This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/_qLOy2uPljeeD3k2OIm7eie7PsU.roa File: _qLOy2uPljeeD3k2OIm7eie7PsU.roa (raw, json) Hash identifier: 6LxGidPhVL9L59Q6LmD28F57PzAF1HR6b1hX7RECQKg= Subject key identifier: FE:A2:CE:CB:6B:8F:96:37:9E:0F:79:36:38:89:BB:7A:27:BB:3E:C5 Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Certificate serial: 019B7FF1C3BC533B673FFC7DC3A4329B422E Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/_qLOy2uPljeeD3k2OIm7eie7PsU.roa Signing time: Fri 02 Jan 2026 18:21:49 +0000 ROA not before: Fri 02 Jan 2026 18:21:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213983 IP address blocks: 2a03:5840:1800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:c3:bc:53:3b:67:3f:fc:7d:c3:a4:32:9b:42:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Validity Not Before: Jan 2 18:21:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fea2cecb6b8f96379e0f79363889bb7a27bb3ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:88:aa:a8:b1:bb:d2:20:f8:13:c0:3b:e6:74: ab:91:5c:b5:43:1f:f5:c2:d6:0d:92:cc:4d:3b:65: 57:82:45:cf:df:63:cc:ab:4b:e5:5e:9a:3e:10:5e: d4:7f:9a:a0:1d:88:33:23:ac:3f:38:b1:b0:49:9f: d1:2a:6e:15:68:87:fd:f9:11:18:d4:7d:24:32:80: 81:85:e3:77:c1:9c:6d:26:11:65:96:52:e5:69:fe: 4c:ac:9a:f7:3e:2b:79:3d:c5:e4:4d:d1:4e:4e:e3: 6d:6c:53:00:e6:66:80:06:13:ca:25:34:f6:fb:ce: 1a:42:2f:df:11:ac:0d:23:78:e3:05:22:ff:6b:f7: 1f:58:ef:99:c2:8a:39:de:a7:58:ed:24:9c:0b:8c: 6a:33:be:70:fc:d4:f8:3c:6e:8a:7e:60:15:65:31: b8:36:32:0b:34:2f:ce:40:bf:59:05:16:3e:36:05: 5a:db:d7:6b:e5:31:5c:fc:c3:a1:51:38:40:74:08: dc:fe:90:12:89:b0:30:d9:20:1a:2b:4a:e9:33:c4: 98:4a:01:c6:a8:6c:04:3d:04:b6:cf:b1:1e:49:3a: 4b:a8:94:e6:6a:a8:d8:2d:3c:cc:8d:71:22:5f:97: 3d:59:7a:37:23:36:81:dd:e8:c1:39:75:32:60:06: 4e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A2:CE:CB:6B:8F:96:37:9E:0F:79:36:38:89:BB:7A:27:BB:3E:C5 X509v3 Authority Key Identifier: keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/_qLOy2uPljeeD3k2OIm7eie7PsU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:5840:1800::/37 Signature Algorithm: sha256WithRSAEncryption 96:76:a9:e0:3e:91:a9:54:32:6d:50:87:61:b0:d1:c6:a4:2d: 1e:d4:4c:d5:fe:17:a9:19:7c:9a:7c:d0:e6:cd:84:8a:f8:c4: 31:91:2f:62:e3:40:d5:be:cd:41:67:ae:3d:06:4c:ea:78:7c: 7f:ef:bd:d0:1c:97:a3:62:95:0f:54:72:f9:c8:ba:79:20:e8: 1c:86:3d:06:98:74:ae:16:c8:bf:ab:56:b6:83:99:66:b9:db: f6:cf:9a:56:21:0e:3e:3a:1e:da:a8:1a:f3:19:86:2a:8d:07: 50:66:12:c7:a2:40:af:84:00:6f:d1:e9:cc:18:10:36:f6:23: d5:e5:cf:e3:52:82:71:80:61:25:8b:f8:62:86:62:f6:85:a1: 6d:33:38:e7:86:2c:4a:c0:03:00:8c:ef:02:7f:0a:52:87:50: 2e:12:fd:8f:9b:17:94:f0:57:f5:52:c0:db:f8:81:13:f9:ba: ab:50:cc:4a:ce:44:53:ee:a7:c6:84:e6:c6:6f:f2:ec:88:d5: 1a:4d:f5:8d:bc:55:e0:44:c2:e4:b9:e4:4b:52:60:02:43:a1: bc:5d:66:44:4c:eb:46:ab:e8:ca:35:ef:48:f1:5d:f9:ab:34: 63:ef:5c:34:ff:66:8f:4a:51:54:2a:42:57:05:fe:c2:71:5f: b6:92:8b:6b -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/8cO8UztnP/x9w6Qym0IuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1 ODYzNWEwHhcNMjYwMTAyMTgyMTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWEyY2VjYjZiOGY5NjM3OWUwZjc5MzYzODg5YmI3YTI3YmIzZWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IiqqLG70iD4E8A75nSrkVy1Qx/1 wtYNksxNO2VXgkXP32PMq0vlXpo+EF7Uf5qgHYgzI6w/OLGwSZ/RKm4VaIf9+REY 1H0kMoCBheN3wZxtJhFlllLlaf5MrJr3Pit5PcXkTdFOTuNtbFMA5maABhPKJTT2 +84aQi/fEawNI3jjBSL/a/cfWO+Zwoo53qdY7SScC4xqM75w/NT4PG6KfmAVZTG4 NjILNC/OQL9ZBRY+NgVa29dr5TFc/MOhUThAdAjc/pASibAw2SAaK0rpM8SYSgHG qGwEPQS2z7EeSTpLqJTmaqjYLTzMjXEiX5c9WXo3IzaB3ejBOXUyYAZOfQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFP6izstrj5Y3ng95NjiJu3onuz7FMB8GA1UdIwQY MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt NmNiODk3OTFkN2ZkLzEvX3FMT3kydVBsamVlRDNrMk9JbTdlaWU3UHNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDKgNYQBgw DQYJKoZIhvcNAQELBQADggEBAJZ2qeA+kalUMm1Qh2Gw0cakLR7UTNX+F6kZfJp8 0ObNhIr4xDGRL2LjQNW+zUFnrj0GTOp4fH/vvdAcl6NilQ9UcvnIunkg6ByGPQaY dK4WyL+rVraDmWa52/bPmlYhDj46HtqoGvMZhiqNB1BmEseiQK+EAG/R6cwYEDb2 I9Xlz+NSgnGAYSWL+GKGYvaFoW0zOOeGLErAAwCM7wJ/ClKHUC4S/Y+bF5TwV/VS wNv4gRP5uqtQzErORFPup8aE5sZv8uyI1RpN9Y28VeBEwuS55EtSYAJDobxdZkRM 60ar6Mo170jxXfmrNGPvXDT/Zo9KUVQqQlcF/sJxX7aSi2s= -----END CERTIFICATE-----Generated at Fri Jan 23 15:20:07 2026 by rpki-client