This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/Ag9N_F37RcuQM8A4wSEwNzlbKjQ.roa File: Ag9N_F37RcuQM8A4wSEwNzlbKjQ.roa (raw, json) Hash identifier: 2K+D9bxizH0sqWU2qEMlwlkxQrgykxO7hyEi+m+gV4g= Subject key identifier: 02:0F:4D:FC:5D:FB:45:CB:90:33:C0:38:C1:21:30:37:39:5B:2A:34 Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Certificate serial: 019B7A5B49456C189D8347593540953E2769 Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/Ag9N_F37RcuQM8A4wSEwNzlbKjQ.roa Signing time: Thu 01 Jan 2026 16:19:21 +0000 ROA not before: Thu 01 Jan 2026 16:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 10111 IP address blocks: 2a12:f8c3::/36 maxlen: 36 2a12:f8c3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:49:45:6c:18:9d:83:47:59:35:40:95:3e:27:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Validity Not Before: Jan 1 16:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=020f4dfc5dfb45cb9033c038c1213037395b2a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4e:d5:85:f7:d3:4a:e5:a0:ca:86:4e:f3:70: 73:f4:4b:9c:87:6e:62:3b:61:fb:0f:9c:5b:3d:6c: 35:18:43:59:cb:28:d9:29:77:52:f7:d1:dc:46:e2: 96:53:e4:10:1a:6f:b9:bf:25:e4:64:c9:d7:7e:fc: 86:da:e1:33:f2:13:48:23:7e:78:bf:0b:a9:43:ab: f3:1c:cd:bb:25:83:8c:13:ee:b9:56:af:fb:9a:a8: 56:1d:97:ef:ca:a0:75:ca:fe:09:bf:62:71:5a:fc: 62:f0:c3:45:ba:8e:3a:74:60:c5:23:8b:55:61:b7: 5a:c0:45:7c:7d:7f:82:89:cd:ae:9a:1a:0a:83:fa: c2:dd:6f:58:e9:7f:ff:90:e6:d2:49:63:19:45:e1: d8:d5:49:f5:9c:b2:8d:87:08:0d:41:58:bc:16:b7: a6:d2:1f:10:35:87:5f:f3:f4:e3:d6:11:ad:76:9b: 08:75:7c:56:34:33:80:93:07:5d:43:cc:2c:85:03: 67:24:a1:e9:5c:9e:71:a1:1d:ac:f1:c6:ff:2f:98: 14:b1:0b:11:fc:17:09:cc:d8:3c:59:39:27:34:f2: 9d:06:9d:9e:ba:3e:9e:30:6a:f3:a1:eb:aa:67:df: d8:84:06:d6:6d:63:68:be:96:06:f7:14:d7:79:9a: 53:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0F:4D:FC:5D:FB:45:CB:90:33:C0:38:C1:21:30:37:39:5B:2A:34 X509v3 Authority Key Identifier: keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/Ag9N_F37RcuQM8A4wSEwNzlbKjQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:f8c3::/36 Signature Algorithm: sha256WithRSAEncryption 26:74:46:b4:85:7f:3a:96:8e:e4:47:07:c9:0b:e8:a0:9b:dd: 11:ff:d0:62:a5:75:1e:9d:2d:bb:d4:bf:36:3f:0f:b3:a3:69: 41:6a:2e:6a:0e:8d:94:74:1f:f1:07:1e:f1:af:f7:4d:84:a1: 44:98:35:b9:a5:8e:fd:22:49:36:f3:b8:6d:f4:d0:63:76:1d: 3d:8d:3a:6f:cd:8f:c6:52:47:b2:43:2b:57:45:7e:72:ce:cf: c4:d2:4a:ae:44:00:c4:3f:5e:83:04:47:43:65:81:56:09:e9: 90:01:58:3d:9f:18:df:51:6a:82:1a:93:3f:3a:2f:65:da:14: 12:4e:a0:06:d5:8e:05:d3:a0:dc:41:79:ef:0c:bc:e4:b5:03: 4c:66:ac:e5:ba:1b:91:95:4e:d5:ec:d0:bb:4f:4a:44:58:19: 9a:85:cf:ac:89:6f:4b:0e:c8:34:53:13:c6:65:cf:11:2a:4f: 18:45:9f:2b:8b:6e:0a:c1:d6:8e:46:c1:03:5a:97:13:88:f7: 0a:39:58:08:49:86:9e:61:9f:b4:7c:11:b0:a1:1f:92:af:4e: 68:c1:81:28:3f:fe:d1:bc:ff:0d:49:2a:0c:e4:2a:c7:18:94: 5c:49:98:d6:f7:1a:5e:7e:59:56:98:52:be:93:82:82:4c:79: 8f:95:78:8d -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt6W0lFbBidg0dZNUCVPidpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk Yjg5M2EwHhcNMjYwMTAxMTYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjBmNGRmYzVkZmI0NWNiOTAzM2MwMzhjMTIxMzAzNzM5NWIyYTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2E7VhffTSuWgyoZO83Bz9Euch25i O2H7D5xbPWw1GENZyyjZKXdS99HcRuKWU+QQGm+5vyXkZMnXfvyG2uEz8hNII354 vwupQ6vzHM27JYOME+65Vq/7mqhWHZfvyqB1yv4Jv2JxWvxi8MNFuo46dGDFI4tV YbdawEV8fX+Cic2umhoKg/rC3W9Y6X//kObSSWMZReHY1Un1nLKNhwgNQVi8Frem 0h8QNYdf8/Tj1hGtdpsIdXxWNDOAkwddQ8wshQNnJKHpXJ5xoR2s8cb/L5gUsQsR /BcJzNg8WTknNPKdBp2euj6eMGrzoeuqZ9/YhAbWbWNovpYG9xTXeZpT2wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFAIPTfxd+0XLkDPAOMEhMDc5Wyo0MB8GA1UdIwQY MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt ODcyNTBmNWEwN2NjLzEvQWc5Tl9GMzdSY3VRTThBNHdTRXdOemxiS2pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKhL4wwAw DQYJKoZIhvcNAQELBQADggEBACZ0RrSFfzqWjuRHB8kL6KCb3RH/0GKldR6dLbvU vzY/D7OjaUFqLmoOjZR0H/EHHvGv902EoUSYNbmljv0iSTbzuG300GN2HT2NOm/N j8ZSR7JDK1dFfnLOz8TSSq5EAMQ/XoMER0NlgVYJ6ZABWD2fGN9RaoIakz86L2Xa FBJOoAbVjgXToNxBee8MvOS1A0xmrOW6G5GVTtXs0LtPSkRYGZqFz6yJb0sOyDRT E8ZlzxEqTxhFnyuLbgrB1o5GwQNalxOI9wo5WAhJhp5hn7R8EbChH5KvTmjBgSg/ /tG8/w1JKgzkKscYlFxJmNb3Gl5+WVaYUr6TgoJMeY+VeI0= -----END CERTIFICATE-----Generated at Sun Jan 25 13:09:20 2026 by rpki-client