This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/qq04-Nyaa4OhkqF4scUl8CKIT04.roa File: qq04-Nyaa4OhkqF4scUl8CKIT04.roa (raw, json) Hash identifier: UU7nAEruoQ7Lu6xooDUug7lNEBXgtjn3Aw0AJADFHoQ= Subject key identifier: AA:AD:38:F8:DC:9A:6B:83:A1:92:A1:78:B1:C5:25:F0:22:88:4F:4E Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6F956FEA562445FA3E1F210D9469C Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/qq04-Nyaa4OhkqF4scUl8CKIT04.roa Signing time: Fri 02 Jan 2026 12:20:30 +0000 ROA not before: Fri 02 Jan 2026 12:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210283 IP address blocks: 2a0c:9a40:8190::/48 maxlen: 48 2a0c:9a40:8191::/48 maxlen: 48 2a0c:9a40:8192::/48 maxlen: 48 2a0c:9a40:8193::/48 maxlen: 48 2a0c:9a40:8194::/48 maxlen: 48 2a0c:9a40:8196::/48 maxlen: 48 2a0c:9a40:8197::/48 maxlen: 48 2a0c:9a40:8199::/48 maxlen: 48 2a0c:9a40:819a::/48 maxlen: 48 2a0c:9a40:819b::/48 maxlen: 48 2a0c:9a40:819c::/48 maxlen: 48 2a0c:9a40:819d::/48 maxlen: 48 2a0c:9a40:819e::/48 maxlen: 48 2a0c:9a40:819f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f9:56:fe:a5:62:44:5f:a3:e1:f2:10:d9:46:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aaad38f8dc9a6b83a192a178b1c525f022884f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:21:77:4f:2f:c4:ff:26:0b:8b:64:b5:31:d1: 64:77:e9:ee:a1:6f:d2:28:1b:07:f5:1c:80:01:ea: cb:0b:7f:dc:15:55:22:05:32:91:51:0a:fa:23:a8: 1e:7f:8c:0b:de:77:e6:94:72:a8:5c:d9:10:46:c6: 53:c8:f0:6f:f6:ac:2a:40:b5:e3:11:3b:ee:16:9c: 0a:f4:5b:8d:77:0f:e0:7b:75:10:7e:33:db:b6:76: 17:02:84:2c:d1:a2:3d:e0:6e:31:ad:c1:d0:d5:b3: f0:c7:70:d6:21:1f:3a:be:95:20:02:34:b6:a7:e0: 2a:c5:85:32:92:14:d3:37:18:33:80:f7:32:2e:b1: 6b:5a:2d:fb:10:6b:15:47:40:90:aa:20:34:46:50: cd:36:28:96:bb:50:5b:09:77:0f:e0:0b:46:22:80: 32:85:9d:04:0b:b6:32:a9:84:87:cd:4b:12:39:98: 97:cf:e5:43:58:f1:8e:b1:ec:a2:11:14:17:6d:c2: 99:8b:44:dd:57:b9:a2:a3:dc:8a:dc:98:4d:4e:7d: fe:5e:c3:59:75:f5:bf:5d:bc:a0:d6:f1:04:f4:80: 24:a3:bd:c2:35:cc:62:50:4c:70:5f:41:3d:a0:99: 80:a6:e8:0d:8e:e1:4a:ae:bd:0e:c7:53:0c:4a:cd: 31:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:AD:38:F8:DC:9A:6B:83:A1:92:A1:78:B1:C5:25:F0:22:88:4F:4E X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/qq04-Nyaa4OhkqF4scUl8CKIT04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8190::-2a0c:9a40:8194:ffff:ffff:ffff:ffff:ffff 