This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/qDjhsbP07MlCXvjbfrNcHbYtuFE.roa File: qDjhsbP07MlCXvjbfrNcHbYtuFE.roa (raw, json) Hash identifier: KA3PmS8hbkYrTgTc7yR3puCk/FAyk1UBlP8VENhvZrI= Subject key identifier: A8:38:E1:B1:B3:F4:EC:C9:42:5E:F8:DB:7E:B3:5C:1D:B6:2D:B8:51 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6EA0ABE38ACFFEF3EEDEB0B4AA1C3 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/qDjhsbP07MlCXvjbfrNcHbYtuFE.roa Signing time: Fri 02 Jan 2026 12:20:26 +0000 ROA not before: Fri 02 Jan 2026 12:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205088 IP address blocks: 2a0c:9a40:8220::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ea:0a:be:38:ac:ff:ef:3e:ed:eb:0b:4a:a1:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a838e1b1b3f4ecc9425ef8db7eb35c1db62db851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:72:00:2a:44:d5:e4:6a:ac:03:e2:d0:98:10: 15:67:79:bb:79:c9:43:99:e8:dd:da:17:59:32:94: 90:39:82:22:17:14:79:5b:fa:3b:8b:57:58:db:62: d6:ae:c4:9d:ed:be:e1:be:53:53:3c:b5:68:d2:70: 81:5d:8c:e9:fb:27:5d:d7:63:ab:0a:c1:82:e8:bb: d2:b7:ec:71:d9:a1:27:ab:46:dc:29:18:f1:a0:55: ab:80:e3:bc:38:4d:3d:7b:c4:1f:f3:6f:b0:73:ab: 4a:5d:d3:e0:ed:3a:0e:c5:b6:a9:bf:a3:c2:b3:db: 8e:e4:a1:2c:a7:45:ff:b8:cd:c0:f7:ae:49:39:54: 21:04:66:40:11:69:f3:2e:fe:0c:37:1e:80:95:02: 15:aa:2c:a0:a1:0f:c0:64:50:67:5b:53:85:bf:fa: b4:46:e5:cd:36:34:00:45:1c:6f:d6:1e:22:d3:2b: 8d:70:7e:90:92:ca:f0:98:ac:a1:54:f3:44:e8:61: 7d:61:51:11:45:c1:21:64:a4:44:39:d7:11:17:de: 14:d7:a9:4e:b0:ef:44:0f:29:13:37:8b:0d:75:2c: 92:89:e9:c5:b5:b4:a6:3b:d0:03:71:2d:e6:47:6b: bd:63:3e:3f:fb:31:b5:94:f3:59:be:9f:c9:d9:6c: a8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:38:E1:B1:B3:F4:EC:C9:42:5E:F8:DB:7E:B3:5C:1D:B6:2D:B8:51 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/qDjhsbP07MlCXvjbfrNcHbYtuFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8220::/48 Signature Algorithm: sha256WithRSAEncryption 0c:98:02:54:b3:7f:15:b2:c2:6f:b4:a5:54:64:ce:a8:2e:39: 3a:84:15:9c:ce:52:70:0e:0c:f0:dd:2d:6e:65:c3:29:ac:41: fb:ef:da:91:65:31:17:a6:db:68:0b:7c:b0:ab:e5:9a:c7:36: 89:18:9e:b2:93:6f:cb:a3:0a:13:59:41:5c:e0:8b:69:3a:d7: f1:45:36:e2:a4:a2:a1:66:6f:89:bb:e3:09:7c:a4:a5:56:77: 53:cd:5d:40:ec:cd:6e:07:e8:d5:f8:69:ed:a7:b3:85:76:3c: 1c:91:b3:11:f2:74:82:85:9e:2f:94:f4:a5:e9:17:8f:11:95: e0:5b:da:54:a6:a2:c0:44:c6:83:69:68:f7:b3:5c:0f:cc:f0: 81:d0:d7:ef:b7:4d:8a:f3:8e:3f:86:b3:ef:56:e6:d0:c1:5e: c3:87:e3:a5:fb:1e:0d:86:71:7e:9c:39:fb:41:29:7d:4e:10: 9d:fd:b3:b0:2f:33:a3:f8:0f:4c:83:fd:04:9f:9b:54:d7:9a: 05:14:b8:30:60:3c:83:fb:2d:e4:43:3a:b3:54:0f:7b:70:36: fd:6b:2f:8b:e8:45:a9:f3:81:0e:9d:f6:5c:f3:5d:30:37:27: 01:41:7e:34:6b:ae:34:ed:c2:40:d3:f5:46:da:b0:d8:b8:df: f5:f4:06:e4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+puoKvjis/+8+7esLSqHDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODM4ZTFiMWIzZjRlY2M5NDI1ZWY4ZGI3ZWIzNWMxZGI2MmRiODUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23IAKkTV5GqsA+LQmBAVZ3m7eclD mejd2hdZMpSQOYIiFxR5W/o7i1dY22LWrsSd7b7hvlNTPLVo0nCBXYzp+ydd12Or CsGC6LvSt+xx2aEnq0bcKRjxoFWrgOO8OE09e8Qf82+wc6tKXdPg7ToOxbapv6PC s9uO5KEsp0X/uM3A965JOVQhBGZAEWnzLv4MNx6AlQIVqiygoQ/AZFBnW1OFv/q0 RuXNNjQARRxv1h4i0yuNcH6QksrwmKyhVPNE6GF9YVERRcEhZKREOdcRF94U16lO sO9EDykTN4sNdSySienFtbSmO9ADcS3mR2u9Yz4/+zG1lPNZvp/J2WyonQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKg44bGz9OzJQl74236zXB22LbhRMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvcURqaHNiUDA3TWxDWHZqYmZyTmNIYll0dUZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIIg MA0GCSqGSIb3DQEBCwUAA4IBAQAMmAJUs38VssJvtKVUZM6oLjk6hBWczlJwDgzw 3S1uZcMprEH779qRZTEXpttoC3ywq+WaxzaJGJ6yk2/LowoTWUFc4ItpOtfxRTbi pKKhZm+Ju+MJfKSlVndTzV1A7M1uB+jV+Gntp7OFdjwckbMR8nSChZ4vlPSl6ReP EZXgW9pUpqLARMaDaWj3s1wPzPCB0Nfvt02K844/hrPvVubQwV7Dh+Ol+x4NhnF+ nDn7QSl9ThCd/bOwLzOj+A9Mg/0En5tU15oFFLgwYDyD+y3kQzqzVA97cDb9ay+L 6EWp84EOnfZc810wNycBQX40a6407cJA0/VG2rDYuN/19Abk -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:35 2026 by rpki-client