This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/AgwO9R-pRMLyw7bh958mT_v3WVY.roa File: AgwO9R-pRMLyw7bh958mT_v3WVY.roa (raw, json) Hash identifier: MDMg8wGkMS6ctgOBF4oWZmRvlWiraEIeGClPW0F6tFk= Subject key identifier: 02:0C:0E:F5:1F:A9:44:C2:F2:C3:B6:E1:F7:9F:26:4F:FB:F7:59:56 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F8587D1AF890056D4656BEFBD105B73 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/AgwO9R-pRMLyw7bh958mT_v3WVY.roa Signing time: Fri 02 Jan 2026 16:23:35 +0000 ROA not before: Fri 02 Jan 2026 16:23:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 922 IP address blocks: 2a0f:b241::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:87:d1:af:89:00:56:d4:65:6b:ef:bd:10:5b:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=020c0ef51fa944c2f2c3b6e1f79f264ffbf75956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:27:ac:71:27:1f:74:46:fc:b8:9b:1c:99:b0: d4:91:23:b1:94:09:06:d0:36:b2:55:6a:24:ef:89: 67:64:fc:f0:4f:27:ab:9d:e5:0b:a0:67:08:bd:f7: fa:fb:25:55:6c:5c:1b:01:c6:18:cd:1d:e6:a8:80: bb:35:f9:f6:3f:04:64:3a:87:a3:de:c7:c5:87:cd: e2:28:c1:16:41:67:8f:57:95:e3:e1:14:fd:f3:9d: ec:87:80:45:5b:3b:52:5d:69:5b:89:25:8b:d1:f8: d1:88:56:69:f1:43:72:ab:9d:5b:72:c4:de:ee:31: 78:e9:11:a8:68:3c:93:1c:0d:cf:4e:b2:c3:74:e6: b9:5c:9b:fc:8b:fb:ba:dd:4e:15:ff:68:b0:03:27: 98:83:2f:13:90:c2:e8:28:c4:1d:1b:5c:8b:9a:ad: 47:b0:b0:d9:ed:e5:86:a4:45:b8:a9:d5:36:d2:4a: 1c:a3:e4:dd:da:40:c8:5b:09:bd:9d:11:8c:01:75: 22:c0:8b:53:92:af:ca:bd:c6:a5:16:47:bf:da:32: b7:62:33:a2:1e:d3:fc:91:bc:d4:7b:f7:e3:4b:d7: 32:16:19:d2:f7:f1:4d:d3:6c:43:2c:4a:84:8e:24: 4a:80:44:c6:40:88:93:d9:9a:eb:67:c8:fb:28:ae: 58:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0C:0E:F5:1F:A9:44:C2:F2:C3:B6:E1:F7:9F:26:4F:FB:F7:59:56 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/AgwO9R-pRMLyw7bh958mT_v3WVY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b241::/48 Signature Algorithm: sha256WithRSAEncryption 75:01:78:11:2a:55:a0:92:bb:7d:f9:ab:e7:de:1c:61:42:77: 25:c5:03:3d:de:91:a6:4b:db:0e:a6:6e:9a:3a:da:2b:32:c4: 6e:c8:c9:53:02:08:72:9a:10:a6:cc:b5:3c:58:ad:23:5b:72: 20:dd:a0:52:13:4f:c2:03:60:51:21:9c:f2:98:30:67:42:a4: 74:70:9a:6a:ff:9a:4c:61:3b:99:a9:8e:84:fd:23:90:a3:af: 9c:7c:2f:b2:90:7b:d1:8e:8b:0e:f3:e8:b9:61:a2:9e:1e:33: 09:ed:8b:0e:a6:52:c7:6d:da:87:ab:c3:73:c0:bb:ea:8d:6e: 54:ee:31:46:40:16:48:7d:78:d6:9d:33:3a:82:bb:7b:3e:c8: 40:53:28:86:20:77:45:6d:92:7b:70:ad:d0:eb:79:e2:c9:85: 19:08:e8:39:53:b9:a9:7c:0d:55:ee:ea:3f:6e:53:aa:28:0f: a9:2d:4e:ae:e8:28:d6:e3:53:84:b6:6f:77:ca:84:6b:bb:05: 64:e9:ec:90:0d:01:09:92:41:d3:5e:de:a4:0e:4b:94:9f:ce: 49:b2:c3:9c:2f:81:47:99:9d:f2:58:7d:d7:d5:fc:16:fc:26: 78:e7:69:48:e1:9a:5c:aa:99:18:c4:e0:13:36:65:f3:2e:60: ad:45:e7:05 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/hYfRr4kAVtRla++9EFtzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjBjMGVmNTFmYTk0NGMyZjJjM2I2ZTFmNzlmMjY0ZmZiZjc1OTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCescScfdEb8uJscmbDUkSOxlAkG 0DayVWok74lnZPzwTyerneULoGcIvff6+yVVbFwbAcYYzR3mqIC7Nfn2PwRkOoej 3sfFh83iKMEWQWePV5Xj4RT9853sh4BFWztSXWlbiSWL0fjRiFZp8UNyq51bcsTe 7jF46RGoaDyTHA3PTrLDdOa5XJv8i/u63U4V/2iwAyeYgy8TkMLoKMQdG1yLmq1H sLDZ7eWGpEW4qdU20koco+Td2kDIWwm9nRGMAXUiwItTkq/KvcalFke/2jK3YjOi HtP8kbzUe/fjS9cyFhnS9/FN02xDLEqEjiRKgETGQIiT2ZrrZ8j7KK5YgQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAIMDvUfqUTC8sO24fefJk/791lWMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvQWd3TzlSLXBSTUx5dzdiaDk1OG1UX3YzV1ZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQAA MA0GCSqGSIb3DQEBCwUAA4IBAQB1AXgRKlWgkrt9+avn3hxhQnclxQM93pGmS9sO pm6aOtorMsRuyMlTAghymhCmzLU8WK0jW3Ig3aBSE0/CA2BRIZzymDBnQqR0cJpq /5pMYTuZqY6E/SOQo6+cfC+ykHvRjosO8+i5YaKeHjMJ7YsOplLHbdqHq8NzwLvq jW5U7jFGQBZIfXjWnTM6grt7PshAUyiGIHdFbZJ7cK3Q63niyYUZCOg5U7mpfA1V 7uo/blOqKA+pLU6u6CjW41OEtm93yoRruwVk6eyQDQEJkkHTXt6kDkuUn85JssOc L4FHmZ3yWH3X1fwW/CZ452lI4ZpcqpkYxOATNmXzLmCtRecF -----END CERTIFICATE-----Generated at Wed Jan 21 11:57:48 2026 by rpki-client