This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/qK_PP9-atac9mTKlNBkq0IeVJSc.roa File: qK_PP9-atac9mTKlNBkq0IeVJSc.roa (raw, json) Hash identifier: 7XIhv4ZG0yNjDke4N6v5k/ztyTTS+fsvn2uOI243g1w= Subject key identifier: A8:AF:CF:3F:DF:9A:B5:A7:3D:99:32:A5:34:19:2A:D0:87:95:25:27 Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1 Certificate serial: 019B7E388688609188B8DFEEA7A3FB34ADE6 Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/qK_PP9-atac9mTKlNBkq0IeVJSc.roa Signing time: Fri 02 Jan 2026 10:19:52 +0000 ROA not before: Fri 02 Jan 2026 10:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 2a06:4c00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:86:88:60:91:88:b8:df:ee:a7:a3:fb:34:ad:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1 Validity Not Before: Jan 2 10:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8afcf3fdf9ab5a73d9932a534192ad087952527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a8:fa:21:4a:2b:33:f3:04:0b:6d:85:62:dd: af:90:82:c3:63:ee:75:6f:6c:c4:e9:b3:45:e4:59: 69:6f:76:d0:48:5b:32:f3:2f:b7:fd:53:f6:5f:49: 82:f9:ee:7f:2f:c4:7a:4f:51:92:9d:e6:c1:40:f5: bb:8c:30:51:f8:1a:27:ac:8a:ec:fa:bb:ed:1a:1a: 64:f2:23:54:bd:6b:45:04:b4:d6:1d:a4:42:79:3b: 4e:5e:aa:01:71:84:93:97:c7:14:31:dc:70:01:96: f3:ed:a4:b4:f9:8b:3b:7c:b3:1e:60:a6:4f:2c:d6: 31:5f:d7:dc:12:a5:91:50:63:29:14:98:87:9b:cb: f0:cd:57:a7:68:7b:13:e2:bc:01:34:d2:52:96:bd: 22:84:fc:28:e1:cc:89:1f:2d:ba:db:93:4f:c7:b6: 6f:33:1d:9a:ce:91:5b:dc:20:03:a7:c5:ca:7f:0f: 19:82:0c:21:2b:f0:66:b1:61:b9:c9:d9:80:74:38: f9:cb:e4:01:7b:d0:6b:9a:3a:58:55:3a:88:31:a5: 58:d9:95:01:a3:47:dd:6e:a5:23:b4:0e:01:1f:0a: d9:4b:39:ec:86:e1:f0:ac:07:6b:1c:cd:05:b4:10: 57:67:3e:df:9b:93:ba:0e:c5:db:2f:f2:77:e7:1a: 29:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AF:CF:3F:DF:9A:B5:A7:3D:99:32:A5:34:19:2A:D0:87:95:25:27 X509v3 Authority Key Identifier: keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/qK_PP9-atac9mTKlNBkq0IeVJSc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:4c00::/32 Signature Algorithm: sha256WithRSAEncryption 93:5a:c3:24:6b:44:35:19:cf:82:be:8d:f3:a9:11:bc:94:05: ad:53:f7:c1:3e:c0:2b:fd:06:bd:ff:9d:af:a6:d0:f3:6b:6c: 81:ae:45:da:cd:43:7d:56:26:79:69:07:0d:b3:4f:9c:90:c0: 52:9c:a0:04:5f:25:43:9e:03:f1:af:92:75:eb:69:8a:31:98: 7a:c5:5d:11:53:8a:42:68:61:53:51:1d:d8:f0:54:6a:8c:0b: 57:7c:5e:45:b6:1c:21:63:af:9b:61:b6:28:6e:ed:b7:4d:35: a4:13:dc:d6:75:fe:58:85:ac:ac:03:ae:78:e9:cb:0f:17:bb: 40:8b:b8:7a:6e:d3:cc:2e:5e:f5:c1:a8:35:39:db:54:f8:f9: 42:7a:62:40:f0:ba:2c:e4:94:45:dc:a1:7e:9c:05:50:71:53: 41:01:01:f1:71:99:88:cc:04:dd:2b:8e:cb:fa:2d:71:8a:1a: 0b:c6:d5:18:d4:72:7a:b6:60:2c:49:3b:12:e9:e6:56:79:4d: b3:22:11:5a:e0:0b:7c:03:d8:9f:27:7b:76:ef:77:32:a0:7f: e0:32:75:10:d8:fc:ad:3f:53:5c:df:28:29:90:a4:71:3f:30: e8:d7:74:bb:e4:fe:8b:c9:21:21:85:96:9d:41:22:7e:40:5a: d0:d2:43:a0 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+OIaIYJGIuN/up6P7NK3mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMTRhN2UyYThjNzAxMjMyNWFlOTczZWQxYTJiYmEwNWIy YmI5YzEwHhcNMjYwMTAyMTAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGFmY2YzZmRmOWFiNWE3M2Q5OTMyYTUzNDE5MmFkMDg3OTUyNTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Kj6IUorM/MEC22FYt2vkILDY+51 b2zE6bNF5Flpb3bQSFsy8y+3/VP2X0mC+e5/L8R6T1GSnebBQPW7jDBR+BonrIrs +rvtGhpk8iNUvWtFBLTWHaRCeTtOXqoBcYSTl8cUMdxwAZbz7aS0+Ys7fLMeYKZP LNYxX9fcEqWRUGMpFJiHm8vwzVenaHsT4rwBNNJSlr0ihPwo4cyJHy2625NPx7Zv Mx2azpFb3CADp8XKfw8ZggwhK/BmsWG5ydmAdDj5y+QBe9BrmjpYVTqIMaVY2ZUB o0fdbqUjtA4BHwrZSznshuHwrAdrHM0FtBBXZz7fm5O6DsXbL/J35xopkQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFKivzz/fmrWnPZkypTQZKtCHlSUnMB8GA1UdIwQY MBaAFBIUp+KoxwEjJa6XPtGiu6BbK7nBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQt ZTljMzY0OWMxMjE4LzEvcUtfUFA5LWF0YWM5bVRLbE5Ca3EwSWVWSlNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQtZTljMzY0OWMxMjE4 LzEvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgZMADAN BgkqhkiG9w0BAQsFAAOCAQEAk1rDJGtENRnPgr6N86kRvJQFrVP3wT7AK/0Gvf+d r6bQ82tsga5F2s1DfVYmeWkHDbNPnJDAUpygBF8lQ54D8a+SdetpijGYesVdEVOK QmhhU1Ed2PBUaowLV3xeRbYcIWOvm2G2KG7tt001pBPc1nX+WIWsrAOueOnLDxe7 QIu4em7TzC5e9cGoNTnbVPj5QnpiQPC6LOSURdyhfpwFUHFTQQEB8XGZiMwE3SuO y/otcYoaC8bVGNRyerZgLEk7EunmVnlNsyIRWuALfAPYnyd7du93MqB/4DJ1ENj8 rT9TXN8oKZCkcT8w6Nd0u+T+i8khIYWWnUEifkBa0NJDoA== -----END CERTIFICATE-----Generated at Wed Jan 21 14:41:10 2026 by rpki-client