This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/QfC1OQMecc8xgfDK2fgUG3JYjiE.roa File: QfC1OQMecc8xgfDK2fgUG3JYjiE.roa (raw, json) Hash identifier: SiUwNQ2OR+DDjcGafhMVcnt+xZ+/kP9o1Jbv40qJ0ew= Subject key identifier: 41:F0:B5:39:03:1E:71:CF:31:81:F0:CA:D9:F8:14:1B:72:58:8E:21 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6ED90CF302692D70FD97AA221DB3F Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/QfC1OQMecc8xgfDK2fgUG3JYjiE.roa Signing time: Fri 02 Jan 2026 12:20:27 +0000 ROA not before: Fri 02 Jan 2026 12:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206824 IP address blocks: 2a0c:9a40:8090::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ed:90:cf:30:26:92:d7:0f:d9:7a:a2:21:db:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41f0b539031e71cf3181f0cad9f8141b72588e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e8:95:ae:45:4d:68:36:43:a6:cf:f0:29:61: fb:7d:27:80:3d:b4:f8:7c:e7:37:ed:13:00:86:b4: fe:0b:dc:5e:2b:3c:38:1c:3e:5e:62:87:74:6a:ad: 26:df:b4:e6:fe:39:6e:13:4e:40:03:ef:27:fa:ff: 5b:07:b0:b8:48:fc:85:8f:c7:f9:84:75:aa:9e:f6: ae:23:b6:a4:6c:06:5b:37:1e:6a:71:35:92:39:b3: 80:61:71:b5:f3:c9:db:ba:01:9e:b2:78:21:2c:75: 77:ef:d6:50:22:9c:60:5d:ab:51:49:32:81:08:52: f6:66:86:85:43:86:d0:9e:b4:84:3b:54:48:e5:98: 0a:d1:9d:d3:e7:16:c2:f7:56:11:35:52:cb:7f:f6: a4:d1:7d:f8:e8:75:41:30:c6:78:f8:67:37:65:69: 54:53:a7:d6:d8:01:6c:11:e4:49:ed:55:2c:16:dd: b3:ca:75:97:1d:52:7e:1e:f0:35:ec:94:41:91:53: 72:5f:fa:8a:30:d7:dd:b4:73:cc:af:f6:39:24:c2: 24:d0:c2:ff:74:6a:df:88:5b:10:5a:a3:0c:46:d5: 58:4d:54:eb:23:57:8f:8c:49:3c:42:7e:19:37:b4: 2a:86:61:eb:6d:cd:58:30:6e:74:f3:1f:80:97:98: 87:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F0:B5:39:03:1E:71:CF:31:81:F0:CA:D9:F8:14:1B:72:58:8E:21 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/QfC1OQMecc8xgfDK2fgUG3JYjiE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8090::/44 Signature Algorithm: sha256WithRSAEncryption 95:d1:45:9f:fe:9d:11:08:39:16:b4:84:d6:97:d7:6e:0d:46: 7b:a3:83:02:ab:40:26:c7:6a:9d:1d:6f:e6:a7:d2:19:cf:5a: 53:19:ac:4c:0f:00:8b:ff:e4:3c:72:0f:66:27:d3:c5:b5:7d: 1d:10:41:26:ce:c3:f0:de:87:67:b3:41:35:87:91:6d:bc:31: df:4b:a2:95:44:35:6f:7d:79:45:7e:ae:3b:0c:42:93:f1:74: 65:97:63:b9:5c:84:ca:71:17:41:92:c5:05:e1:06:80:93:ce: a8:f6:27:51:2c:a0:e5:dc:4f:e1:ae:fd:54:8a:b9:39:ef:ff: d8:ab:f1:8d:e3:b4:3f:08:a9:50:37:ed:ab:46:c1:26:4d:dc: c7:e4:07:a3:d3:71:fe:ab:c4:f5:58:f4:99:9a:f1:e2:b0:4e: 20:d2:65:2c:41:25:6b:c1:8d:cd:94:d3:6c:f5:6a:70:94:71: 64:be:55:d1:ce:2f:25:2c:8d:0a:89:5c:59:74:dd:93:61:ad: 30:88:8e:ce:59:ed:67:26:2e:30:e4:30:ec:ac:21:16:0f:48: 5d:7d:6b:31:f7:3a:cc:f8:c6:1a:93:82:8c:b2:51:3e:6a:77: 41:2f:e2:31:26:9c:d9:75:b7:23:a5:60:dc:1e:f4:1b:bb:df: b8:dc:2e:4f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pu2QzzAmktcP2XqiIds/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWYwYjUzOTAzMWU3MWNmMzE4MWYwY2FkOWY4MTQxYjcyNTg4ZTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+iVrkVNaDZDps/wKWH7fSeAPbT4 fOc37RMAhrT+C9xeKzw4HD5eYod0aq0m37Tm/jluE05AA+8n+v9bB7C4SPyFj8f5 hHWqnvauI7akbAZbNx5qcTWSObOAYXG188nbugGesnghLHV379ZQIpxgXatRSTKB CFL2ZoaFQ4bQnrSEO1RI5ZgK0Z3T5xbC91YRNVLLf/ak0X346HVBMMZ4+Gc3ZWlU U6fW2AFsEeRJ7VUsFt2zynWXHVJ+HvA17JRBkVNyX/qKMNfdtHPMr/Y5JMIk0ML/ dGrfiFsQWqMMRtVYTVTrI1ePjEk8Qn4ZN7QqhmHrbc1YMG508x+Al5iHTQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEHwtTkDHnHPMYHwytn4FBtyWI4hMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvUWZDMU9RTWVjYzh4Z2ZESzJmZ1VHM0pZamlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQICQ MA0GCSqGSIb3DQEBCwUAA4IBAQCV0UWf/p0RCDkWtITWl9duDUZ7o4MCq0Amx2qd HW/mp9IZz1pTGaxMDwCL/+Q8cg9mJ9PFtX0dEEEmzsPw3odns0E1h5FtvDHfS6KV RDVvfXlFfq47DEKT8XRll2O5XITKcRdBksUF4QaAk86o9idRLKDl3E/hrv1Uirk5 7//Yq/GN47Q/CKlQN+2rRsEmTdzH5Aej03H+q8T1WPSZmvHisE4g0mUsQSVrwY3N lNNs9WpwlHFkvlXRzi8lLI0KiVxZdN2TYa0wiI7OWe1nJi4w5DDsrCEWD0hdfWsx 9zrM+MYak4KMslE+andBL+IxJpzZdbcjpWDcHvQbu9+43C5P -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:37 2026 by rpki-client