This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/sqJAuTtHjJofashtrpYrfv2Lqkc.roa File: sqJAuTtHjJofashtrpYrfv2Lqkc.roa (raw, json) Hash identifier: tKvEHWVGuDg8Tn8ekoHOsKqzA2uvyPQd/TrrxC4QRzA= Subject key identifier: B2:A2:40:B9:3B:47:8C:9A:1F:6A:C8:6D:AE:96:2B:7E:FD:8B:AA:47 Certificate issuer: /CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5 Certificate serial: 019B7CEE6E985B6C33E003A8BC5BA8BCB02F Authority key identifier: B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/sqJAuTtHjJofashtrpYrfv2Lqkc.roa Signing time: Fri 02 Jan 2026 04:19:19 +0000 ROA not before: Fri 02 Jan 2026 04:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212430 IP address blocks: 2001:67c:209c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:6e:98:5b:6c:33:e0:03:a8:bc:5b:a8:bc:b0:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5 Validity Not Before: Jan 2 04:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2a240b93b478c9a1f6ac86dae962b7efd8baa47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:29:cc:9b:fc:1f:24:f6:e8:c8:27:d7:4c:d9: ac:15:94:42:82:4f:ac:3f:8a:fd:fc:58:c1:7b:ee: 67:c4:b9:b2:07:8b:66:0f:c5:db:89:48:7c:e5:2e: 9a:bc:f4:ba:3e:04:e4:08:db:32:eb:a5:15:78:22: cc:07:ec:23:fa:be:a9:a3:8a:62:00:4f:73:da:7e: f5:12:9f:c5:7b:25:c5:e7:24:dc:96:2c:f7:66:51: 28:5b:cb:a3:e8:5e:31:1b:20:4b:3f:70:83:24:91: ea:d9:70:ce:fd:8c:40:f7:93:a0:f3:67:49:72:56: 5a:ad:24:1a:17:50:2b:87:3d:22:b7:64:26:b7:82: 46:a9:7f:20:a2:86:c5:a5:83:21:5f:fc:58:54:9b: 6e:31:98:be:a3:d9:d4:b1:22:34:60:1c:da:06:36: 1c:73:42:24:ef:a2:0c:18:cc:d9:4f:2f:04:ab:c0: 88:be:9c:23:15:19:8a:da:5e:ef:2f:40:7b:3c:d4: 29:6c:25:29:b0:af:34:ab:e3:01:26:7a:5c:76:e8: cd:ab:ac:ed:d9:fa:9d:95:cb:63:0a:07:08:b3:83: 22:18:12:31:81:89:3b:6b:09:9b:36:b4:6f:44:ef: de:bd:82:0a:86:d9:24:f7:fd:b6:76:23:b3:9f:33: 69:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A2:40:B9:3B:47:8C:9A:1F:6A:C8:6D:AE:96:2B:7E:FD:8B:AA:47 X509v3 Authority Key Identifier: keyid:B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/sqJAuTtHjJofashtrpYrfv2Lqkc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:209c::/48 Signature Algorithm: sha256WithRSAEncryption 67:67:07:86:ff:e3:30:10:a9:e5:79:af:23:d3:d7:96:58:05: d4:c1:3a:ab:6d:8d:f9:d5:e1:d9:a1:87:08:73:3c:d6:c4:9e: 9f:bb:7d:e3:9c:a3:36:23:08:52:e5:e3:7d:76:44:45:4b:7e: 3b:e9:d2:f4:b9:61:a5:5f:da:65:de:a3:87:18:89:d7:9c:b3: 39:65:4c:12:df:4d:5d:93:09:50:b3:92:0f:93:00:00:13:85: fe:3b:46:5f:c3:21:a8:71:9d:99:27:93:08:24:b9:7b:6b:cf: c7:a7:b8:e3:bb:1a:f3:9b:f2:6b:07:7a:ad:72:55:e5:c6:88: 3c:60:f9:4e:23:c6:9e:94:a0:c9:41:82:94:eb:b4:32:c4:28: 62:0c:da:1a:ac:eb:dc:75:34:0f:fc:6d:98:a8:74:5f:72:21: b8:70:c8:a0:8c:08:34:17:ce:4c:cd:26:59:cf:87:9a:02:cf: 23:3a:bb:29:3b:87:6b:65:a5:ae:1a:32:82:85:59:62:68:31: 46:a9:cc:03:9b:e7:55:2a:9c:de:79:9b:fd:0f:c8:e1:cf:18: 00:ce:6c:0b:0a:02:c9:56:83:53:ae:0a:4a:31:7f:d1:ae:38: 16:4b:06:77:b4:f9:5c:2f:8a:53:98:1a:ee:ea:bf:23:73:88: 5d:32:49:0f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87m6YW2wz4AOovFuovLAvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NzE0YmZkOTgyZWQyOTdlNWM3M2VjZTc0ZDIyMmU1Mjc0 YzFmYjUwHhcNMjYwMTAyMDQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmEyNDBiOTNiNDc4YzlhMWY2YWM4NmRhZTk2MmI3ZWZkOGJhYTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCnMm/wfJPboyCfXTNmsFZRCgk+s P4r9/FjBe+5nxLmyB4tmD8XbiUh85S6avPS6PgTkCNsy66UVeCLMB+wj+r6po4pi AE9z2n71Ep/FeyXF5yTcliz3ZlEoW8uj6F4xGyBLP3CDJJHq2XDO/YxA95Og82dJ clZarSQaF1Arhz0it2Qmt4JGqX8goobFpYMhX/xYVJtuMZi+o9nUsSI0YBzaBjYc c0Ik76IMGMzZTy8Eq8CIvpwjFRmK2l7vL0B7PNQpbCUpsK80q+MBJnpcdujNq6zt 2fqdlctjCgcIs4MiGBIxgYk7awmbNrRvRO/evYIKhtkk9/22diOznzNpLwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLKiQLk7R4yaH2rIba6WK379i6pHMB8GA1UdIwQY MBaAFLRxS/2YLtKX5cc+znTSIuUnTB+1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEhGTF9aZ3UwcGZseHo3T2ROSWk1U2RNSDdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9jZjc3MTgtMjc0ZC00MTJiLWI3NTUt NjJlYTFlN2U4ZmM2LzEvc3FKQXVUdEhqSm9mYXNodHJwWXJmdjJMcWtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9jZjc3MTgtMjc0ZC00MTJiLWI3NTUtNjJlYTFlN2U4ZmM2 LzEvdEhGTF9aZ3UwcGZseHo3T2ROSWk1U2RNSDdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCCc MA0GCSqGSIb3DQEBCwUAA4IBAQBnZweG/+MwEKnlea8j09eWWAXUwTqrbY351eHZ oYcIczzWxJ6fu33jnKM2IwhS5eN9dkRFS3476dL0uWGlX9pl3qOHGInXnLM5ZUwS 301dkwlQs5IPkwAAE4X+O0ZfwyGocZ2ZJ5MIJLl7a8/Hp7jjuxrzm/JrB3qtclXl xog8YPlOI8aelKDJQYKU67QyxChiDNoarOvcdTQP/G2YqHRfciG4cMigjAg0F85M zSZZz4eaAs8jOrspO4drZaWuGjKChVliaDFGqcwDm+dVKpzeeZv9D8jhzxgAzmwL CgLJVoNTrgpKMX/RrjgWSwZ3tPlcL4pTmBru6r8jc4hdMkkP -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:41 2026 by rpki-client