This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/_qrU1bCSPRoOOveg6cKRbdBRuMk.roa File: _qrU1bCSPRoOOveg6cKRbdBRuMk.roa (raw, json) Hash identifier: EuanKU6jP53XoKKJyuThtthL9JW99aO6nJOSR8TpqPE= Subject key identifier: FE:AA:D4:D5:B0:92:3D:1A:0E:3A:F7:A0:E9:C2:91:6D:D0:51:B8:C9 Certificate issuer: /CN=bc184d30d1fd2fde50bea6f70fe2dbe20518a03e Certificate serial: 019B7DCB04DBAA33D714DE54369E23EC9AC3 Authority key identifier: BC:18:4D:30:D1:FD:2F:DE:50:BE:A6:F7:0F:E2:DB:E2:05:18:A0:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/_qrU1bCSPRoOOveg6cKRbdBRuMk.roa Signing time: Fri 02 Jan 2026 08:20:15 +0000 ROA not before: Fri 02 Jan 2026 08:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2116 IP address blocks: 2001:67c:2dc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:04:db:aa:33:d7:14:de:54:36:9e:23:ec:9a:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc184d30d1fd2fde50bea6f70fe2dbe20518a03e Validity Not Before: Jan 2 08:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=feaad4d5b0923d1a0e3af7a0e9c2916dd051b8c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:af:c8:17:18:f9:02:94:79:d8:ac:61:74:7d: 7a:e6:ab:4f:05:72:b7:39:1e:da:d2:14:fc:ff:ae: d7:d1:2c:3b:1b:54:6d:65:a1:ac:02:e8:d4:ec:a0: 62:70:e5:23:34:84:b2:ee:03:10:c4:4c:a5:18:a6: de:f7:57:dd:e0:b5:df:df:f1:c4:dc:37:d6:78:fb: 52:53:9f:4a:a9:c9:54:dd:4f:33:5e:8b:f0:c9:76: d8:0e:5d:a2:5a:d0:72:38:a9:61:15:cc:6a:90:37: 60:58:93:ca:ac:e9:84:d1:6c:19:0b:f7:ed:10:12: 5b:80:c8:29:95:60:b4:7b:02:62:44:78:39:a9:6c: f9:7e:10:a5:a7:dd:e0:3c:b9:7c:a7:3e:b5:21:17: 6c:09:9d:62:81:7f:2a:53:c0:a3:7c:59:7d:0b:43: d2:6e:81:82:5e:74:bb:6e:70:e8:6f:e7:13:1a:eb: 79:ce:52:10:04:88:03:08:75:b4:92:4c:47:ab:b3: b4:e2:df:6b:b3:9b:3d:36:a5:3a:26:a9:ca:03:02: f4:0e:ea:aa:40:4f:38:05:72:3a:4d:c4:39:ef:9e: e9:3e:75:69:37:24:5d:29:a4:76:54:06:b0:bd:3a: 1c:c1:63:59:34:a8:13:91:c4:31:8a:31:60:14:81: 6a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:AA:D4:D5:B0:92:3D:1A:0E:3A:F7:A0:E9:C2:91:6D:D0:51:B8:C9 X509v3 Authority Key Identifier: keyid:BC:18:4D:30:D1:FD:2F:DE:50:BE:A6:F7:0F:E2:DB:E2:05:18:A0:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/_qrU1bCSPRoOOveg6cKRbdBRuMk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2dc::/48 Signature Algorithm: sha256WithRSAEncryption 1c:57:0f:c3:f1:af:44:a7:8c:6d:8e:5d:7c:ee:e6:36:4c:af: 13:b3:1a:51:b9:54:36:f6:07:9d:fa:0f:4f:51:8d:c2:c1:7c: 