This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/f4anPogw_5bD-TX38J-wkcwoOvE.roa File: f4anPogw_5bD-TX38J-wkcwoOvE.roa (raw, json) Hash identifier: tTYtYXgzxHJaajK/EVKLPQB+fdNiO90TboB+Z5GKYs0= Subject key identifier: 7F:86:A7:3E:88:30:FF:96:C3:F9:35:F7:F0:9F:B0:91:CC:28:3A:F1 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910C22155962FC63B0DAC218E06B6BC Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/f4anPogw_5bD-TX38J-wkcwoOvE.roa Signing time: Thu 01 Jan 2026 10:18:19 +0000 ROA not before: Thu 01 Jan 2026 10:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215804 IP address blocks: 2a12:bec0:610::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c2:21:55:96:2f:c6:3b:0d:ac:21:8e:06:b6:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f86a73e8830ff96c3f935f7f09fb091cc283af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e2:a1:a9:07:43:91:21:45:52:84:dd:7d:b0: 1f:cd:8b:08:61:c7:fb:07:c5:57:70:db:3a:cd:81: 0d:3b:f8:25:f5:a8:35:7a:d0:5f:b9:79:45:5d:f3: 98:a0:fa:bd:aa:0f:cb:a7:ea:73:7f:c0:d7:35:58: e0:63:04:b7:c9:04:4b:85:0f:21:0f:eb:68:c6:74: 95:21:b2:18:dd:55:01:ed:68:6e:f1:c0:ba:59:5d: 1a:16:8c:fa:74:3e:f6:57:be:de:cd:8c:d6:34:0f: 4d:cc:6f:34:00:95:a6:7b:d6:12:c4:cc:e2:09:c6: c2:28:46:fe:b0:d9:c5:b7:88:8b:1a:21:8e:51:5d: bc:a2:b3:39:2e:3b:f2:c8:ce:92:03:ba:7b:37:8a: 4e:61:b3:c2:66:a1:66:cc:a6:d2:92:34:5b:1b:14: 46:62:85:8b:66:e8:52:9e:3f:a0:90:39:a6:2b:f5: d2:3f:9c:34:48:b1:20:84:93:a8:f9:3d:b0:68:c2: f2:63:d1:a9:7f:64:f7:25:49:d1:c8:e3:7c:80:9d: 1a:87:db:e4:7f:79:29:fb:25:48:da:0f:7f:6a:4f: aa:28:59:42:81:67:4e:15:46:4f:d8:04:2c:07:ee: b0:89:af:d4:95:16:99:08:c2:90:57:f6:e6:6a:46: 85:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:86:A7:3E:88:30:FF:96:C3:F9:35:F7:F0:9F:B0:91:CC:28:3A:F1 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/f4anPogw_5bD-TX38J-wkcwoOvE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:610::/44 Signature Algorithm: sha256WithRSAEncryption c2:4b:a7:f3:95:f8:1d:17:43:0e:58:e1:9e:79:30:49:b0:f0: 76:e5:87:35:41:3e:30:78:b9:5c:ef:aa:be:15:bd:30:0d:ac: 17:09:1d:fb:18:30:b8:f9:b3:5b:97:00:bc:00:1b:cd:ba:0a: 77:f8:4e:a3:09:28:1a:fb:fa:7b:ba:53:96:89:25:42:54:62: ed:fd:10:ff:b1:01:55:64:ef:7d:81:90:8f:4c:d0:8f:09:f2: 93:7b:a5:b9:7e:e2:74:22:50:a9:84:73:fa:b7:7b:67:59:bf: 6b:87:d4:2a:2d:32:2a:35:4f:63:6a:10:d3:dc:82:d9:e4:75: c2:36:3d:99:c5:f1:f2:63:b8:b1:2d:6e:b4:32:4a:d0:ba:8b: 30:17:f7:8d:02:e7:8e:21:9d:5b:0a:37:94:32:80:56:6d:43: dc:7c:7c:42:aa:38:94:f8:06:41:da:04:67:9a:5d:fa:57:4d: 8b:23:fd:f3:78:43:c7:14:8e:5e:9c:1b:f8:93:02:a1:b5:b9: 95:6d:9a:d3:60:a3:42:02:7f:b7:01:8e:55:9f:fb:b1:8d:71: 3b:e1:76:46:22:d6:01:ca:44:34:a7:e2:77:ff:3f:0f:f4:25: 3d:71:ab:4f:ee:e1:d5:0a:72:71:52:e6:b4:6d:c6:b4:76:7c: ca:6a:37:05 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EMIhVZYvxjsNrCGOBra8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Zjg2YTczZTg4MzBmZjk2YzNmOTM1ZjdmMDlmYjA5MWNjMjgzYWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuKhqQdDkSFFUoTdfbAfzYsIYcf7 B8VXcNs6zYENO/gl9ag1etBfuXlFXfOYoPq9qg/Lp+pzf8DXNVjgYwS3yQRLhQ8h D+toxnSVIbIY3VUB7Whu8cC6WV0aFoz6dD72V77ezYzWNA9NzG80AJWme9YSxMzi CcbCKEb+sNnFt4iLGiGOUV28orM5LjvyyM6SA7p7N4pOYbPCZqFmzKbSkjRbGxRG YoWLZuhSnj+gkDmmK/XSP5w0SLEghJOo+T2waMLyY9Gpf2T3JUnRyON8gJ0ah9vk f3kp+yVI2g9/ak+qKFlCgWdOFUZP2AQsB+6wia/UlRaZCMKQV/bmakaFewIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFH+Gpz6IMP+Ww/k19/CfsJHMKDrxMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvZjRhblBvZ3dfNWJELVRYMzhKLXdrY3dvT3ZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAYQ MA0GCSqGSIb3DQEBCwUAA4IBAQDCS6fzlfgdF0MOWOGeeTBJsPB25Yc1QT4weLlc 76q+Fb0wDawXCR37GDC4+bNblwC8ABvNugp3+E6jCSga+/p7ulOWiSVCVGLt/RD/ sQFVZO99gZCPTNCPCfKTe6W5fuJ0IlCphHP6t3tnWb9rh9QqLTIqNU9jahDT3ILZ 5HXCNj2ZxfHyY7ixLW60MkrQuoswF/eNAueOIZ1bCjeUMoBWbUPcfHxCqjiU+AZB 2gRnml36V02LI/3zeEPHFI5enBv4kwKhtbmVbZrTYKNCAn+3AY5Vn/uxjXE74XZG ItYBykQ0p+J3/z8P9CU9catP7uHVCnJxUua0bca0dnzKajcF -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:02 2026 by rpki-client