This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/24MZAzP5YlY1cE41wn6tQFIaBjg.roa File: 24MZAzP5YlY1cE41wn6tQFIaBjg.roa (raw, json) Hash identifier: NsShhfNUiwYMYGMKy6iBGbZjD6uFSTEf+buoT71FY9E= Subject key identifier: DB:83:19:03:33:F9:62:56:35:70:4E:35:C2:7E:AD:40:52:1A:06:38 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910ACAC0BDD608C0F6505735C75BC81 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/24MZAzP5YlY1cE41wn6tQFIaBjg.roa Signing time: Thu 01 Jan 2026 10:18:14 +0000 ROA not before: Thu 01 Jan 2026 10:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213574 IP address blocks: 2a12:bec4:1170::/44 maxlen: 44 2a12:bec4:16e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ac:ac:0b:dd:60:8c:0f:65:05:73:5c:75:bc:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db83190333f9625635704e35c27ead40521a0638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ec:e5:3b:54:d9:b8:c7:ee:d0:f7:b3:0e:fa: 3e:01:4c:82:a2:e3:a1:14:27:2d:2f:0c:9e:a2:be: 74:33:61:9c:f8:ce:00:63:86:36:40:f4:07:6c:eb: 6b:20:cc:4f:a1:08:55:db:97:c9:b8:1e:94:ce:b9: 3d:4f:73:e4:48:26:09:20:32:5c:32:ef:91:df:ca: e9:1d:4c:51:fb:8d:8e:ac:3b:23:80:be:25:dd:03: 15:b8:99:ec:94:f2:df:54:31:f8:8e:e5:07:ec:1b: 3d:0b:bc:5f:eb:96:0d:48:20:de:7d:9a:ea:39:f8: f7:45:2b:9d:58:c0:d1:74:35:4f:d1:44:43:c7:cf: 50:9e:cc:1a:14:c8:16:af:c1:f5:58:4f:78:1a:b9: 1e:e0:db:44:04:11:8d:19:13:37:dd:69:bf:c1:54: 1c:0a:5d:8a:33:d8:0e:0a:c5:73:09:7d:19:78:60: 73:f0:3c:b2:1c:41:b2:b1:70:dd:b6:df:65:dd:94: 1e:c1:20:e8:28:81:df:50:a2:90:7a:b2:0d:83:a4: b0:a3:98:b3:b0:60:1f:fc:36:8f:53:6d:0a:8c:65: 72:d8:18:c5:cc:0b:4f:60:50:4b:71:65:80:ed:4f: e3:9b:a9:d5:33:b5:d4:c0:1e:16:ab:ae:f4:28:62: 89:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:83:19:03:33:F9:62:56:35:70:4E:35:C2:7E:AD:40:52:1A:06:38 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/24MZAzP5YlY1cE41wn6tQFIaBjg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:1170::/44 2a12:bec4:16e0::/48 Signature Algorithm: sha256WithRSAEncryption 84:1f:60:28:4f:94:98:91:53:e2:94:62:36:06:ef:e9:41:a0: 1a:9b:88:1f:c0:1f:18:34:e0:37:47:21:6f:e8:b3:2e:fa:49: 80:12:8a:3a:5b:1b:ea:00:7c:59:1b:79:d8:e8:70:b7:12:e6: a2:4e:d2:ae:f3:82:1b:9f:5f:8f:26:a8:30:5d:35:a2:aa:c1: f1:94:d8:6d:b6:99:ee:1d:f3:1d:85:79:d0:dc:40:a0:50:9b: b6:f1:d9:1a:b1:68:e2:15:0b:39:6a:1a:fd:12:42:1d:fe:87: b3:9a:77:b6:7d:8b:f0:e1:79:dd:a7:7d:e9:2b:be:73:2c:54: 41:fb:da:24:26:66:d2:21:6c:49:bb:28:92:0b:c1:41:f1:f7: cf:f0:05:98:82:8a:da:48:49:a2:76:04:bf:3b:3a:47:7e:8a: 52:e5:62:6d:99:36:c7:7f:5d:64:0f:cc:03:af:dc:96:05:d0: 0f:9b:e6:34:84:4b:9d:20:10:4a:24:2e:5b:cd:c3:db:81:fa: 74:2d:b0:24:d5:6f:39:0a:eb:c7:9b:ff:54:47:fe:04:be:eb: 65:10:e8:e3:46:e9:7a:b1:88:19:28:4f:fb:7c:8d:42:d8:e3: 58:e6:b4:12:b4:f8:63:66:83:4b:89:d3:d1:5f:a1:c3:5c:2a: 88:0c:f6:69 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EKysC91gjA9lBXNcdbyBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjgzMTkwMzMzZjk2MjU2MzU3MDRlMzVjMjdlYWQ0MDUyMWEwNjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ezlO1TZuMfu0PezDvo+AUyCouOh FCctLwyeor50M2Gc+M4AY4Y2QPQHbOtrIMxPoQhV25fJuB6Uzrk9T3PkSCYJIDJc Mu+R38rpHUxR+42OrDsjgL4l3QMVuJnslPLfVDH4juUH7Bs9C7xf65YNSCDefZrq Ofj3RSudWMDRdDVP0URDx89QnswaFMgWr8H1WE94Grke4NtEBBGNGRM33Wm/wVQc Cl2KM9gOCsVzCX0ZeGBz8DyyHEGysXDdtt9l3ZQewSDoKIHfUKKQerINg6Swo5iz sGAf/DaPU20KjGVy2BjFzAtPYFBLcWWA7U/jm6nVM7XUwB4Wq670KGKJuQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNuDGQMz+WJWNXBONcJ+rUBSGgY4MB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvMjRNWkF6UDVZbFkxY0U0MXduNnRRRklhQmpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKhK+xBFw AwcAKhK+xBbgMA0GCSqGSIb3DQEBCwUAA4IBAQCEH2AoT5SYkVPilGI2Bu/pQaAa m4gfwB8YNOA3RyFv6LMu+kmAEoo6WxvqAHxZG3nY6HC3EuaiTtKu84Ibn1+PJqgw XTWiqsHxlNhttpnuHfMdhXnQ3ECgUJu28dkasWjiFQs5ahr9EkId/oezmne2fYvw 4Xndp33pK75zLFRB+9okJmbSIWxJuyiSC8FB8ffP8AWYgoraSEmidgS/OzpHfopS 5WJtmTbHf11kD8wDr9yWBdAPm+Y0hEudIBBKJC5bzcPbgfp0LbAk1W85CuvHm/9U R/4EvutlEOjjRul6sYgZKE/7fI1C2ONY5rQStPhjZoNLidPRX6HDXCqIDPZp -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:50 2026 by rpki-client