This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/qt-VylqqZXmuhP5jTDffqyTPIeQ.roa File: qt-VylqqZXmuhP5jTDffqyTPIeQ.roa (raw, json) Hash identifier: NBYMZ8I2bI+aHaT/8renW87P2lw9r3jn3jIl3tUx06Q= Subject key identifier: AA:DF:95:CA:5A:AA:65:79:AE:84:FE:63:4C:37:DF:AB:24:CF:21:E4 Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Certificate serial: 019B7E38B84722B94543C8DCE93412757CDD Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/qt-VylqqZXmuhP5jTDffqyTPIeQ.roa Signing time: Fri 02 Jan 2026 10:20:05 +0000 ROA not before: Fri 02 Jan 2026 10:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210000 IP address blocks: 2a13:a5c6:5030::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b8:47:22:b9:45:43:c8:dc:e9:34:12:75:7c:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Validity Not Before: Jan 2 10:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aadf95ca5aaa6579ae84fe634c37dfab24cf21e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:70:29:85:67:1f:21:de:d3:c9:0e:86:47:e3: 66:20:ac:d6:72:b1:a4:4b:da:b5:63:12:2b:66:53: 45:69:53:58:ba:8f:f3:60:59:30:e0:00:62:90:22: 93:c5:24:d0:66:ab:6d:5b:07:b0:e6:dd:dc:4d:f3: 21:a1:a1:b1:1c:26:b2:d2:58:a5:65:b9:2e:c1:1c: 5d:52:a5:fa:32:a1:a7:86:6e:2c:b8:eb:00:5d:9a: 0b:6f:40:63:b3:74:b3:0c:91:35:49:f0:ab:c3:cd: 18:08:76:3d:79:9d:a5:1b:5e:80:bc:8c:66:c6:28: 94:c0:7a:8d:92:f7:e0:c2:e1:a2:8a:30:b1:0e:aa: c5:80:8f:13:b8:9d:c3:d7:4c:08:4e:a9:ab:0c:85: b1:47:1d:7b:cd:8a:39:fc:60:e5:b6:a1:c3:f1:13: e6:c9:0e:a4:30:45:06:4f:74:75:ba:8e:f8:42:d8: 2e:2e:8b:33:c0:54:8f:f4:04:5e:21:30:ee:70:b9: d3:1d:03:e2:e5:29:35:ff:53:86:16:84:c1:be:35: 8c:13:43:86:e2:07:88:34:16:af:ab:e8:11:d9:6a: f4:c7:4b:b5:7e:e5:a8:e1:7f:a9:5f:e9:1c:81:63: 4d:a0:c7:f0:30:d8:79:12:e9:6c:fe:41:7e:60:2c: ef:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DF:95:CA:5A:AA:65:79:AE:84:FE:63:4C:37:DF:AB:24:CF:21:E4 X509v3 Authority Key Identifier: keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/qt-VylqqZXmuhP5jTDffqyTPIeQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:a5c6:5030::/44 Signature Algorithm: sha256WithRSAEncryption 83:58:ff:f2:29:aa:96:97:78:8f:ed:e1:2d:71:34:c1:37:2b: 20:e1:cc:0d:60:42:41:3a:30:8d:4b:50:bd:63:6c:d3:09:2d: 76:24:60:16:a1:c9:ee:23:fd:c6:8d:11:93:24:8a:d7:9c:bc: 70:56:b8:2b:2c:4c:5b:64:77:2c:4f:53:e4:05:06:90:a6:f8: 4a:6e:08:ac:df:bf:32:89:9d:35:4b:2b:e3:e0:9e:a6:c7:50: 3a:61:f2:e2:ec:7c:e2:24:43:1a:b5:79:34:91:a5:d4:2a:e7: e6:2b:8e:0d:0d:fc:ce:7c:b4:e5:87:a2:e9:4b:6f:2e:d5:8b: bf:4c:a0:27:e0:b3:73:cb:3c:f3:ce:b0:b9:70:a2:c2:9a:82: 33:74:dc:71:fc:11:41:af:5f:51:2b:81:03:2d:e9:6e:98:51: 2b:2d:4f:f3:da:52:47:ca:0c:3c:0f:61:fb:51:81:f0:7c:7d: 72:7b:dc:6d:a3:2d:e5:12:90:e6:67:13:9b:2f:e8:b4:25:28: cd:d2:fd:f4:4b:90:e8:25:e3:79:fa:17:ee:1e:31:5b:f3:db: 2c:f7:8d:b5:e4:56:99:35:2e:5c:6e:47:da:10:58:e1:8c:08: a2:96:2e:47:d5:dd:1d:20:48:76:9c:f9:2b:29:64:e6:6c:f6: be:68:5f:d5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OLhHIrlFQ8jc6TQSdXzdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3 MWRkOWQwHhcNMjYwMTAyMTAyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWRmOTVjYTVhYWE2NTc5YWU4NGZlNjM0YzM3ZGZhYjI0Y2YyMWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23AphWcfId7TyQ6GR+NmIKzWcrGk S9q1YxIrZlNFaVNYuo/zYFkw4ABikCKTxSTQZqttWwew5t3cTfMhoaGxHCay0lil ZbkuwRxdUqX6MqGnhm4suOsAXZoLb0Bjs3SzDJE1SfCrw80YCHY9eZ2lG16AvIxm xiiUwHqNkvfgwuGiijCxDqrFgI8TuJ3D10wITqmrDIWxRx17zYo5/GDltqHD8RPm yQ6kMEUGT3R1uo74QtguLoszwFSP9AReITDucLnTHQPi5Sk1/1OGFoTBvjWME0OG 4geINBavq+gR2Wr0x0u1fuWo4X+pX+kcgWNNoMfwMNh5Euls/kF+YCzvXQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKrflcpaqmV5roT+Y0w336skzyHkMB8GA1UdIwQY MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct NjNjNzIxY2YxZjU2LzEvcXQtVnlscXFaWG11aFA1alREZmZxeVRQSWVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2 LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhOlxlAw MA0GCSqGSIb3DQEBCwUAA4IBAQCDWP/yKaqWl3iP7eEtcTTBNysg4cwNYEJBOjCN S1C9Y2zTCS12JGAWocnuI/3GjRGTJIrXnLxwVrgrLExbZHcsT1PkBQaQpvhKbgis 378yiZ01Syvj4J6mx1A6YfLi7HziJEMatXk0kaXUKufmK44NDfzOfLTlh6LpS28u 1Yu/TKAn4LNzyzzzzrC5cKLCmoIzdNxx/BFBr19RK4EDLelumFErLU/z2lJHygw8 D2H7UYHwfH1ye9xtoy3lEpDmZxObL+i0JSjN0v30S5DoJeN5+hfuHjFb89ss9421 5FaZNS5cbkfaEFjhjAiili5H1d0dIEh2nPkrKWTmbPa+aF/V -----END CERTIFICATE-----Generated at Mon Jan 5 03:48:40 2026 by rpki-client