This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Agvj0tvfqxto2XIoLBVQpmIObMM.roa File: Agvj0tvfqxto2XIoLBVQpmIObMM.roa (raw, json) Hash identifier: nmglu9BFIe1Tts9pdyLrvGfNzlMXHn3Pm0LhXI808Pg= Subject key identifier: 02:0B:E3:D2:DB:DF:AB:1B:68:D9:72:28:2C:15:50:A6:62:0E:6C:C3 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D362098CCE7B574E54549D2FFBBF1 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Agvj0tvfqxto2XIoLBVQpmIObMM.roa Signing time: Fri 02 Jan 2026 06:20:19 +0000 ROA not before: Fri 02 Jan 2026 06:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211139 IP address blocks: 2a0e:b107:1910::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:36:20:98:cc:e7:b5:74:e5:45:49:d2:ff:bb:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=020be3d2dbdfab1b68d972282c1550a6620e6cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8b:47:74:bd:92:88:68:fa:f6:bd:39:0c:4a: 1a:b8:7f:dd:74:fb:95:d4:47:e5:8b:0a:73:b8:a0: 9c:5b:97:b5:de:b2:98:99:46:3d:19:51:7c:6e:0e: ff:46:83:bf:9a:25:dd:93:60:d9:66:96:a1:29:f6: 25:b1:fe:09:a6:6e:e7:0f:22:ca:1d:4c:c2:61:d4: 67:ad:6d:71:60:6e:b5:e8:d1:48:2b:2f:78:9b:b8: b6:86:35:5f:3e:4a:30:e1:e0:41:d9:54:c2:cb:54: ff:d7:f3:4c:99:dd:2b:ce:05:0c:c1:0d:8f:3a:9a: a4:82:6f:c0:bc:bb:62:cc:00:f3:b5:48:d9:b6:18: c9:cb:55:59:ab:56:8c:34:94:6b:41:ec:56:b9:d9: 6b:f9:94:46:59:fd:06:74:a4:74:1a:bf:57:dd:da: 22:0f:24:91:2d:cd:97:c7:e4:06:38:e8:ba:4a:b0: 1e:ba:73:b0:ef:23:bf:bb:53:d9:7b:6d:3e:44:af: c8:9a:18:10:36:89:e2:cc:ef:e2:3b:f1:b7:c8:13: 6f:96:c8:cf:40:07:1f:59:30:37:48:eb:a2:7c:86: 94:67:d2:86:4e:8c:55:fc:da:c5:3f:20:6f:91:f8: 0f:08:14:bc:66:25:4a:58:54:c7:88:f1:4e:65:df: 3f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0B:E3:D2:DB:DF:AB:1B:68:D9:72:28:2C:15:50:A6:62:0E:6C:C3 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Agvj0tvfqxto2XIoLBVQpmIObMM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1910::/44 Signature Algorithm: sha256WithRSAEncryption be:8c:3e:ec:f8:37:4c:1b:16:37:cd:d7:7d:30:1f:1f:5f:9a: 23:1e:c1:9a:37:c3:3e:a5:df:23:3e:5b:91:ca:a8:ab:42:07: 30:c8:d8:a5:36:19:28:81:d4:65:92:4b:e0:36:ff:47:fa:9c: b2:92:6f:f8:86:0d:ea:21:df:4f:a9:c5:4d:35:1a:29:4b:73: 6e:17:94:6e:b6:f3:33:c2:ef:20:64:75:c0:8d:33:c9:f8:c9: a1:0d:85:70:ac:61:1c:c8:09:29:84:1a:b8:e4:0e:8b:2d:29: 1d:48:2b:4e:84:73:37:a3:6b:bf:ba:99:be:72:8b:a2:6c:9d: c2:0e:21:af:e4:fc:c1:07:04:96:aa:1a:ea:30:a5:a4:16:c3: 84:6d:d3:24:97:8a:4f:80:e5:fc:73:99:c8:dc:43:f3:dc:44: 9d:84:0b:7a:b9:6c:08:af:1b:ae:07:7c:8c:5b:96:f2:bd:77: 52:ff:8d:08:8b:e3:a1:de:62:8b:42:59:67:cd:4f:e5:2a:22: e4:3e:e7:d8:b7:70:64:f5:41:df:6b:b6:68:a9:a6:74:6d:f5: 02:47:e7:b3:6c:13:02:75:71:bf:16:17:ca:11:cf:53:16:00: 52:75:ad:40:bd:66:fd:3c:58:ac:79:b1:ac:81:99:2e:55:dd: a4:ef:10:24 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XTYgmMzntXTlRUnS/7vxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjBiZTNkMmRiZGZhYjFiNjhkOTcyMjgyYzE1NTBhNjYyMGU2Y2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YtHdL2SiGj69r05DEoauH/ddPuV 1EfliwpzuKCcW5e13rKYmUY9GVF8bg7/RoO/miXdk2DZZpahKfYlsf4Jpm7nDyLK HUzCYdRnrW1xYG616NFIKy94m7i2hjVfPkow4eBB2VTCy1T/1/NMmd0rzgUMwQ2P Opqkgm/AvLtizADztUjZthjJy1VZq1aMNJRrQexWudlr+ZRGWf0GdKR0Gr9X3doi DySRLc2Xx+QGOOi6SrAeunOw7yO/u1PZe20+RK/ImhgQNonizO/iO/G3yBNvlsjP QAcfWTA3SOuifIaUZ9KGToxV/NrFPyBvkfgPCBS8ZiVKWFTHiPFOZd8/pwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAIL49Lb36sbaNlyKCwVUKZiDmzDMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvQWd2ajB0dmZxeHRvMlhJb0xCVlFwbUlPYk1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxkQ MA0GCSqGSIb3DQEBCwUAA4IBAQC+jD7s+DdMGxY3zdd9MB8fX5ojHsGaN8M+pd8j PluRyqirQgcwyNilNhkogdRlkkvgNv9H+pyykm/4hg3qId9PqcVNNRopS3NuF5Ru tvMzwu8gZHXAjTPJ+MmhDYVwrGEcyAkphBq45A6LLSkdSCtOhHM3o2u/upm+coui bJ3CDiGv5PzBBwSWqhrqMKWkFsOEbdMkl4pPgOX8c5nI3EPz3ESdhAt6uWwIrxuu B3yMW5byvXdS/40Ii+Oh3mKLQllnzU/lKiLkPufYt3Bk9UHfa7ZoqaZ0bfUCR+ez bBMCdXG/FhfKEc9TFgBSda1AvWb9PFisebGsgZkuVd2k7xAk -----END CERTIFICATE-----Generated at Fri Jan 2 12:04:46 2026 by rpki-client