This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/qLbtyNbqEcM5vKLrUp5MyFEc3WU.roa File: qLbtyNbqEcM5vKLrUp5MyFEc3WU.roa (raw, json) Hash identifier: 0MyZIpWx7FDz2SgSXlsXqdIF732wYGhfSsuIJP0cJ60= Subject key identifier: A8:B6:ED:C8:D6:EA:11:C3:39:BC:A2:EB:52:9E:4C:C8:51:1C:DD:65 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E393B11502DBF5E43C30B90F36ED7A3 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/qLbtyNbqEcM5vKLrUp5MyFEc3WU.roa Signing time: Fri 02 Jan 2026 10:20:38 +0000 ROA not before: Fri 02 Jan 2026 10:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205380 IP address blocks: 2a0c:b641:6a0::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:3b:11:50:2d:bf:5e:43:c3:0b:90:f3:6e:d7:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8b6edc8d6ea11c339bca2eb529e4cc8511cdd65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c8:e6:3b:f2:39:77:84:16:7e:89:5e:c1:5b: c8:fc:0f:77:f6:d3:95:05:8f:b0:41:24:2d:54:eb: 21:30:7e:32:52:7e:2a:7e:0e:8f:9f:ff:10:0e:36: 92:25:ab:95:1a:2f:05:ef:a1:0a:c5:9c:83:7a:1d: 34:6a:66:d6:b5:6d:d3:f4:08:7b:a5:24:64:4f:eb: ad:3a:4e:b8:d0:05:3a:bd:d2:d3:59:b0:cb:67:f8: e7:31:27:02:75:87:a5:5d:07:0f:3f:5b:71:34:3e: fd:22:a0:9f:fc:7c:b5:42:01:df:60:4e:c8:e0:4a: ba:9f:17:7d:79:90:8a:9e:61:d9:7d:21:03:af:86: 25:cb:97:ba:01:31:26:08:d7:92:82:4e:64:bd:7a: d6:71:dc:71:a6:6f:78:c8:2d:94:c1:fb:8b:67:a1: 88:58:85:46:77:8f:c6:bb:f5:ec:b9:03:d1:d6:5d: 14:5f:46:86:d6:b0:60:2b:10:9b:fb:90:83:55:c1: 4a:ad:8d:bc:59:2b:be:c1:2c:35:e9:97:11:ec:9e: 7e:5a:51:1e:89:94:83:9b:99:d7:49:2d:64:2f:ef: 44:e7:8a:e5:0c:00:44:ce:79:12:0a:f3:d7:69:c3: 01:5a:14:e8:41:68:4b:96:9f:7c:b0:61:23:c5:d2: 3c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B6:ED:C8:D6:EA:11:C3:39:BC:A2:EB:52:9E:4C:C8:51:1C:DD:65 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/qLbtyNbqEcM5vKLrUp5MyFEc3WU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:6a0::/44 Signature Algorithm: sha256WithRSAEncryption 55:1b:64:f1:98:fc:94:85:fb:5a:33:f9:f1:0b:75:bd:f9:fd: 77:75:30:dd:9e:f1:89:7f:e8:27:44:b7:29:4e:bf:55:c6:e8: 2a:f3:e0:64:55:a3:8b:32:32:df:0c:17:da:6e:7d:24:d7:a9: 89:41:72:da:56:f4:b9:8a:57:35:b3:ff:8a:58:dd:99:7b:50: b8:cd:be:4b:d5:74:01:26:76:9d:f1:c0:5c:99:f2:6f:bf:2e: 03:88:83:98:45:41:58:9f:27:87:60:96:d3:28:65:b0:42:de: ef:c5:5f:45:bf:f2:b5:d8:bd:29:d5:ac:e6:00:ae:f7:99:09: 8a:5f:04:e3:ef:a9:26:ef:57:d9:83:d4:80:72:fb:19:1c:94: 17:5f:7e:87:5a:b1:c1:6a:d0:85:4d:cc:aa:20:28:7a:05:52: 91:43:0b:70:ff:dd:6a:f4:d8:03:e4:a4:b6:e5:87:f8:8b:68: 11:c2:39:db:f8:76:ee:c6:b3:8e:33:67:b6:90:85:c0:77:af: 98:36:58:56:77:b4:f4:74:ac:05:04:60:02:99:08:6b:0f:7a: fc:5e:88:08:3c:68:c7:a2:e2:78:f9:a9:c6:85:d9:31:82:40: 39:25:84:a8:14:a2:5c:b1:e7:b6:38:95:23:8e:2e:6e:8b:46: 1c:80:4e:25 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OTsRUC2/XkPDC5DzbtejMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGI2ZWRjOGQ2ZWExMWMzMzliY2EyZWI1MjllNGNjODUxMWNkZDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysjmO/I5d4QWfolewVvI/A939tOV BY+wQSQtVOshMH4yUn4qfg6Pn/8QDjaSJauVGi8F76EKxZyDeh00ambWtW3T9Ah7 pSRkT+utOk640AU6vdLTWbDLZ/jnMScCdYelXQcPP1txND79IqCf/Hy1QgHfYE7I 4Eq6nxd9eZCKnmHZfSEDr4Yly5e6ATEmCNeSgk5kvXrWcdxxpm94yC2UwfuLZ6GI WIVGd4/Gu/XsuQPR1l0UX0aG1rBgKxCb+5CDVcFKrY28WSu+wSw16ZcR7J5+WlEe iZSDm5nXSS1kL+9E54rlDABEznkSCvPXacMBWhToQWhLlp98sGEjxdI8dwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKi27cjW6hHDObyi61KeTMhRHN1lMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvcUxidHlOYnFFY001dktMclVwNU15RkVjM1dVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQag MA0GCSqGSIb3DQEBCwUAA4IBAQBVG2TxmPyUhftaM/nxC3W9+f13dTDdnvGJf+gn RLcpTr9Vxugq8+BkVaOLMjLfDBfabn0k16mJQXLaVvS5ilc1s/+KWN2Ze1C4zb5L 1XQBJnad8cBcmfJvvy4DiIOYRUFYnyeHYJbTKGWwQt7vxV9Fv/K12L0p1azmAK73 mQmKXwTj76km71fZg9SAcvsZHJQXX36HWrHBatCFTcyqICh6BVKRQwtw/91q9NgD 5KS25Yf4i2gRwjnb+HbuxrOOM2e2kIXAd6+YNlhWd7T0dKwFBGACmQhrD3r8XogI PGjHouJ4+anGhdkxgkA5JYSoFKJcsee2OJUjji5ui0YcgE4l -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:26 2026 by rpki-client