This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/agDTouKXh27x35ZP6bEJ5yzcJrA.roa File: agDTouKXh27x35ZP6bEJ5yzcJrA.roa (raw, json) Hash identifier: OVkcnAYHjQt80Lrs6fk4p5r9gtYIWdVvRl09WAS/lM8= Subject key identifier: 6A:00:D3:A2:E2:97:87:6E:F1:DF:96:4F:E9:B1:09:E7:2C:DC:26:B0 Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e Certificate serial: 019B7CED5B7F55DDBDAB43FA44B030E44985 Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/agDTouKXh27x35ZP6bEJ5yzcJrA.roa Signing time: Fri 02 Jan 2026 04:18:08 +0000 ROA not before: Fri 02 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198193 IP address blocks: 185.223.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:5b:7f:55:dd:bd:ab:43:fa:44:b0:30:e4:49:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e Validity Not Before: Jan 2 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a00d3a2e297876ef1df964fe9b109e72cdc26b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:37:84:93:23:f6:d0:99:89:c3:c2:a9:bd:d9: 48:ac:67:e1:2f:50:a5:ae:b3:8b:97:2e:58:de:e5: 81:a9:1e:88:36:e9:52:a8:bc:0d:7d:4f:b2:23:7f: fb:c7:00:11:0c:81:9b:f5:7f:87:5b:ef:ef:28:a8: 35:57:8b:0c:02:18:10:e4:bd:97:28:5b:22:9d:93: da:23:e6:4a:03:a6:a4:61:c5:8b:dd:23:f7:f7:60: f9:9b:1a:8f:82:bc:28:e4:87:17:d6:07:94:39:35: e4:e2:51:fe:07:f4:60:81:c6:55:07:56:92:17:a5: 4c:5c:77:d3:46:af:06:8a:86:9a:dd:3d:48:3d:3c: cc:81:5c:4f:84:80:32:8b:89:02:40:c9:ca:73:c5: 7e:88:46:db:cc:49:1b:72:bd:ae:7f:d0:73:28:5c: 4f:0c:ed:11:73:53:e3:89:80:10:f5:93:83:f6:04: 78:d3:40:c2:2b:67:2b:e8:2a:4a:04:99:35:35:27: 94:50:e3:d9:12:bf:23:29:6e:99:91:2c:21:8b:46: 1a:5a:41:b9:14:87:f2:63:42:1c:f3:3c:c2:00:44: b6:39:a8:13:c3:df:6e:a8:8b:70:9a:c9:65:94:78: 56:fe:65:53:f9:c1:7f:90:07:08:91:f9:f8:1d:08: 5d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:00:D3:A2:E2:97:87:6E:F1:DF:96:4F:E9:B1:09:E7:2C:DC:26:B0 X509v3 Authority Key Identifier: keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/agDTouKXh27x35ZP6bEJ5yzcJrA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.223.219.0/24 Signature Algorithm: sha256WithRSAEncryption 07:18:1f:c8:93:99:d6:10:44:90:4d:58:16:93:63:ca:ca:5d: 6f:3b:8d:e6:be:1e:0e:55:53:c8:70:6d:10:64:b8:43:97:da: c5:5d:09:8e:a5:bd:c4:8b:33:8d:1e:9a:60:09:c8:ae:52:1e: 0b:19:3f:56:ea:c1:4d:6b:b3:bb:e1:6e:cf:9b:a9:c6:34:eb: fe:be:6d:f5:74:1f:22:ae:03:de:65:d9:32:b5:62:f7:cf:df: 3e:99:8e:d6:90:56:78:ec:cc:2a:38:04:4e:7c:56:e0:de:42: 03:c3:c0:c6:23:e1:3f:3b:2b:6c:25:5b:5b:70:0c:0a:6d:ea: db:36:b3:35:bb:bb:1f:7e:d6:99:73:da:b2:07:57:d5:c9:3b: 2a:8a:b4:a0:6c:4f:53:87:11:5f:32:ec:d8:f5:6a:38:78:8a: a6:fa:b2:48:d2:56:d9:26:b9:82:77:94:b6:9d:ec:54:85:e4: 52:e3:79:2f:a5:42:62:d4:14:c9:5a:6a:9a:bb:e0:a8:7c:48: 30:10:38:56:af:48:8e:11:87:1c:02:db:f3:0f:b3:b0:01:33: 5d:25:93:24:10:9b:76:a9:5c:19:f0:6c:d0:12:c1:6d:7c:60: 8a:e0:a0:80:0c:94:5b:4f:a3:91:6d:a6:dc:13:d6:54:bb:c8: a7:8a:05:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Vt/Vd29q0P6RLAw5EmFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0 NjVjMmUwHhcNMjYwMTAyMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTAwZDNhMmUyOTc4NzZlZjFkZjk2NGZlOWIxMDllNzJjZGMyNmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DeEkyP20JmJw8KpvdlIrGfhL1Cl rrOLly5Y3uWBqR6INulSqLwNfU+yI3/7xwARDIGb9X+HW+/vKKg1V4sMAhgQ5L2X KFsinZPaI+ZKA6akYcWL3SP392D5mxqPgrwo5IcX1geUOTXk4lH+B/RggcZVB1aS F6VMXHfTRq8Gioaa3T1IPTzMgVxPhIAyi4kCQMnKc8V+iEbbzEkbcr2uf9BzKFxP DO0Rc1PjiYAQ9ZOD9gR400DCK2cr6CpKBJk1NSeUUOPZEr8jKW6ZkSwhi0YaWkG5 FIfyY0Ic8zzCAES2OagTw99uqItwmslllHhW/mVT+cF/kAcIkfn4HQhdOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGoA06Lil4du8d+WT+mxCecs3CawMB8GA1UdIwQY MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt OTE2NDZiZjAxNTNkLzEvYWdEVG91S1hoMjd4MzVaUDZiRUo1eXpjSnJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud/bMA0G CSqGSIb3DQEBCwUAA4IBAQAHGB/Ik5nWEESQTVgWk2PKyl1vO43mvh4OVVPIcG0Q ZLhDl9rFXQmOpb3EizONHppgCciuUh4LGT9W6sFNa7O74W7Pm6nGNOv+vm31dB8i rgPeZdkytWL3z98+mY7WkFZ47MwqOAROfFbg3kIDw8DGI+E/OytsJVtbcAwKberb NrM1u7sfftaZc9qyB1fVyTsqirSgbE9ThxFfMuzY9Wo4eIqm+rJI0lbZJrmCd5S2 nexUheRS43kvpUJi1BTJWmqau+CofEgwEDhWr0iOEYccAtvzD7OwATNdJZMkEJt2 qVwZ8GzQEsFtfGCK4KCADJRbT6ORbabcE9ZUu8inigVC -----END CERTIFICATE-----Generated at Sun Jan 25 13:01:18 2026 by rpki-client