This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/ARagD-2ICVLe_xeRZ5O-24eY_xo.roa File: ARagD-2ICVLe_xeRZ5O-24eY_xo.roa (raw, json) Hash identifier: u5J0KIV+qxov6dV4cS/d+pTdetrDBApe4mSwgJ5NKPU= Subject key identifier: 01:16:A0:0F:ED:88:09:52:DE:FF:17:91:67:93:BE:DB:87:98:FF:1A Certificate issuer: /CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943 Certificate serial: 019B79EBB093909D762C11540DC0ABBA3A77 Authority key identifier: 7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/ARagD-2ICVLe_xeRZ5O-24eY_xo.roa Signing time: Thu 01 Jan 2026 14:17:27 +0000 ROA not before: Thu 01 Jan 2026 14:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2856 IP address blocks: 94.72.248.0/21 maxlen: 21 159.253.66.0/23 maxlen: 23 178.78.106.0/23 maxlen: 23 178.78.108.0/22 maxlen: 22 178.78.112.0/21 maxlen: 21 178.78.120.0/21 maxlen: 21 213.249.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.mft rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 08:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:b0:93:90:9d:76:2c:11:54:0d:c0:ab:ba:3a:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943 Validity Not Before: Jan 1 14:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0116a00fed880952deff17916793bedb8798ff1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:94:7d:01:6c:23:b0:eb:b4:c4:ef:3a:5f:2e: af:c0:f3:76:dc:6c:bc:ae:3a:89:0c:a6:cb:df:e3: 49:8c:d1:24:8b:f3:cd:ac:9e:59:43:99:0e:c7:4a: fb:e4:15:cf:b5:60:8c:04:84:df:5b:95:23:81:78: b0:e5:38:47:65:6d:ea:a6:72:17:df:ab:03:ce:a5: 58:09:fb:5c:3d:55:ed:76:b5:da:62:ed:91:40:f5: 38:51:0d:82:c3:a0:9c:27:a5:e7:85:85:ae:93:e5: 38:f7:65:cf:21:36:99:33:d1:ae:9e:b3:81:8e:a8: 48:dd:5d:0a:03:4a:ab:a4:f8:d6:98:29:fc:ed:d3: 24:fc:97:fe:c9:a0:cd:e8:79:b8:e8:ce:ad:ae:20: 60:f3:c9:c5:e7:35:7b:d1:0d:16:42:6c:47:c3:57: d3:4e:dc:b5:ba:bc:ad:c1:50:31:b2:b4:a7:a9:e2: 3c:24:39:64:08:e5:bb:ad:b4:52:82:75:d9:e1:7c: 8e:0b:7c:2e:8a:e1:97:67:85:4d:a7:02:47:38:84: 04:f7:52:c5:67:88:cb:e4:10:a8:96:02:cd:6f:fd: b2:4c:49:86:ff:98:b7:e1:0a:90:9c:71:3e:af:fa: df:41:50:22:29:33:0c:6f:65:b9:53:40:4e:a2:4f: 08:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:16:A0:0F:ED:88:09:52:DE:FF:17:91:67:93:BE:DB:87:98:FF:1A X509v3 Authority Key Identifier: keyid:7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/ARagD-2ICVLe_xeRZ5O-24eY_xo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.72.248.0/21 159.253.66.0/23 178.78.106.0-178.78.127.255 213.249.188.0/22 Signature Algorithm: sha256WithRSAEncryption 