This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/ArZg-qm8lEntEril04_eQVh-D58.roa File: ArZg-qm8lEntEril04_eQVh-D58.roa (raw, json) Hash identifier: 6ZG3jmP+1JYRU8rVmpDqUwMETM2Rl/USJi5tT1v2KOU= Subject key identifier: 02:B6:60:FA:A9:BC:94:49:ED:12:B8:A5:D3:8F:DE:41:58:7E:0F:9F Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f Certificate serial: 019B7C12B5014D44130F59BAEA4AB85A822D Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/ArZg-qm8lEntEril04_eQVh-D58.roa Signing time: Fri 02 Jan 2026 00:19:19 +0000 ROA not before: Fri 02 Jan 2026 00:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199676 IP address blocks: 2a0a:280:2100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:b5:01:4d:44:13:0f:59:ba:ea:4a:b8:5a:82:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f Validity Not Before: Jan 2 00:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02b660faa9bc9449ed12b8a5d38fde41587e0f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9f:2c:54:cf:56:33:6b:64:84:de:31:96:70: f4:79:07:47:29:eb:a7:c8:a0:3f:0b:a6:78:2e:9a: 35:d9:57:07:7e:99:39:3c:90:83:a8:31:66:09:dc: 69:75:2a:c5:76:5d:d3:14:73:ae:49:bf:6e:5a:84: eb:7d:54:6a:7a:e5:36:d7:d8:83:66:7d:66:4e:15: 34:03:d2:0e:fd:81:d6:b0:5e:8c:71:e9:3b:2f:2f: c7:1b:8d:6f:c3:b7:9c:ae:6a:13:1f:c0:51:48:5e: ae:e7:f3:6c:de:af:39:c8:9d:6d:06:bd:15:10:c8: 7d:df:25:08:a7:d2:63:5c:d2:fe:91:7d:4e:e3:75: 16:ad:4d:a2:ba:26:16:3c:06:bb:1b:c0:20:2a:6c: af:e5:8f:e4:44:c6:3c:6b:1e:63:f0:3f:c6:46:81: a3:fd:23:c6:6e:06:47:ea:b5:97:9b:f0:a2:fd:20: fc:7f:c0:3e:1e:83:8d:ad:da:32:48:c0:c1:1b:97: ad:00:a8:ee:72:30:ac:6d:2b:68:7f:2d:c5:f1:d5: 8d:e4:09:d0:e5:0b:5b:11:75:b0:72:a3:e5:e5:38: 59:be:83:c5:68:2e:02:39:5d:6f:69:18:21:6d:14: 0f:d9:84:e0:45:fc:5a:dd:9d:19:44:af:12:e3:b1: 7b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B6:60:FA:A9:BC:94:49:ED:12:B8:A5:D3:8F:DE:41:58:7E:0F:9F X509v3 Authority Key Identifier: keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/ArZg-qm8lEntEril04_eQVh-D58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:280:2100::/40 Signature Algorithm: sha256WithRSAEncryption 01:46:f4:84:23:79:8c:ea:4f:a1:eb:19:3f:6c:21:3b:97:de: bf:b5:3b:c0:3d:51:09:80:88:f4:10:47:25:e7:3d:6f:8e:b8: 75:56:e2:1f:30:e2:20:d3:c4:5b:b4:1e:bf:ca:4d:64:2f:56: f6:fc:9f:9c:1d:f3:70:87:45:c7:a9:b4:6b:83:6b:d6:86:96: 29:ce:aa:43:df:75:8b:f2:98:d7:eb:08:ba:97:f0:aa:94:52: ac:0d:2c:ac:c4:49:75:a4:28:fe:32:54:0f:50:4f:a5:b9:8b: 1b:ea:e2:a8:13:9d:7a:9f:29:4e:81:e2:b0:29:81:00:c6:df: 72:bc:12:07:24:63:75:90:b4:b5:2f:a1:a4:8b:af:60:77:fd: e6:75:c5:6c:d4:fa:18:3d:58:d4:12:9a:33:a9:02:52:34:e8: 25:77:95:dd:1c:81:45:b8:3a:08:d7:fe:86:5d:44:0e:89:0e: cf:4c:86:aa:6f:36:f6:2b:f2:5c:db:8b:0d:21:3e:aa:cb:a9: 0e:32:89:64:29:a5:9a:0b:f1:3b:dd:62:50:1d:35:cc:cc:d2: bc:a5:7a:f2:28:41:58:c0:1f:84:f8:f0:1c:15:ad:87:cd:72: af:4c:37:05:3d:60:37:e6:3e:fd:2a:69:97:28:67:23:0f:e4: b2:2c:ae:98 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8ErUBTUQTD1m66kq4WoItMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiOWYyMWJhMDRlNWUzMDc3YjM5MWUzZDQ4ZmY1YjBhNTBi MzM2OWYwHhcNMjYwMTAyMDAxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmI2NjBmYWE5YmM5NDQ5ZWQxMmI4YTVkMzhmZGU0MTU4N2UwZjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs58sVM9WM2tkhN4xlnD0eQdHKeun yKA/C6Z4Lpo12VcHfpk5PJCDqDFmCdxpdSrFdl3TFHOuSb9uWoTrfVRqeuU219iD Zn1mThU0A9IO/YHWsF6Mcek7Ly/HG41vw7ecrmoTH8BRSF6u5/Ns3q85yJ1tBr0V EMh93yUIp9JjXNL+kX1O43UWrU2iuiYWPAa7G8AgKmyv5Y/kRMY8ax5j8D/GRoGj /SPGbgZH6rWXm/Ci/SD8f8A+HoONrdoySMDBG5etAKjucjCsbStofy3F8dWN5AnQ 5QtbEXWwcqPl5ThZvoPFaC4COV1vaRghbRQP2YTgRfxa3Z0ZRK8S47F7BwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFAK2YPqpvJRJ7RK4pdOP3kFYfg+fMB8GA1UdIwQY MBaAFBufIboE5eMHezkePUj/WwpQszafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUt ZjUxYzVmYjNkZjlhLzEvQXJaZy1xbThsRW50RXJpbDA0X2VRVmgtRDU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUtZjUxYzVmYjNkZjlh LzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgoCgCEw DQYJKoZIhvcNAQELBQADggEBAAFG9IQjeYzqT6HrGT9sITuX3r+1O8A9UQmAiPQQ RyXnPW+OuHVW4h8w4iDTxFu0Hr/KTWQvVvb8n5wd83CHRceptGuDa9aGlinOqkPf dYvymNfrCLqX8KqUUqwNLKzESXWkKP4yVA9QT6W5ixvq4qgTnXqfKU6B4rApgQDG 33K8EgckY3WQtLUvoaSLr2B3/eZ1xWzU+hg9WNQSmjOpAlI06CV3ld0cgUW4OgjX /oZdRA6JDs9MhqpvNvYr8lzbiw0hPqrLqQ4yiWQppZoL8TvdYlAdNczM0rylevIo QVjAH4T48BwVrYfNcq9MNwU9YDfmPv0qaZcoZyMP5LIsrpg= -----END CERTIFICATE-----Generated at Wed Jan 21 17:32:40 2026 by rpki-client