This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/k_qQ7ZXrU3MvAUO3l9QsQswFIVI.roa File: k_qQ7ZXrU3MvAUO3l9QsQswFIVI.roa (raw, json) Hash identifier: iwu7+Y/Nx8QLGBPX4URI/++zbKKNtuDTaUaATNb7lmI= Subject key identifier: 93:FA:90:ED:95:EB:53:73:2F:01:43:B7:97:D4:2C:42:CC:05:21:52 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82D189B1D72A5206CA95E020C5A21D Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/k_qQ7ZXrU3MvAUO3l9QsQswFIVI.roa Signing time: Fri 02 Jan 2026 16:20:38 +0000 ROA not before: Fri 02 Jan 2026 16:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208885 IP address blocks: 2a0b:b86:ffe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:d1:89:b1:d7:2a:52:06:ca:95:e0:20:c5:a2:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93fa90ed95eb53732f0143b797d42c42cc052152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:af:b6:63:03:59:10:7c:d0:0c:25:e2:af:84: 70:84:48:e7:24:61:30:79:7f:86:93:3a:bc:87:6a: d3:a3:46:ea:f5:27:1d:e4:8a:f3:44:ae:3e:b5:58: e2:03:59:79:ed:d6:3d:2a:dd:72:03:ab:0e:52:ac: 93:fe:59:1b:3a:fe:8e:a7:da:83:1c:d7:2b:48:62: f2:b7:a2:8e:56:be:9a:c7:6a:12:d8:7c:39:5e:3f: 47:41:d4:1d:4e:95:bc:e5:33:fc:6c:d1:43:30:89: 03:50:57:c0:a3:84:f2:70:7c:51:58:22:e4:9b:a5: 61:f0:1d:e1:66:2e:43:c1:0d:f2:f5:d5:dd:ef:bd: ba:ac:7a:e9:52:f1:ad:6c:af:35:bf:89:12:c3:83: a8:0a:8b:5e:fd:47:41:82:c5:f0:52:80:4d:2d:b2: 13:67:85:58:f6:d4:43:e7:cf:27:5e:50:ae:91:e7: 63:dc:bd:ab:bd:ad:31:79:f2:eb:1d:f5:cd:b4:b2: ea:3d:c7:b2:2b:f4:34:7c:9d:17:15:3d:e1:40:72: 96:77:64:97:7d:70:98:63:6f:e3:4b:d3:6e:69:ac: 1a:9f:8c:0a:d7:3f:53:ae:31:b7:35:9d:c0:9c:9e: d1:76:ea:ed:91:c1:3b:c6:f5:77:88:87:7e:9a:0a: d9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FA:90:ED:95:EB:53:73:2F:01:43:B7:97:D4:2C:42:CC:05:21:52 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/k_qQ7ZXrU3MvAUO3l9QsQswFIVI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:b86:ffe4::/48 Signature Algorithm: sha256WithRSAEncryption da:4f:2c:f0:a3:8f:cc:c4:2d:b6:85:4c:5a:5f:95:13:f7:30: 0d:7f:ae:e0:34:73:f5:e2:5a:76:92:28:c7:da:ac:fe:67:f4: 9c:2f:90:63:3a:44:8e:6d:fa:14:2e:0a:ae:df:38:37:2e:47: 09:cf:a6:90:02:fe:7c:8e:b4:7b:fd:60:97:18:8e:6d:5e:1c: f1:bc:61:b0:44:31:0d:95:0b:e9:82:88:2b:f8:ed:91:69:2b: be:59:6f:4b:09:65:54:70:b8:fd:3b:ce:86:6f:32:12:7f:cb: 2a:c4:02:7c:6f:19:04:c8:4d:c0:39:0c:57:90:9e:9e:d0:bd: e9:a8:a7:85:56:bf:a9:57:f1:a0:0f:95:dd:e5:79:99:d2:32: d5:09:d8:f3:b0:0c:c3:90:49:bf:c7:42:c0:83:08:39:e6:e2: d6:85:5d:bd:91:e1:1d:e7:0b:b7:d3:97:c8:a0:1b:d3:5c:38: 0a:9b:bc:6a:50:ff:af:09:2a:21:f1:1b:c1:c3:cc:2a:39:f2: 8f:e3:18:97:fa:b0:6e:de:99:57:25:37:68:4f:e2:53:66:81: 51:a1:89:63:47:f9:6b:20:3e:01:00:24:86:42:04:5b:0d:a4: 4d:90:b5:01:6b:9d:90:33:92:ab:8d:0d:57:bd:b3:f7:fd:e5: 7a:36:38:aa -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/gtGJsdcqUgbKleAgxaIdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2ZhOTBlZDk1ZWI1MzczMmYwMTQzYjc5N2Q0MmM0MmNjMDUyMTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva+2YwNZEHzQDCXir4RwhEjnJGEw eX+Gkzq8h2rTo0bq9Scd5IrzRK4+tVjiA1l57dY9Kt1yA6sOUqyT/lkbOv6Op9qD HNcrSGLyt6KOVr6ax2oS2Hw5Xj9HQdQdTpW85TP8bNFDMIkDUFfAo4TycHxRWCLk m6Vh8B3hZi5DwQ3y9dXd7726rHrpUvGtbK81v4kSw4OoCote/UdBgsXwUoBNLbIT Z4VY9tRD588nXlCukedj3L2rva0xefLrHfXNtLLqPceyK/Q0fJ0XFT3hQHKWd2SX fXCYY2/jS9Nuaawan4wK1z9TrjG3NZ3AnJ7RdurtkcE7xvV3iId+mgrZbwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJP6kO2V61NzLwFDt5fULELMBSFSMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEva19xUTdaWHJVM012QVVPM2w5UXNRc3dGSVZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsLhv/k MA0GCSqGSIb3DQEBCwUAA4IBAQDaTyzwo4/MxC22hUxaX5UT9zANf67gNHP14lp2 kijH2qz+Z/ScL5BjOkSObfoULgqu3zg3LkcJz6aQAv58jrR7/WCXGI5tXhzxvGGw RDENlQvpgogr+O2RaSu+WW9LCWVUcLj9O86GbzISf8sqxAJ8bxkEyE3AOQxXkJ6e 0L3pqKeFVr+pV/GgD5Xd5XmZ0jLVCdjzsAzDkEm/x0LAgwg55uLWhV29keEd5wu3 05fIoBvTXDgKm7xqUP+vCSoh8RvBw8wqOfKP4xiX+rBu3plXJTdoT+JTZoFRoYlj R/lrID4BACSGQgRbDaRNkLUBa52QM5KrjQ1XvbP3/eV6Njiq -----END CERTIFICATE-----Generated at Tue Jan 20 15:20:58 2026 by rpki-client