This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/QjH4ysMjhx-FRFJ5XuVwEV5hkKY.roa File: QjH4ysMjhx-FRFJ5XuVwEV5hkKY.roa (raw, json) Hash identifier: kDgabNMh+h4CdxorS3mXQ7X6CnKJc4jDSgDlwGVSsRw= Subject key identifier: 42:31:F8:CA:C3:23:87:1F:85:44:52:79:5E:E5:70:11:5E:61:90:A6 Certificate issuer: /CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e Certificate serial: 019C29E89146B27974021C9F5700B9F32540 Authority key identifier: 57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/QjH4ysMjhx-FRFJ5XuVwEV5hkKY.roa Signing time: Wed 04 Feb 2026 18:27:13 +0000 ROA not before: Wed 04 Feb 2026 18:27:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200993 IP address blocks: 2001:678:978::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:29:e8:91:46:b2:79:74:02:1c:9f:57:00:b9:f3:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e Validity Not Before: Feb 4 18:27:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4231f8cac323871f854452795ee570115e6190a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ca:e4:27:e7:38:0c:4f:e0:a6:c1:92:58:6e: 41:1e:82:31:4e:e3:75:92:e9:09:74:bd:21:b3:3f: 21:6d:01:6f:20:11:fe:39:4b:4e:19:eb:4b:82:38: ae:d7:1d:b7:22:69:6d:75:86:a4:e2:18:34:87:9b: 3c:c3:c6:73:9b:15:c6:4f:84:86:9b:d5:19:18:71: 16:8b:f6:85:99:f6:dc:a0:ae:9a:58:6a:5c:8c:9b: 19:7c:8f:50:16:1d:29:30:3f:48:c6:91:57:9f:e1: 36:c7:67:ba:35:ad:b2:76:a7:8d:74:35:43:40:2b: 26:41:31:87:53:9e:27:eb:db:e1:22:e5:e4:14:40: 74:48:fe:7b:8a:bc:49:4d:c6:5f:b3:27:3d:5a:83: 96:41:f8:f5:89:44:ac:27:c5:6f:bb:a0:a3:e0:9f: a6:b0:49:82:17:ed:db:17:08:9c:85:5f:31:23:9f: f3:b3:32:c6:e8:ae:c9:d2:2a:04:1f:b7:65:4c:41: f0:68:ce:a1:c1:33:af:de:22:21:4e:44:47:7e:26: 07:59:a6:d0:7a:ce:0a:5a:ba:40:45:e6:2c:49:59: 6e:5b:b4:69:00:7a:26:6a:fb:e7:c2:19:35:b3:08: 04:45:32:31:50:4b:7b:45:d5:06:d1:15:27:e8:28: 96:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:31:F8:CA:C3:23:87:1F:85:44:52:79:5E:E5:70:11:5E:61:90:A6 X509v3 Authority Key Identifier: keyid:57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/QjH4ysMjhx-FRFJ5XuVwEV5hkKY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:978::/48 Signature Algorithm: sha256WithRSAEncryption 89:f8:5b:ff:b9:d0:b4:cf:a1:18:87:eb:f6:29:93:ef:18:a4: 54:0c:d1:ae:8f:50:6a:53:30:9b:69:09:d9:ac:67:87:a5:c1: ae:07:fa:fa:77:ba:c7:9a:14:d3:a9:5c:90:9d:19:6d:74:2f: f3:7f:68:9d:04:83:b9:bb:5d:5e:cf:2e:b2:2b:f9:01:cd:7f: 8b:82:e7:e8:90:48:13:e5:15:37:a4:f3:ba:8f:f9:f5:d1:36: b7:00:18:de:f4:5b:15:da:e7:bf:02:61:bd:bc:d7:4c:ea:ed: 1f:5e:63:e5:66:1b:fc:29:2f:8c:0b:fd:45:5b:b8:36:de:1e: a1:73:1d:b1:86:5a:05:0c:d5:25:e4:1b:c2:92:76:99:ce:a1: 4a:ff:65:fc:93:fa:5f:b4:da:05:cc:6e:b6:84:ba:3e:fb:a7: df:47:1d:41:58:51:49:24:10:a2:a3:eb:d8:c7:bc:b6:cd:f6: 5a:55:99:d7:5b:7e:a4:00:1c:59:78:3d:02:fe:f4:62:2e:c5: c4:cf:f3:09:f5:7f:35:89:5c:a3:f9:13:7a:87:a1:b2:7d:62: 8a:c2:2b:e3:8f:9d:48:a2:26:a1:7c:b8:0a:fc:74:c8:11:d2: eb:56:46:88:6e:0c:bd:8d:43:ad:24:7b:3f:41:e7:fd:48:2c: 87:2b:a7:5b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZwp6JFGsnl0AhyfVwC58yVAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MzBjNTBjOGZkNDRhZDE5NmJmMTA1N2VlMmE2ZmE0MDQx YzdlNGUwHhcNMjYwMjA0MTgyNzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjMxZjhjYWMzMjM4NzFmODU0NDUyNzk1ZWU1NzAxMTVlNjE5MGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcrkJ+c4DE/gpsGSWG5BHoIxTuN1 kukJdL0hsz8hbQFvIBH+OUtOGetLgjiu1x23ImltdYak4hg0h5s8w8ZzmxXGT4SG m9UZGHEWi/aFmfbcoK6aWGpcjJsZfI9QFh0pMD9IxpFXn+E2x2e6Na2ydqeNdDVD QCsmQTGHU54n69vhIuXkFEB0SP57irxJTcZfsyc9WoOWQfj1iUSsJ8Vvu6Cj4J+m sEmCF+3bFwichV8xI5/zszLG6K7J0ioEH7dlTEHwaM6hwTOv3iIhTkRHfiYHWabQ es4KWrpAReYsSVluW7RpAHomavvnwhk1swgERTIxUEt7RdUG0RUn6CiWtQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEIx+MrDI4cfhURSeV7lcBFeYZCmMB8GA1UdIwQY MBaAFFcwxQyP1ErRlr8QV+4qb6QEHH5OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mNTZjMGMtNGFlNy00ZWVjLTljZWQt Zjc1YzExNjNmYjFlLzEvUWpINHlzTWpoeC1GUkZKNVh1VndFVjVoa0tZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9mNTZjMGMtNGFlNy00ZWVjLTljZWQtZjc1YzExNjNmYjFl LzEvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAl4 MA0GCSqGSIb3DQEBCwUAA4IBAQCJ+Fv/udC0z6EYh+v2KZPvGKRUDNGuj1BqUzCb aQnZrGeHpcGuB/r6d7rHmhTTqVyQnRltdC/zf2idBIO5u11ezy6yK/kBzX+Lgufo kEgT5RU3pPO6j/n10Ta3ABje9FsV2ue/AmG9vNdM6u0fXmPlZhv8KS+MC/1FW7g2 3h6hcx2xhloFDNUl5BvCknaZzqFK/2X8k/pftNoFzG62hLo++6ffRx1BWFFJJBCi o+vYx7y2zfZaVZnXW36kABxZeD0C/vRiLsXEz/MJ9X81iVyj+RN6h6GyfWKKwivj j51IoiahfLgK/HTIEdLrVkaIbgy9jUOtJHs/Qef9SCyHK6db -----END CERTIFICATE-----Generated at Tue Feb 10 03:02:22 2026 by rpki-client