This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/qob_ngPMdbgoGPOsOquOy5rv0XU.roa File: qob_ngPMdbgoGPOsOquOy5rv0XU.roa (raw, json) Hash identifier: /MVmFJkpejz4EMWoCUfWjULUELx9I3ijcoWovNLvQQ0= Subject key identifier: AA:86:FF:9E:03:CC:75:B8:28:18:F3:AC:3A:AB:8E:CB:9A:EF:D1:75 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B7B357B4EBA9D62766CFC11C347B850ED Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/qob_ngPMdbgoGPOsOquOy5rv0XU.roa Signing time: Thu 01 Jan 2026 20:17:41 +0000 ROA not before: Thu 01 Jan 2026 20:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51847 IP address blocks: 2a14:67c1:a040::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:7b:4e:ba:9d:62:76:6c:fc:11:c3:47:b8:50:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 1 20:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa86ff9e03cc75b82818f3ac3aab8ecb9aefd175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:96:46:54:33:44:a8:cc:78:1e:34:34:24:c7: 01:df:b6:4d:f2:9c:39:b1:8b:64:ff:c7:77:2c:e9: a4:80:33:2e:d5:55:5a:b0:a4:55:a7:a8:3b:b4:ac: 93:a6:f3:a5:e0:89:cf:42:1b:51:d8:83:00:e2:89: 69:28:64:1f:25:6e:80:c6:ac:88:29:ef:2f:d3:84: bd:01:c8:c6:1d:a3:9d:8c:6d:ef:bb:71:ce:ea:13: 6c:e5:af:e4:ad:33:ee:18:dd:07:aa:83:3c:a0:2f: 3e:82:10:b4:b2:d1:52:3f:6a:2d:3d:cf:d6:c4:92: 57:8f:d5:ab:42:5d:e5:ba:e0:cf:cb:67:2d:f9:ce: 41:e7:1f:48:03:7d:49:57:b7:85:6b:d6:80:ce:4d: 78:d2:c7:63:f6:af:95:d5:ac:dd:a6:5f:26:52:77: 42:ea:16:2a:df:1a:4d:1f:30:b6:d0:f2:2d:07:5b: 00:6f:a0:98:cd:02:d1:9b:d2:7d:5f:03:4d:98:34: e4:78:fc:37:cc:3b:2a:bf:bd:db:57:c3:e7:e1:b7: f3:44:05:95:c0:23:0d:2d:21:00:dd:e3:dd:51:bc: 1b:7c:91:38:f8:0a:74:73:4e:3e:d3:7e:9f:e0:70: ff:6c:85:34:60:06:a0:62:51:46:aa:5c:87:c2:bb: d6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:86:FF:9E:03:CC:75:B8:28:18:F3:AC:3A:AB:8E:CB:9A:EF:D1:75 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/qob_ngPMdbgoGPOsOquOy5rv0XU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:a040::/44 Signature Algorithm: sha256WithRSAEncryption 5f:d7:3d:53:c0:68:f1:09:95:fc:bc:26:29:2c:39:c8:a4:2e: 32:bc:64:43:b4:ba:a3:0a:a9:4d:76:eb:41:e9:a8:5e:39:b9: 3e:4a:c9:bf:d6:5b:b9:32:be:9d:80:fc:4f:fa:23:37:a2:5a: 78:a3:cf:b9:26:76:8f:aa:bd:f4:ad:d7:00:b9:f5:9c:39:48: fe:73:ba:78:94:91:33:4e:57:ea:c2:b0:f8:b5:11:aa:e3:40: 71:d9:89:a8:30:41:b0:f2:63:df:35:cd:de:9a:bb:e7:8d:8f: 1d:25:28:70:87:6e:34:14:6d:d6:e6:c2:44:4c:bf:ff:b0:a1: 69:ae:0f:c1:7c:a1:5e:96:e7:f3:d7:21:47:23:12:6d:2d:3e: 47:ae:37:0f:32:d1:7b:0e:a8:d1:54:b2:f3:4f:c0:27:97:e0: f1:6f:2d:86:fd:d0:10:81:3c:8a:1a:ea:c8:21:39:9b:ca:b4: 9d:b4:08:b9:1d:ff:ce:80:88:31:32:91:91:17:48:7d:4b:9d: 8e:42:ba:86:ab:39:92:ce:af:3f:13:db:aa:a5:66:8b:29:d2: cb:47:bb:29:a3:4f:e1:7a:b0:33:5c:f6:d7:4a:33:6c:54:44: 93:ad:8e:76:21:43:6a:d6:e1:31:d6:1e:d6:d4:58:a3:f8:3f: 0a:3f:12:7d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7NXtOup1idmz8EcNHuFDtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTAxMjAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTg2ZmY5ZTAzY2M3NWI4MjgxOGYzYWMzYWFiOGVjYjlhZWZkMTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpZGVDNEqMx4HjQ0JMcB37ZN8pw5 sYtk/8d3LOmkgDMu1VVasKRVp6g7tKyTpvOl4InPQhtR2IMA4olpKGQfJW6AxqyI Ke8v04S9AcjGHaOdjG3vu3HO6hNs5a/krTPuGN0HqoM8oC8+ghC0stFSP2otPc/W xJJXj9WrQl3luuDPy2ct+c5B5x9IA31JV7eFa9aAzk140sdj9q+V1azdpl8mUndC 6hYq3xpNHzC20PItB1sAb6CYzQLRm9J9XwNNmDTkePw3zDsqv73bV8Pn4bfzRAWV wCMNLSEA3ePdUbwbfJE4+Ap0c04+036f4HD/bIU0YAagYlFGqlyHwrvWXQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKqG/54DzHW4KBjzrDqrjsua79F1MB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvcW9iX25nUE1kYmdvR1BPc09xdU95NXJ2MFhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhRnwaBA MA0GCSqGSIb3DQEBCwUAA4IBAQBf1z1TwGjxCZX8vCYpLDnIpC4yvGRDtLqjCqlN dutB6aheObk+Ssm/1lu5Mr6dgPxP+iM3olp4o8+5JnaPqr30rdcAufWcOUj+c7p4 lJEzTlfqwrD4tRGq40Bx2YmoMEGw8mPfNc3emrvnjY8dJShwh240FG3W5sJETL// sKFprg/BfKFelufz1yFHIxJtLT5HrjcPMtF7DqjRVLLzT8Anl+Dxby2G/dAQgTyK GurIITmbyrSdtAi5Hf/OgIgxMpGRF0h9S52OQrqGqzmSzq8/E9uqpWaLKdLLR7sp o0/herAzXPbXSjNsVESTrY52IUNq1uEx1h7W1Fij+D8KPxJ9 -----END CERTIFICATE-----Generated at Sun Jan 18 04:10:11 2026 by rpki-client