This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AGaRt-gDoyv_pYyZ_T8eoXcnD-A.roa File: AGaRt-gDoyv_pYyZ_T8eoXcnD-A.roa (raw, json) Hash identifier: MAQNfe/6tn4TJereIv8JwwVXh0JtLxWLWTiHN8sn3Wg= Subject key identifier: 00:66:91:B7:E8:03:A3:2B:FF:A5:8C:99:FD:3F:1E:A1:77:27:0F:E0 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D1BF29A9D2B489C8C71326CC8A6AD Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AGaRt-gDoyv_pYyZ_T8eoXcnD-A.roa Signing time: Fri 02 Jan 2026 06:20:12 +0000 ROA not before: Fri 02 Jan 2026 06:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209300 IP address blocks: 2a0e:b107:740::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:1b:f2:9a:9d:2b:48:9c:8c:71:32:6c:c8:a6:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=006691b7e803a32bffa58c99fd3f1ea177270fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:35:9c:d4:b5:2b:30:3a:c9:05:a4:ca:a5:64: 27:fc:9e:27:62:db:13:9f:1d:30:86:bc:83:3d:06: ed:03:4f:56:22:0b:3a:d2:1e:5d:7d:a6:9b:d9:23: 3e:07:9c:64:28:88:64:d2:37:45:07:28:52:a8:9e: f6:9b:6c:06:7b:cd:60:ce:10:84:3f:df:72:42:9f: 5f:52:6f:a3:b9:24:65:d9:8f:13:e6:43:f8:27:08: 4f:9a:36:67:6a:3e:1b:eb:f6:bd:eb:da:da:0e:b0: ea:46:84:32:13:4a:18:74:cd:9d:6f:3a:d9:1b:ca: 1f:cf:0a:2f:62:3a:a8:10:d8:3d:05:2c:1b:2a:b3: a4:dc:86:ce:63:54:62:8c:72:68:c6:48:f3:13:b8: 9b:5b:3c:a4:d7:b9:7c:0d:2f:57:3e:32:f0:25:81: 72:cd:2f:f5:a9:32:2b:8b:bc:4f:53:04:7a:0a:ad: 72:60:60:50:79:e5:28:49:c7:19:67:f6:83:e2:bf: cd:53:40:6c:82:30:01:55:74:f0:86:8c:f8:73:fa: ef:6b:9c:3f:ce:0c:01:1b:ae:fc:29:34:5e:16:d0: 45:80:f2:61:d6:9c:76:0e:8c:00:0c:ca:be:6f:2e: 2c:20:49:6d:85:4f:f4:9c:0b:9e:82:2f:6f:26:1a: a7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:66:91:B7:E8:03:A3:2B:FF:A5:8C:99:FD:3F:1E:A1:77:27:0F:E0 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AGaRt-gDoyv_pYyZ_T8eoXcnD-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:740::/44 Signature Algorithm: sha256WithRSAEncryption 83:b2:23:14:89:84:93:ed:62:29:d5:34:b9:34:41:a5:c2:61: 91:33:ce:e6:18:76:68:1e:ef:0f:42:2f:e3:67:76:06:f1:e5: d1:9d:76:a4:42:da:af:19:65:8c:1a:80:57:85:7c:d8:cf:09: 9d:8c:1d:2d:70:9d:7c:2b:1d:a8:58:16:5a:72:4e:7c:82:65: 94:d6:e6:32:4c:49:a4:81:5f:de:4e:19:17:64:23:6f:7f:bc: 0c:f0:32:c3:86:a8:2a:bf:5c:9a:21:be:d2:23:5d:e1:98:68: a6:94:77:06:7b:6a:6a:e4:4b:b9:a2:53:a8:4e:46:cb:ca:94: 45:ba:d7:cb:bf:d2:af:62:f7:23:96:b6:a7:f1:95:c0:8c:85: c2:33:5a:d7:64:34:e6:71:51:95:b2:e2:c2:80:e1:a6:0e:33: 64:39:1d:75:a5:5b:ea:80:ec:2a:eb:3f:a4:f6:16:68:ab:f4: 66:42:00:b3:f8:69:ad:48:73:e9:d7:a0:99:f6:c0:50:64:84: d7:df:5a:32:52:b2:07:60:3f:07:c0:2f:3b:8a:c3:40:72:69: f3:b4:c0:b9:2d:b8:7c:1d:c1:99:d6:7e:99:ad:2d:b3:81:14: 1e:a5:d6:94:83:92:ba:35:f4:3f:b5:31:e5:1b:b3:4c:5e:0a: 05:af:6d:24 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XRvymp0rSJyMcTJsyKatMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDY2OTFiN2U4MDNhMzJiZmZhNThjOTlmZDNmMWVhMTc3MjcwZmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijWc1LUrMDrJBaTKpWQn/J4nYtsT nx0whryDPQbtA09WIgs60h5dfaab2SM+B5xkKIhk0jdFByhSqJ72m2wGe81gzhCE P99yQp9fUm+juSRl2Y8T5kP4JwhPmjZnaj4b6/a969raDrDqRoQyE0oYdM2dbzrZ G8ofzwovYjqoENg9BSwbKrOk3IbOY1RijHJoxkjzE7ibWzyk17l8DS9XPjLwJYFy zS/1qTIri7xPUwR6Cq1yYGBQeeUoSccZZ/aD4r/NU0BsgjABVXTwhoz4c/rva5w/ zgwBG678KTReFtBFgPJh1px2DowADMq+by4sIElthU/0nAuegi9vJhqn2wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFABmkbfoA6Mr/6WMmf0/HqF3Jw/gMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvQUdhUnQtZ0RveXZfcFl5Wl9UOGVvWGNuRC1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBwdA MA0GCSqGSIb3DQEBCwUAA4IBAQCDsiMUiYST7WIp1TS5NEGlwmGRM87mGHZoHu8P Qi/jZ3YG8eXRnXakQtqvGWWMGoBXhXzYzwmdjB0tcJ18Kx2oWBZack58gmWU1uYy TEmkgV/eThkXZCNvf7wM8DLDhqgqv1yaIb7SI13hmGimlHcGe2pq5Eu5olOoTkbL ypRFutfLv9KvYvcjlran8ZXAjIXCM1rXZDTmcVGVsuLCgOGmDjNkOR11pVvqgOwq 6z+k9hZoq/RmQgCz+GmtSHPp16CZ9sBQZITX31oyUrIHYD8HwC87isNAcmnztMC5 Lbh8HcGZ1n6ZrS2zgRQepdaUg5K6NfQ/tTHlG7NMXgoFr20k -----END CERTIFICATE-----Generated at Mon Jan 12 01:58:40 2026 by rpki-client