82:99:56:17:8c:dd:c9:ef:f2:82:e5:84:a0:ce:85:e0:0f:36: 54:41:93:ab:a4:8e:e4:65:34:c0:55:81:86:c2:ac:61:8c:9f: 88:13:6c:39:48:6a:28:89:db:6e:f9:15:60:94:8c:f7:a4:72: 3a:b5:90:ef:88:0f:a6:47:4e:ec:45:89:11:06:b4:a3:7b:41: 21:93:e2:54:82:b2:f4:c5:08:6d:2d:05:93:a1:70:09:d3:1e: be:38:48:f9:b5:23:b1:a5:50:1d:ee:a1:c5:20:e2:05:c0:a0: a4:64:3a:7d:5c:2d:ee:04:aa:58:40:3a:30:89:dd:48:f3:73: 02:79:ec:6f:3a:00:27:ea:02:14:02:68:e7:58:ae:24:13:96: 73:cf:d3:6c:32:84:c7:09:9b:fb:c4:6e:fc:d9:80:b6:cf:2c: 93:7f:19:05:36:be:c8:90:69:87:3c:15:50:5d:f8:dc:d3:e6: c6:32:f5:24:6d:49:c9:2b:74:98:35:6c:61:bb:42:db:a7:ba: 4f:ea:bc:45:2d:45:5b:4f:93:66:7f:38:77:e3:5a:a6:57:8f: e0:a4:c6:83:ec:1c:5c:88:d2:72:6e:72:2b:7a:7d:6f:b8:b4: e4:4d:2a:e0:8a:aa:33:07:26:f4:6b:14:ce:69:16:82:cc:b8: 5a:f3:eb:77 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt567CTkJ12LBFUDcCrujp3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMTVjZmVkYjlhZWFiNDJiZjhhYzViMjRjYjFhZWVjMmE2 NjA5NDMwHhcNMjYwMTAxMTQxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTE2YTAwZmVkODgwOTUyZGVmZjE3OTE2NzkzYmVkYjg3OThmZjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JR9AWwjsOu0xO86Xy6vwPN23Gy8 rjqJDKbL3+NJjNEki/PNrJ5ZQ5kOx0r75BXPtWCMBITfW5UjgXiw5ThHZW3qpnIX 36sDzqVYCftcPVXtdrXaYu2RQPU4UQ2Cw6CcJ6XnhYWuk+U492XPITaZM9GunrOB jqhI3V0KA0qrpPjWmCn87dMk/Jf+yaDN6Hm46M6triBg88nF5zV70Q0WQmxHw1fT Tty1urytwVAxsrSnqeI8JDlkCOW7rbRSgnXZ4XyOC3wuiuGXZ4VNpwJHOIQE91LF Z4jL5BColgLNb/2yTEmG/5i34QqQnHE+r/rfQVAiKTMMb2W5U0BOok8I1wIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFAEWoA/tiAlS3v8XkWeTvtuHmP8aMB8GA1UdIwQY MBaAFH0Vz+25rqtCv4rFskyxruwqZglDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlJYUDdibXVxMEtfaXNXeVRMR3U3Q3BtQ1VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hZDZiNzMtMGU4Yy00YTQ1LWI2YmIt NDIyODFmNTUxOGE5LzEvQVJhZ0QtMklDVkxlX3hlUlo1Ty0yNGVZX3hvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hZDZiNzMtMGU4Yy00YTQ1LWI2YmItNDIyODFmNTUxOGE5 LzEvZlJYUDdibXVxMEtfaXNXeVRMR3U3Q3BtQ1VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQDXkj4AwQB n/1CMAwDBAGyTmoDBAeyTgADBALV+bwwDQYJKoZIhvcNAQELBQADggEBAIKZVheM 3cnv8oLlhKDOheAPNlRBk6ukjuRlNMBVgYbCrGGMn4gTbDlIaiiJ2275FWCUjPek cjq1kO+ID6ZHTuxFiREGtKN7QSGT4lSCsvTFCG0tBZOhcAnTHr44SPm1I7GlUB3u ocUg4gXAoKRkOn1cLe4EqlhAOjCJ3UjzcwJ57G86ACfqAhQCaOdYriQTlnPP02wy hMcJm/vEbvzZgLbPLJN/GQU2vsiQaYc8FVBd+NzT5sYy9SRtSckrdJg1bGG7Qtun uk/qvEUtRVtPk2Z/OHfjWqZXj+CkxoPsHFyI0nJucit6fW+4tORNKuCKqjMHJvRr FM5pFoLMuFrz63c= -----END CERTIFICATE-----Generated at Thu Jan 8 17:33:02 2026 by rpki-client