This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qsmGo7fID2u6cMX4jMi8VWyVF4g.roa File: qsmGo7fID2u6cMX4jMi8VWyVF4g.roa (raw, json) Hash identifier: B29/KeKW8dVVgWAvCH/4ONqSoV+7SrE3XnPIBmXVVj0= Subject key identifier: AA:C9:86:A3:B7:C8:0F:6B:BA:70:C5:F8:8C:C8:BC:55:6C:95:17:88 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12CDF14EF5058D9286851C88CFA613 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qsmGo7fID2u6cMX4jMi8VWyVF4g.roa Signing time: Fri 02 Jan 2026 00:19:25 +0000 ROA not before: Fri 02 Jan 2026 00:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31025 IP address blocks: 2a02:2fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:cd:f1:4e:f5:05:8d:92:86:85:1c:88:cf:a6:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aac986a3b7c80f6bba70c5f88cc8bc556c951788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:82:73:1a:b5:c8:3b:de:19:29:70:bb:9f:bb: 20:a2:2e:de:ad:af:38:81:bd:32:2c:f8:57:bc:d7: e6:93:09:2d:f6:53:9b:b2:83:81:71:59:92:2c:16: df:db:87:d8:c3:62:f9:39:44:d2:b9:22:9b:7d:f5: 34:f9:2f:81:2f:99:4b:fa:89:cc:be:00:92:39:9a: dd:f3:d2:a0:00:ef:d4:3a:cd:1d:52:e4:b3:37:04: bf:ef:82:d3:c2:1e:19:04:e9:e2:05:e2:9d:3b:b7: fb:49:62:8d:f4:b2:b0:47:a4:2b:0d:12:67:2e:88: f4:80:fa:b2:9c:1c:52:ab:d2:eb:d9:95:32:89:20: c6:de:61:49:04:19:a0:d7:a3:27:88:38:fb:62:99: 0f:72:d5:39:0f:a3:a0:d3:69:95:d9:a1:e6:80:e9: 54:30:b4:c2:9e:f2:d7:fa:b7:c6:b3:47:48:e9:08: 50:ec:7c:16:9c:a1:c8:ad:03:2f:13:5a:43:93:7b: 44:19:dc:62:6a:97:df:9d:16:a5:33:c8:65:47:b5: 74:75:76:48:4f:0c:77:26:d6:cd:98:5f:53:e8:80: a2:20:ff:41:dd:3d:46:a2:43:01:cc:ca:f5:48:af: 1a:70:a4:51:29:04:68:60:ae:b6:35:cc:f5:2f:39: fb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C9:86:A3:B7:C8:0F:6B:BA:70:C5:F8:8C:C8:BC:55:6C:95:17:88 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qsmGo7fID2u6cMX4jMi8VWyVF4g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2fc0::/48 Signature Algorithm: sha256WithRSAEncryption 79:3a:de:09:70:5e:cf:29:5f:1b:21:31:33:7d:48:1b:c5:a3: 9b:c7:2f:07:a1:60:2d:06:fb:40:6a:6c:1a:49:16:e3:71:d8: 65:9c:4b:16:bc:3f:b4:39:6d:8c:83:18:94:6b:d0:b1:c0:4b: 6f:40:62:8d:fb:16:6f:be:03:90:30:74:d9:68:b4:f1:ee:79: 7a:a8:fe:9f:7b:64:da:2c:0a:7f:72:bf:97:73:97:19:a3:c0: c7:02:fb:83:3b:28:7c:f1:a8:9f:b2:d7:64:86:ca:92:4c:11: 43:a5:c2:59:21:11:fc:c1:c9:00:92:76:33:ea:0b:ac:f4:60: 35:0b:6c:1d:e1:5a:1a:0a:6b:a9:94:00:7d:30:02:0d:a8:20: 5e:47:93:22:59:00:ca:f0:33:1c:39:67:66:05:f7:70:de:a9: 8b:87:49:da:36:67:69:0c:19:ed:61:ca:4f:cc:da:88:39:a7: c1:c6:b0:cf:b1:22:c4:65:e9:8f:b1:0a:d7:69:7b:4c:68:95: 05:c0:70:5a:76:25:6f:3d:23:b4:31:fc:31:ed:1d:93:be:dc: 51:db:05:35:3f:a3:2b:b9:4f:58:35:4c:94:dc:fc:51:8d:4d: 15:e8:d1:ec:2e:cc:0b:68:66:24:c5:37:1a:8f:d6:34:09:cd: 79:33:38:08 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8Es3xTvUFjZKGhRyIz6YTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWM5ODZhM2I3YzgwZjZiYmE3MGM1Zjg4Y2M4YmM1NTZjOTUxNzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7oJzGrXIO94ZKXC7n7sgoi7era84 gb0yLPhXvNfmkwkt9lObsoOBcVmSLBbf24fYw2L5OUTSuSKbffU0+S+BL5lL+onM vgCSOZrd89KgAO/UOs0dUuSzNwS/74LTwh4ZBOniBeKdO7f7SWKN9LKwR6QrDRJn Loj0gPqynBxSq9Lr2ZUyiSDG3mFJBBmg16MniDj7YpkPctU5D6Og02mV2aHmgOlU MLTCnvLX+rfGs0dI6QhQ7HwWnKHIrQMvE1pDk3tEGdxiapffnRalM8hlR7V0dXZI Twx3JtbNmF9T6ICiIP9B3T1GokMBzMr1SK8acKRRKQRoYK62Ncz1Lzn7XwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKrJhqO3yA9runDF+IzIvFVslReIMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvcXNtR283ZklEMnU2Y01YNGpNaThWV3lWRjRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIvwAAA MA0GCSqGSIb3DQEBCwUAA4IBAQB5Ot4JcF7PKV8bITEzfUgbxaObxy8HoWAtBvtA amwaSRbjcdhlnEsWvD+0OW2MgxiUa9CxwEtvQGKN+xZvvgOQMHTZaLTx7nl6qP6f e2TaLAp/cr+Xc5cZo8DHAvuDOyh88aifstdkhsqSTBFDpcJZIRH8wckAknYz6gus 9GA1C2wd4VoaCmuplAB9MAINqCBeR5MiWQDK8DMcOWdmBfdw3qmLh0naNmdpDBnt YcpPzNqIOafBxrDPsSLEZemPsQrXaXtMaJUFwHBadiVvPSO0Mfwx7R2TvtxR2wU1 P6MruU9YNUyU3PxRjU0V6NHsLswLaGYkxTcaj9Y0Cc15MzgI -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:34 2026 by rpki-client