This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iAgxzR0Lblqq0fEklhK_7LNGY_s.roa File: iAgxzR0Lblqq0fEklhK_7LNGY_s.roa (raw, json) Hash identifier: nJcIKJ2QmXu61Rm7poakWYICWqvilu2x6PpgBOlicCU= Subject key identifier: 88:08:31:CD:1D:0B:6E:5A:AA:D1:F1:24:96:12:BF:EC:B3:46:63:FB Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D712D36AAB77F078B70C86190E77C Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iAgxzR0Lblqq0fEklhK_7LNGY_s.roa Signing time: Fri 02 Jan 2026 06:20:34 +0000 ROA not before: Fri 02 Jan 2026 06:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214939 IP address blocks: 2a0e:97c0:92a::/48 maxlen: 48 2a0e:97c0:92f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:71:2d:36:aa:b7:7f:07:8b:70:c8:61:90:e7:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=880831cd1d0b6e5aaad1f1249612bfecb34663fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4a:9a:b2:10:52:ac:43:94:52:57:e1:69:d5: 56:68:d5:1f:1b:b3:d0:fa:f9:04:fe:4c:27:a9:1f: 44:e6:8a:92:e9:41:5b:fc:02:1c:20:90:77:69:4f: 3e:bc:59:4d:f2:a2:7c:36:f8:61:21:fc:94:2a:6e: e8:43:bf:96:b4:b8:2b:4e:6e:34:19:37:d1:8c:8c: 95:89:be:30:c7:95:d4:ba:4d:3b:80:62:02:6b:02: 32:e8:20:62:f5:2a:d6:4f:c8:4e:aa:d7:09:0d:d1: fc:4a:45:3d:37:f0:ab:9f:fb:38:95:fd:69:a6:15: ff:64:80:86:2d:e4:98:02:a4:27:f5:db:c7:c5:65: fe:45:3a:97:09:83:39:fb:4c:d8:f6:b5:a7:0c:15: bd:95:f6:24:b4:af:03:37:d5:7e:54:a5:e7:68:4c: 2f:60:fa:26:e4:90:20:d2:5f:ce:c7:a1:01:dc:dd: f7:dc:6d:55:99:86:67:66:82:cc:02:09:82:21:d4: d0:4a:88:06:f4:86:ad:cf:bb:ca:5c:0f:d2:6f:2e: 4b:b8:c4:90:b3:ec:22:cc:ba:31:1c:b8:0a:ae:f5: 6f:54:eb:46:75:d6:7a:95:e5:5c:48:cb:b8:22:3d: e8:71:1b:bc:8e:e7:4c:8d:f9:a9:da:d8:35:18:45: 82:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:08:31:CD:1D:0B:6E:5A:AA:D1:F1:24:96:12:BF:EC:B3:46:63:FB X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iAgxzR0Lblqq0fEklhK_7LNGY_s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:92a::/48 2a0e:97c0:92f::/48 Signature Algorithm: sha256WithRSAEncryption 7e:34:86:24:87:d4:25:87:61:ad:4c:8c:36:92:17:72:8c:6e: 1f:7e:87:32:8b:31:a8:8a:99:77:92:76:62:85:32:5e:b1:88: 8d:2e:9a:4b:25:c8:63:08:0c:ea:e3:f5:ff:eb:cc:66:e5:ed: f9:2d:6c:2b:fc:eb:d2:5a:b9:29:55:1a:d4:46:eb:c2:9f:64: 43:4e:e3:f7:13:2c:a4:37:1d:49:39:e7:8c:a6:5f:a5:7b:3c: 18:4a:ee:8d:09:48:db:59:80:59:58:07:62:49:34:2d:5b:fa: eb:63:2c:86:31:7b:16:32:ae:a7:75:f6:75:da:a1:45:5f:d7: 80:cf:11:1f:36:43:3d:72:8d:24:77:c8:1c:af:f2:c4:b7:88: fc:55:a3:a0:e4:b8:d0:3f:44:73:60:f5:29:18:99:d9:6e:fc: a6:71:be:47:92:d0:30:31:cc:c5:a2:fc:cc:2b:f2:87:73:37: b9:1c:97:b1:1a:f2:9c:98:53:65:91:28:61:70:36:5e:d4:b0: a4:56:3b:c7:41:92:fd:c9:e7:15:8c:3f:b7:5d:32:4f:e7:89: dc:77:28:76:f4:52:18:fa:35:20:de:40:82:22:f9:62:3c:f6: df:80:8c:a3:89:5c:e1:24:63:df:d0:4c:d5:3a:31:3b:ec:1d: 21:c8:c6:0c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XXEtNqq3fweLcMhhkOd8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODA4MzFjZDFkMGI2ZTVhYWFkMWYxMjQ5NjEyYmZlY2IzNDY2M2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkqashBSrEOUUlfhadVWaNUfG7PQ +vkE/kwnqR9E5oqS6UFb/AIcIJB3aU8+vFlN8qJ8NvhhIfyUKm7oQ7+WtLgrTm40 GTfRjIyVib4wx5XUuk07gGICawIy6CBi9SrWT8hOqtcJDdH8SkU9N/Crn/s4lf1p phX/ZICGLeSYAqQn9dvHxWX+RTqXCYM5+0zY9rWnDBW9lfYktK8DN9V+VKXnaEwv YPom5JAg0l/Ox6EB3N333G1VmYZnZoLMAgmCIdTQSogG9Iatz7vKXA/Sby5LuMSQ s+wizLoxHLgKrvVvVOtGddZ6leVcSMu4Ij3ocRu8judMjfmp2tg1GEWCJwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIgIMc0dC25aqtHxJJYSv+yzRmP7MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvaUFneHpSMExibHFxMGZFa2xoS183TE5HWV9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg6XwAkq AwcAKg6XwAkvMA0GCSqGSIb3DQEBCwUAA4IBAQB+NIYkh9Qlh2GtTIw2khdyjG4f focyizGoipl3knZihTJesYiNLppLJchjCAzq4/X/68xm5e35LWwr/OvSWrkpVRrU RuvCn2RDTuP3EyykNx1JOeeMpl+lezwYSu6NCUjbWYBZWAdiSTQtW/rrYyyGMXsW Mq6ndfZ12qFFX9eAzxEfNkM9co0kd8gcr/LEt4j8VaOg5LjQP0RzYPUpGJnZbvym cb5HktAwMczFovzMK/KHcze5HJexGvKcmFNlkShhcDZe1LCkVjvHQZL9yecVjD+3 XTJP54ncdyh29FIY+jUg3kCCIvliPPbfgIyjiVzhJGPf0EzVOjE77B0hyMYM -----END CERTIFICATE-----Generated at Fri Jan 9 13:11:53 2026 by rpki-client