This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/QdViC720LUGk8rbETFc7icn6Tx4.roa File: QdViC720LUGk8rbETFc7icn6Tx4.roa (raw, json) Hash identifier: wxpHqs3D6Qy6qVLUeFjXp0nQiZFcnT7PBeNSBBjzhuM= Subject key identifier: 41:D5:62:0B:BD:B4:2D:41:A4:F2:B6:C4:4C:57:3B:89:C9:FA:4F:1E Certificate issuer: /CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108 Certificate serial: 019B78351035044758C2302FC2ECC04A311B Authority key identifier: 8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/QdViC720LUGk8rbETFc7icn6Tx4.roa Signing time: Thu 01 Jan 2026 06:18:21 +0000 ROA not before: Thu 01 Jan 2026 06:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31317 IP address blocks: 2001:67c:f00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:10:35:04:47:58:c2:30:2f:c2:ec:c0:4a:31:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108 Validity Not Before: Jan 1 06:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41d5620bbdb42d41a4f2b6c44c573b89c9fa4f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:99:0e:cd:12:8f:6e:fa:0a:1a:fd:9b:6c:ce: a2:b0:ad:b1:ac:62:62:b0:94:b8:1c:34:6a:da:b7: 09:f5:ab:1d:dd:fb:68:15:7f:ba:c1:fc:49:47:32: 6c:09:a2:0c:bc:7d:47:5a:f8:39:3e:cc:e3:78:0a: 0a:58:6c:8c:73:d6:f3:02:2c:bd:27:ca:4f:65:29: fb:18:fb:dd:53:d7:35:90:12:da:9f:da:0d:1c:0c: 4a:49:30:9b:5e:41:51:d6:a8:50:b9:61:f9:33:a7: 6c:bb:da:10:eb:34:c0:2f:29:bc:db:0a:d7:80:c7: c4:55:f6:de:8c:1e:c8:ea:7f:86:5c:57:4a:4d:5c: d5:ff:c2:c5:ce:21:50:89:b7:69:2e:bd:e6:59:30: 62:a6:f2:3d:f9:6b:37:07:b4:df:4f:1b:7e:06:32: e1:59:93:69:df:6c:c5:13:e3:09:1b:d8:24:8c:f0: 2f:7c:c6:93:dd:a9:d7:96:23:86:e2:52:8a:c9:65: 75:82:6c:22:02:49:35:ee:a5:0b:0d:46:5f:3f:5d: e9:9a:b7:6a:1c:27:21:25:9f:6a:47:12:8a:58:90: df:f4:f4:45:0f:9a:d2:e4:4f:69:47:03:86:59:29: 79:12:04:97:0e:64:16:83:07:70:40:4e:d4:43:b0: 41:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D5:62:0B:BD:B4:2D:41:A4:F2:B6:C4:4C:57:3B:89:C9:FA:4F:1E X509v3 Authority Key Identifier: keyid:8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/QdViC720LUGk8rbETFc7icn6Tx4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:f00::/48 Signature Algorithm: sha256WithRSAEncryption 5e:c1:f0:bc:b9:2d:c5:0f:61:ad:2c:e4:a9:1c:07:64:e3:6a: 77:81:06:d4:bd:34:df:6c:37:eb:ca:52:04:dd:1b:9a:98:2a: 54:79:64:bd:cf:16:81:e5:e1:f8:8b:8c:47:76:03:bd:42:5d: 08:31:c1:08:92:d4:1d:9b:8d:5f:95:98:bf:0f:53:54:53:30: 1e:02:7b:10:ca:da:eb:ec:9f:83:0f:e5:0d:e0:c3:c7:11:8d: e8:ef:e7:ad:41:b8:ca:a5:d2:24:51:29:eb:89:39:12:28:7a: f7:54:7f:82:01:64:be:30:d9:76:7d:71:b6:9c:81:0c:01:86: 25:fb:88:46:b3:43:f0:ff:41:29:20:28:6e:b7:e1:58:a3:fa: f1:41:95:35:eb:ae:5e:ba:c8:f1:0f:c7:9f:38:9a:13:e5:bf: 91:43:41:4c:23:77:56:81:8b:c2:db:e7:f3:e9:9d:07:ab:bf: 61:d3:9d:4a:b6:4b:f3:d4:1e:e9:88:ea:e5:07:74:1e:f4:41: b2:3d:53:e8:9f:d8:be:55:d3:12:be:d9:39:90:83:60:1b:5a: 24:c5:ef:a2:e9:23:0b:15:f8:45:f7:5c:6c:97:91:ed:c4:40: ac:1d:97:da:49:9c:83:1f:37:c1:8c:ae:e2:2e:f9:0d:65:f2: 39:f3:67:bc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4NRA1BEdYwjAvwuzASjEbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhM2YyN2M5M2VmYjdiYmMwYjBhZmU4ZWNjMjRmNzAzOWQy NzUxMDgwHhcNMjYwMTAxMDYxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWQ1NjIwYmJkYjQyZDQxYTRmMmI2YzQ0YzU3M2I4OWM5ZmE0ZjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5kOzRKPbvoKGv2bbM6isK2xrGJi sJS4HDRq2rcJ9asd3ftoFX+6wfxJRzJsCaIMvH1HWvg5PszjeAoKWGyMc9bzAiy9 J8pPZSn7GPvdU9c1kBLan9oNHAxKSTCbXkFR1qhQuWH5M6dsu9oQ6zTALym82wrX gMfEVfbejB7I6n+GXFdKTVzV/8LFziFQibdpLr3mWTBipvI9+Ws3B7TfTxt+BjLh WZNp32zFE+MJG9gkjPAvfMaT3anXliOG4lKKyWV1gmwiAkk17qULDUZfP13pmrdq HCchJZ9qRxKKWJDf9PRFD5rS5E9pRwOGWSl5EgSXDmQWgwdwQE7UQ7BBlQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEHVYgu9tC1BpPK2xExXO4nJ+k8eMB8GA1UdIwQY MBaAFIo/J8k++3u8Cwr+jswk9wOdJ1EIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWo4bnlUNzdlN3dMQ3Y2T3pDVDNBNTBuVVFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yYzlhMjQtODU2MC00MzA3LWFjYzct ZWJmODM0ZmU5YTE1LzEvUWRWaUM3MjBMVUdrOHJiRVRGYzdpY242VHg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8yYzlhMjQtODU2MC00MzA3LWFjYzctZWJmODM0ZmU5YTE1 LzEvaWo4bnlUNzdlN3dMQ3Y2T3pDVDNBNTBuVVFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA8A MA0GCSqGSIb3DQEBCwUAA4IBAQBewfC8uS3FD2GtLOSpHAdk42p3gQbUvTTfbDfr ylIE3RuamCpUeWS9zxaB5eH4i4xHdgO9Ql0IMcEIktQdm41flZi/D1NUUzAeAnsQ ytrr7J+DD+UN4MPHEY3o7+etQbjKpdIkUSnriTkSKHr3VH+CAWS+MNl2fXG2nIEM AYYl+4hGs0Pw/0EpIChut+FYo/rxQZU1665eusjxD8efOJoT5b+RQ0FMI3dWgYvC 2+fz6Z0Hq79h051Ktkvz1B7piOrlB3Qe9EGyPVPon9i+VdMSvtk5kINgG1okxe+i 6SMLFfhF91xsl5HtxECsHZfaSZyDHzfBjK7iLvkNZfI582e8 -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:12 2026 by rpki-client