This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/aGx-mWhigRE4_KS4p7V620T7uRA.roa File: aGx-mWhigRE4_KS4p7V620T7uRA.roa (raw, json) Hash identifier: uYU/8IkqjXFpdqBKotX53i7emMpJhAXYS06trCmNRIw= Subject key identifier: 68:6C:7E:99:68:62:81:11:38:FC:A4:B8:A7:B5:7A:DB:44:FB:B9:10 Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Certificate serial: 019B7E38B54FDA40086B1164B94424BF5EF4 Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/aGx-mWhigRE4_KS4p7V620T7uRA.roa Signing time: Fri 02 Jan 2026 10:20:04 +0000 ROA not before: Fri 02 Jan 2026 10:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214794 IP address blocks: 141.105.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b5:4f:da:40:08:6b:11:64:b9:44:24:bf:5e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Validity Not Before: Jan 2 10:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=686c7e996862811138fca4b8a7b57adb44fbb910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3f:d3:91:4b:59:09:03:bb:74:07:40:ed:d7: a3:62:02:cd:b9:86:d4:c9:ad:c2:f0:22:57:82:75: 3a:64:50:18:77:da:13:93:9f:71:19:d7:7a:37:8f: 3f:54:a4:17:e0:cf:ed:1b:a2:ef:34:43:27:81:d2: 5e:3b:8d:27:cb:47:99:9b:b5:ec:10:f6:ab:d6:ac: c5:8c:b2:58:17:35:e0:0d:a9:07:75:51:77:1d:f5: c4:33:bc:53:33:c8:99:49:f8:0d:b7:1a:ca:46:bd: 6a:ae:ef:52:b5:0c:ca:60:c9:59:f5:b1:f9:d4:1b: c6:56:b2:24:00:23:7d:ff:db:66:73:8c:0f:ce:95: 6c:88:02:37:d5:ef:15:ce:dd:e4:5f:89:c0:c9:27: d8:7b:88:ba:e7:03:9a:59:0f:85:73:a3:e7:70:75: e3:38:9a:7d:ed:d7:d0:ec:26:20:af:10:77:bf:5e: 0d:74:92:7b:1c:84:99:1f:64:7b:ef:6e:57:eb:be: 30:d2:1b:31:60:5d:47:26:24:34:39:1f:4c:9c:85: eb:56:96:d5:fa:69:43:d3:51:96:7e:14:ee:a5:ca: 76:a4:d0:52:37:10:0b:a8:88:2a:56:8a:03:3f:9d: a0:66:aa:91:fd:49:56:4d:bf:6f:11:55:15:83:8b: 23:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:6C:7E:99:68:62:81:11:38:FC:A4:B8:A7:B5:7A:DB:44:FB:B9:10 X509v3 Authority Key Identifier: keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/aGx-mWhigRE4_KS4p7V620T7uRA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.105.142.0/24 Signature Algorithm: sha256WithRSAEncryption 20:fb:a1:dc:13:08:08:4a:41:31:55:a2:7d:dc:1b:22:6a:72: 58:6e:7b:6d:4b:9f:c8:27:b4:dd:62:ad:4c:f5:1e:cf:c3:12: 9d:52:d5:72:8c:83:82:ec:30:af:26:13:88:a8:ad:32:d1:b0: 2e:9d:6e:a4:99:fa:f6:79:ac:48:1c:6b:01:5d:5e:ed:4e:18: a4:16:28:b1:1e:de:63:42:9d:4c:fe:ca:97:fc:fb:a0:94:31: 35:48:f3:a0:2d:f6:a7:6d:14:a0:8b:01:fe:85:dd:f4:88:b5: d3:c2:00:9a:d5:50:54:6a:7f:02:c8:a0:38:49:45:2b:68:1b: 82:d4:11:c4:11:6c:f6:76:84:21:1e:e9:90:f8:7c:b9:ec:0d: 0a:d5:27:b5:ab:e5:7e:7e:3b:3a:07:cd:3e:9b:e5:62:4d:1d: d5:14:7f:87:45:41:ed:ed:7e:48:cd:a8:78:28:27:ad:d3:8c: 3a:e8:74:8d:98:1e:bc:0a:4a:9a:0c:97:94:c8:13:b9:66:f5: 84:5c:37:08:33:68:50:60:e2:3f:7f:58:ff:63:b7:40:99:32: 2d:ee:09:da:ec:e2:77:09:7b:56:52:fe:9a:09:90:c5:4b:e0: 3f:30:17:85:1a:67:6e:26:5a:a0:1e:92:9a:fb:17:84:8a:b3: dd:60:c4:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OLVP2kAIaxFkuUQkv170MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx OWZiMjAwHhcNMjYwMTAyMTAyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODZjN2U5OTY4NjI4MTExMzhmY2E0YjhhN2I1N2FkYjQ0ZmJiOTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj/TkUtZCQO7dAdA7dejYgLNuYbU ya3C8CJXgnU6ZFAYd9oTk59xGdd6N48/VKQX4M/tG6LvNEMngdJeO40ny0eZm7Xs EPar1qzFjLJYFzXgDakHdVF3HfXEM7xTM8iZSfgNtxrKRr1qru9StQzKYMlZ9bH5 1BvGVrIkACN9/9tmc4wPzpVsiAI31e8Vzt3kX4nAySfYe4i65wOaWQ+Fc6PncHXj OJp97dfQ7CYgrxB3v14NdJJ7HISZH2R7725X674w0hsxYF1HJiQ0OR9MnIXrVpbV +mlD01GWfhTupcp2pNBSNxALqIgqVooDP52gZqqR/UlWTb9vEVUVg4sj3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGhsfploYoEROPykuKe1ettE+7kQMB8GA1UdIwQY MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt NDI2OWI1NmJmN2Q0LzEvYUd4LW1XaGlnUkU0X0tTNHA3VjYyMFQ3dVJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0 LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWmOMA0G CSqGSIb3DQEBCwUAA4IBAQAg+6HcEwgISkExVaJ93BsianJYbnttS5/IJ7TdYq1M 9R7PwxKdUtVyjIOC7DCvJhOIqK0y0bAunW6kmfr2eaxIHGsBXV7tThikFiixHt5j Qp1M/sqX/PuglDE1SPOgLfanbRSgiwH+hd30iLXTwgCa1VBUan8CyKA4SUUraBuC 1BHEEWz2doQhHumQ+Hy57A0K1Se1q+V+fjs6B80+m+ViTR3VFH+HRUHt7X5Izah4 KCet04w66HSNmB68CkqaDJeUyBO5ZvWEXDcIM2hQYOI/f1j/Y7dAmTIt7gna7OJ3 CXtWUv6aCZDFS+A/MBeFGmduJlqgHpKa+xeEirPdYMQc -----END CERTIFICATE-----Generated at Sun Jan 25 13:05:43 2026 by rpki-client