This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/cqAq5Oi4lx_qms-n-v1fbdiTLyg.roa File: cqAq5Oi4lx_qms-n-v1fbdiTLyg.roa (raw, json) Hash identifier: Z6T9S7wk/qzy33jsZGzbQWPebtRGDZ76WSgfKFfwLTc= Subject key identifier: 72:A0:2A:E4:E8:B8:97:1F:EA:9A:CF:A7:FA:FD:5F:6D:D8:93:2F:28 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA7198177EC6E1A9225A4AD68D4C28A Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/cqAq5Oi4lx_qms-n-v1fbdiTLyg.roa Signing time: Fri 02 Jan 2026 12:20:38 +0000 ROA not before: Fri 02 Jan 2026 12:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216305 IP address blocks: 2a0c:9a40:8490::/48 maxlen: 48 2a0c:9a40:8720::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:19:81:77:ec:6e:1a:92:25:a4:ad:68:d4:c2:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72a02ae4e8b8971fea9acfa7fafd5f6dd8932f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d0:54:5c:e6:9a:45:7d:36:88:35:ff:fd:1d: c7:a3:2b:7e:30:ec:dc:a8:79:e5:d6:bf:54:60:5d: 07:74:78:c9:a9:5b:fd:ea:7d:51:17:e8:bd:02:89: 9c:d8:fe:58:ee:0e:8b:58:f5:9b:06:21:72:e5:24: 7b:86:c5:84:a2:16:27:3a:f3:db:58:82:8d:85:a0: 77:a9:c8:a0:bc:8d:a8:14:95:77:84:c4:db:5a:5c: d5:a7:43:85:a7:38:93:76:d5:0b:fb:35:4b:03:ca: c6:bc:59:4f:af:6d:b4:0d:dc:c4:04:1f:19:39:a6: 1b:e9:d3:3b:79:eb:ca:d3:93:ab:67:92:b6:bd:3e: 77:28:78:15:d6:d7:59:31:3d:de:52:85:ed:13:f3: 02:a7:45:d6:4c:f0:69:5f:3b:ee:1b:59:08:9a:80: 35:fd:d8:ca:dc:18:3d:4b:aa:17:7d:fe:8f:75:7b: 0e:c1:41:8a:b8:bd:1c:2f:bb:fe:06:61:6f:d7:bf: 40:33:2e:ff:3e:00:65:2a:82:0f:40:98:2e:40:32: 1e:6a:47:5b:fb:57:f6:cf:61:b4:cd:3f:d6:75:5a: ce:69:cd:52:2f:fb:0a:22:56:55:4f:85:38:f4:3c: 52:e0:1b:bc:90:1e:77:f0:e9:f2:14:0d:9e:21:de: 66:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A0:2A:E4:E8:B8:97:1F:EA:9A:CF:A7:FA:FD:5F:6D:D8:93:2F:28 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/cqAq5Oi4lx_qms-n-v1fbdiTLyg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8490::/48 2a0c:9a40:8720::/44 Signature Algorithm: sha256WithRSAEncryption 6d:99:a7:1b:de:96:0f:41:23:1e:b6:3e:f0:76:84:6e:dc:dc: 04:b2:3d:8a:87:be:96:a2:5f:45:59:e3:d1:21:32:9a:28:3b: 74:77:a2:2a:b6:58:dd:46:01:b7:5f:23:c9:8d:20:d7:42:c3: 37:91:ee:d5:a4:e6:ca:93:ce:66:53:c9:5f:cd:68:5d:9e:bc: b9:87:9f:5f:a5:9b:76:79:eb:de:67:f0:e0:20:81:73:6b:c8: 3c:74:9c:18:eb:90:5f:49:2e:77:71:5e:1b:1c:f8:fd:47:9a: 7d:48:b2:69:0c:30:cb:2a:c6:d4:cb:c4:d1:c1:a8:ec:85:37: f8:d2:e6:c1:c1:e8:63:44:b9:8d:43:1b:5f:15:f9:c5:7f:eb: a2:5a:bb:2c:97:ed:6a:67:60:da:49:a0:a6:7b:9b:1c:39:f1: 55:8d:0c:70:68:36:30:41:8b:3c:51:a6:0a:a9:0c:d4:c8:c3: 06:e6:f9:a1:69:16:cf:b4:62:68:df:af:09:03:48:26:19:16: 23:9a:25:5a:bb:a7:fd:76:6b:18:fb:3b:b3:7b:37:72:8a:b6: 78:12:65:cb:11:47:7c:f2:2d:dc:77:08:ae:d9:4f:db:eb:ae: db:0c:3b:86:9f:c4:a9:cb:1a:70:04:2d:b4:01:35:03:55:06: 18:2a:d6:51 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pxmBd+xuGpIlpK1o1MKKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmEwMmFlNGU4Yjg5NzFmZWE5YWNmYTdmYWZkNWY2ZGQ4OTMyZjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdBUXOaaRX02iDX//R3Hoyt+MOzc qHnl1r9UYF0HdHjJqVv96n1RF+i9Aomc2P5Y7g6LWPWbBiFy5SR7hsWEohYnOvPb WIKNhaB3qcigvI2oFJV3hMTbWlzVp0OFpziTdtUL+zVLA8rGvFlPr220DdzEBB8Z OaYb6dM7eevK05OrZ5K2vT53KHgV1tdZMT3eUoXtE/MCp0XWTPBpXzvuG1kImoA1 /djK3Bg9S6oXff6PdXsOwUGKuL0cL7v+BmFv179AMy7/PgBlKoIPQJguQDIeakdb +1f2z2G0zT/WdVrOac1SL/sKIlZVT4U49DxS4Bu8kB538OnyFA2eId5mvQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHKgKuTouJcf6prPp/r9X23Yky8oMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvY3FBcTVPaTRseF9xbXMtbi12MWZiZGlUTHlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgyaQISQ AwcEKgyaQIcgMA0GCSqGSIb3DQEBCwUAA4IBAQBtmacb3pYPQSMetj7wdoRu3NwE sj2Kh76Wol9FWePRITKaKDt0d6IqtljdRgG3XyPJjSDXQsM3ke7VpObKk85mU8lf zWhdnry5h59fpZt2eeveZ/DgIIFza8g8dJwY65BfSS53cV4bHPj9R5p9SLJpDDDL KsbUy8TRwajshTf40ubBwehjRLmNQxtfFfnFf+uiWrssl+1qZ2DaSaCme5scOfFV jQxwaDYwQYs8UaYKqQzUyMMG5vmhaRbPtGJo368JA0gmGRYjmiVau6f9dmsY+zuz ezdyirZ4EmXLEUd88i3cdwiu2U/b667bDDuGn8SpyxpwBC20ATUDVQYYKtZR -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:51 2026 by rpki-client