This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/qtOhilBz7x3ErpocweKrrrfyHnM.roa File: qtOhilBz7x3ErpocweKrrrfyHnM.roa (raw, json) Hash identifier: lhK5EUfA1MVBuUNCVMfxcFbGZ4gisU7O84bI6OZfLog= Subject key identifier: AA:D3:A1:8A:50:73:EF:1D:C4:AE:9A:1C:C1:E2:AB:AE:B7:F2:1E:73 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6CF01617CA48770745124DD025BB6 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/qtOhilBz7x3ErpocweKrrrfyHnM.roa Signing time: Fri 02 Jan 2026 12:20:19 +0000 ROA not before: Fri 02 Jan 2026 12:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63150 IP address blocks: 2a0c:9a40:d000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:cf:01:61:7c:a4:87:70:74:51:24:dd:02:5b:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aad3a18a5073ef1dc4ae9a1cc1e2abaeb7f21e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:88:d7:7c:77:a1:ce:98:74:2c:56:4c:81:a9: 7c:f9:7a:b0:ec:cd:e4:77:98:83:7f:36:30:1b:5e: 07:28:02:1b:0f:1d:d9:ba:03:56:3a:c4:28:4a:9e: 28:77:70:27:8c:95:a6:f6:84:60:fb:7a:79:94:4e: 7d:86:5d:b9:8e:b4:7c:5a:c6:a9:2c:69:2a:de:b8: d3:3d:f7:03:d3:94:01:e6:23:03:56:16:88:4d:df: 22:d8:fc:3d:ef:f5:40:4f:a2:a2:a6:69:82:d9:18: 20:33:10:b0:56:da:2d:d5:a5:2f:47:b3:5c:f4:ac: 0e:ac:86:8d:36:73:44:f2:da:8f:8e:c4:65:f8:84: 03:23:b1:37:67:a2:85:82:ce:d5:ff:00:61:f0:19: 2a:45:4a:f9:d0:25:60:2e:d7:85:9e:68:cd:c2:2a: 16:8e:95:e1:7e:bd:49:f4:64:50:9e:88:61:d9:fe: f9:0b:7a:b0:c8:e1:88:a4:da:2d:86:01:5e:5c:69: 2a:b9:33:f5:d2:9f:26:d9:78:09:3a:9c:6b:82:8f: ba:2b:69:91:f2:91:73:30:15:f3:42:c3:ff:54:14: 27:6b:66:93:31:18:c3:5d:9b:ae:e4:46:db:90:65: 6c:f6:0d:b9:16:4d:98:99:40:4f:9e:41:69:ba:0e: ae:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D3:A1:8A:50:73:EF:1D:C4:AE:9A:1C:C1:E2:AB:AE:B7:F2:1E:73 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/qtOhilBz7x3ErpocweKrrrfyHnM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:d000::/40 Signature Algorithm: sha256WithRSAEncryption 81:00:96:f9:dc:82:f8:d5:dd:54:9b:1f:9f:55:e2:c1:ed:61: 6b:16:b4:4e:03:43:db:f7:c0:4f:60:ca:dc:0a:70:05:71:01: f9:41:4c:4f:b4:e5:bd:3e:9a:77:4e:4e:dc:65:79:47:57:41: 54:ae:c7:e8:c3:80:8e:30:3d:c0:7b:bf:e5:a7:2c:b7:8d:77: 44:9d:b3:74:cb:a5:6f:dd:bd:71:e6:63:36:03:0c:87:81:c2: df:d7:6d:34:32:c5:ff:aa:fa:3f:c2:e5:17:a4:42:16:72:cc: 7a:ab:b2:31:26:1e:36:2c:aa:09:ef:db:47:d5:94:b0:2e:2a: e2:06:b2:70:2a:f8:58:88:7c:57:1b:7d:cd:bc:cd:b2:c9:89: de:1a:6f:77:d8:73:51:30:b6:80:7a:08:ee:e8:17:21:96:c4: 1f:32:64:cb:dd:08:7f:8d:46:4e:36:f0:07:0e:6d:76:f4:3e: c2:17:84:04:e9:49:e8:16:e9:c9:48:f9:a0:53:a7:ab:cc:55: af:83:20:af:ba:89:50:df:fc:3a:61:3a:ce:c2:11:ff:65:db: 19:f9:e0:7d:47:ab:07:b2:66:1d:69:b3:8d:f9:ce:ca:08:92: bc:4a:82:d6:d6:dd:5b:39:bc:b5:7f:91:6b:c3:70:17:e1:a8: e3:81:b1:67 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+ps8BYXykh3B0USTdAlu2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWQzYTE4YTUwNzNlZjFkYzRhZTlhMWNjMWUyYWJhZWI3ZjIxZTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIjXfHehzph0LFZMgal8+Xqw7M3k d5iDfzYwG14HKAIbDx3ZugNWOsQoSp4od3AnjJWm9oRg+3p5lE59hl25jrR8Wsap LGkq3rjTPfcD05QB5iMDVhaITd8i2Pw97/VAT6KipmmC2RggMxCwVtot1aUvR7Nc 9KwOrIaNNnNE8tqPjsRl+IQDI7E3Z6KFgs7V/wBh8BkqRUr50CVgLteFnmjNwioW jpXhfr1J9GRQnohh2f75C3qwyOGIpNothgFeXGkquTP10p8m2XgJOpxrgo+6K2mR 8pFzMBXzQsP/VBQna2aTMRjDXZuu5EbbkGVs9g25Fk2YmUBPnkFpug6uNQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKrToYpQc+8dxK6aHMHiq6638h5zMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvcXRPaGlsQno3eDNFcnBvY3dlS3JycmZ5SG5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgyaQNAw DQYJKoZIhvcNAQELBQADggEBAIEAlvncgvjV3VSbH59V4sHtYWsWtE4DQ9v3wE9g ytwKcAVxAflBTE+05b0+mndOTtxleUdXQVSux+jDgI4wPcB7v+WnLLeNd0Sds3TL pW/dvXHmYzYDDIeBwt/XbTQyxf+q+j/C5RekQhZyzHqrsjEmHjYsqgnv20fVlLAu KuIGsnAq+FiIfFcbfc28zbLJid4ab3fYc1EwtoB6CO7oFyGWxB8yZMvdCH+NRk42 8AcObXb0PsIXhATpSegW6clI+aBTp6vMVa+DIK+6iVDf/DphOs7CEf9l2xn54H1H qweyZh1ps435zsoIkrxKgtbW3Vs5vLV/kWvDcBfhqOOBsWc= -----END CERTIFICATE-----Generated at Tue Jan 20 06:07:14 2026 by rpki-client