This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Q1ZEwCWLwrzIQhxsp57BCoGyGmo.roa File: Q1ZEwCWLwrzIQhxsp57BCoGyGmo.roa (raw, json) Hash identifier: a51QVYc2K2cTQSBpcJ6OYLU8PlrCdjXeVFGCeZafNuA= Subject key identifier: 43:56:44:C0:25:8B:C2:BC:C8:42:1C:6C:A7:9E:C1:0A:81:B2:1A:6A Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B8FD462D673870F9B2DB7AFFF50C63903 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Q1ZEwCWLwrzIQhxsp57BCoGyGmo.roa Signing time: Mon 05 Jan 2026 20:23:39 +0000 ROA not before: Mon 05 Jan 2026 20:23:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209632 IP address blocks: 2a0c:9a40:8e50::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8f:d4:62:d6:73:87:0f:9b:2d:b7:af:ff:50:c6:39:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 5 20:23:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=435644c0258bc2bcc8421c6ca79ec10a81b21a6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:80:58:c6:94:52:0e:61:15:50:5c:d5:7c:06: 39:fc:17:91:4a:48:0d:96:60:59:38:b7:10:09:97: 5d:f8:9b:30:a5:5d:cf:b5:91:7f:04:dc:40:97:e4: 13:9c:56:8e:21:23:3e:49:e9:56:35:60:49:e8:4a: 59:37:0a:c9:24:aa:e2:22:8d:d3:c4:0e:16:ec:10: a9:43:38:2a:4a:76:f5:8d:c0:8a:58:c4:ad:c5:08: f6:32:65:55:4e:29:e7:ec:49:aa:40:22:ea:24:20: 64:b4:ab:3a:31:af:cd:af:a8:d4:01:ba:56:29:29: ac:1b:16:3e:ae:91:30:38:16:6c:00:7c:f7:a9:c3: 4f:c9:7c:22:aa:b1:1b:c4:2b:f8:25:82:2c:e9:a2: 6d:99:a8:de:d7:af:ee:3b:93:62:b0:1f:31:c0:3a: b5:c5:9e:05:47:02:9d:3e:2c:0c:72:b4:b2:fb:86: b9:fe:7e:a7:72:fb:28:63:d1:92:4d:16:99:9c:0b: ac:64:60:ce:41:da:7d:4c:c6:c4:28:5c:7a:b4:76: 93:f1:3c:7e:f6:19:27:0f:bf:e6:bc:15:03:8e:49: b1:bf:74:c7:8a:d0:29:85:7f:b1:14:84:6f:32:84: b7:2b:b1:b6:4b:6d:0e:cb:e8:05:8e:0d:f1:e0:5a: 4d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:56:44:C0:25:8B:C2:BC:C8:42:1C:6C:A7:9E:C1:0A:81:B2:1A:6A X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Q1ZEwCWLwrzIQhxsp57BCoGyGmo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8e50::/48 Signature Algorithm: sha256WithRSAEncryption a0:9b:90:d9:de:6c:aa:57:9e:b3:92:b7:c6:b1:44:07:e7:88: a1:5e:72:c2:71:8a:f6:a5:69:fb:19:ba:cb:e1:ca:3c:ea:fc: 56:6f:05:27:36:ed:47:7b:af:e1:a1:fa:fa:60:a9:1c:c8:56: d2:14:2a:2d:e9:da:9a:cb:2a:0c:b8:ef:7e:ee:d1:bd:45:a4: c7:3a:51:f5:e4:4f:e4:e2:85:c6:26:6c:75:09:8f:48:5b:17: 20:13:f1:96:b5:be:ff:a5:61:20:f4:42:de:69:85:0c:38:b0: a9:82:e3:d5:3b:ed:a6:38:bf:16:34:6f:7a:83:27:75:ee:56: a5:85:18:8d:e4:53:0b:0a:18:42:71:e0:76:a3:1c:8a:15:f6: 81:62:61:5f:16:f3:65:8c:46:cb:e6:7a:2a:c9:66:5f:be:58: c5:21:18:b5:db:31:2a:4d:2f:da:e3:12:9b:a4:3c:a5:d6:38: 37:a3:8f:46:b2:d9:8a:cc:ce:94:16:f4:8a:ab:db:16:03:6c: 96:cc:f4:aa:25:eb:5d:84:00:ae:92:79:38:98:d7:1c:e2:62: 84:2a:86:0b:8a:eb:11:1d:d2:9b:ed:7d:b5:4f:17:3f:dc:73: bd:95:39:d3:4b:01:9f:47:34:ff:c5:a2:ca:7a:d4:74:8b:31: e9:92:fb:9f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZuP1GLWc4cPmy23r/9QxjkDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTA1MjAyMzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzU2NDRjMDI1OGJjMmJjYzg0MjFjNmNhNzllYzEwYTgxYjIxYTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIBYxpRSDmEVUFzVfAY5/BeRSkgN lmBZOLcQCZdd+JswpV3PtZF/BNxAl+QTnFaOISM+SelWNWBJ6EpZNwrJJKriIo3T xA4W7BCpQzgqSnb1jcCKWMStxQj2MmVVTinn7EmqQCLqJCBktKs6Ma/Nr6jUAbpW KSmsGxY+rpEwOBZsAHz3qcNPyXwiqrEbxCv4JYIs6aJtmaje16/uO5NisB8xwDq1 xZ4FRwKdPiwMcrSy+4a5/n6ncvsoY9GSTRaZnAusZGDOQdp9TMbEKFx6tHaT8Tx+ 9hknD7/mvBUDjkmxv3THitAphX+xFIRvMoS3K7G2S20Oy+gFjg3x4FpNEQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFENWRMAli8K8yEIcbKeewQqBshpqMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvUTFaRXdDV0x3cnpJUWh4c3A1N0JDb0d5R21vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQI5Q MA0GCSqGSIb3DQEBCwUAA4IBAQCgm5DZ3myqV56zkrfGsUQH54ihXnLCcYr2pWn7 GbrL4co86vxWbwUnNu1He6/hofr6YKkcyFbSFCot6dqayyoMuO9+7tG9RaTHOlH1 5E/k4oXGJmx1CY9IWxcgE/GWtb7/pWEg9ELeaYUMOLCpguPVO+2mOL8WNG96gyd1 7lalhRiN5FMLChhCceB2oxyKFfaBYmFfFvNljEbL5noqyWZfvljFIRi12zEqTS/a 4xKbpDyl1jg3o49GstmKzM6UFvSKq9sWA2yWzPSqJetdhACuknk4mNcc4mKEKoYL iusRHdKb7X21Txc/3HO9lTnTSwGfRzT/xaLKetR0izHpkvuf -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:17 2026 by rpki-client