This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/N_AGblVuGXaMJZMb2ApzAIuQPJ0.roa File: N_AGblVuGXaMJZMb2ApzAIuQPJ0.roa (raw, json) Hash identifier: 5lDjmIb8YsbwWstNUGh9BH6bOqCQpiLvBcN69JYx3C8= Subject key identifier: 37:F0:06:6E:55:6E:19:76:8C:25:93:1B:D8:0A:73:00:8B:90:3C:9D Certificate issuer: /CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866 Certificate serial: 019B79109B8A279F155A1E49263C684E29DD Authority key identifier: EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/N_AGblVuGXaMJZMb2ApzAIuQPJ0.roa Signing time: Thu 01 Jan 2026 10:18:10 +0000 ROA not before: Thu 01 Jan 2026 10:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200780 IP address blocks: 217.18.220.0/24 maxlen: 24 217.18.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:9b:8a:27:9f:15:5a:1e:49:26:3c:68:4e:29:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866 Validity Not Before: Jan 1 10:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37f0066e556e19768c25931bd80a73008b903c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:90:54:c4:33:fc:87:73:fe:57:52:c1:25:b0: 5d:43:e9:0d:47:9a:bc:41:cf:94:0d:5a:a5:67:23: bc:a8:6f:70:9f:15:4c:d7:99:fa:2b:cd:fb:df:1c: 54:76:55:80:ca:70:69:4b:5b:33:08:59:04:cd:c7: 88:c4:13:08:47:66:51:8c:e2:47:9e:5b:b4:6b:d1: 15:c1:93:54:29:ee:1a:aa:87:6e:94:6a:f1:7a:4d: bc:9f:00:a2:02:2c:6b:d8:61:71:9a:7b:4a:66:69: fc:4b:eb:0e:09:7a:33:e8:a1:a5:5d:4f:55:e5:a4: a7:7a:12:22:67:86:fb:2e:a9:73:56:a6:41:37:ce: 3d:d4:39:34:e3:d2:48:1c:f5:61:83:51:a3:38:5f: 05:35:cd:36:d5:57:19:d4:ba:93:58:95:aa:4a:7a: 2c:39:29:0c:40:ae:ea:85:10:92:e3:bb:eb:16:ed: 2e:e8:3b:ac:fe:27:dc:f2:43:88:c9:f1:d1:29:76: 81:68:ab:40:f3:4d:5c:09:08:8c:71:e8:f9:13:9b: c8:23:4f:30:69:2a:05:f8:0a:f8:be:64:fd:60:a7: db:f2:c7:9a:90:23:be:99:5f:90:d6:c6:6c:20:d0: 77:d9:bb:8f:2c:41:30:fc:83:3a:65:12:3f:95:52: 35:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F0:06:6E:55:6E:19:76:8C:25:93:1B:D8:0A:73:00:8B:90:3C:9D X509v3 Authority Key Identifier: keyid:EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/N_AGblVuGXaMJZMb2ApzAIuQPJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.18.220.0/23 Signature Algorithm: sha256WithRSAEncryption 16:85:bf:05:e2:b8:53:4a:19:1d:05:8e:70:c1:77:d6:8f:b5: 4d:f5:3a:aa:be:ad:60:9b:2c:13:7c:f5:44:49:88:ea:16:f4: 57:98:42:b4:64:34:c0:17:4e:70:c8:00:14:02:3b:70:87:c1: fc:b3:c0:49:a7:31:8f:0d:e7:e5:a2:92:44:10:f1:c1:6e:69: 9c:36:55:68:13:fc:52:2c:66:41:f4:f3:eb:6a:6a:e9:6b:ff: 82:68:c7:65:2e:6c:a9:a3:20:e6:c5:40:42:7e:e6:37:b5:83: 28:a2:3f:33:90:e3:07:bd:c2:97:c2:ae:47:da:25:8e:bf:f8: 33:0e:24:48:6a:21:85:f2:81:76:15:2f:1c:85:ba:bf:c0:ed: 4e:d5:71:49:90:d4:2b:9a:1e:a8:2d:85:b8:c9:da:08:ac:d8: c8:da:67:48:44:8b:85:01:41:7c:2e:39:50:c1:fe:8b:07:cc: 20:10:60:8c:73:09:39:b3:49:c2:46:a9:96:f9:16:7c:47:74: c5:ed:c0:a0:73:0b:6f:64:8c:78:61:e8:14:c7:e5:f9:fc:d1: b5:25:07:7c:23:ad:d1:75:ca:c0:f0:6c:ae:4a:af:27:0d:6d: d8:e3:77:9e:9f:95:6d:c0:bd:83:eb:ed:29:b1:83:3d:d4:b5: 9b:0b:43:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EJuKJ58VWh5JJjxoTindMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMGYwOGQ0ZWUxZjk0Zjk4NDQ5M2I0NjdiZDhhY2EyYWRm YTI4NjYwHhcNMjYwMTAxMTAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2YwMDY2ZTU1NmUxOTc2OGMyNTkzMWJkODBhNzMwMDhiOTAzYzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZBUxDP8h3P+V1LBJbBdQ+kNR5q8 Qc+UDVqlZyO8qG9wnxVM15n6K8373xxUdlWAynBpS1szCFkEzceIxBMIR2ZRjOJH nlu0a9EVwZNUKe4aqodulGrxek28nwCiAixr2GFxmntKZmn8S+sOCXoz6KGlXU9V 5aSnehIiZ4b7LqlzVqZBN8491Dk049JIHPVhg1GjOF8FNc021VcZ1LqTWJWqSnos OSkMQK7qhRCS47vrFu0u6Dus/ifc8kOIyfHRKXaBaKtA801cCQiMcej5E5vII08w aSoF+Ar4vmT9YKfb8seakCO+mV+Q1sZsINB32buPLEEw/IM6ZRI/lVI15wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDfwBm5Vbhl2jCWTG9gKcwCLkDydMB8GA1UdIwQY MBaAFOoPCNTuH5T5hEk7RnvYrKKt+ihmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82N2ViNDktZmYwOC00ZWE0LWJiOWUt MmVmYjQ2MWZkNDEzLzEvTl9BR2JsVnVHWGFNSlpNYjJBcHpBSXVRUEowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC82N2ViNDktZmYwOC00ZWE0LWJiOWUtMmVmYjQ2MWZkNDEz LzEvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2RLcMA0G CSqGSIb3DQEBCwUAA4IBAQAWhb8F4rhTShkdBY5wwXfWj7VN9Tqqvq1gmywTfPVE SYjqFvRXmEK0ZDTAF05wyAAUAjtwh8H8s8BJpzGPDeflopJEEPHBbmmcNlVoE/xS LGZB9PPramrpa/+CaMdlLmypoyDmxUBCfuY3tYMooj8zkOMHvcKXwq5H2iWOv/gz DiRIaiGF8oF2FS8chbq/wO1O1XFJkNQrmh6oLYW4ydoIrNjI2mdIRIuFAUF8LjlQ wf6LB8wgEGCMcwk5s0nCRqmW+RZ8R3TF7cCgcwtvZIx4YegUx+X5/NG1JQd8I63R dcrA8GyuSq8nDW3Y43een5VtwL2D6+0psYM91LWbC0PG -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:13 2026 by rpki-client