This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/q9nb03LLGhEQgbaQ_RRS2Oti8mA.roa File: q9nb03LLGhEQgbaQ_RRS2Oti8mA.roa (raw, json) Hash identifier: +gb3UnVeZl4+1DAMyjUb0CGvwvwAAF1A19rfF/kmb3Y= Subject key identifier: AB:D9:DB:D3:72:CB:1A:11:10:81:B6:90:FD:14:52:D8:EB:62:F2:60 Certificate issuer: /CN=27358d6d33e26d2af843d581dcf69c0d110a9de8 Certificate serial: 019B797E30892BAEFCAA3C958323F8068963 Authority key identifier: 27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/q9nb03LLGhEQgbaQ_RRS2Oti8mA.roa Signing time: Thu 01 Jan 2026 12:17:51 +0000 ROA not before: Thu 01 Jan 2026 12:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213626 IP address blocks: 2001:678:100c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:30:89:2b:ae:fc:aa:3c:95:83:23:f8:06:89:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27358d6d33e26d2af843d581dcf69c0d110a9de8 Validity Not Before: Jan 1 12:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abd9dbd372cb1a111081b690fd1452d8eb62f260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0a:71:9f:e9:41:ef:e8:ba:20:1c:f2:8b:8d: 25:22:c0:a7:a5:9e:56:3c:aa:83:62:b2:be:4d:60: c5:88:1d:42:a0:95:01:eb:8a:d3:0b:06:a4:52:58: 84:b9:51:c8:73:5a:61:a4:84:18:4a:d9:dd:bf:2f: b2:fe:a8:e2:6b:06:d0:59:b4:6f:f4:65:20:fa:63: ec:aa:d6:4e:9d:f9:c8:ee:68:56:61:0c:05:d6:6a: 85:13:20:ba:39:fe:82:4b:b9:30:59:56:df:2f:92: 7d:a4:5e:4e:bf:47:02:f9:e5:61:73:ef:8f:92:6b: eb:60:33:2e:44:e0:69:d7:06:b9:c8:b0:06:bc:ae: 20:58:a7:e6:fe:5c:4e:d6:5b:8f:bf:72:c6:cf:39: 23:eb:6f:08:a5:d3:55:ea:6b:bd:a9:ef:c6:e8:b9: 52:46:a9:11:57:26:62:45:d4:6e:7e:e8:59:53:7f: 24:11:1d:b7:eb:dd:c9:1d:2b:f6:c6:70:35:b3:5d: ce:b2:51:73:a6:b8:79:5f:26:db:ee:f6:86:50:7f: b3:c1:34:4e:1a:c4:1b:88:f7:f9:74:24:25:0d:f4: 18:02:6b:73:82:af:89:27:6e:2b:12:73:75:44:dc: 53:97:d9:fa:26:7b:63:e6:a6:e2:af:db:ad:7f:db: 45:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D9:DB:D3:72:CB:1A:11:10:81:B6:90:FD:14:52:D8:EB:62:F2:60 X509v3 Authority Key Identifier: keyid:27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/q9nb03LLGhEQgbaQ_RRS2Oti8mA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:100c::/48 Signature Algorithm: sha256WithRSAEncryption 0d:8c:81:1a:08:d6:8a:40:d2:86:ef:26:3a:ba:74:d1:2e:17: 53:1c:7d:06:06:c3:9e:13:7a:54:e8:1b:6d:bf:91:d3:61:87: 18:1c:68:0c:98:9b:44:eb:f5:98:39:cc:6a:d1:17:f0:c5:aa: 0d:72:c7:38:fa:81:a7:70:0f:61:25:e6:72:ea:1a:f7:97:9d: 44:35:4b:0f:5f:ab:14:f2:3b:a8:65:6a:b9:e3:da:df:d2:16: 1a:ad:0d:86:c1:1f:1c:b5:e9:65:bc:a6:3b:b2:79:ce:8b:d6: 49:f9:f6:9e:b2:f0:ac:1c:0f:7b:59:1e:05:57:6c:e1:9a:46: 74:36:28:8c:14:71:ba:f9:43:35:b9:1f:23:2c:0b:8b:53:50: 5c:bc:b1:3a:5d:2e:5e:4f:85:b8:0a:0a:98:b9:72:3f:31:77: 18:8e:d4:01:df:37:29:3e:ab:ca:ef:2a:ae:a4:db:53:03:2b: 0e:6c:f5:5b:ca:65:21:bf:ff:eb:bd:d3:7e:d5:ff:f7:14:93: b3:f8:4e:ac:8a:75:a4:93:48:2d:ed:32:2b:3a:cf:f0:60:22: 17:ec:c8:c0:74:30:38:b7:2d:ee:a3:19:61:c6:0d:8d:a8:30: 4c:fc:98:d9:03:a8:29:5c:c2:61:2a:0e:d6:02:87:61:d0:5f: 73:da:82:f0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fjCJK678qjyVgyP4BoljMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MzU4ZDZkMzNlMjZkMmFmODQzZDU4MWRjZjY5YzBkMTEw YTlkZTgwHhcNMjYwMTAxMTIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmQ5ZGJkMzcyY2IxYTExMTA4MWI2OTBmZDE0NTJkOGViNjJmMjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQpxn+lB7+i6IBzyi40lIsCnpZ5W PKqDYrK+TWDFiB1CoJUB64rTCwakUliEuVHIc1phpIQYStndvy+y/qjiawbQWbRv 9GUg+mPsqtZOnfnI7mhWYQwF1mqFEyC6Of6CS7kwWVbfL5J9pF5Ov0cC+eVhc++P kmvrYDMuROBp1wa5yLAGvK4gWKfm/lxO1luPv3LGzzkj628IpdNV6mu9qe/G6LlS RqkRVyZiRdRufuhZU38kER23693JHSv2xnA1s13OslFzprh5Xybb7vaGUH+zwTRO GsQbiPf5dCQlDfQYAmtzgq+JJ24rEnN1RNxTl9n6Jntj5qbir9utf9tFrwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKvZ29NyyxoREIG2kP0UUtjrYvJgMB8GA1UdIwQY MBaAFCc1jW0z4m0q+EPVgdz2nA0RCp3oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mYzE4ZjMtYzBkYi00Y2QyLWEwODMt NDI2ZDlmZjIwN2QxLzEvcTluYjAzTExHaEVRZ2JhUV9SUlMyT3RpOG1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mYzE4ZjMtYzBkYi00Y2QyLWEwODMtNDI2ZDlmZjIwN2Qx LzEvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBAM MA0GCSqGSIb3DQEBCwUAA4IBAQANjIEaCNaKQNKG7yY6unTRLhdTHH0GBsOeE3pU 6Bttv5HTYYcYHGgMmJtE6/WYOcxq0RfwxaoNcsc4+oGncA9hJeZy6hr3l51ENUsP X6sU8juoZWq549rf0hYarQ2GwR8ctellvKY7snnOi9ZJ+faesvCsHA97WR4FV2zh mkZ0NiiMFHG6+UM1uR8jLAuLU1BcvLE6XS5eT4W4CgqYuXI/MXcYjtQB3zcpPqvK 7yqupNtTAysObPVbymUhv//rvdN+1f/3FJOz+E6sinWkk0gt7TIrOs/wYCIX7MjA dDA4ty3uoxlhxg2NqDBM/JjZA6gpXMJhKg7WAodh0F9z2oLw -----END CERTIFICATE-----Generated at Tue Jan 20 00:10:02 2026 by rpki-client