This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/q0EJWTGDwVco__jebUVu3D5kU9c.roa File: q0EJWTGDwVco__jebUVu3D5kU9c.roa (raw, json) Hash identifier: tb42uJpdP5nMQK249exHWZcGEWgXf/qYgSBE+LChXnY= Subject key identifier: AB:41:09:59:31:83:C1:57:28:FF:F8:DE:6D:45:6E:DC:3E:64:53:D7 Certificate issuer: /CN=fd34b13fbd9381df84c687f06bcd074e4a755803 Certificate serial: 019B79ED56C1EE23B236B6CF81DAD4D70CC1 Authority key identifier: FD:34:B1:3F:BD:93:81:DF:84:C6:87:F0:6B:CD:07:4E:4A:75:58:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TSxP72Tgd-Exofwa80HTkp1WAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/q0EJWTGDwVco__jebUVu3D5kU9c.roa Signing time: Thu 01 Jan 2026 14:19:15 +0000 ROA not before: Thu 01 Jan 2026 14:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199217 IP address blocks: 2001:67c:168c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft rsync://rpki.ripe.net/repository/DEFAULT/_TSxP72Tgd-Exofwa80HTkp1WAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:56:c1:ee:23:b2:36:b6:cf:81:da:d4:d7:0c:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd34b13fbd9381df84c687f06bcd074e4a755803 Validity Not Before: Jan 1 14:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab4109593183c15728fff8de6d456edc3e6453d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c5:b1:f7:71:cc:02:87:b3:ca:21:f9:42:94: 27:fb:d8:fe:83:f8:98:b5:92:c5:5a:76:35:21:29: 19:17:f8:d9:8c:72:b3:00:3e:a2:02:a7:11:cf:05: 51:fb:3d:d8:15:32:17:91:2b:76:8e:96:97:2d:41: 0d:33:c8:2a:64:84:07:ba:dd:7c:e2:e9:f4:f9:15: 40:54:74:8b:1f:16:35:24:0f:39:d0:ec:8d:e6:16: 55:23:51:13:7d:bf:f3:11:e5:12:9c:e2:83:0b:52: c3:87:ae:18:4c:26:c5:1b:69:8c:cf:8b:b4:0b:17: ca:47:c0:e2:28:51:cf:6e:a9:09:dd:e9:63:73:87: c2:68:af:17:7e:1c:52:65:5a:19:1e:62:6c:d0:87: 7c:50:e1:0b:49:83:55:a7:d5:8c:70:e4:85:0f:a8: bf:eb:bd:f0:80:95:4a:9e:46:1c:9d:43:24:50:fd: fb:d6:51:be:95:72:5b:c4:4e:c2:c2:45:0e:05:53: 28:95:ec:94:b2:23:35:5e:be:58:b4:b5:a8:2c:4c: 8a:ee:d5:ab:d1:a7:ed:29:e4:27:d1:0a:78:04:bf: fe:ab:dd:f0:23:1b:77:c0:d2:c5:85:09:ee:de:e4: a2:a9:32:e5:d5:7b:49:9f:17:ce:7f:3a:69:af:34: 1a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:41:09:59:31:83:C1:57:28:FF:F8:DE:6D:45:6E:DC:3E:64:53:D7 X509v3 Authority Key Identifier: keyid:FD:34:B1:3F:BD:93:81:DF:84:C6:87:F0:6B:CD:07:4E:4A:75:58:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TSxP72Tgd-Exofwa80HTkp1WAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/q0EJWTGDwVco__jebUVu3D5kU9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:168c::/48 