This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/AGIcyv6akkuecB-WP_iweJslK-o.roa File: AGIcyv6akkuecB-WP_iweJslK-o.roa (raw, json) Hash identifier: kZrndDnlcrxedsLlgmQqLvVG/016dDI5arID3t6+DWA= Subject key identifier: 00:62:1C:CA:FE:9A:92:4B:9E:70:1F:96:3F:F8:B0:78:9B:25:2B:EA Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Certificate serial: 019B7BA36F55EBCD4351658113C8A91A6FDD Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/AGIcyv6akkuecB-WP_iweJslK-o.roa Signing time: Thu 01 Jan 2026 22:17:47 +0000 ROA not before: Thu 01 Jan 2026 22:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211980 IP address blocks: 2a01:e901:166::/48 maxlen: 48 2a01:e901:176::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:6f:55:eb:cd:43:51:65:81:13:c8:a9:1a:6f:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Validity Not Before: Jan 1 22:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00621ccafe9a924b9e701f963ff8b0789b252bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a5:06:b8:8d:db:8f:1e:47:e3:66:fd:17:99: b2:de:07:ea:04:ed:62:de:3c:bc:76:fc:82:20:08: f3:fa:02:c6:ef:e1:3e:6f:d9:a0:37:27:1b:51:ba: 9a:3e:91:74:07:22:e4:12:03:8b:f2:af:d3:41:5b: 82:47:7b:e2:8a:40:85:8e:d4:2e:6a:e0:09:78:2a: b5:bb:4a:ef:32:29:f2:c2:b1:1b:ab:be:e2:f8:18: fb:48:70:5d:fd:9c:58:0f:e4:b4:f0:86:bc:5d:f2: 02:9a:0c:17:da:d2:88:67:b7:e3:0a:72:1b:44:7d: e8:fb:fb:95:82:43:19:88:1a:37:d3:ec:ee:2e:66: 56:62:5e:6c:f9:43:3f:95:95:0b:ee:88:01:20:c1: ba:e5:75:9f:7b:41:f6:81:c5:68:0c:95:2e:39:3e: 90:ec:2d:c2:2e:e4:15:79:d0:35:8b:1b:b5:f4:39: 9c:6f:01:a0:1c:96:27:66:19:3b:cb:56:78:3a:5a: f4:83:83:5c:63:b3:f1:fb:92:33:f4:67:2f:b0:a4: 6e:2e:53:68:f6:f3:4f:12:33:f9:b7:bf:16:8a:be: 2a:5b:e6:2c:8f:82:97:1b:0c:c5:41:d3:26:0f:5f: 5a:0b:57:be:0d:a2:7e:e1:f4:ec:da:fd:c6:bd:bf: 98:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:62:1C:CA:FE:9A:92:4B:9E:70:1F:96:3F:F8:B0:78:9B:25:2B:EA X509v3 Authority Key Identifier: keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/AGIcyv6akkuecB-WP_iweJslK-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e901:166::/48 2a01:e901:176::/48 Signature Algorithm: sha256WithRSAEncryption 1f:a0:3a:2b:d7:f1:15:e8:7f:e6:01:b7:e9:cd:99:87:0e:90: 9d:88:34:2f:30:89:94:6b:17:e0:03:28:0e:ff:16:66:18:ad: 2c:05:07:78:94:4f:55:b1:10:de:b3:88:bc:a8:48:35:8b:fa: 2c:6a:52:cf:41:c7:c6:af:c9:37:11:a4:74:af:76:e0:41:8b: 0f:2f:37:14:a9:07:ac:eb:07:c1:ae:39:9b:ba:e0:a8:40:91: 54:4f:e8:22:5b:74:a9:e4:5c:d8:e9:00:21:8c:de:fd:ab:a1: 01:3a:60:14:9b:0c:43:f3:1e:e2:58:86:56:c8:c0:0a:33:d5: 7d:28:b8:0c:af:95:90:ef:3b:e0:9b:dd:58:57:f8:37:94:28: 60:da:23:ef:ab:1f:a1:ed:ff:d0:ee:0e:fd:51:d9:1b:b0:ec: 73:c3:fd:26:68:18:65:10:3e:ae:97:cf:9a:34:8a:56:44:2a: 5d:95:3b:17:43:6b:6e:cf:bf:56:9f:ae:cf:8e:8f:cb:6f:a4: 1a:b3:5c:04:9c:15:80:ae:a2:5f:84:21:ad:fb:e7:54:32:ad: 9d:d1:8f:5c:ba:c6:34:50:11:f1:6a:56:27:77:6a:a1:51:6f: ee:07:df:f0:73:14:8c:1e:ea:13:50:a4:0b:d2:7e:bf:f8:9c: 3d:86:c7:0b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7o29V681DUWWBE8ipGm/dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjhiNGUwZWY4MTA2ZjBlMTJhYjhlNTAxZDJhYTRlMzZi NzgzYzIwHhcNMjYwMTAxMjIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDYyMWNjYWZlOWE5MjRiOWU3MDFmOTYzZmY4YjA3ODliMjUyYmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKUGuI3bjx5H42b9F5my3gfqBO1i 3jy8dvyCIAjz+gLG7+E+b9mgNycbUbqaPpF0ByLkEgOL8q/TQVuCR3viikCFjtQu auAJeCq1u0rvMinywrEbq77i+Bj7SHBd/ZxYD+S08Ia8XfICmgwX2tKIZ7fjCnIb RH3o+/uVgkMZiBo30+zuLmZWYl5s+UM/lZUL7ogBIMG65XWfe0H2gcVoDJUuOT6Q 7C3CLuQVedA1ixu19DmcbwGgHJYnZhk7y1Z4Olr0g4NcY7Px+5Iz9GcvsKRuLlNo 9vNPEjP5t78Wir4qW+Ysj4KXGwzFQdMmD19aC1e+DaJ+4fTs2v3Gvb+Y8QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFABiHMr+mpJLnnAflj/4sHibJSvqMB8GA1UdIwQY MBaAFClotODvgQbw4Sq45QHSqk42t4PCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQt NDRmOGVkNWQ2MWQ3LzEvQUdJY3l2NmFra3VlY0ItV1BfaXdlSnNsSy1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQtNDRmOGVkNWQ2MWQ3 LzEvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgHpAQFm AwcAKgHpAQF2MA0GCSqGSIb3DQEBCwUAA4IBAQAfoDor1/EV6H/mAbfpzZmHDpCd iDQvMImUaxfgAygO/xZmGK0sBQd4lE9VsRDes4i8qEg1i/osalLPQcfGr8k3EaR0 r3bgQYsPLzcUqQes6wfBrjmbuuCoQJFUT+giW3Sp5FzY6QAhjN79q6EBOmAUmwxD 8x7iWIZWyMAKM9V9KLgMr5WQ7zvgm91YV/g3lChg2iPvqx+h7f/Q7g79UdkbsOxz w/0maBhlED6ul8+aNIpWRCpdlTsXQ2tuz79Wn67Pjo/Lb6Qas1wEnBWArqJfhCGt ++dUMq2d0Y9cusY0UBHxalYnd2qhUW/uB9/wcxSMHuoTUKQL0n6/+Jw9hscL -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:10 2026 by rpki-client