1d:91:03:7c:c6:11:4b:4c:ff:15:12:06:1d:1d:5c: df:1a:d5:c5:3d:5d:f2:b3:bb:9d:1e:61:39:00:f9: 40:11:b6:11:88:90:fa:f9:d8:5f:49:44:e5:08:73: b3:c2:56:ae:68:32:1b:1a:15:34:06:2a:d6:1a:77: 01:8d:6d:a4:62:77:f3:93:d0:42:07:6b:01:60:d6: 7a:b4:c4:07:74:d5:84:aa:a5:92:1a:1d:81:ea:a7: 58:f4:60:5a:90:1a:51:ac:0b:3f:1e:8f:37:7b:19: 0a:a8:45:35:24:cb:a8:b3:65:58:fd:1a:b4:f0:58: fa:50:ae:35:a6:d3:4d:f3:92:9e:a7:db:29:a7:d6: 07:57:ad:77:f5:3b:79:72:6a:aa:8d:76:74:cf:58: a1:db:cd:e8:8b:5f:d1:6b:5d:47:8c:63:03:0f:b7: 2e:f1:3f:f6:ca:c0:ad:a8:96:dc:68:71:9e:28:f2: 2f:e0:9e:0b:6e:c3:56:20:a9:6f:7b:87:cb:02:38: 32:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:09:4C:5F:B9:B0:C1:BD:EB:B2:92:44:22:8A:72:54:FC:13:C7:E1 X509v3 Authority Key Identifier: keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/AglMX7mwwb3rspJEIopyVPwTx-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.237.82.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:db:d3:7f:a0:3e:e1:1c:9b:6d:af:c1:66:7e:f9:6f:1a:db: 94:12:7f:64:89:b0:6a:09:2a:c9:ed:e0:ab:2c:3b:f8:64:72: fc:07:ba:ca:b4:0a:f6:27:87:28:9b:d5:39:ad:ac:fe:13:94: 37:06:2b:23:9f:e5:18:3a:24:f3:f9:ee:c9:5a:0b:ae:e5:ec: 0a:59:e0:26:17:88:11:9a:96:13:95:79:6e:0a:2f:ee:0e:b1: 1b:7e:89:ab:6f:b4:92:27:dc:12:9c:a5:1e:1f:19:16:5e:2c: 1c:5d:c2:a4:de:ad:7c:88:5d:3e:8c:f6:af:bd:fb:03:e3:69: c6:8d:c9:cc:2a:5f:e6:b2:c7:3d:32:46:3a:4e:99:4d:ee:83: 0e:03:8f:fd:d2:df:26:7d:80:bd:df:a4:7e:1f:b0:5f:44:dd: e2:73:dc:77:66:7c:d7:40:7d:71:ce:48:8e:ee:5b:f8:f7:24: bc:d1:81:20:c2:f5:56:ec:36:e0:bb:b7:28:0b:13:04:57:7f: d7:8b:62:17:02:f1:36:81:f3:d7:10:45:8f:84:a3:af:02:79: 0e:37:bd:6b:d2:a5:3b:cc:4e:c6:f9:aa:60:a5:7d:09:2a:62: 3d:0d:32:46:77:d0:1e:27:dd:84:95:36:c3:3b:5d:c6:12:e6: 8a:6c:5f:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ONwoQPwxBS3FEVaNL/gKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTkyZTY4ODk1YzcwNjhiNDY1NTUwODkxN2FkNWJiZGRi ZDBhNWYwHhcNMjYwMTAyMTAyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjA5NGM1ZmI5YjBjMWJkZWJiMjkyNDQyMjhhNzI1NGZjMTNjN2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNivaYxf5wsORvAEVj0WHxj4792v jKfLOXSaFidv7CI28ygol10pE4xbiBrXvjfWU4sy/OmvuOqlsecdkQN8xhFLTP8V EgYdHVzfGtXFPV3ys7udHmE5APlAEbYRiJD6+dhfSUTlCHOzwlauaDIbGhU0BirW GncBjW2kYnfzk9BCB2sBYNZ6tMQHdNWEqqWSGh2B6qdY9GBakBpRrAs/Ho83exkK qEU1JMuos2VY/Rq08Fj6UK41ptNN85Kep9spp9YHV6139Tt5cmqqjXZ0z1ih283o i1/Ra11HjGMDD7cu8T/2ysCtqJbcaHGeKPIv4J4LbsNWIKlve4fLAjgyuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAIJTF+5sMG967KSRCKKclT8E8fhMB8GA1UdIwQY MBaAFFBZLmiJXHBotGVVCJF61bvdvQpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEt N2JiZDI4Y2U0YTc1LzEvQWdsTVg3bXd3YjNyc3BKRUlvcHlWUHdUeC1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEtN2JiZDI4Y2U0YTc1 LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue1SMA0G CSqGSIb3DQEBCwUAA4IBAQAK29N/oD7hHJttr8FmfvlvGtuUEn9kibBqCSrJ7eCr LDv4ZHL8B7rKtAr2J4com9U5raz+E5Q3Bisjn+UYOiTz+e7JWguu5ewKWeAmF4gR mpYTlXluCi/uDrEbfomrb7SSJ9wSnKUeHxkWXiwcXcKk3q18iF0+jPavvfsD42nG jcnMKl/mssc9MkY6TplN7oMOA4/90t8mfYC936R+H7BfRN3ic9x3ZnzXQH1xzkiO 7lv49yS80YEgwvVW7Dbgu7coCxMEV3/Xi2IXAvE2gfPXEEWPhKOvAnkON71r0qU7 zE7G+apgpX0JKmI9DTJGd9AeJ92ElTbDO13GEuaKbF8k -----END CERTIFICATE-----Generated at Mon Jan 26 15:34:01 2026 by rpki-client