This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/qCGZv8mZ0QQ29FavYQV1QAAKM_g.roa File: qCGZv8mZ0QQ29FavYQV1QAAKM_g.roa (raw, json) Hash identifier: JkoviVfJUEq9MqNuy5JItmE7FcAXp6hf68T2cYRX9FY= Subject key identifier: A8:21:99:BF:C9:99:D1:04:36:F4:56:AF:61:05:75:40:00:0A:33:F8 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E393E2A6E00D1AB99AE1C36EB92FFD1 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/qCGZv8mZ0QQ29FavYQV1QAAKM_g.roa Signing time: Fri 02 Jan 2026 10:20:39 +0000 ROA not before: Fri 02 Jan 2026 10:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207099 IP address blocks: 2a0c:b641:540::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:3e:2a:6e:00:d1:ab:99:ae:1c:36:eb:92:ff:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a82199bfc999d10436f456af61057540000a33f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:67:15:c0:bd:34:5a:cf:f7:92:52:c4:5b:c5: 15:ec:37:26:a4:5b:13:2e:4f:08:ae:88:b9:f6:30: 0d:c1:96:00:9d:52:b6:d2:57:bd:f3:d8:a6:59:f8: c9:e0:d3:36:c9:c8:91:88:24:22:f4:19:36:45:db: 0e:6d:69:76:d9:99:75:1a:ec:9f:4b:27:60:0c:ea: 62:d1:10:8f:b9:b7:4a:c5:da:00:52:7b:02:1e:25: 90:24:b0:3a:95:f3:6b:25:ba:2a:f7:1c:34:b0:ac: 45:86:86:35:d5:50:4a:2e:26:7f:24:ac:31:91:9f: ed:be:08:bb:11:6d:2b:5d:d9:95:2f:8c:03:9c:23: 9e:4a:0d:1b:82:72:68:7e:a8:05:2a:b9:29:fb:42: 68:42:0e:07:20:b1:5e:48:3a:ad:2e:9a:32:10:9d: e9:72:8a:1f:f7:bd:1f:cd:bf:46:f9:dc:8a:ce:8d: 70:93:e3:80:36:0c:1d:58:4d:b0:bd:80:6d:1d:e4: f7:64:ce:f2:a4:16:02:f8:c3:74:e2:19:f5:53:6b: eb:df:69:93:00:c5:ed:57:bd:dc:5e:e4:8f:dc:34: 8b:3c:96:b1:ee:6b:2e:18:74:9e:2b:92:01:40:9c: 35:f3:20:4e:36:97:d8:27:f3:ba:f7:4f:79:20:86: e1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:21:99:BF:C9:99:D1:04:36:F4:56:AF:61:05:75:40:00:0A:33:F8 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/qCGZv8mZ0QQ29FavYQV1QAAKM_g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:540::/44 Signature Algorithm: sha256WithRSAEncryption 3c:71:e0:cd:a5:9d:f4:ba:50:59:c8:f5:62:a9:e1:0e:71:23: c4:11:12:0d:33:db:2a:7d:55:58:c6:0d:17:2f:8b:10:fb:0d: 4a:bf:ae:8e:37:c9:8b:1b:1f:b6:0a:4d:d7:c3:1f:07:d2:2d: aa:f1:77:b2:51:44:2a:5a:e5:fd:32:83:ba:7a:c0:b6:8a:fe: f6:00:22:82:43:20:c8:17:c9:c4:5c:31:cc:0b:04:0e:d6:65: e8:b5:96:e0:bf:12:95:ad:7b:f4:15:c2:32:68:18:fa:4e:8b: a0:f0:b1:65:01:65:a7:b7:32:20:19:56:92:4f:b5:c7:22:d6: b5:ab:38:74:58:3e:b2:46:12:1c:e5:35:ea:f1:1c:57:a9:dc: 8c:aa:45:14:40:61:4f:81:58:dd:4a:87:4a:6b:95:d4:9b:24: 6f:0f:63:31:50:52:7b:9d:a4:38:a3:03:f0:49:8d:5d:6a:a2: b0:75:6b:a4:28:ea:ed:fb:6d:e6:94:0a:32:b7:58:61:dd:95: b4:2f:b0:e0:0c:bd:c0:ec:8c:1a:7e:7f:2c:70:11:63:9b:9b: b9:11:f6:b8:08:55:a1:e0:86:d8:a2:67:44:e9:08:e9:fd:91: e6:9a:c2:db:5a:a8:6f:7e:65:c5:32:91:7a:6d:ce:90:63:aa: 5a:ef:f4:07 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OT4qbgDRq5muHDbrkv/RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODIxOTliZmM5OTlkMTA0MzZmNDU2YWY2MTA1NzU0MDAwMGEzM2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmcVwL00Ws/3klLEW8UV7DcmpFsT Lk8Iroi59jANwZYAnVK20le989imWfjJ4NM2yciRiCQi9Bk2RdsObWl22Zl1Guyf SydgDOpi0RCPubdKxdoAUnsCHiWQJLA6lfNrJboq9xw0sKxFhoY11VBKLiZ/JKwx kZ/tvgi7EW0rXdmVL4wDnCOeSg0bgnJofqgFKrkp+0JoQg4HILFeSDqtLpoyEJ3p coof970fzb9G+dyKzo1wk+OANgwdWE2wvYBtHeT3ZM7ypBYC+MN04hn1U2vr32mT AMXtV73cXuSP3DSLPJax7msuGHSeK5IBQJw18yBONpfYJ/O69095IIbh0QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKghmb/JmdEENvRWr2EFdUAACjP4MB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvcUNHWnY4bVowUVEyOUZhdllRVjFRQUFLTV9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQVA MA0GCSqGSIb3DQEBCwUAA4IBAQA8ceDNpZ30ulBZyPViqeEOcSPEERINM9sqfVVY xg0XL4sQ+w1Kv66ON8mLGx+2Ck3Xwx8H0i2q8XeyUUQqWuX9MoO6esC2iv72ACKC QyDIF8nEXDHMCwQO1mXotZbgvxKVrXv0FcIyaBj6Toug8LFlAWWntzIgGVaST7XH Ita1qzh0WD6yRhIc5TXq8RxXqdyMqkUUQGFPgVjdSodKa5XUmyRvD2MxUFJ7naQ4 owPwSY1daqKwdWukKOrt+23mlAoyt1hh3ZW0L7DgDL3A7Iwafn8scBFjm5u5Efa4 CFWh4IbYomdE6Qjp/ZHmmsLbWqhvfmXFMpF6bc6QY6pa7/QH -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:32 2026 by rpki-client