This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/qEMGytWik2DoEBSunWlsAAW5JgQ.roa File: qEMGytWik2DoEBSunWlsAAW5JgQ.roa (raw, json) Hash identifier: +olxdTWs4qt18DJ1bRxrfArORMjXdrDBommXdamDh6U= Subject key identifier: A8:43:06:CA:D5:A2:93:60:E8:10:14:AE:9D:69:6C:00:05:B9:26:04 Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Certificate serial: 019B7E38ADD71F9D29B682B6623641C90D84 Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/qEMGytWik2DoEBSunWlsAAW5JgQ.roa Signing time: Fri 02 Jan 2026 10:20:02 +0000 ROA not before: Fri 02 Jan 2026 10:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44324 IP address blocks: 2a13:a5c3::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ad:d7:1f:9d:29:b6:82:b6:62:36:41:c9:0d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Validity Not Before: Jan 2 10:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a84306cad5a29360e81014ae9d696c0005b92604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f4:5a:33:61:a4:c2:0a:07:ca:c7:f5:9d:f2: 26:b6:d5:02:3e:23:60:13:49:98:56:c1:3c:29:f1: 77:20:dd:d9:13:41:83:4d:79:e3:a2:7d:df:d0:cd: 7d:3d:3f:7a:59:d6:dc:6b:82:f4:cf:4d:7e:69:e8: d3:e2:1d:b0:48:4e:e4:e9:27:2b:23:53:b9:e6:7e: 2e:ec:9e:9e:33:ed:19:0c:49:20:d6:e7:e5:dc:7f: f3:37:9d:07:fa:0c:bb:32:48:15:4f:c6:aa:e1:40: 59:b3:d8:e1:46:0a:e1:1c:08:ad:6d:79:c7:ac:c9: f3:4e:04:97:e8:1e:0f:05:cd:29:72:ca:be:1c:be: 73:0e:73:7d:79:40:6c:84:c2:9f:55:df:4b:96:c3: 82:48:47:5b:11:9d:42:7a:b1:3c:06:b5:8c:e4:e5: e7:83:fe:17:dc:bc:11:d0:43:3b:f8:6d:46:86:a1: 26:0b:cb:d2:ec:9f:c9:ed:c0:05:d4:70:af:2b:66: b8:f4:82:ba:28:ea:5b:b8:21:6f:f2:c1:1f:7f:04: 95:75:2b:50:73:38:84:42:4d:cc:54:20:6c:3f:5b: a8:13:d3:58:82:44:c3:c7:eb:5d:bb:48:9b:71:d4: b3:5d:bd:ad:78:66:0d:05:aa:92:70:b9:2a:f4:6d: 46:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:43:06:CA:D5:A2:93:60:E8:10:14:AE:9D:69:6C:00:05:B9:26:04 X509v3 Authority Key Identifier: keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/qEMGytWik2DoEBSunWlsAAW5JgQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:a5c3::/32 Signature Algorithm: sha256WithRSAEncryption 68:9e:e1:9d:60:15:19:15:dd:8d:5f:ef:20:dc:4b:32:f1:3b: 4c:98:af:cb:77:ac:59:4a:df:16:62:67:1c:91:d8:d4:8f:ec: bf:76:5f:67:a1:65:64:07:8e:21:9b:bf:d7:29:27:66:44:df: 2a:7a:fe:be:e6:54:16:35:1f:ae:4e:63:96:ec:fc:d5:5b:f1: e1:3a:1d:45:cb:f9:a1:33:2f:b6:e0:d4:5d:1b:44:df:9e:70: 1f:9f:d9:3e:ef:22:38:49:43:06:19:7c:7d:5e:ab:49:d8:d8: 65:92:62:93:87:89:47:a1:e6:60:52:bd:61:3a:5c:b8:10:44: af:73:89:5e:53:0e:62:3b:d9:68:50:01:a5:41:da:af:f9:af: a8:e6:fd:d1:5a:37:be:f4:44:0c:cb:fc:04:fb:09:9f:57:d5: 41:13:7c:84:20:00:9e:71:4a:4b:8e:24:d7:56:68:7a:ac:94: 03:59:2f:89:87:c6:1a:4e:a9:93:0e:bd:ab:bd:5d:c5:1a:40: fc:b9:59:d3:b2:0e:f0:ff:dd:de:9a:3c:44:63:bc:3e:a2:41: 04:eb:31:d5:b7:64:d4:2b:6a:89:f1:5d:da:d1:47:14:d4:13: 29:f2:5c:01:8a:98:ba:58:b0:62:93:53:2d:1b:9a:ea:50:c6: a6:c3:87:8b -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+OK3XH50ptoK2YjZByQ2EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3 MWRkOWQwHhcNMjYwMTAyMTAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODQzMDZjYWQ1YTI5MzYwZTgxMDE0YWU5ZDY5NmMwMDA1YjkyNjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPRaM2GkwgoHysf1nfImttUCPiNg E0mYVsE8KfF3IN3ZE0GDTXnjon3f0M19PT96Wdbca4L0z01+aejT4h2wSE7k6Scr I1O55n4u7J6eM+0ZDEkg1ufl3H/zN50H+gy7MkgVT8aq4UBZs9jhRgrhHAitbXnH rMnzTgSX6B4PBc0pcsq+HL5zDnN9eUBshMKfVd9LlsOCSEdbEZ1CerE8BrWM5OXn g/4X3LwR0EM7+G1GhqEmC8vS7J/J7cAF1HCvK2a49IK6KOpbuCFv8sEffwSVdStQ cziEQk3MVCBsP1uoE9NYgkTDx+tdu0ibcdSzXb2teGYNBaqScLkq9G1GHQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFKhDBsrVopNg6BAUrp1pbAAFuSYEMB8GA1UdIwQY MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct NjNjNzIxY2YxZjU2LzEvcUVNR3l0V2lrMkRvRUJTdW5XbHNBQVc1SmdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2 LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhOlwzAN BgkqhkiG9w0BAQsFAAOCAQEAaJ7hnWAVGRXdjV/vINxLMvE7TJivy3esWUrfFmJn HJHY1I/sv3ZfZ6FlZAeOIZu/1yknZkTfKnr+vuZUFjUfrk5jluz81Vvx4TodRcv5 oTMvtuDUXRtE355wH5/ZPu8iOElDBhl8fV6rSdjYZZJik4eJR6HmYFK9YTpcuBBE r3OJXlMOYjvZaFABpUHar/mvqOb90Vo3vvREDMv8BPsJn1fVQRN8hCAAnnFKS44k 11ZoeqyUA1kviYfGGk6pkw69q71dxRpA/LlZ07IO8P/d3po8RGO8PqJBBOsx1bdk 1CtqifFd2tFHFNQTKfJcAYqYuliwYpNTLRua6lDGpsOHiw== -----END CERTIFICATE-----Generated at Mon Jan 5 03:46:56 2026 by rpki-client