This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/WQApiK5AqVLXzb2NxG_TG7ltg58.roa File: WQApiK5AqVLXzb2NxG_TG7ltg58.roa (raw, json) Hash identifier: siSt0UVKPrrD5BPPklQPFJzk2EiG13UyW6FUUioZ3+w= Subject key identifier: 59:00:29:88:AE:40:A9:52:D7:CD:BD:8D:C4:6F:D3:1B:B9:6D:83:9F Certificate issuer: /CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e Certificate serial: 019B77C667D2CF3EE78EFBE616BB69B13B53 Authority key identifier: 98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/WQApiK5AqVLXzb2NxG_TG7ltg58.roa Signing time: Thu 01 Jan 2026 04:17:29 +0000 ROA not before: Thu 01 Jan 2026 04:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200508 IP address blocks: 2a0a:cd80:1001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:67:d2:cf:3e:e7:8e:fb:e6:16:bb:69:b1:3b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e Validity Not Before: Jan 1 04:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59002988ae40a952d7cdbd8dc46fd31bb96d839f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b7:90:f1:28:a1:57:31:6b:69:78:16:3a:6a: 82:3e:54:07:04:8b:ee:2d:09:95:2b:46:f1:fa:30: 07:09:eb:c9:a3:f9:b6:4f:49:91:71:67:00:8a:ca: bb:8c:bf:08:fe:13:b7:f2:7e:c0:3d:36:df:64:85: f0:4c:56:f4:29:4f:ae:ac:58:39:52:cc:bc:47:1b: ec:cb:31:ce:2c:79:ce:c4:ea:47:9c:03:2f:6a:66: 7e:c5:4e:6f:b3:64:5f:e8:43:34:0f:dd:21:41:2b: fb:bf:6d:c7:5b:52:15:9e:13:6f:2f:54:1d:50:aa: 67:76:0a:0f:df:1b:50:36:1e:8c:f1:7f:99:1a:76: 42:5a:9f:98:1f:c6:e5:70:09:64:2c:59:f6:77:c9: 88:f7:c9:eb:05:7b:fd:39:46:b6:4e:40:e0:6a:a7: b3:16:6d:10:3d:94:91:62:45:45:98:b0:1d:64:61: 20:ad:1a:00:35:02:cf:f8:20:d5:eb:38:45:09:9f: b3:4f:84:42:60:76:78:f0:30:6b:46:07:13:0f:cc: 9b:3e:6a:8c:73:f2:eb:57:b9:04:07:7e:59:e8:4b: 8e:c3:16:7b:30:c4:60:3b:fd:c2:b5:44:fb:c6:a8: 75:d5:48:ef:78:cb:e8:f6:2c:54:05:d4:b1:b6:ee: 6e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:00:29:88:AE:40:A9:52:D7:CD:BD:8D:C4:6F:D3:1B:B9:6D:83:9F X509v3 Authority Key Identifier: keyid:98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/WQApiK5AqVLXzb2NxG_TG7ltg58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:cd80:1001::/48 Signature Algorithm: sha256WithRSAEncryption c4:58:7b:32:2e:5e:e6:0b:05:2c:4a:04:ee:9e:3a:e4:dc:5a: a0:fd:9f:b9:4b:7d:e2:78:21:b2:20:37:48:4e:a9:31:99:1c: 3b:f7:01:be:1c:bc:0d:2f:97:0f:03:71:98:34:75:5b:f6:d7: 85:d5:3b:79:b6:49:35:07:6a:d6:88:6a:6b:ce:11:5b:77:ee: 12:b9:8d:e9:2a:77:d4:c4:82:17:f8:1e:62:83:75:11:df:9e: 91:8e:8a:bb:ba:97:57:52:09:d2:2f:32:a6:3e:2d:7a:cb:d4: a3:22:cf:0c:d0:03:b7:df:d4:8c:54:04:39:f3:bf:bc:89:10: ae:91:74:ce:fa:ed:a8:38:a5:52:96:47:df:12:98:80:f1:6f: 81:f0:33:99:3b:c0:96:4d:38:27:3e:59:15:cd:c9:68:4b:d6: 9a:bf:9e:73:44:0a:a1:32:a4:e0:2c:0b:8f:e1:f6:79:83:61: 8e:3e:c0:b3:17:2d:90:7d:48:05:91:ad:ce:1a:18:6f:08:94: 76:7d:91:6b:0a:64:eb:74:f6:c5:76:c4:ee:3a:d1:18:80:a0: 76:c4:4e:ff:81:15:f0:04:ad:09:f6:67:f2:c2:ac:37:26:30: 1c:dd:6a:d7:04:8e:70:91:a1:96:8e:d9:dc:b2:c6:66:cb:45: 07:5d:5e:d3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3xmfSzz7njvvmFrtpsTtTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4YzFkMDNiNDk1MDRkMzQ0NjVkYzQwYTNkMGY5MDg2Y2Fj ZmRiOGUwHhcNMjYwMTAxMDQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTAwMjk4OGFlNDBhOTUyZDdjZGJkOGRjNDZmZDMxYmI5NmQ4MzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAireQ8SihVzFraXgWOmqCPlQHBIvu LQmVK0bx+jAHCevJo/m2T0mRcWcAisq7jL8I/hO38n7APTbfZIXwTFb0KU+urFg5 Usy8RxvsyzHOLHnOxOpHnAMvamZ+xU5vs2Rf6EM0D90hQSv7v23HW1IVnhNvL1Qd UKpndgoP3xtQNh6M8X+ZGnZCWp+YH8blcAlkLFn2d8mI98nrBXv9OUa2TkDgaqez Fm0QPZSRYkVFmLAdZGEgrRoANQLP+CDV6zhFCZ+zT4RCYHZ48DBrRgcTD8ybPmqM c/LrV7kEB35Z6EuOwxZ7MMRgO/3CtUT7xqh11UjveMvo9ixUBdSxtu5u5wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFkAKYiuQKlS1829jcRv0xu5bYOfMB8GA1UdIwQY MBaAFJjB0DtJUE00Rl3ECj0PkIbKz9uOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbU1IUU8wbFFUVFJHWGNRS1BRLVFoc3JQMjQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kNmMyNTctZjUwMS00Nzk2LWFhNjEt YzMxYmRlNTEwMDg1LzEvV1FBcGlLNUFxVkxYemIyTnhHX1RHN2x0ZzU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9kNmMyNTctZjUwMS00Nzk2LWFhNjEtYzMxYmRlNTEwMDg1 LzEvbU1IUU8wbFFUVFJHWGNRS1BRLVFoc3JQMjQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgrNgBAB MA0GCSqGSIb3DQEBCwUAA4IBAQDEWHsyLl7mCwUsSgTunjrk3Fqg/Z+5S33ieCGy IDdITqkxmRw79wG+HLwNL5cPA3GYNHVb9teF1Tt5tkk1B2rWiGprzhFbd+4SuY3p KnfUxIIX+B5ig3UR356Rjoq7updXUgnSLzKmPi16y9SjIs8M0AO339SMVAQ587+8 iRCukXTO+u2oOKVSlkffEpiA8W+B8DOZO8CWTTgnPlkVzcloS9aav55zRAqhMqTg LAuP4fZ5g2GOPsCzFy2QfUgFka3OGhhvCJR2fZFrCmTrdPbFdsTuOtEYgKB2xE7/ gRXwBK0J9mfywqw3JjAc3WrXBI5wkaGWjtncssZmy0UHXV7T -----END CERTIFICATE-----Generated at Tue Jan 20 04:01:06 2026 by rpki-client