This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/q-3skKm-bYvqFFI9CR3N28kWOBs.roa File: q-3skKm-bYvqFFI9CR3N28kWOBs.roa (raw, json) Hash identifier: wt6D/xq8kno5TPLHwSLWXVDn/lI7W2sHz1XuLWHp59Q= Subject key identifier: AB:ED:EC:90:A9:BE:6D:8B:EA:14:52:3D:09:1D:CD:DB:C9:16:38:1B Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6D694C153E9522DAF97A2FEAD4B6F Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/q-3skKm-bYvqFFI9CR3N28kWOBs.roa Signing time: Fri 02 Jan 2026 12:20:21 +0000 ROA not before: Fri 02 Jan 2026 12:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198276 IP address blocks: 2a0c:9a40:8390::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d6:94:c1:53:e9:52:2d:af:97:a2:fe:ad:4b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abedec90a9be6d8bea14523d091dcddbc916381b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b8:c6:b8:19:fb:4c:8b:da:db:3a:00:c8:60: 83:e0:29:43:31:38:00:0e:7f:28:e5:cb:17:a5:d3: 2d:be:11:20:0b:9f:28:9a:85:d4:69:72:f3:3d:22: 57:a9:3c:0b:ee:8c:a4:f4:eb:a9:df:0b:b3:7a:92: 15:8d:60:c3:2f:94:d6:1f:ff:37:9a:bf:5a:58:cf: 1f:ea:a1:0c:55:ae:9b:af:f6:29:ef:86:97:79:0e: 46:74:a2:9f:ad:e2:8a:f7:24:80:dc:44:de:bc:35: 6d:4c:64:db:12:19:a7:d6:d4:3f:a9:c0:ed:49:79: 4a:46:89:46:5d:94:33:fb:12:63:07:e7:8e:d1:35: 75:c2:57:2a:ba:07:92:5e:0b:3c:f5:4e:2b:06:64: e6:8e:0a:5e:39:98:80:b2:83:97:8d:54:f3:6b:11: 82:95:68:a5:fe:a5:70:19:ca:7c:36:0f:f5:05:07: 62:e6:b5:b7:be:0c:bd:31:a7:cd:ba:11:e5:7b:0d: 91:d7:bd:d3:b4:aa:cb:b8:2b:f2:07:76:2d:9e:15: fc:c2:20:6c:7b:3b:4e:30:1c:7a:a8:1b:42:c9:29: 37:ed:e9:a9:f0:82:e7:20:29:aa:35:1b:eb:a7:32: a8:5b:02:9d:c0:ef:6b:bd:86:0e:5f:55:d3:60:52: fb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:ED:EC:90:A9:BE:6D:8B:EA:14:52:3D:09:1D:CD:DB:C9:16:38:1B X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/q-3skKm-bYvqFFI9CR3N28kWOBs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8390::/48 Signature Algorithm: sha256WithRSAEncryption ce:be:b9:18:d0:34:c8:dc:86:70:bf:c0:57:10:e7:bb:c3:b8: 8c:ad:9e:83:bc:51:8c:84:fa:eb:fa:49:4f:a8:9a:70:20:a8: 67:e6:2b:a4:52:3b:d9:ab:12:e3:19:39:ae:28:67:fa:3c:0a: b0:55:f4:53:9a:8e:2a:3e:5c:b5:cc:97:40:ff:28:36:1f:e8: a9:c7:6d:6b:81:10:6f:ab:87:ed:9e:8a:28:9e:58:78:fe:b7: 6a:31:9a:92:6a:8b:85:af:a0:03:94:e0:e5:e5:4b:42:c6:7c: 3b:d3:43:7c:67:11:01:d1:02:45:a8:b0:32:c2:60:fd:2a:23: bc:02:e9:29:6c:16:04:1f:27:53:f6:90:41:9f:86:46:a9:14: 8c:3d:a6:9e:f6:aa:ff:d3:6e:0b:02:d7:15:b1:92:8a:97:a5: 0b:6c:92:ff:f4:85:3b:4f:32:8f:9e:ae:b0:ba:42:df:10:df: cb:e8:01:aa:5f:b3:ca:d5:00:23:d3:0f:d1:b4:3a:c4:3b:cd: d6:c4:48:da:7f:db:bd:26:ec:8d:c5:14:de:bd:f1:5b:2c:a1: 45:c2:58:f4:9c:46:ac:fb:5d:a7:51:84:6b:c0:7c:d9:45:df: 89:51:c7:b1:f1:18:1e:dc:58:b6:36:ec:b7:a5:0f:c0:b5:4d: da:a2:71:77 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+ptaUwVPpUi2vl6L+rUtvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmVkZWM5MGE5YmU2ZDhiZWExNDUyM2QwOTFkY2RkYmM5MTYzODFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurjGuBn7TIva2zoAyGCD4ClDMTgA Dn8o5csXpdMtvhEgC58omoXUaXLzPSJXqTwL7oyk9Oup3wuzepIVjWDDL5TWH/83 mr9aWM8f6qEMVa6br/Yp74aXeQ5GdKKfreKK9ySA3ETevDVtTGTbEhmn1tQ/qcDt SXlKRolGXZQz+xJjB+eO0TV1wlcqugeSXgs89U4rBmTmjgpeOZiAsoOXjVTzaxGC lWil/qVwGcp8Ng/1BQdi5rW3vgy9MafNuhHlew2R173TtKrLuCvyB3YtnhX8wiBs eztOMBx6qBtCySk37emp8ILnICmqNRvrpzKoWwKdwO9rvYYOX1XTYFL7VwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKvt7JCpvm2L6hRSPQkdzdvJFjgbMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvcS0zc2tLbS1iWXZxRkZJOUNSM04yOGtXT0JzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIOQ MA0GCSqGSIb3DQEBCwUAA4IBAQDOvrkY0DTI3IZwv8BXEOe7w7iMrZ6DvFGMhPrr +klPqJpwIKhn5iukUjvZqxLjGTmuKGf6PAqwVfRTmo4qPly1zJdA/yg2H+ipx21r gRBvq4ftnooonlh4/rdqMZqSaouFr6ADlODl5UtCxnw700N8ZxEB0QJFqLAywmD9 KiO8AukpbBYEHydT9pBBn4ZGqRSMPaae9qr/024LAtcVsZKKl6ULbJL/9IU7TzKP nq6wukLfEN/L6AGqX7PK1QAj0w/RtDrEO83WxEjaf9u9JuyNxRTevfFbLKFFwlj0 nEas+12nUYRrwHzZRd+JUcex8Rge3Fi2Nuy3pQ/AtU3aonF3 -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:52 2026 by rpki-client