This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/agZ_22w8nR7yzP-r4nyk_GYagPg.roa File: agZ_22w8nR7yzP-r4nyk_GYagPg.roa (raw, json) Hash identifier: sBmwyEO+p9XOhRYaD+uacFTguzE0ei3xiuK+qpOGZ10= Subject key identifier: 6A:06:7F:DB:6C:3C:9D:1E:F2:CC:FF:AB:E2:7C:A4:FC:66:1A:80:F8 Certificate issuer: /CN=568ae803b9ba38855401827b3eece14505a9c0f6 Certificate serial: 019B7A5AD8E533E7C6AF63EAAE608C81911D Authority key identifier: 56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/agZ_22w8nR7yzP-r4nyk_GYagPg.roa Signing time: Thu 01 Jan 2026 16:18:52 +0000 ROA not before: Thu 01 Jan 2026 16:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20525 IP address blocks: 79.141.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d8:e5:33:e7:c6:af:63:ea:ae:60:8c:81:91:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=568ae803b9ba38855401827b3eece14505a9c0f6 Validity Not Before: Jan 1 16:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a067fdb6c3c9d1ef2ccffabe27ca4fc661a80f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:02:58:2e:df:22:98:35:96:7c:82:1d:14:6a: 0a:f1:ac:cb:eb:81:f5:17:d3:7e:85:e8:cb:f8:de: ac:7b:94:63:a0:d1:a3:0e:90:a4:dd:87:fe:0f:35: ed:17:5d:6e:31:fc:0b:71:b5:6d:1e:a4:27:92:3d: d6:c7:c1:58:b1:b7:d1:69:7b:f3:21:44:6a:3c:ee: 12:93:df:11:7d:ff:92:1d:a4:93:a7:5d:88:6a:6a: b5:05:20:42:f7:a5:71:07:05:8a:9a:15:e3:08:4b: 3f:06:b2:21:f8:65:26:62:d0:21:dc:0c:bb:93:60: 9b:93:62:a6:64:c5:3b:28:3e:58:8a:7a:ff:72:6c: 01:6f:17:ab:73:36:f5:58:f2:53:dd:d7:19:d5:52: 03:0b:af:1a:dd:3a:17:ef:f3:ef:06:84:bd:ae:c2: 3e:49:48:33:f7:1e:46:ec:ee:04:8c:d7:d7:4b:32: 29:b5:2f:e3:97:a8:6a:00:a1:34:14:b8:66:04:11: 9d:d8:08:92:76:18:78:68:4f:49:a9:29:18:66:d5: 64:e2:09:d9:8d:d0:58:9b:05:27:1a:ba:32:0f:67: 2a:89:7b:a3:81:66:0d:63:07:24:93:b0:66:af:23: 26:fe:bb:3a:ce:61:4b:b0:0b:2a:1e:2d:e5:2a:34: e4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:06:7F:DB:6C:3C:9D:1E:F2:CC:FF:AB:E2:7C:A4:FC:66:1A:80:F8 X509v3 Authority Key Identifier: keyid:56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/agZ_22w8nR7yzP-r4nyk_GYagPg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.141.220.0/22 Signature Algorithm: sha256WithRSAEncryption d2:02:2e:81:f5:3f:ec:32:f9:e4:81:04:6e:07:13:23:2a:d9: f2:ca:8f:b6:f2:de:7d:6a:2e:42:0d:52:89:54:9c:16:f4:47: 29:23:84:86:17:83:fe:d1:f0:32:dd:20:a0:72:ff:7f:73:78: 83:f3:00:36:6d:d0:80:dd:74:eb:18:b5:b4:7c:08:20:90:c6: 9e:a1:5d:91:f3:f9:d3:71:e3:2c:aa:22:70:4e:e7:de:bf:26: 7d:2b:df:11:be:c1:e1:86:fe:53:74:45:29:88:01:2c:f8:e9: 82:c9:67:37:3c:cb:1b:57:2a:80:e3:7b:68:9d:1a:6e:4a:2a: 8e:dc:76:a9:91:96:dc:15:e9:5f:fa:e0:71:0c:aa:4e:ea:29: 6b:44:64:8f:ed:42:cc:88:bd:d5:2c:21:39:2c:78:bb:1a:b8: 8a:a9:97:8a:73:37:2e:ed:c8:a6:a2:57:2b:49:1c:dc:1d:1e: d3:88:6d:ea:24:07:fa:b7:c4:19:1c:49:4c:eb:f4:37:42:1d: d2:4e:4a:a1:e0:8e:ff:6b:51:c5:b4:07:f4:c5:dc:56:78:0b: c1:31:65:3e:a2:f6:ef:ba:94:05:28:5b:e9:25:c0:93:1f:26: 22:f2:7f:d8:e8:e5:dd:50:3f:7d:7b:8a:f1:b3:3d:91:8f:dc: 22:4f:b7:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WtjlM+fGr2PqrmCMgZEdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OGFlODAzYjliYTM4ODU1NDAxODI3YjNlZWNlMTQ1MDVh OWMwZjYwHhcNMjYwMTAxMTYxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTA2N2ZkYjZjM2M5ZDFlZjJjY2ZmYWJlMjdjYTRmYzY2MWE4MGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwJYLt8imDWWfIIdFGoK8azL64H1 F9N+hejL+N6se5RjoNGjDpCk3Yf+DzXtF11uMfwLcbVtHqQnkj3Wx8FYsbfRaXvz IURqPO4Sk98Rff+SHaSTp12Iamq1BSBC96VxBwWKmhXjCEs/BrIh+GUmYtAh3Ay7 k2Cbk2KmZMU7KD5Yinr/cmwBbxerczb1WPJT3dcZ1VIDC68a3ToX7/PvBoS9rsI+ SUgz9x5G7O4EjNfXSzIptS/jl6hqAKE0FLhmBBGd2AiSdhh4aE9JqSkYZtVk4gnZ jdBYmwUnGroyD2cqiXujgWYNYwckk7BmryMm/rs6zmFLsAsqHi3lKjTkVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGoGf9tsPJ0e8sz/q+J8pPxmGoD4MB8GA1UdIwQY MBaAFFaK6AO5ujiFVAGCez7s4UUFqcD2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm9yb0E3bTZPSVZVQVlKN1B1emhSUVdwd1BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yNzhkNWYtOWVlNi00NDc3LTlmZTAt OGVhZThiNzVlOWNhLzEvYWdaXzIydzhuUjd5elAtcjRueWtfR1lhZ1BnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8yNzhkNWYtOWVlNi00NDc3LTlmZTAtOGVhZThiNzVlOWNh LzEvVm9yb0E3bTZPSVZVQVlKN1B1emhSUVdwd1BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCT43cMA0G CSqGSIb3DQEBCwUAA4IBAQDSAi6B9T/sMvnkgQRuBxMjKtnyyo+28t59ai5CDVKJ VJwW9EcpI4SGF4P+0fAy3SCgcv9/c3iD8wA2bdCA3XTrGLW0fAggkMaeoV2R8/nT ceMsqiJwTufevyZ9K98RvsHhhv5TdEUpiAEs+OmCyWc3PMsbVyqA43tonRpuSiqO 3HapkZbcFelf+uBxDKpO6ilrRGSP7ULMiL3VLCE5LHi7GriKqZeKczcu7cimolcr SRzcHR7TiG3qJAf6t8QZHElM6/Q3Qh3STkqh4I7/a1HFtAf0xdxWeAvBMWU+ovbv upQFKFvpJcCTHyYi8n/Y6OXdUD99e4rxsz2Rj9wiT7eJ -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:05 2026 by rpki-client