This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/IAog0mAhjeJoKpCE7InfTrDEICE.roa File: IAog0mAhjeJoKpCE7InfTrDEICE.roa (raw, json) Hash identifier: paRV5HrLIvsP8VMOY2Cmvjxq2/JHKdV5V7s5Hxdb4ho= Subject key identifier: 20:0A:20:D2:60:21:8D:E2:68:2A:90:84:EC:89:DF:4E:B0:C4:20:21 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 019B76EB8641ACC749562FB4A90BD6A2AA88 Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/IAog0mAhjeJoKpCE7InfTrDEICE.roa Signing time: Thu 01 Jan 2026 00:18:25 +0000 ROA not before: Thu 01 Jan 2026 00:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52423 IP address blocks: 2a11:840:29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:86:41:ac:c7:49:56:2f:b4:a9:0b:d6:a2:aa:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Jan 1 00:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=200a20d260218de2682a9084ec89df4eb0c42021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:38:a1:cf:01:c8:cc:b6:bb:b1:2e:f7:11:56: 10:22:0c:9f:e7:b2:20:ec:74:e9:03:f7:48:10:71: cb:40:a8:60:91:bf:a3:e6:67:71:a9:31:08:cc:0d: fb:f4:0a:a4:00:20:e6:2b:7e:f8:d1:94:ba:71:f9: 66:6a:4e:c7:49:ff:e4:1f:ee:ab:a0:2c:7c:60:a3: 8b:f9:c0:1c:f0:b8:c3:5a:bf:f6:6c:76:c8:0f:91: 7d:73:54:fd:6e:e5:1c:1e:85:ec:d4:02:9a:d2:91: fd:f3:e6:34:d6:5c:d5:05:85:a4:f0:9c:01:48:c4: aa:7e:f3:f6:9a:9e:5c:21:ff:f3:df:f0:ea:fe:16: 82:10:fe:8c:96:9e:fc:78:4c:d5:70:8b:bc:7e:34: bf:7b:52:8c:97:ed:4b:57:9f:21:fa:db:90:62:f6: 8b:eb:9f:df:40:04:67:be:f9:cd:3d:fc:47:3f:e1: 5c:88:77:ea:68:f5:98:42:c6:3e:b8:a1:27:e6:46: 4f:ec:a3:4e:fe:5b:45:08:53:4d:41:f0:f1:2b:dc: 19:1c:a5:c4:e3:ad:71:4f:48:ca:ca:1d:9f:e6:08: eb:44:13:ab:5d:1f:65:ad:53:45:ab:09:5a:45:a8: 0c:cd:b9:cd:a3:dc:7c:9a:41:e9:a1:76:47:d6:db: 77:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0A:20:D2:60:21:8D:E2:68:2A:90:84:EC:89:DF:4E:B0:C4:20:21 X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/IAog0mAhjeJoKpCE7InfTrDEICE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:840:29::/48 Signature Algorithm: sha256WithRSAEncryption 41:d4:7d:1c:0e:ca:bf:4f:e2:57:73:2f:0b:9b:13:07:36:42: fd:32:74:ad:7f:43:f2:8a:d2:76:36:44:88:5c:24:b5:95:54: 94:33:a5:38:88:ca:41:90:08:de:9d:3e:c2:6c:66:dc:20:3d: 74:4c:fc:33:b1:57:9a:53:01:00:d8:f0:42:58:eb:ab:bd:09: e1:ba:34:98:31:2d:0d:c6:a1:aa:1c:2d:7c:47:d1:61:97:00: db:b7:cd:cf:16:54:ab:44:f0:ef:3c:b9:49:6d:8f:79:65:57: a5:fc:bd:d8:c7:dd:d4:1e:32:db:88:07:65:60:80:f7:18:3f: 03:6b:fa:52:18:9e:cd:1d:54:12:32:47:4b:19:96:2c:3f:96: 41:9b:38:b8:fd:af:02:52:fc:38:09:5a:06:05:cf:53:68:8f: ec:21:82:37:0b:f3:f6:95:82:39:00:3c:4e:86:3a:83:27:83: 5b:c3:2a:f0:97:4c:57:ce:a7:5a:7a:4f:49:fe:75:c5:1e:bb: b0:04:fa:31:2e:2a:1c:33:db:e0:58:9b:03:77:2e:b8:a7:2c: cb:e5:03:05:76:36:39:43:d6:ad:10:53:e7:0d:4b:7d:33:69: f9:6f:79:95:7e:d0:11:47:25:b2:1b:8e:5c:dd:a0:3f:f4:2f: b3:32:e6:df -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt264ZBrMdJVi+0qQvWoqqIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjYwMTAxMDAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDBhMjBkMjYwMjE4ZGUyNjgyYTkwODRlYzg5ZGY0ZWIwYzQyMDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jihzwHIzLa7sS73EVYQIgyf57Ig 7HTpA/dIEHHLQKhgkb+j5mdxqTEIzA379AqkACDmK3740ZS6cflmak7HSf/kH+6r oCx8YKOL+cAc8LjDWr/2bHbID5F9c1T9buUcHoXs1AKa0pH98+Y01lzVBYWk8JwB SMSqfvP2mp5cIf/z3/Dq/haCEP6Mlp78eEzVcIu8fjS/e1KMl+1LV58h+tuQYvaL 65/fQARnvvnNPfxHP+FciHfqaPWYQsY+uKEn5kZP7KNO/ltFCFNNQfDxK9wZHKXE 461xT0jKyh2f5gjrRBOrXR9lrVNFqwlaRagMzbnNo9x8mkHpoXZH1tt3HQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCAKINJgIY3iaCqQhOyJ306wxCAhMB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvSUFvZzBtQWhqZUpvS3BDRTdJbmZUckRFSUNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhEIQAAp MA0GCSqGSIb3DQEBCwUAA4IBAQBB1H0cDsq/T+JXcy8LmxMHNkL9MnStf0PyitJ2 NkSIXCS1lVSUM6U4iMpBkAjenT7CbGbcID10TPwzsVeaUwEA2PBCWOurvQnhujSY MS0NxqGqHC18R9FhlwDbt83PFlSrRPDvPLlJbY95ZVel/L3Yx93UHjLbiAdlYID3 GD8Da/pSGJ7NHVQSMkdLGZYsP5ZBmzi4/a8CUvw4CVoGBc9TaI/sIYI3C/P2lYI5 ADxOhjqDJ4Nbwyrwl0xXzqdaek9J/nXFHruwBPoxLiocM9vgWJsDdy64pyzL5QMF djY5Q9atEFPnDUt9M2n5b3mVftARRyWyG45c3aA/9C+zMubf -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:33 2026 by rpki-client