Signature Algorithm: sha256WithRSAEncryption 1e:2c:ac:ca:26:4e:31:29:90:53:29:c3:ea:5b:59:f7:7b:ce: 14:26:b3:3d:7d:f2:1c:52:a2:f4:35:a8:ef:ae:eb:c8:05:a1: 52:c1:77:46:df:34:a9:81:1d:f4:e3:3f:21:a3:21:c2:ef:f1: 0f:c0:3d:ac:e3:a9:06:3c:47:d4:41:53:1b:10:bd:10:cb:c1: c6:86:9a:b6:4e:3f:b8:40:dd:1a:f3:fa:9d:03:9b:03:19:b4: 49:ca:40:a4:54:b8:dd:95:9e:01:2a:28:82:be:d3:70:82:fd: fc:e5:86:d1:22:44:85:75:f6:03:0d:00:a4:f4:be:d5:c8:aa: 1c:e9:85:4f:6e:12:dd:c7:dd:5b:a2:35:00:fa:28:df:35:3a: e8:a2:a6:df:22:6b:ed:1d:33:5e:fa:ff:97:7e:44:38:2a:14: db:0d:f7:4e:8a:56:a7:7d:ab:3b:48:32:7e:56:92:46:22:e7: 25:fb:b9:d0:34:f1:af:05:20:be:f9:c3:39:38:cf:20:6e:3a: 38:b4:68:a9:c9:3f:c4:db:8d:e2:87:07:38:b3:b0:9a:5b:58: 08:69:ca:60:b9:ce:00:c6:4c:5f:d5:4e:30:45:ae:be:2d:95: ea:9f:ae:96:72:ff:59:70:6e:32:73:87:cb:0c:46:52:55:36: 5b:3d:5d:22 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57VbB7iOyNrbPgdrU1wzBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzRiMTNmYmQ5MzgxZGY4NGM2ODdmMDZiY2QwNzRlNGE3 NTU4MDMwHhcNMjYwMTAxMTQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjQxMDk1OTMxODNjMTU3MjhmZmY4ZGU2ZDQ1NmVkYzNlNjQ1M2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcWx93HMAoezyiH5QpQn+9j+g/iY tZLFWnY1ISkZF/jZjHKzAD6iAqcRzwVR+z3YFTIXkSt2jpaXLUENM8gqZIQHut18 4un0+RVAVHSLHxY1JA850OyN5hZVI1ETfb/zEeUSnOKDC1LDh64YTCbFG2mMz4u0 CxfKR8DiKFHPbqkJ3eljc4fCaK8XfhxSZVoZHmJs0Id8UOELSYNVp9WMcOSFD6i/ 673wgJVKnkYcnUMkUP371lG+lXJbxE7CwkUOBVMoleyUsiM1Xr5YtLWoLEyK7tWr 0aftKeQn0Qp4BL/+q93wIxt3wNLFhQnu3uSiqTLl1XtJnxfOfzpprzQaQwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKtBCVkxg8FXKP/43m1Fbtw+ZFPXMB8GA1UdIwQY MBaAFP00sT+9k4HfhMaH8GvNB05KdVgDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RTeFA3MlRnZC1FeG9md2E4MEhUa3AxV0FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wMTk2ZjEtNDMzOS00YmRjLTgwMzQt MmViMmYyZWQzMDI5LzEvcTBFSldUR0R3VmNvX19qZWJVVnUzRDVrVTljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8wMTk2ZjEtNDMzOS00YmRjLTgwMzQtMmViMmYyZWQzMDI5 LzEvX1RTeFA3MlRnZC1FeG9md2E4MEhUa3AxV0FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBaM MA0GCSqGSIb3DQEBCwUAA4IBAQAeLKzKJk4xKZBTKcPqW1n3e84UJrM9ffIcUqL0 NajvruvIBaFSwXdG3zSpgR304z8hoyHC7/EPwD2s46kGPEfUQVMbEL0Qy8HGhpq2 Tj+4QN0a8/qdA5sDGbRJykCkVLjdlZ4BKiiCvtNwgv385YbRIkSFdfYDDQCk9L7V yKoc6YVPbhLdx91bojUA+ijfNTrooqbfImvtHTNe+v+XfkQ4KhTbDfdOilanfas7 SDJ+VpJGIucl+7nQNPGvBSC++cM5OM8gbjo4tGipyT/E243ihwc4s7CaW1gIacpg uc4Axkxf1U4wRa6+LZXqn66Wcv9ZcG4yc4fLDEZSVTZbPV0i -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:18 2026 by rpki-client