This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/cQKpfWEtQeb4fA54RswsJeiFVQY.roa File: cQKpfWEtQeb4fA54RswsJeiFVQY.roa (raw, json) Hash identifier: C9TBgzVVQS+nfqWgVytFXPcNcoSQYcfdOHlhq4bXBns= Subject key identifier: 71:02:A9:7D:61:2D:41:E6:F8:7C:0E:78:46:CC:2C:25:E8:85:55:06 Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811 Certificate serial: 019B7D5C55209CAAF43BD2F7CA09F26FCBEF Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/cQKpfWEtQeb4fA54RswsJeiFVQY.roa Signing time: Fri 02 Jan 2026 06:19:21 +0000 ROA not before: Fri 02 Jan 2026 06:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33660 IP address blocks: 2a03:2887:ff46::/48 maxlen: 48 2a03:2887:ff47::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:55:20:9c:aa:f4:3b:d2:f7:ca:09:f2:6f:cb:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=375a064f301026bc3cf87666d6a820128212a811 Validity Not Before: Jan 2 06:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7102a97d612d41e6f87c0e7846cc2c25e8855506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b3:78:d2:a0:52:44:58:1c:9c:11:e1:f0:d3: e4:07:65:42:2b:03:7d:e1:3a:48:cd:fb:aa:b9:32: b7:ef:7b:c2:bc:7c:58:9e:40:b4:e1:f5:4a:74:1c: 5e:5d:fe:71:27:69:6a:18:6b:78:5f:2d:b5:19:fb: fb:5c:7c:2d:8b:30:fb:92:73:a8:fb:de:b8:f9:48: ec:b7:41:ef:be:1a:3c:e1:7c:06:d1:17:d5:4f:92: 1e:2c:88:45:d1:e1:a8:7e:45:c8:32:82:09:bc:9d: d8:31:22:2f:7c:b1:d6:47:29:cf:b6:1e:cb:7f:08: d7:a1:5a:9f:7a:c1:a9:b5:62:cf:94:84:57:d8:6b: a2:40:52:95:60:2e:c0:f8:1f:de:2a:7f:71:76:d2: 31:22:c0:35:51:18:b2:dc:69:db:ee:b8:df:65:f4: 6f:0c:58:de:2e:60:0a:64:6a:05:51:2f:a6:52:9c: 3e:26:09:3e:fb:14:2b:6f:38:71:56:77:b7:95:5a: 0e:fe:08:cc:33:98:2b:f5:c8:98:ba:eb:97:b9:bf: 1a:fc:a3:7d:b4:96:ee:a3:19:ce:d2:52:dd:75:92: 57:31:4a:34:0a:c4:60:a7:f7:1e:b8:bf:41:4f:fa: d0:0c:cb:5c:3b:a4:dd:6b:8c:17:24:44:bc:2d:e4: ba:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:02:A9:7D:61:2D:41:E6:F8:7C:0E:78:46:CC:2C:25:E8:85:55:06 X509v3 Authority Key Identifier: keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/cQKpfWEtQeb4fA54RswsJeiFVQY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:2887:ff46::/47 Signature Algorithm: sha256WithRSAEncryption dc:55:00:6a:93:4d:f1:99:bc:de:a6:b8:0e:f2:41:7c:d8:f2: 3a:19:de:df:04:c5:d7:be:38:88:af:d0:b2:c9:be:29:a8:78: 72:9d:14:58:18:96:67:a5:d4:10:9c:54:3e:ba:e3:97:51:8b: 53:64:6c:35:fc:00:c5:89:de:bd:f4:f5:48:da:a3:8a:0b:28: ff:9f:0e:9a:e1:fa:9a:65:ee:95:8f:ed:5d:3a:9f:7d:32:76: 75:1c:04:b4:d8:7f:02:8a:2d:cd:d4:14:10:c1:5c:68:97:db: 1b:79:61:8e:b2:f9:61:0b:b9:d8:13:18:91:4a:2b:e1:c7:3a: c9:5b:ba:04:bf:ba:76:39:6e:3b:30:fb:2d:db:43:c1:2b:83: bf:db:87:c7:01:67:9d:35:09:ed:6f:33:8b:ef:c8:e1:0c:22: 4e:1d:4d:37:bc:ab:62:4c:20:54:a9:b8:81:d5:c1:8f:e4:55: b9:ea:71:ee:aa:69:f1:b9:63:af:0a:84:64:9d:72:18:af:36: b4:57:60:9c:3c:cc:bd:4c:84:13:68:8f:d4:5c:db:19:01:a6: 36:2b:eb:e6:23:cd:ab:5a:a9:0f:fc:3e:ea:39:22:93:26:e3: 4b:54:c6:0a:13:72:00:58:a4:73:6e:0e:b7:e4:17:db:d3:96: 3f:46:2f:29 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XFUgnKr0O9L3ygnyb8vvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NWEwNjRmMzAxMDI2YmMzY2Y4NzY2NmQ2YTgyMDEyODIx MmE4MTEwHhcNMjYwMTAyMDYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTAyYTk3ZDYxMmQ0MWU2Zjg3YzBlNzg0NmNjMmMyNWU4ODU1NTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLN40qBSRFgcnBHh8NPkB2VCKwN9 4TpIzfuquTK373vCvHxYnkC04fVKdBxeXf5xJ2lqGGt4Xy21Gfv7XHwtizD7knOo +964+Ujst0Hvvho84XwG0RfVT5IeLIhF0eGofkXIMoIJvJ3YMSIvfLHWRynPth7L fwjXoVqfesGptWLPlIRX2GuiQFKVYC7A+B/eKn9xdtIxIsA1URiy3Gnb7rjfZfRv DFjeLmAKZGoFUS+mUpw+Jgk++xQrbzhxVne3lVoO/gjMM5gr9ciYuuuXub8a/KN9 tJbuoxnO0lLddZJXMUo0CsRgp/ceuL9BT/rQDMtcO6Tda4wXJES8LeS6tQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHECqX1hLUHm+HwOeEbMLCXohVUGMB8GA1UdIwQY MBaAFDdaBk8wECa8PPh2ZtaoIBKCEqgRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFvR1R6QVFKcnc4LUhabTFxZ2dFb0lTcUJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kYzU4ODEtMzYzMi00NWFmLWJmNTkt ZjQ0YTU3Y2VkNzNkLzEvY1FLcGZXRXRRZWI0ZkE1NFJzd3NKZWlGVlFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9kYzU4ODEtMzYzMi00NWFmLWJmNTktZjQ0YTU3Y2VkNzNk LzEvTjFvR1R6QVFKcnc4LUhabTFxZ2dFb0lTcUJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgMoh/9G MA0GCSqGSIb3DQEBCwUAA4IBAQDcVQBqk03xmbzeprgO8kF82PI6Gd7fBMXXvjiI r9Cyyb4pqHhynRRYGJZnpdQQnFQ+uuOXUYtTZGw1/ADFid699PVI2qOKCyj/nw6a 4fqaZe6Vj+1dOp99MnZ1HAS02H8Cii3N1BQQwVxol9sbeWGOsvlhC7nYExiRSivh xzrJW7oEv7p2OW47MPst20PBK4O/24fHAWedNQntbzOL78jhDCJOHU03vKtiTCBU qbiB1cGP5FW56nHuqmnxuWOvCoRknXIYrza0V2CcPMy9TIQTaI/UXNsZAaY2K+vm I82rWqkP/D7qOSKTJuNLVMYKE3IAWKRzbg635Bfb05Y/Ri8p -----END CERTIFICATE-----Generated at Tue Jan 20 21:16:50 2026 by rpki-client