This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/QEiBKonEr0WMCMOfSrB_OWXiV2k.roa File: QEiBKonEr0WMCMOfSrB_OWXiV2k.roa (raw, json) Hash identifier: ATH9it6DQN25bd4ch/xqYxeTa8CfLwql6RGUAiLiWUA= Subject key identifier: 40:48:81:2A:89:C4:AF:45:8C:08:C3:9F:4A:B0:7F:39:65:E2:57:69 Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B7EA76D97BE3A936FD2904BB9A6565832 Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/QEiBKonEr0WMCMOfSrB_OWXiV2k.roa Signing time: Fri 02 Jan 2026 12:21:00 +0000 ROA not before: Fri 02 Jan 2026 12:21:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400907 IP address blocks: 2a0d:6f80:176f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:6d:97:be:3a:93:6f:d2:90:4b:b9:a6:56:58:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Jan 2 12:21:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4048812a89c4af458c08c39f4ab07f3965e25769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:12:f3:b8:fe:b5:53:57:0e:f0:34:3f:24:d4: c1:3e:d3:4e:91:1f:24:3f:f5:32:d9:da:d9:3a:a4: f8:7e:46:d8:f1:18:e7:4e:c8:46:1a:53:cb:98:af: 52:19:31:f2:51:7b:fb:74:ce:df:34:bf:03:fa:14: 3a:b0:6d:07:19:25:6b:35:18:6e:f0:84:e5:7a:4b: 72:ae:aa:53:a5:02:ea:78:72:00:57:10:ea:51:cd: 29:31:90:b0:1a:60:00:3d:55:b0:88:96:77:ea:56: a9:1d:7f:2b:1b:2b:a5:51:75:68:45:dc:eb:b7:37: d3:18:6d:dc:c9:d7:f8:07:4e:bf:24:fd:37:78:1b: f8:86:a4:55:86:56:77:bb:44:00:52:db:ae:43:de: e0:35:91:91:fc:e6:78:6e:f4:94:0f:81:ed:8f:c1: 58:03:33:94:9d:13:dc:19:d1:a0:02:18:45:4c:4b: 8b:db:37:2c:17:a3:45:50:2a:b2:7d:13:8d:96:71: ae:a4:c4:6b:35:89:46:74:78:ff:ba:7d:41:1b:82: 94:34:89:d8:c8:7f:d0:7b:97:8c:f4:ee:1c:e5:9f: 86:e2:59:74:e6:e2:57:94:39:c2:94:46:85:df:3f: 4a:36:9b:7b:1a:e2:92:ee:5c:22:fc:81:dc:98:cf: 29:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:48:81:2A:89:C4:AF:45:8C:08:C3:9F:4A:B0:7F:39:65:E2:57:69 X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/QEiBKonEr0WMCMOfSrB_OWXiV2k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:6f80:176f::/48 Signature Algorithm: sha256WithRSAEncryption 39:3c:bd:ab:e5:01:35:84:34:83:4d:b4:04:5f:d2:4c:1c:fb: 84:1c:a4:3a:23:81:d9:75:73:49:5d:f4:e6:39:da:59:2b:97: 2d:fc:0d:cc:f3:15:53:8a:c0:a9:c1:b8:fb:1a:5f:b8:5b:b3: e1:4c:84:10:e8:40:eb:8d:a5:3b:ff:70:d2:a0:de:fe:8c:6b: 53:32:2a:dd:d7:d6:e3:d0:81:00:23:9d:6f:40:cf:6f:a5:78: 01:fa:4c:fd:0f:71:f4:f6:2d:0d:16:ec:c7:fa:53:59:90:08: 7f:bb:60:0a:77:b4:ea:3b:c4:63:8b:d4:57:bf:82:d1:26:b0: cc:e7:e3:51:64:e4:9d:e9:03:47:92:8c:1a:90:d6:44:9e:31: 14:dd:80:aa:e7:95:e0:ca:c5:2f:66:3a:1f:d0:a8:b3:4e:5c: ce:c1:39:60:6b:b0:ca:09:d7:10:07:3f:a7:b9:8a:a2:77:a9: ec:ee:66:75:ac:bb:63:70:6b:ff:05:38:94:72:16:24:c8:ab: 6a:ef:5e:9f:ef:b2:1e:56:d8:e9:f8:fd:4b:e9:18:c7:0a:a0: 0d:d2:11:d3:7d:a7:eb:20:3b:3e:e9:65:8e:27:93:16:ea:b0: 40:f3:6b:de:81:90:4a:16:13:ca:b3:dd:00:4d:82:c8:70:f8: 72:99:18:67 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p22XvjqTb9KQS7mmVlgyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMTAyMTIyMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDQ4ODEyYTg5YzRhZjQ1OGMwOGMzOWY0YWIwN2YzOTY1ZTI1NzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hLzuP61U1cO8DQ/JNTBPtNOkR8k P/Uy2drZOqT4fkbY8RjnTshGGlPLmK9SGTHyUXv7dM7fNL8D+hQ6sG0HGSVrNRhu 8ITlektyrqpTpQLqeHIAVxDqUc0pMZCwGmAAPVWwiJZ36lapHX8rGyulUXVoRdzr tzfTGG3cydf4B06/JP03eBv4hqRVhlZ3u0QAUtuuQ97gNZGR/OZ4bvSUD4Htj8FY AzOUnRPcGdGgAhhFTEuL2zcsF6NFUCqyfRONlnGupMRrNYlGdHj/un1BG4KUNInY yH/Qe5eM9O4c5Z+G4ll05uJXlDnClEaF3z9KNpt7GuKS7lwi/IHcmM8paQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEBIgSqJxK9FjAjDn0qwfzll4ldpMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvUUVpQktvbkVyMFdNQ01PZlNyQl9PV1hpVjJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg1vgBdv MA0GCSqGSIb3DQEBCwUAA4IBAQA5PL2r5QE1hDSDTbQEX9JMHPuEHKQ6I4HZdXNJ XfTmOdpZK5ct/A3M8xVTisCpwbj7Gl+4W7PhTIQQ6EDrjaU7/3DSoN7+jGtTMird 19bj0IEAI51vQM9vpXgB+kz9D3H09i0NFuzH+lNZkAh/u2AKd7TqO8Rji9RXv4LR JrDM5+NRZOSd6QNHkowakNZEnjEU3YCq55XgysUvZjof0KizTlzOwTlga7DKCdcQ Bz+nuYqid6ns7mZ1rLtjcGv/BTiUchYkyKtq716f77IeVtjp+P1L6RjHCqAN0hHT fafrIDs+6WWOJ5MW6rBA82vegZBKFhPKs90ATYLIcPhymRhn -----END CERTIFICATE-----Generated at Sat Jan 3 19:00:19 2026 by rpki-client