This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Q-CH6XW7BS9cPaF3Gb_Akq4Nz24.roa File: Q-CH6XW7BS9cPaF3Gb_Akq4Nz24.roa (raw, json) Hash identifier: Z8maw6OYQ2TrPdku41UVI/hXe2p+VWTlyLTybToB+b4= Subject key identifier: 43:E0:87:E9:75:BB:05:2F:5C:3D:A1:77:19:BF:C0:92:AE:0D:CF:6E Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E394A891A505AF63A358CD1AB130FC8 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Q-CH6XW7BS9cPaF3Gb_Akq4Nz24.roa Signing time: Fri 02 Jan 2026 10:20:42 +0000 ROA not before: Fri 02 Jan 2026 10:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209661 IP address blocks: 2a0c:b641:210::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:4a:89:1a:50:5a:f6:3a:35:8c:d1:ab:13:0f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43e087e975bb052f5c3da17719bfc092ae0dcf6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3f:51:70:07:db:c2:fa:35:47:16:2a:1f:60: 03:99:9d:9b:0d:43:d0:c3:6d:ff:92:71:1b:57:34: 05:35:78:ec:68:b6:d6:06:39:6f:b3:24:89:2d:9d: 24:22:52:7d:3f:f8:ec:e1:70:1a:05:39:b9:22:2c: 34:c1:75:af:d0:ee:04:8a:21:53:a2:9e:6c:67:7e: d4:c1:2d:c0:11:2b:16:22:1c:3e:e9:26:20:b4:24: 2f:6c:e2:04:6b:0c:92:38:82:81:bd:27:a7:95:3f: 5c:df:43:17:a9:48:f8:94:62:e1:41:98:c0:8b:eb: c7:c2:78:75:03:eb:d9:6d:16:dd:48:0b:8b:cb:b4: 15:0d:cb:ad:3e:01:ba:bf:5a:5c:c3:d7:b8:bf:aa: 38:ba:17:f7:97:54:d2:f9:29:65:b0:a6:d2:f0:95: 65:4d:a4:7c:47:05:e0:c4:b5:23:4b:f2:c9:54:8e: 34:e2:a5:31:f8:e4:4c:73:7e:b8:73:2c:05:d0:5a: 8d:e2:73:3a:41:10:f3:c6:79:3f:af:5f:42:95:6f: c8:e1:73:66:ee:4b:27:f1:3b:65:ef:ff:d7:22:fa: f7:ba:ff:81:ce:51:6d:93:32:15:72:86:0c:2e:54: cb:08:f7:58:ac:a1:8e:d5:68:bd:48:20:fd:97:47: 0f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E0:87:E9:75:BB:05:2F:5C:3D:A1:77:19:BF:C0:92:AE:0D:CF:6E X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Q-CH6XW7BS9cPaF3Gb_Akq4Nz24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:210::/44 Signature Algorithm: sha256WithRSAEncryption 23:e7:1f:f4:32:fe:1c:85:2d:a9:d6:10:cd:15:12:61:ac:3a: 27:2f:7f:44:01:0c:87:e3:d7:75:bb:59:cc:cc:b8:18:65:ee: 6e:6a:5c:75:c6:a6:12:ad:f3:08:11:86:af:72:0e:f3:a2:a0: c1:c1:26:62:3f:27:2e:92:98:58:6d:64:8c:2f:e5:fb:2a:4b: b4:75:fb:43:b5:7a:78:40:56:70:29:b4:c2:e2:a9:09:f9:c1: 15:6c:4d:00:d6:ea:12:0f:fd:11:3b:7c:37:eb:26:57:f4:d8: 03:90:45:f0:68:0b:4d:26:e4:63:54:9b:7a:50:74:ff:24:6d: c7:bb:8f:f4:db:a9:0d:a2:7e:b6:28:94:c5:2b:44:9d:01:43: 8d:f5:70:12:4b:62:43:1a:33:49:7d:6d:30:0e:62:2c:03:7f: 47:10:8c:98:c6:5b:a9:51:9e:9a:f7:08:a9:89:3f:f6:e7:b8: 9b:19:d3:bb:03:b3:58:36:82:ef:2b:60:a2:7e:2c:4a:f2:46: 13:9c:21:91:74:d5:8f:6a:f4:0b:48:10:56:15:a8:01:b4:ad: d1:dd:73:a2:b5:f8:2e:e8:22:88:e4:4f:81:b2:c1:61:4f:37: 96:5e:59:ba:38:48:31:f6:8b:f0:25:7b:77:df:d0:aa:11:9c: 95:8d:ea:f9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OUqJGlBa9jo1jNGrEw/IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2UwODdlOTc1YmIwNTJmNWMzZGExNzcxOWJmYzA5MmFlMGRjZjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyj9RcAfbwvo1RxYqH2ADmZ2bDUPQ w23/knEbVzQFNXjsaLbWBjlvsySJLZ0kIlJ9P/js4XAaBTm5Iiw0wXWv0O4EiiFT op5sZ37UwS3AESsWIhw+6SYgtCQvbOIEawySOIKBvSenlT9c30MXqUj4lGLhQZjA i+vHwnh1A+vZbRbdSAuLy7QVDcutPgG6v1pcw9e4v6o4uhf3l1TS+SllsKbS8JVl TaR8RwXgxLUjS/LJVI404qUx+ORMc364cywF0FqN4nM6QRDzxnk/r19ClW/I4XNm 7ksn8Ttl7//XIvr3uv+BzlFtkzIVcoYMLlTLCPdYrKGO1Wi9SCD9l0cP9wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEPgh+l1uwUvXD2hdxm/wJKuDc9uMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvUS1DSDZYVzdCUzljUGFGM0diX0FrcTROejI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQIQ MA0GCSqGSIb3DQEBCwUAA4IBAQAj5x/0Mv4chS2p1hDNFRJhrDonL39EAQyH49d1 u1nMzLgYZe5ualx1xqYSrfMIEYavcg7zoqDBwSZiPycukphYbWSML+X7Kku0dftD tXp4QFZwKbTC4qkJ+cEVbE0A1uoSD/0RO3w36yZX9NgDkEXwaAtNJuRjVJt6UHT/ JG3Hu4/026kNon62KJTFK0SdAUON9XASS2JDGjNJfW0wDmIsA39HEIyYxlupUZ6a 9wipiT/257ibGdO7A7NYNoLvK2CifixK8kYTnCGRdNWPavQLSBBWFagBtK3R3XOi tfgu6CKI5E+BssFhTzeWXlm6OEgx9ovwJXt339CqEZyVjer5 -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:13 2026 by rpki-client