2a0c:9a40:8196::/47 2a0c:9a40:8199::-2a0c:9a40:819f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption b6:06:1d:31:e7:67:2f:f9:6f:a0:c4:7a:20:00:4d:3b:fb:22: 23:65:ca:22:c3:fc:f6:05:a9:df:5a:c4:d3:4e:15:11:f8:89: 37:99:95:b9:b9:19:fe:b2:49:b2:a5:92:47:9d:4a:99:f1:52: 3a:21:68:19:4a:a8:df:73:03:56:48:52:ef:5d:53:19:c5:e5: 31:08:7e:bc:cd:ef:38:9e:39:b2:87:b0:08:b7:45:cb:90:e8: 36:8f:6d:24:17:98:22:00:6d:61:17:1f:f4:77:e8:1c:77:e8: 43:dd:41:b8:6a:40:84:90:99:fe:15:e1:ed:45:ef:cf:db:7d: fe:8d:34:ff:49:ae:f6:94:ba:da:bd:fd:f6:58:6a:26:29:b3: 2a:4a:b7:a0:20:c9:eb:2b:99:6b:15:4c:4e:f1:bb:3f:4b:b3: 5b:ac:f8:48:a2:4c:b4:45:09:33:36:fa:aa:8e:0a:76:b4:a8: 72:59:d3:ec:65:85:aa:c7:57:93:26:0c:78:cf:8c:ee:e9:d5: 4a:a3:13:7d:96:24:98:18:d1:7e:ce:41:6d:91:19:38:41:93: e0:60:b7:e5:e1:60:9a:44:74:90:a4:ba:22:04:26:48:67:61: 0d:16:9d:5e:d3:9e:b3:d0:d7:77:06:98:70:40:4d:43:fc:5a: c1:25:0f:8c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgISAZt+pvlW/qViRF+j4fIQ2UacMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWFkMzhmOGRjOWE2YjgzYTE5MmExNzhiMWM1MjVmMDIyODg0ZjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iF3Ty/E/yYLi2S1MdFkd+nuoW/S KBsH9RyAAerLC3/cFVUiBTKRUQr6I6gef4wL3nfmlHKoXNkQRsZTyPBv9qwqQLXj ETvuFpwK9FuNdw/ge3UQfjPbtnYXAoQs0aI94G4xrcHQ1bPwx3DWIR86vpUgAjS2 p+AqxYUykhTTNxgzgPcyLrFrWi37EGsVR0CQqiA0RlDNNiiWu1BbCXcP4AtGIoAy hZ0EC7YyqYSHzUsSOZiXz+VDWPGOseyiERQXbcKZi0TdV7mio9yK3JhNTn3+XsNZ dfW/Xbyg1vEE9IAko73CNcxiUExwX0E9oJmApugNjuFKrr0Ox1MMSs0xvQIDAQAB o4ICNDCCAjAwHQYDVR0OBBYEFKqtOPjcmmuDoZKheLHFJfAiiE9OMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvcXEwNC1OeWFhNE9oa3FGNHNjVWw4Q0tJVDA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTA3BAIAAjAxMBIDBwQqDJpA gZADBwAqDJpAgZQDBwEqDJpAgZYwEgMHACoMmkCBmQMHBSoMmkCBgDANBgkqhkiG 9w0BAQsFAAOCAQEAtgYdMednL/lvoMR6IABNO/siI2XKIsP89gWp31rE004VEfiJ N5mVubkZ/rJJsqWSR51KmfFSOiFoGUqo33MDVkhS711TGcXlMQh+vM3vOJ45soew CLdFy5DoNo9tJBeYIgBtYRcf9HfoHHfoQ91BuGpAhJCZ/hXh7UXvz9t9/o00/0mu 9pS62r399lhqJimzKkq3oCDJ6yuZaxVMTvG7P0uzW6z4SKJMtEUJMzb6qo4KdrSo clnT7GWFqsdXkyYMeM+M7unVSqMTfZYkmBjRfs5BbZEZOEGT4GC35eFgmkR0kKS6 IgQmSGdhDRadXtOes9DXdwaYcEBNQ/xawSUPjA== -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:44 2026 by rpki-client