This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/qytnRCOjmfXD4EBiG8mPwrZJX1E.roa File: qytnRCOjmfXD4EBiG8mPwrZJX1E.roa (raw, json) Hash identifier: 3EFM9dsFft/E3giBZO0KerAf18dXuvytCh/1fX7wJFc= Subject key identifier: AB:2B:67:44:23:A3:99:F5:C3:E0:40:62:1B:C9:8F:C2:B6:49:5F:51 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82CB9F178C062C4DD41EC5BB48E775 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/qytnRCOjmfXD4EBiG8mPwrZJX1E.roa Signing time: Fri 02 Jan 2026 16:20:36 +0000 ROA not before: Fri 02 Jan 2026 16:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205749 IP address blocks: 2a0b:b86:fe00::/40 maxlen: 48 2a0f:8ac1:a0a::/48 maxlen: 48 2a0f:8ac1:574b::/48 maxlen: 48 2a0f:8ac1:d452::/48 maxlen: 48 2a0f:8ac1:d9a3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:cb:9f:17:8c:06:2c:4d:d4:1e:c5:bb:48:e7:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab2b674423a399f5c3e040621bc98fc2b6495f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b6:6e:67:31:b9:52:19:81:14:e9:77:df:2f: ac:48:70:dc:4d:7b:d1:5d:75:d1:cf:4d:23:66:d0: e5:6c:69:e8:3c:27:b2:83:f7:7c:fe:90:62:c2:f7: 9b:e4:ad:70:dc:dc:71:3d:76:e1:05:56:7a:e9:0c: 7a:1c:51:a1:06:91:bc:b9:08:59:d3:cf:98:ac:08: 9e:3b:5b:d4:db:4e:c4:9c:e2:cf:96:65:77:ab:74: 6c:39:05:1f:96:4d:be:33:8c:47:8b:15:f7:ca:da: 7f:06:c5:c8:db:f2:48:ea:67:69:f6:52:27:5c:09: 37:fb:82:8f:c9:5a:3b:67:b9:09:fe:86:a9:97:49: 6b:4f:43:bd:da:e0:c1:ee:77:3c:a2:78:0e:7f:68: 0d:0c:07:3d:3a:65:cd:d2:c3:5c:2a:e1:fc:e1:b9: ba:34:b2:ff:78:28:02:24:28:6a:f1:99:34:aa:34: 83:fa:62:e5:6f:47:62:96:ea:e3:9c:9c:55:14:5b: f4:85:2a:7f:e8:20:1c:18:a3:80:53:fc:67:ce:35: 67:bb:18:ac:62:6b:81:51:1b:e1:43:f0:82:08:97: 2a:01:9d:fa:f4:34:00:e1:80:70:7e:8c:0a:c9:00: 35:0d:95:ac:05:5b:17:b1:45:97:1a:ed:79:2c:12: ca:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2B:67:44:23:A3:99:F5:C3:E0:40:62:1B:C9:8F:C2:B6:49:5F:51 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/qytnRCOjmfXD4EBiG8mPwrZJX1E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:b86:fe00::/40 2a0f:8ac1:a0a::/48 2a0f:8ac1:574b::/48 2a0f:8ac1:d452::/48 2a0f:8ac1:d9a3::/48 Signature Algorithm: sha256WithRSAEncryption bc:a4:b4:17:8b:e9:17:6c:79:47:99:cf:27:a6:44:4b:f0:c0: fd:f0:5c:0f:23:7b:ae:5c:37:57:19:9a:01:07:c9:25:e0:93: 78:c9:eb:45:b8:5b:2d:61:61:39:3b:58:cf:5e:9e:eb:ff:b4: 39:1f:0e:8b:a2:04:40:95:cb:dd:06:d2:72:cb:76:af:71:8b: 05:ac:60:64:d3:ca:d6:0f:cf:b4:8d:bb:2f:ba:66:da:83:51: fc:e6:f3:68:f9:ff:d3:d5:fa:70:a2:56:81:2a:85:e1:04:48: 54:8f:71:cc:85:e9:6b:ac:58:94:0f:d2:d8:70:a1:1a:b5:12: 19:53:c7:d1:63:d9:e4:54:13:bc:a4:ce:b8:bd:5d:e3:dd:42: 25:a5:29:17:5a:85:2e:84:22:9f:f7:8d:5a:78:f0:6b:8c:fd: 66:ab:79:81:44:a3:81:a9:22:5a:5d:bf:25:c9:ba:ec:79:4f: 81:94:81:c3:34:c7:c1:de:73:4e:9b:33:27:e8:92:f7:82:c4: 58:51:5a:b4:d1:22:71:12:a5:2e:bc:e7:8f:cf:e0:76:ac:27: 50:60:f9:36:43:4b:e8:6f:da:22:ac:93:eb:d9:3b:ed:61:78: c4:e4:0e:83:2d:25:35:64:46:21:b6:ea:aa:92:c8:a0:05:c3: 9e:b5:c6:51 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt/gsufF4wGLE3UHsW7SOd1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjJiNjc0NDIzYTM5OWY1YzNlMDQwNjIxYmM5OGZjMmI2NDk1ZjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbZuZzG5UhmBFOl33y+sSHDcTXvR XXXRz00jZtDlbGnoPCeyg/d8/pBiwveb5K1w3NxxPXbhBVZ66Qx6HFGhBpG8uQhZ 08+YrAieO1vU207EnOLPlmV3q3RsOQUflk2+M4xHixX3ytp/BsXI2/JI6mdp9lIn XAk3+4KPyVo7Z7kJ/oapl0lrT0O92uDB7nc8ongOf2gNDAc9OmXN0sNcKuH84bm6 NLL/eCgCJChq8Zk0qjSD+mLlb0dilurjnJxVFFv0hSp/6CAcGKOAU/xnzjVnuxis YmuBURvhQ/CCCJcqAZ369DQA4YBwfowKyQA1DZWsBVsXsUWXGu15LBLKUwIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFKsrZ0Qjo5n1w+BAYhvJj8K2SV9RMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvcXl0blJDT2ptZlhENEVCaUc4bVB3clpKWDFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAAjAsAwYAKgsLhv4D BwAqD4rBCgoDBwAqD4rBV0sDBwAqD4rB1FIDBwAqD4rB2aMwDQYJKoZIhvcNAQEL BQADggEBALyktBeL6RdseUeZzyemREvwwP3wXA8je65cN1cZmgEHySXgk3jJ60W4 Wy1hYTk7WM9enuv/tDkfDouiBECVy90G0nLLdq9xiwWsYGTTytYPz7SNuy+6ZtqD Ufzm82j5/9PV+nCiVoEqheEESFSPccyF6WusWJQP0thwoRq1EhlTx9Fj2eRUE7yk zri9XePdQiWlKRdahS6EIp/3jVp48GuM/WareYFEo4GpIlpdvyXJuux5T4GUgcM0 x8Hec06bMyfokveCxFhRWrTRInESpS6854/P4HasJ1Bg+TZDS+hv2iKsk+vZO+1h eMTkDoMtJTVkRiG26qqSyKAFw561xlE= -----END CERTIFICATE-----Generated at Tue Jan 20 15:19:05 2026 by rpki-client