5f:92:3b:83:a1:e2:b4:15:6d:c9:6f:a7:6a:eb:e6:0f:cd:b0: b4:62:46:84:98:09:a4:fd:03:52:2d:9f:9b:87:0a:2b:27:c3: 4c:42:28:5b:b1:f1:cd:f7:a5:c0:11:97:86:3c:66:16:be:23: 7b:73:2a:a9:4e:80:fe:dc:01:7a:b3:43:a9:ca:8e:08:68:47: 18:82:14:a0:13:c0:81:d3:73:a2:c8:b5:ad:b0:0c:75:76:fd: a6:74:fd:31:11:01:d9:15:fa:75:79:f5:fc:3e:39:da:9b:dd: ab:82:d8:e3:d4:48:17:64:c8:b7:d7:71:de:3d:4a:1e:0b:c2: 00:a8:2f:5c:ff:47:0d:c9:b0:19:7f:bb:d3:dd:1a:bd:c9:da: f7:75:ef:32:d5:99:d6:d3:e8:4b:17:4b:f4:59:8b:3c:83:f0: ad:2c:0a:f7:80:f7:ce:09:f2:55:ae:cb:d3:24:d7:15:3b:96: 44:52:5f:49:14:d7:ab:e0:2d:7c:2a:eb:2d:74:b2:ad:fa:c8: 43:ac:57:48:7e:29:0f:57:39:82:90:86:d5:45:e0:37:76:74: 9b:37:ca:dc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9ywTbqjPXFN5UNp4j7JrDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMTg0ZDMwZDFmZDJmZGU1MGJlYTZmNzBmZTJkYmUyMDUx OGEwM2UwHhcNMjYwMTAyMDgyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWFhZDRkNWIwOTIzZDFhMGUzYWY3YTBlOWMyOTE2ZGQwNTFiOGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlK/IFxj5ApR52KxhdH165qtPBXK3 OR7a0hT8/67X0Sw7G1RtZaGsAujU7KBicOUjNISy7gMQxEylGKbe91fd4LXf3/HE 3DfWePtSU59KqclU3U8zXovwyXbYDl2iWtByOKlhFcxqkDdgWJPKrOmE0WwZC/ft EBJbgMgplWC0ewJiRHg5qWz5fhClp93gPLl8pz61IRdsCZ1igX8qU8CjfFl9C0PS boGCXnS7bnDob+cTGut5zlIQBIgDCHW0kkxHq7O04t9rs5s9NqU6JqnKAwL0Duqq QE84BXI6TcQ5757pPnVpNyRdKaR2VAawvTocwWNZNKgTkcQxijFgFIFqDwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFP6q1NWwkj0aDjr3oOnCkW3QUbjJMB8GA1UdIwQY MBaAFLwYTTDR/S/eUL6m9w/i2+IFGKA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkJoTk1OSDlMOTVRdnFiM0QtTGI0Z1VZb0Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84Y2M0N2YtMDI2NS00MDdjLWJhNDUt MDVkN2JkNGE3NDFkLzEvX3FyVTFiQ1NQUm9PT3ZlZzZjS1JiZEJSdU1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84Y2M0N2YtMDI2NS00MDdjLWJhNDUtMDVkN2JkNGE3NDFk LzEvdkJoTk1OSDlMOTVRdnFiM0QtTGI0Z1VZb0Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfALc MA0GCSqGSIb3DQEBCwUAA4IBAQAcVw/D8a9Ep4xtjl187uY2TK8TsxpRuVQ29ged +g9PUY3CwXxfkjuDoeK0FW3Jb6dq6+YPzbC0YkaEmAmk/QNSLZ+bhworJ8NMQihb sfHN96XAEZeGPGYWviN7cyqpToD+3AF6s0Opyo4IaEcYghSgE8CB03OiyLWtsAx1 dv2mdP0xEQHZFfp1efX8Pjnam92rgtjj1EgXZMi313HePUoeC8IAqC9c/0cNybAZ f7vT3Rq9ydr3de8y1ZnW0+hLF0v0WYs8g/CtLAr3gPfOCfJVrsvTJNcVO5ZEUl9J FNer4C18KustdLKt+shDrFdIfikPVzmCkIbVReA3dnSbN8rc -----END CERTIFICATE-----Generated at Mon Jan 26 16:57:04 2026 by rpki-client