This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/15xe2eSeIcr4EwkhXOyRhoIiAWE.roa File: 15xe2eSeIcr4EwkhXOyRhoIiAWE.roa (raw, json) Hash identifier: zkV8vtl+NwAV9ohjf4NfO+yyvHLyLzp7EUZSu5G29Qo= Subject key identifier: D7:9C:5E:D9:E4:9E:21:CA:F8:13:09:21:5C:EC:91:86:82:22:01:61 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910AFDB118D6D930509530D01F1DA48 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/15xe2eSeIcr4EwkhXOyRhoIiAWE.roa Signing time: Thu 01 Jan 2026 10:18:15 +0000 ROA not before: Thu 01 Jan 2026 10:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214146 IP address blocks: 2a12:bec4:1710::/44 maxlen: 44 2a12:bec4:1730::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:af:db:11:8d:6d:93:05:09:53:0d:01:f1:da:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d79c5ed9e49e21caf81309215cec918682220161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a5:1d:7a:bd:2a:aa:f4:7f:2f:17:96:e4:d2: 65:1d:b5:4f:b2:34:e6:93:56:f6:fa:a2:5b:f2:7e: c2:03:e3:c5:6f:b6:47:7b:50:c4:a9:ee:1d:8c:06: 9a:91:cd:4d:0a:32:d4:cc:bc:ed:fc:0d:46:21:04: 3a:39:6e:68:57:fd:aa:4d:d7:00:7e:29:51:90:ba: fe:11:ab:fa:e6:00:1c:26:a4:85:30:64:4d:1a:f8: b4:49:30:a3:57:61:60:b9:cc:67:36:36:f1:31:c9: a6:9d:a2:34:a8:45:14:d9:36:62:b5:0b:93:70:a4: 98:bc:40:c9:96:a4:b5:65:c5:32:34:6f:e4:b8:d3: d6:c5:c8:6f:f3:c2:22:4c:22:d7:ab:98:a9:57:77: 75:8c:a5:6c:e6:3e:7e:74:0f:85:85:cf:91:4b:51: d2:9c:29:08:d4:07:d1:28:cf:45:fb:36:61:95:93: fd:98:1d:fd:8c:71:98:21:37:51:b8:d9:5c:ce:d5: ee:2a:60:04:00:33:e4:56:e1:db:5d:81:b2:63:11: 77:11:7c:58:d2:db:eb:f5:ac:5b:c3:39:50:75:ec: c6:3c:43:1d:69:14:d9:f5:18:60:d6:18:ea:68:47: bb:f1:81:4a:88:b8:b2:fc:2b:92:60:59:d9:1b:ba: c4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9C:5E:D9:E4:9E:21:CA:F8:13:09:21:5C:EC:91:86:82:22:01:61 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/15xe2eSeIcr4EwkhXOyRhoIiAWE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:1710::/44 2a12:bec4:1730::/44 Signature Algorithm: sha256WithRSAEncryption 48:11:41:49:e9:8d:ca:93:7f:fa:fb:e3:fa:ba:60:ff:11:5d: 4d:1b:5f:16:e5:d9:cf:02:da:13:f9:90:32:01:a1:33:12:d9: f1:48:d5:2c:d0:06:c5:9e:ff:bf:49:f4:3c:5d:1e:49:f1:1c: 56:cb:92:d5:7d:f4:b1:46:55:c7:0e:fd:04:d9:f8:f6:37:73: fa:fb:e7:21:6c:90:19:df:bb:5a:04:48:04:d3:5b:0f:e7:43: c2:d4:90:66:48:38:9e:c3:e0:21:1f:8a:82:26:5a:d1:f3:a1: 48:3d:97:93:c5:d1:91:ad:5b:64:68:c8:e0:2a:05:cf:8b:e6: 9e:6d:e3:f4:50:47:fb:c2:71:0a:3e:0c:79:33:a3:2b:b2:86: ba:a4:43:06:a2:c8:22:e6:d8:bb:c3:4e:23:50:da:a0:75:2e: c9:11:76:1e:26:fe:4f:84:ee:a8:ad:b5:56:33:7a:05:9b:ff: db:e2:e1:51:3f:26:70:b7:81:ca:a2:27:ab:47:10:85:73:5c: db:39:a1:0e:ae:d7:ea:fa:4f:1a:e2:4a:b0:4c:6e:8b:c2:65: 6b:e8:70:03:45:4c:64:4e:68:a0:52:60:e0:6a:24:af:61:ed: 8d:23:bb:cd:c4:0c:0c:90:d8:12:1f:c9:71:66:dd:11:57:2b: 71:2b:1d:b4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EK/bEY1tkwUJUw0B8dpIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzljNWVkOWU0OWUyMWNhZjgxMzA5MjE1Y2VjOTE4NjgyMjIwMTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKUder0qqvR/LxeW5NJlHbVPsjTm k1b2+qJb8n7CA+PFb7ZHe1DEqe4djAaakc1NCjLUzLzt/A1GIQQ6OW5oV/2qTdcA filRkLr+Eav65gAcJqSFMGRNGvi0STCjV2FgucxnNjbxMcmmnaI0qEUU2TZitQuT cKSYvEDJlqS1ZcUyNG/kuNPWxchv88IiTCLXq5ipV3d1jKVs5j5+dA+Fhc+RS1HS nCkI1AfRKM9F+zZhlZP9mB39jHGYITdRuNlcztXuKmAEADPkVuHbXYGyYxF3EXxY 0tvr9axbwzlQdezGPEMdaRTZ9Rhg1hjqaEe78YFKiLiy/CuSYFnZG7rERwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNecXtnkniHK+BMJIVzskYaCIgFhMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvMTV4ZTJlU2VJY3I0RXdraFhPeVJob0lpQVdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKhK+xBcQ AwcEKhK+xBcwMA0GCSqGSIb3DQEBCwUAA4IBAQBIEUFJ6Y3Kk3/6++P6umD/EV1N G18W5dnPAtoT+ZAyAaEzEtnxSNUs0AbFnv+/SfQ8XR5J8RxWy5LVffSxRlXHDv0E 2fj2N3P6++chbJAZ37taBEgE01sP50PC1JBmSDiew+AhH4qCJlrR86FIPZeTxdGR rVtkaMjgKgXPi+aebeP0UEf7wnEKPgx5M6Mrsoa6pEMGosgi5ti7w04jUNqgdS7J EXYeJv5PhO6orbVWM3oFm//b4uFRPyZwt4HKoierRxCFc1zbOaEOrtfq+k8a4kqw TG6LwmVr6HADRUxkTmigUmDgaiSvYe2NI7vNxAwMkNgSH8lxZt0RVytxKx20 -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:01 2026 by rpki-client