This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/QZKPOW9fdaZ6CFZZuHr5O3FdSo0.roa File: QZKPOW9fdaZ6CFZZuHr5O3FdSo0.roa (raw, json) Hash identifier: w3kv2Hh/xkZB3qu7NtFf6C0ytmrzwo58vPyVoDXMw14= Subject key identifier: 41:92:8F:39:6F:5F:75:A6:7A:08:56:59:B8:7A:F9:3B:71:5D:4A:8D Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13F412D8C06FFAFAF0DCDA795BBD6F Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/QZKPOW9fdaZ6CFZZuHr5O3FdSo0.roa Signing time: Fri 02 Jan 2026 14:19:32 +0000 ROA not before: Fri 02 Jan 2026 14:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50498 IP address blocks: 2a02:2698:3c00::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:f4:12:d8:c0:6f:fa:fa:f0:dc:da:79:5b:bd:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41928f396f5f75a67a085659b87af93b715d4a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:71:84:cc:00:14:31:eb:82:74:58:09:a5:4e: b5:14:d1:fe:92:17:cf:20:2f:9a:96:94:57:e7:f7: e3:0f:e9:b5:c0:01:a4:83:0f:36:5b:8d:db:14:69: 2c:6d:0a:a3:7f:6e:37:8c:98:ee:d1:1b:da:89:89: 1e:67:f8:71:53:c3:bf:c7:f0:9e:4e:5f:08:9c:7f: 21:2b:e0:ef:61:3a:64:3b:03:bb:63:39:6f:1c:83: 66:71:61:6e:61:bf:fb:4a:26:f5:2d:ed:9c:2f:c5: be:1f:7a:c5:a7:d7:4b:aa:fc:44:2d:04:10:21:f4: 83:f1:84:34:65:12:45:f9:89:eb:f9:f0:88:1a:06: 52:6d:0b:0d:61:54:77:10:26:d3:c9:fb:78:60:81: d2:90:40:04:7c:b6:98:07:92:af:79:77:1c:b6:76: 52:12:d0:f5:42:8c:36:67:45:91:49:83:bc:fb:c0: b4:c9:77:2d:b1:b5:d1:45:7d:4e:ee:d7:2f:f6:21: f5:ec:8d:37:a3:20:6f:1e:bd:bd:d4:42:d2:7a:a7: 1c:19:1b:65:cb:5e:c1:bc:48:dd:10:a5:2c:01:08: 45:b0:9d:11:00:4f:28:5f:1f:5b:16:fc:ec:c2:77: b8:f9:55:5f:b0:18:2a:4b:a1:8e:5c:f1:f5:42:de: 1e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:92:8F:39:6F:5F:75:A6:7A:08:56:59:B8:7A:F9:3B:71:5D:4A:8D X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/QZKPOW9fdaZ6CFZZuHr5O3FdSo0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2698:3c00::/38 Signature Algorithm: sha256WithRSAEncryption a7:6a:74:f0:67:31:84:92:84:99:0c:b1:30:34:77:1d:c1:a2: 20:28:ff:13:ca:e0:38:16:62:fd:7b:8b:d4:6a:5d:d9:23:f0: 16:ea:47:e8:ea:37:61:55:2b:4e:96:56:75:de:7e:f2:67:59: c4:e6:77:05:d5:a0:7c:f2:26:de:35:34:86:0e:58:7b:df:95: 56:1f:0d:8f:21:44:bc:7c:55:b5:5e:67:84:b5:77:05:08:e8: 37:b8:3c:d6:56:c3:e1:46:1c:5a:e0:f8:42:7b:be:af:21:08: f5:fb:77:68:72:cc:79:23:76:f6:31:47:31:ba:67:54:18:29: dd:25:c8:a9:aa:a5:30:85:ee:19:0e:92:0c:35:8f:82:79:94: 0f:4f:c1:d5:7e:4b:79:38:60:de:67:14:de:20:1d:2c:c3:dd: 71:6b:9c:3b:d7:20:c6:97:a0:0c:06:33:9a:cc:9f:04:96:49: 6c:04:30:65:66:da:c5:d7:c2:ee:02:c0:29:dd:e5:5b:b4:86: b6:2e:f5:29:54:b4:fb:7b:1f:52:d7:0c:cc:1b:df:39:68:d3: a8:75:cc:20:ee:1e:b1:48:3b:d3:bd:4a:7a:1c:12:8b:52:87: 36:72:70:e9:f5:6a:1b:d7:f0:19:b5:c5:71:6c:6d:e8:3c:bf: fd:80:7b:a9 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/E/QS2MBv+vrw3Np5W71vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTkyOGYzOTZmNWY3NWE2N2EwODU2NTliODdhZjkzYjcxNWQ0YThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXGEzAAUMeuCdFgJpU61FNH+khfP IC+alpRX5/fjD+m1wAGkgw82W43bFGksbQqjf243jJju0RvaiYkeZ/hxU8O/x/Ce Tl8InH8hK+DvYTpkOwO7YzlvHINmcWFuYb/7Sib1Le2cL8W+H3rFp9dLqvxELQQQ IfSD8YQ0ZRJF+Ynr+fCIGgZSbQsNYVR3ECbTyft4YIHSkEAEfLaYB5KveXcctnZS EtD1Qow2Z0WRSYO8+8C0yXctsbXRRX1O7tcv9iH17I03oyBvHr291ELSeqccGRtl y17BvEjdEKUsAQhFsJ0RAE8oXx9bFvzswne4+VVfsBgqS6GOXPH1Qt4eRwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFEGSjzlvX3WmeghWWbh6+TtxXUqNMB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEvUVpLUE9XOWZkYVo2Q0ZaWnVIcjVPM0ZkU28wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4 LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKgImmDww DQYJKoZIhvcNAQELBQADggEBAKdqdPBnMYSShJkMsTA0dx3BoiAo/xPK4DgWYv17 i9RqXdkj8BbqR+jqN2FVK06WVnXefvJnWcTmdwXVoHzyJt41NIYOWHvflVYfDY8h RLx8VbVeZ4S1dwUI6De4PNZWw+FGHFrg+EJ7vq8hCPX7d2hyzHkjdvYxRzG6Z1QY Kd0lyKmqpTCF7hkOkgw1j4J5lA9PwdV+S3k4YN5nFN4gHSzD3XFrnDvXIMaXoAwG M5rMnwSWSWwEMGVm2sXXwu4CwCnd5Vu0hrYu9SlUtPt7H1LXDMwb3zlo06h1zCDu HrFIO9O9SnocEotShzZycOn1ahvX8Bm1xXFsbeg8v/2Ae6k= -----END CERTIFICATE-----Generated at Thu Feb 5 05:53:44 2026 by rpki-client